last executing test programs: 15m3.3580005s ago: executing program 32 (id=781): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000009c0)={{}, 'syz0\x00', 0x15}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$binfmt_elf64(r0, 0x0, 0x15b0) 13m18.031161243s ago: executing program 33 (id=2009): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 12m30.099354685s ago: executing program 34 (id=2603): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000004d80)=""/4102, 0x1006}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="5ba7", 0x2}], 0x1, &(0x7f00000004c0)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40080}, 0x44880) 11m30.693371419s ago: executing program 35 (id=3185): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/57, 0x0, 0x32d55b790c73fadc}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/75, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000400)) 11m12.324464315s ago: executing program 36 (id=3347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(r1, 0x0) 10m19.91855185s ago: executing program 37 (id=3812): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendmsg$can_j1939(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)='+', 0x1}, 0x1, 0x0, 0x0, 0x40800}, 0x4040800) 9m47.155654618s ago: executing program 38 (id=4095): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xf, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 9m44.789913369s ago: executing program 39 (id=4120): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[], 0x258) write$binfmt_misc(r1, &(0x7f0000001cc0)="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", 0xffffff33) 9m37.224447971s ago: executing program 9 (id=4166): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001dc0)={r3, 0x6}, &(0x7f0000001e00)=0x8) 9m37.07787497s ago: executing program 9 (id=4167): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc46, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 9m36.920247534s ago: executing program 9 (id=4169): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xf, 0x1c}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 9m36.716192737s ago: executing program 9 (id=4170): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 9m35.741315614s ago: executing program 9 (id=4175): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) 9m35.486231787s ago: executing program 9 (id=4177): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x706b, 0x0, 0x9, 0x288}, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="a3", 0x1}], 0x1, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9m34.994761063s ago: executing program 40 (id=4177): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x706b, 0x0, 0x9, 0x288}, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="a3", 0x1}], 0x1, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7m12.345198773s ago: executing program 5 (id=5232): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)}, {0x0}], 0x2}, 0x0, 0x840, 0x1}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 7m9.139121244s ago: executing program 5 (id=5263): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0xe1b, 0x3, @mcast1, 0xfffffffc}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x0, 0x9}) 7m8.622061522s ago: executing program 5 (id=5267): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x1, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x400000000000121, 0x0) 7m7.702685546s ago: executing program 5 (id=5278): r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) 7m6.775520449s ago: executing program 5 (id=5285): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x1) 7m6.493709053s ago: executing program 5 (id=5287): fsopen(&(0x7f00000000c0)='fusectl\x00', 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r1, &(0x7f0000000080)='\x00', 0x1) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x6, 0x0) 7m6.273811456s ago: executing program 41 (id=5287): fsopen(&(0x7f00000000c0)='fusectl\x00', 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r1, &(0x7f0000000080)='\x00', 0x1) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x6, 0x0) 6m34.782208139s ago: executing program 8 (id=5475): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x5c00000c, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xa, 0x3, 0x1c}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 6m34.665923419s ago: executing program 8 (id=5476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m34.090580674s ago: executing program 8 (id=5479): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffffc7100f4f, 0x6, 0xffff, 0x3, 0xffeffffa, 0x0, 0x0, 0x10, 0xff}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m33.67976882s ago: executing program 8 (id=5484): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 6m33.548920291s ago: executing program 8 (id=5487): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c392a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bc1c2745f5f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x5, {0x3, 0x1, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x28dc, 0x0, 0x440000, 0x1, {0x1, 0xfffffffffffffffd, 0x0, 0x1000, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x4, 0xc000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001810000481100fe8000000000000000000000000000aafe8000000000000000000000000000aa"], 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000005c0)='./file0/../file0/file0\x00') 6m32.22122719s ago: executing program 8 (id=5495): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6m31.608444446s ago: executing program 42 (id=5495): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6m29.401667739s ago: executing program 0 (id=5519): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x147e, &(0x7f0000000080)={0x0, 0x1010b6, 0x80, 0x400002, 0x403ae}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x2, @random="400000009000", 'veth1_to_team\x00'}}, 0xffffffffffffffd4, 0x0}, 0x0, 0x20040000}) io_uring_enter(r2, 0x1ae0, 0x4, 0x48, 0x0, 0x0) 6m27.574871292s ago: executing program 0 (id=5523): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xe1a, &(0x7f0000000240)={0x0, 0xf803, 0x10100, 0x0, 0x229, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4004, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r5, &(0x7f0000000200)=""/202, 0xca) 6m26.33012845s ago: executing program 0 (id=5527): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f2a, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 6m26.151466775s ago: executing program 0 (id=5528): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 6m26.024689251s ago: executing program 0 (id=5529): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x842) 6m22.198160088s ago: executing program 0 (id=5550): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xd96d8b7b53e1f133, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48041) 6m21.695455524s ago: executing program 43 (id=5550): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xd96d8b7b53e1f133, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48041) 3m12.982318147s ago: executing program 6 (id=6548): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xa9, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1001}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m12.922169569s ago: executing program 6 (id=6549): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="940000001d00000226bd7000fbdbdf258400050000000000000000000000000000000000000004d32b00000002000000ac00feffff0000000000000000000000013500000201040006000000ff010000ff000000ac141426000000000000000000000000000004d53c0000000a000000ac1414bb00000000000000000000000000000000040002"], 0x94}, 0x1, 0x0, 0x0, 0x48014}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0088ca"], 0xfdef) 3m11.646490343s ago: executing program 6 (id=6555): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x10b100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000500)={0x20000002, "fa02c80a3a1e98422a33000600000000000000963900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "8a6035ceeae3ecc42317afad0100000000000800", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000280)={"31ec861d1bdbb2f104dd52ad43b7db21214d0677cda6247cb86c05e119883e3f", r9}) 3m11.576811618s ago: executing program 6 (id=6556): r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_pidfd_open(r0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) 3m10.663481049s ago: executing program 6 (id=6560): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 3m10.30615457s ago: executing program 6 (id=6562): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x6, 0x7, 0x7, 0x9, 0xc, "e76f85b7e84c1807"}) r4 = syz_open_pts(r0, 0x101) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) 3m10.026921744s ago: executing program 44 (id=6562): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x6, 0x7, 0x7, 0x9, 0xc, "e76f85b7e84c1807"}) r4 = syz_open_pts(r0, 0x101) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) 8.077644002s ago: executing program 4 (id=7171): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb0, 0x1c080, 0xa, 0x20002f7}) 7.648279571s ago: executing program 2 (id=7174): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(r2, &(0x7f00000002c0)='S', 0x1, 0x404c810, 0x0, 0x0) 7.497646557s ago: executing program 2 (id=7177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) 7.370320102s ago: executing program 7 (id=7178): socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 7.116837311s ago: executing program 4 (id=7179): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) close(0x3) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x20, 0x46e2ce1dfc86f44b, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b15, 0x0) 6.594627729s ago: executing program 3 (id=7180): socket(0x1, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x5, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.241357751s ago: executing program 7 (id=7181): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000063c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a300)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="b000"], 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x1a38, 0x0, 0x0, 0x0) getdents64(r2, 0x0, 0xc0) 5.124547222s ago: executing program 3 (id=7182): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 4.846692363s ago: executing program 3 (id=7183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x9, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 4.814477467s ago: executing program 7 (id=7184): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.638110207s ago: executing program 3 (id=7185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 4.526186289s ago: executing program 7 (id=7186): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 4.467093921s ago: executing program 3 (id=7187): syz_open_dev$sg(0x0, 0x0, 0x8002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x8000011, r4, 0x0) ftruncate(r2, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x4000) 4.422285719s ago: executing program 1 (id=7188): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) 4.31806356s ago: executing program 1 (id=7189): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x5cc4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0) 3.28469241s ago: executing program 2 (id=7190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.884620382s ago: executing program 4 (id=7191): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) inotify_init1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.815122149s ago: executing program 1 (id=7192): pipe(&(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.335007948s ago: executing program 1 (id=7193): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) 1.884344454s ago: executing program 3 (id=7194): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x8}) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 1.869492638s ago: executing program 2 (id=7195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.286314126s ago: executing program 7 (id=7196): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x41b, 0x3}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 860.843415ms ago: executing program 4 (id=7197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0xeeee0000, 0x8080000, 0xa, 0x0, 0x40, 0x5, 0x7d, 0x7f, 0x5, 0x3, 0x3, 0xfc}, {0xdddd1000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x80, 0xa7, 0x5, 0x81}, {0xf000, 0xeeee0000, 0xc, 0x6, 0x4, 0x42, 0x5, 0xff, 0x8, 0x7, 0xe, 0x7}, {0xeeee0000, 0xdddd1000, 0xb, 0x3, 0x6, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0xeeee0000, 0x1, 0xd, 0xa0, 0xb1, 0x8, 0x18, 0xa0, 0x80, 0xf, 0x1, 0xfb}, {0xffff1000, 0x2, 0x10, 0x5, 0x7, 0x5, 0x7, 0x3, 0x1, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x2, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0x7, 0x9}, {0x0, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x5, 0x10800, 0x8000c00, [0x6800000000000000, 0x2, 0x5e, 0x3]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 754.745674ms ago: executing program 2 (id=7198): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 641.999762ms ago: executing program 7 (id=7199): socket(0xa, 0x3, 0x3a) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 475.26972ms ago: executing program 4 (id=7200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 399.773865ms ago: executing program 2 (id=7201): timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3) write(r2, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 394.573262ms ago: executing program 1 (id=7202): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r3, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 118.997641ms ago: executing program 4 (id=7203): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) 0s ago: executing program 1 (id=7204): r0 = socket$packet(0x11, 0x3, 0x300) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x428000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x840000000002, 0x3, 0x100) socket$inet_sctp(0x2, 0x3106529728dc718b, 0x84) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) kernel console output (not intermixed with test programs): int 0x8B has an invalid bInterval 0, changing to 10 [ 827.558293][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 827.595114][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 827.626841][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.629502][ T5900] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 827.757912][T24871] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 827.783508][T24871] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 827.832508][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 827.856768][ T5900] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 827.883935][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.927054][ T5900] usb 3-1: Product: syz [ 827.950665][ T5900] usb 3-1: Manufacturer: syz [ 827.970231][ T5900] usb 3-1: SerialNumber: syz [ 828.139485][ T24] usb 7-1: USB disconnect, device number 30 [ 828.158003][T24903] batman_adv: batadv0: Adding interface: dummy0 [ 828.167113][T24903] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.247856][T24903] batman_adv: batadv0: Interface activated: dummy0 [ 828.285057][T24908] batadv0: mtu less than device minimum [ 828.297182][T24908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 828.309073][T24908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 828.320920][T24908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 828.332783][T24908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 828.344608][T24908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 828.355806][T24908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 828.366960][T24908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 828.378096][T24908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 828.389367][T24908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 828.724797][ T5900] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 829.365609][ T30] audit: type=1326 audit(1762698332.953:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.6.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 829.503206][ T30] audit: type=1326 audit(1762698332.953:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.6.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 829.594028][ T30] audit: type=1326 audit(1762698332.953:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.6.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 829.634170][ T30] audit: type=1326 audit(1762698332.953:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.6.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 829.666052][ T30] audit: type=1326 audit(1762698332.953:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.6.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 829.782904][ T30] audit: type=1326 audit(1762698332.953:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.6.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 829.926359][ T30] audit: type=1326 audit(1762698332.953:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.6.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 830.004099][ T30] audit: type=1326 audit(1762698332.953:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.6.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 830.123533][ T30] audit: type=1326 audit(1762698332.953:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.6.6366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=142 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 830.169133][ T30] audit: type=1326 audit(1762698332.953:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.6.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 830.190194][ T5900] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 830.206650][ T5900] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 830.248533][ T5900] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 830.315209][ T5900] usb 3-1: USB disconnect, device number 60 [ 830.547115][T24942] loop4: detected capacity change from 0 to 2560 [ 830.559603][ T6741] Buffer I/O error on dev loop4, logical block 0, async page read [ 830.567991][ T6741] Buffer I/O error on dev loop4, logical block 0, async page read [ 830.589092][ T6741] Buffer I/O error on dev loop4, logical block 0, async page read [ 830.600931][T24941] Buffer I/O error on dev loop4, logical block 1, async page read [ 830.610181][ T6741] Buffer I/O error on dev loop4, logical block 0, async page read [ 830.619404][ T6741] Buffer I/O error on dev loop4, logical block 0, async page read [ 830.628774][T24941] Buffer I/O error on dev loop4, logical block 1, async page read [ 830.637404][T24941] Buffer I/O error on dev loop4, logical block 1, async page read [ 830.653676][T24941] Buffer I/O error on dev loop4, logical block 1, async page read [ 830.663339][T24941] Buffer I/O error on dev loop4, logical block 1, async page read [ 830.852385][T24948] binder: 24947:24948 unknown command 0 [ 830.858739][T24948] binder: 24947:24948 ioctl c0306201 200000000080 returned -22 [ 831.397487][T24948] binder: BINDER_SET_CONTEXT_MGR already set [ 831.428316][T24948] binder: 24947:24948 ioctl 4018620d 200000000040 returned -16 [ 832.243679][T24966] binder: 24965:24966 ioctl c0306201 200000000080 returned -14 [ 832.618351][ T5900] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 832.778867][ T5900] usb 7-1: Using ep0 maxpacket: 16 [ 832.796754][ T5900] usb 7-1: config 0 has no interfaces? [ 832.821555][ T5900] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 832.849605][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.878323][ T5900] usb 7-1: Product: syz [ 832.892170][ T5900] usb 7-1: Manufacturer: syz [ 832.913224][ T5900] usb 7-1: SerialNumber: syz [ 832.942228][ T5900] usb 7-1: config 0 descriptor?? [ 834.832900][T25009] netlink: 'syz.4.6397': attribute type 10 has an invalid length. [ 834.868057][T25009] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6397'. [ 834.924588][T25011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6397'. [ 835.032110][T25009] team0: Port device geneve0 added [ 835.423891][ T5828] usb 7-1: USB disconnect, device number 31 [ 836.547731][T20170] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 837.394938][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 837.394957][ T30] audit: type=1326 audit(1762698341.003:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25035 comm="syz.6.6404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x0 [ 838.661181][ T24] IPVS: starting estimator thread 0... [ 838.685228][T25059] net_ratelimit: 12 callbacks suppressed [ 838.685246][T25059] IPVS: rr: FWM 3 0x00000003 - no destination available [ 838.724520][ C1] IPVS: rr: FWM 3 0x00000003 - no destination available [ 838.760373][T25060] IPVS: using max 28 ests per chain, 67200 per kthread [ 838.892007][ T938] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 839.068464][ T938] usb 2-1: Using ep0 maxpacket: 16 [ 839.090199][ T938] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 839.101450][ T938] usb 2-1: config 0 has no interface number 0 [ 839.123188][ T938] usb 2-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 839.168733][ T938] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 839.203946][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.232322][ T938] usb 2-1: Product: syz [ 839.242271][ T938] usb 2-1: Manufacturer: syz [ 839.277668][ T938] usb 2-1: SerialNumber: syz [ 839.331200][ T938] usb 2-1: config 0 descriptor?? [ 839.336874][T25057] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 839.444098][ T938] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 839.760037][ T61] usb 2-1: Failed to submit usb control message: -71 [ 839.771535][ T938] usb 2-1: USB disconnect, device number 26 [ 839.839915][ T61] usb 2-1: unable to send the bmi data to the device: -71 [ 839.857177][ T61] usb 2-1: unable to get target info from device [ 839.931131][ T61] usb 2-1: could not get target info (-71) [ 839.981259][ T61] usb 2-1: could not probe fw (-71) [ 840.468716][ T5828] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 840.650366][ T5828] usb 7-1: config 0 has no interfaces? [ 840.668637][ T5828] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 840.687979][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.699821][ T5828] usb 7-1: Product: syz [ 840.708730][ T5828] usb 7-1: Manufacturer: syz [ 840.728862][ T5828] usb 7-1: SerialNumber: syz [ 840.738603][ T5828] usb 7-1: config 0 descriptor?? [ 841.046951][T25090] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.208306][ T24] usb 7-1: USB disconnect, device number 32 [ 841.367466][T25116] vivid-000: disconnect [ 841.397553][T25115] vivid-000: reconnect [ 841.656987][T25118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6431'. [ 841.832811][T25119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6431'. [ 842.533149][ T30] audit: type=1326 audit(1762698346.143:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.6.6439" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15d078f6c9 code=0x0 [ 843.868322][ T1211] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 844.039964][ T1211] usb 3-1: Using ep0 maxpacket: 8 [ 844.117806][ T1211] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 844.126359][ T1211] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 844.394539][ T1211] usb 3-1: config 135 has no interface number 0 [ 844.416988][ T1211] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.469909][ T1211] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 844.504104][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.546617][ T1211] usb 3-1: Product: syz [ 844.556249][ T1211] usb 3-1: Manufacturer: syz [ 844.601377][ T1211] usb 3-1: SerialNumber: syz [ 844.638909][ T1211] uvcvideo 3-1:135.230: Found Unit with invalid ID 0 [ 844.675219][ T1211] uvcvideo 3-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 844.689211][ T1211] uvcvideo 3-1:135.230: No valid video chain found. [ 844.862004][ T1211] usb 3-1: USB disconnect, device number 61 [ 845.112040][ T30] audit: type=1326 audit(1762698348.723:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25196 comm="syz.7.6453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x0 [ 846.410166][T25212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6458'. [ 847.246149][T25210] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 847.538393][ T5828] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 847.711075][ T5828] usb 3-1: config index 0 descriptor too short (expected 55488, got 27) [ 847.719968][ T5828] usb 3-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 847.733059][ T5828] usb 3-1: config 0 has no interfaces? [ 847.741757][ T5828] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 847.751540][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.760148][ T5828] usb 3-1: Product: syz [ 847.764742][ T5828] usb 3-1: Manufacturer: syz [ 847.769722][ T5828] usb 3-1: SerialNumber: syz [ 847.785294][ T5828] usb 3-1: config 0 descriptor?? [ 847.839028][ T5900] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 848.008387][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 848.133559][ T5900] usb 5-1: config 162 has an invalid interface number: 197 but max is 0 [ 848.158305][ T5900] usb 5-1: config 162 has no interface number 0 [ 848.181446][ T5900] usb 5-1: config 162 interface 197 has no altsetting 0 [ 848.204718][ T5900] usb 5-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 848.224068][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.252173][ T5828] usb 3-1: USB disconnect, device number 62 [ 848.275485][ T5900] usb 5-1: Product: syz [ 848.305131][ T5900] usb 5-1: Manufacturer: syz [ 848.316046][ T5900] usb 5-1: SerialNumber: syz [ 848.592388][T25236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6466'. [ 848.620026][T25236] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 848.744643][T25226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.754806][T25226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.792013][ T5900] usb 5-1: USB disconnect, device number 58 [ 849.458570][T24593] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 849.648365][T24593] usb 3-1: Using ep0 maxpacket: 32 [ 849.665092][T24593] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 849.700181][ T30] audit: type=1326 audit(1762698353.263:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.6.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 849.722739][T24593] usb 3-1: config 0 has no interface number 0 [ 849.722781][T24593] usb 3-1: config 0 interface 38 has no altsetting 0 [ 849.755486][ T30] audit: type=1326 audit(1762698353.263:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.6.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 849.786423][T24593] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 849.786780][ T30] audit: type=1326 audit(1762698353.263:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.6.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 849.826688][ T30] audit: type=1326 audit(1762698353.273:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.6.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 849.853790][ T30] audit: type=1326 audit(1762698353.273:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.6.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 849.868288][T24593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.908318][ T5900] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 849.936790][T24593] usb 3-1: Product: syz [ 849.942733][ T30] audit: type=1326 audit(1762698353.273:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.6.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 849.944097][T24593] usb 3-1: Manufacturer: syz [ 849.974073][T24593] usb 3-1: SerialNumber: syz [ 849.980205][ T30] audit: type=1326 audit(1762698353.273:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.6.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 850.001907][T24593] usb 3-1: config 0 descriptor?? [ 850.011717][T24593] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 850.019922][ T30] audit: type=1326 audit(1762698353.273:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.6.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 850.045000][ T30] audit: type=1326 audit(1762698353.303:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.6.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 850.067619][ T30] audit: type=1326 audit(1762698353.303:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.6.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d078f6c9 code=0x7ffc0000 [ 850.265327][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.278601][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.418029][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 850.434010][ T5900] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 850.508062][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.548504][T24593] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 850.556461][T24593] gspca_pac7302 3-1:0.38: probe with driver gspca_pac7302 failed with error -110 [ 850.579499][ T5900] usb 5-1: config 0 descriptor?? [ 850.598271][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 850.658119][ T24] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 850.674932][ T24] usb 2-1: config 0 has no interface number 0 [ 850.695425][ T24] usb 2-1: config 0 interface 12 has no altsetting 0 [ 850.727417][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 850.762655][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.774822][ T5828] usb 3-1: USB disconnect, device number 63 [ 850.902049][ T24] usb 2-1: Product: syz [ 850.911599][ T24] usb 2-1: Manufacturer: syz [ 850.916525][ T24] usb 2-1: SerialNumber: syz [ 850.945122][ T24] usb 2-1: config 0 descriptor?? [ 851.099126][ T5900] cm6533_jd 0003:0D8C:0022.0047: unknown main item tag 0x0 [ 851.107678][ T5900] cm6533_jd 0003:0D8C:0022.0047: unknown main item tag 0x0 [ 851.168950][ T5900] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0047/input/input88 [ 851.241919][ T5900] cm6533_jd 0003:0D8C:0022.0047: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 851.340693][ T5828] usb 5-1: USB disconnect, device number 59 [ 851.504109][T25265] fido_id[25265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 852.238307][ T5828] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 852.392911][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 852.409660][ T5828] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 852.421756][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 852.431983][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 852.445203][ T5828] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 852.459341][ T5828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 852.503773][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.737911][ T5828] usb 5-1: GET_CAPABILITIES returned 0 [ 852.746132][ T5828] usbtmc 5-1:16.0: can't read capabilities [ 852.950895][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 852.970576][T25276] usbtmc 5-1:16.0: Unable to send data, error -71 [ 852.994501][ T5828] usb 5-1: USB disconnect, device number 60 [ 853.199855][ T24] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 853.220290][ T24] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 853.229789][ T24] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 853.238993][ T24] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 853.254054][ T24] usb 2-1: USB disconnect, device number 27 [ 854.224961][T25325] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 854.359362][T24593] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 854.520016][T24593] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 854.532181][T24593] usb 5-1: config 0 has no interface number 0 [ 854.557838][T24593] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 854.584087][T24593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.593505][T24593] usb 5-1: Product: syz [ 854.597793][T24593] usb 5-1: Manufacturer: syz [ 854.602586][T24593] usb 5-1: SerialNumber: syz [ 854.615008][T24593] usb 5-1: config 0 descriptor?? [ 854.834626][T24593] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 854.863169][T24593] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 854.869219][T25342] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6503'. [ 854.887979][T24593] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 854.918317][T24593] usb 5-1: media controller created [ 854.974676][T24593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 855.069259][T25322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6495'. [ 855.152553][T24593] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 855.174500][T20170] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 855.190331][T25347] picdev_read: 7 callbacks suppressed [ 855.190347][T25347] kvm: pic: non byte read [ 855.266712][T25347] kvm: pic: non byte read [ 855.286078][T25347] kvm: pic: single mode not supported [ 855.286098][T25347] pic_ioport_write: 6 callbacks suppressed [ 855.286113][T25347] kvm: pic: level sensitive irq not supported [ 855.300671][T24593] usb 5-1: USB disconnect, device number 61 [ 855.365609][T25347] kvm: pic: non byte read [ 855.381318][T25347] kvm: pic: non byte read [ 855.401580][T25347] kvm: pic: single mode not supported [ 855.401643][T25347] kvm: pic: non byte read [ 855.447070][T25347] kvm: pic: non byte read [ 855.475534][T25347] kvm: pic: non byte read [ 855.491827][T25347] kvm: pic: non byte read [ 855.507354][T25347] kvm: pic: non byte read [ 855.899323][T25362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6510'. [ 857.838504][ T5900] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 858.159732][ T5900] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 858.168959][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.177085][ T5900] usb 5-1: Product: syz [ 858.185329][ T5900] usb 5-1: Manufacturer: syz [ 858.190061][ T5900] usb 5-1: SerialNumber: syz [ 858.217146][ T5900] usb 5-1: config 0 descriptor?? [ 858.481553][ T5900] usb-storage 5-1:0.0: USB Mass Storage device detected [ 858.853716][T25393] binder_alloc: 25392: binder_alloc_buf, no vma [ 858.855329][ T5900] usb 5-1: USB disconnect, device number 62 [ 859.980513][T25418] tipc: Started in network mode [ 859.985427][T25418] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 860.028326][T25418] tipc: Enabled bearer , priority 10 [ 860.798775][T25430] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 860.817751][T25430] kvm: pic: non byte read [ 860.822494][T25430] kvm: pic: level sensitive irq not supported [ 860.822542][T25430] kvm: pic: non byte read [ 860.833575][T25430] kvm: pic: level sensitive irq not supported [ 860.833665][T25430] kvm: pic: non byte read [ 861.018641][T25430] kvm: pic: level sensitive irq not supported [ 861.018719][T25430] kvm: pic: non byte read [ 861.140019][ T938] tipc: Node number set to 4269801488 [ 863.289478][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 863.289496][ T30] audit: type=1326 audit(1762698366.903:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 863.473309][ T30] audit: type=1326 audit(1762698366.903:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 863.515769][ T30] audit: type=1326 audit(1762698366.943:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 863.581937][ T30] audit: type=1326 audit(1762698366.943:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 863.640995][ T30] audit: type=1326 audit(1762698366.943:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 863.770246][ T30] audit: type=1326 audit(1762698366.983:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 863.820825][ T30] audit: type=1326 audit(1762698366.983:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 863.852807][ T30] audit: type=1326 audit(1762698366.983:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 863.885772][ T30] audit: type=1326 audit(1762698366.983:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 863.913033][ T30] audit: type=1326 audit(1762698366.983:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 864.248702][T25487] binder: 25486:25487 unknown command 0 [ 864.254478][T25487] binder: 25486:25487 ioctl c0306201 2000000001c0 returned -22 [ 866.414722][T25526] netlink: 'syz.4.6558': attribute type 4 has an invalid length. [ 866.737550][T21852] syz_tun (unregistering): left allmulticast mode [ 866.783157][T25528] syzkaller0: entered promiscuous mode [ 866.798490][T25528] syzkaller0: entered allmulticast mode [ 867.010458][ T44] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.146776][ T44] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.268796][T24593] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 867.282252][T24593] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 867.282263][ T44] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.288729][ T44] bridge_slave_1: left allmulticast mode [ 868.294416][ T44] bridge_slave_1: left promiscuous mode [ 868.308860][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.336847][ T44] bridge_slave_0: left allmulticast mode [ 868.345281][ T44] bridge_slave_0: left promiscuous mode [ 868.364273][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.624997][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 868.640355][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 868.650745][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 868.689794][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 868.698857][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 870.103976][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.110527][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.738452][T20170] Bluetooth: hci1: command tx timeout [ 870.948924][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.984445][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.015664][ T44] bond0 (unregistering): Released all slaves [ 872.601024][ T44] bond1 (unregistering): Released all slaves [ 872.818443][T20170] Bluetooth: hci1: command tx timeout [ 874.919183][T20170] Bluetooth: hci1: command tx timeout [ 875.450410][ T44] hsr_slave_0: left promiscuous mode [ 875.465491][ T44] hsr_slave_1: left promiscuous mode [ 875.480937][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.516097][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.546682][ T5900] IPVS: starting estimator thread 0... [ 875.564947][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.617368][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.678378][T25656] IPVS: using max 51 ests per chain, 122400 per kthread [ 875.964543][ T44] veth1_macvtap: left promiscuous mode [ 875.985950][ T44] veth0_macvtap: left promiscuous mode [ 876.017981][ T44] veth1_vlan: left promiscuous mode [ 876.045386][ T44] veth0_vlan: left promiscuous mode [ 877.063949][T20170] Bluetooth: hci1: command tx timeout [ 877.955427][T25688] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 878.116552][ T44] team0 (unregistering): Port device team_slave_1 removed [ 878.217228][ T44] team0 (unregistering): Port device team_slave_0 removed [ 879.149367][T25558] chnl_net:caif_netlink_parms(): no params data found [ 879.600266][ T5828] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 879.643819][ T5828] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 879.661199][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 879.661216][ T30] audit: type=1326 audit(1762698383.273:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25725 comm="syz.7.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 879.703875][ T30] audit: type=1326 audit(1762698383.303:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25725 comm="syz.7.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 879.781081][ T30] audit: type=1326 audit(1762698383.303:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25725 comm="syz.7.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 879.838655][ T5900] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 879.855670][ T30] audit: type=1326 audit(1762698383.303:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25725 comm="syz.7.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 879.894906][T25558] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.923035][T25558] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.931026][T25558] bridge_slave_0: entered allmulticast mode [ 879.951995][T25558] bridge_slave_0: entered promiscuous mode [ 879.958300][ T30] audit: type=1326 audit(1762698383.303:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25725 comm="syz.7.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 880.011443][T25558] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.025744][T25558] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.038297][ T30] audit: type=1326 audit(1762698383.303:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25725 comm="syz.7.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 880.079378][T25558] bridge_slave_1: entered allmulticast mode [ 880.097021][ T5900] usb 2-1: config 0 has no interfaces? [ 880.114108][T25558] bridge_slave_1: entered promiscuous mode [ 880.121205][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 880.161984][ T30] audit: type=1326 audit(1762698383.303:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25725 comm="syz.7.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 880.163523][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 880.576527][ T30] audit: type=1326 audit(1762698383.303:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25725 comm="syz.7.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 880.628437][ T5900] usb 2-1: SerialNumber: syz [ 880.648086][ T5900] usb 2-1: config 0 descriptor?? [ 880.682279][ T30] audit: type=1326 audit(1762698383.303:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25725 comm="syz.7.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 880.757269][ T30] audit: type=1326 audit(1762698383.313:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25725 comm="syz.7.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 880.819374][T25558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.873916][T25558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.006014][ T44] IPVS: stop unused estimator thread 0... [ 881.067138][T25558] team0: Port device team_slave_0 added [ 881.104905][T25750] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 881.125335][T25558] team0: Port device team_slave_1 added [ 881.247376][T25558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.264752][T25558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.328766][T25558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.360415][T25558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.367393][T25558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.483379][T25558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.832300][T25558] hsr_slave_0: entered promiscuous mode [ 881.854898][T25558] hsr_slave_1: entered promiscuous mode [ 881.877704][T25558] debugfs: 'hsr0' already exists in 'hsr' [ 881.898691][T25558] Cannot create hsr debugfs directory [ 882.314957][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 882.468304][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 882.485236][ T5828] usb 2-1: USB disconnect, device number 28 [ 882.532357][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 882.554582][ T24] usb 5-1: config 0 has no interface number 0 [ 882.577537][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 882.620223][ T5900] IPVS: starting estimator thread 0... [ 882.635989][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 882.690289][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 882.719976][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 882.748323][T25778] IPVS: using max 51 ests per chain, 122400 per kthread [ 882.908592][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 882.925981][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.937528][ T24] usb 5-1: config 0 descriptor?? [ 882.947699][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 882.988767][ T5828] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 883.095045][T25558] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 883.131590][T25558] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 883.141591][T25558] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 883.196527][T25558] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 883.208367][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 883.246772][ T5828] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 883.261468][ T24] usb 5-1: USB disconnect, device number 63 [ 883.274701][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 883.300007][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.332624][ T5828] usb 2-1: Product: syz [ 883.336847][ T5828] usb 2-1: Manufacturer: syz [ 883.371221][ T5828] usb 2-1: SerialNumber: syz [ 883.401919][ T5828] usb 2-1: config 0 descriptor?? [ 883.623149][ T5828] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 883.655500][T25558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.663082][ T5828] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 883.738977][ T5828] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 883.763593][ T5828] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 883.777445][T25558] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.818672][ T5828] usb 2-1: USB disconnect, device number 29 [ 883.832025][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.839261][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.862717][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.870081][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.001064][T25802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.136962][T25558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.295160][T25558] veth0_vlan: entered promiscuous mode [ 884.355600][T25558] veth1_vlan: entered promiscuous mode [ 884.396293][T25558] veth0_macvtap: entered promiscuous mode [ 884.416063][T25558] veth1_macvtap: entered promiscuous mode [ 884.448647][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 884.474235][T25558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.595003][T25558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.853898][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 884.864165][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 884.931728][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.938298][ T24] usb 3-1: config 0 has no interface number 0 [ 884.950808][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.964353][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.965414][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 885.191840][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.218777][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.250968][ T24] usb 3-1: Product: syz [ 885.255175][ T24] usb 3-1: Manufacturer: syz [ 885.281195][ T24] usb 3-1: SerialNumber: syz [ 885.311723][ T24] usb 3-1: config 0 descriptor?? [ 885.359840][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 885.402904][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.546609][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.579065][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 885.732642][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 885.769329][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.801067][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.219624][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 886.228579][ T5900] usb 3-1: USB disconnect, device number 64 [ 886.272074][ T5900] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 886.331797][ T5900] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 886.376558][ T5900] quatech2 3-1:0.51: device disconnected [ 889.651880][T25884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 889.681899][T25885] x_tables: ip_tables: osf match: only valid for protocol 6 [ 890.321601][T21880] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 890.357684][T21880] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 891.885334][ T938] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 892.070228][ T938] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 892.094138][ T938] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 892.118024][ T938] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 892.144083][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.182915][ T938] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 892.307294][ T938] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 892.670989][ T24] usb 2-1: USB disconnect, device number 30 [ 893.449015][T25982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6663'. [ 894.908234][ T938] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 895.140666][ T938] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 895.246293][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 895.285577][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 895.368197][ T938] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 895.618457][ T938] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 895.668308][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.714080][ T938] usb 5-1: config 0 descriptor?? [ 896.626829][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 896.626848][ T30] audit: type=1800 audit(1762698400.233:1593): pid=26041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6678" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 897.893845][ T30] audit: type=1326 audit(1762698401.503:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26055 comm="syz.3.6681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f2b38f6c9 code=0x0 [ 898.138691][T21880] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 898.320185][T21880] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 898.347841][T21880] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 898.370650][T21880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 898.392622][T21880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 898.429391][T21880] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 898.441608][T21880] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 898.460882][T21880] usb 3-1: Product: syz [ 898.479483][T21880] usb 3-1: Manufacturer: syz [ 898.498485][ T1211] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 898.536418][T21880] cdc_wdm 3-1:1.0: skipping garbage [ 898.563960][T21880] cdc_wdm 3-1:1.0: skipping garbage [ 898.595444][T21880] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 898.616351][T21880] cdc_wdm 3-1:1.0: Unknown control protocol [ 898.667784][ T1211] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.695411][ T1211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 898.715846][ T1211] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 898.725347][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 898.791852][ T1211] usb 2-1: SerialNumber: syz [ 898.885161][T26074] syz_tun: entered allmulticast mode [ 898.894667][ T938] usbhid 5-1:0.0: can't add hid device: -71 [ 898.925817][ T938] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 898.949970][T24593] usb 3-1: USB disconnect, device number 65 [ 899.001452][ T938] usb 5-1: USB disconnect, device number 64 [ 899.061219][ T1211] usb 2-1: 0:2 : does not exist [ 899.123381][T26080] program syz.3.6686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 899.167308][ T1211] usb 2-1: USB disconnect, device number 31 [ 899.168469][T26083] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 899.402611][T26083] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 899.412662][ T6741] udevd[6741]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.153618][T26103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6691'. [ 900.619307][T26112] loop4: detected capacity change from 0 to 7 [ 900.635129][T26112] loop4: [POWERTEC] p1 p2 p3 p4 p5 [ 900.643897][T26112] loop4: p1 size 2228224 extends beyond EOD, truncated [ 900.664759][T26112] loop4: p2 start 1982821989 is beyond EOD, truncated [ 900.683570][T26112] loop4: p3 size 327680 extends beyond EOD, truncated [ 900.707261][T26112] loop4: p4 start 1970174324 is beyond EOD, truncated [ 900.718736][T26112] loop4: p5 start 1680801792 is beyond EOD, truncated [ 900.852582][ T6739] udevd[6739]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 900.854643][ T6741] udevd[6741]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 902.893227][T15606] bridge_slave_1: left allmulticast mode [ 902.899220][T21880] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 902.919427][T15606] bridge_slave_1: left promiscuous mode [ 902.934254][T15606] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.995205][T15606] bridge_slave_0: left allmulticast mode [ 903.021822][T15606] bridge_slave_0: left promiscuous mode [ 903.027615][T15606] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.050034][T21880] usb 2-1: Using ep0 maxpacket: 32 [ 903.089896][T21880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.140329][T21880] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 903.217377][T21880] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 903.258218][T21880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.266249][T21880] usb 2-1: Product: syz [ 903.308769][T21880] usb 2-1: Manufacturer: syz [ 903.313404][T21880] usb 2-1: SerialNumber: syz [ 903.411314][T21880] usb 2-1: config 0 descriptor?? [ 903.608289][ T938] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 903.668707][T21880] usb 2-1: USB disconnect, device number 32 [ 903.819196][ T938] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 903.828797][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.836786][ T938] usb 5-1: Product: syz [ 903.874796][ T938] usb 5-1: Manufacturer: syz [ 903.887554][ T938] usb 5-1: SerialNumber: syz [ 904.378519][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 904.437409][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 904.585383][T26169] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 904.881626][T15606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.899557][T15606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.914858][T15606] bond0 (unregistering): Released all slaves [ 905.113235][T15606] bond1 (unregistering): (slave veth3): Releasing active interface [ 905.122458][T15606] dummy0: entered promiscuous mode [ 905.137451][T15606] bond1 (unregistering): (slave dummy0): Releasing active interface [ 905.159617][T15606] bond1 (unregistering): Released all slaves [ 905.245435][ T30] audit: type=1326 audit(1762698408.853:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26174 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 905.358739][ T30] audit: type=1326 audit(1762698408.853:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26174 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 905.750342][ T30] audit: type=1326 audit(1762698408.933:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26174 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 905.950197][T15606] hsr_slave_0: left promiscuous mode [ 905.963719][T15606] hsr_slave_1: left promiscuous mode [ 905.980544][T15606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.012015][T15606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.095513][ T30] audit: type=1326 audit(1762698408.933:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26174 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 906.163810][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 906.194943][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 906.519940][ T30] audit: type=1326 audit(1762698408.933:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26174 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 906.558314][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 906.588412][ T30] audit: type=1326 audit(1762698408.933:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26174 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 906.644870][ T30] audit: type=1326 audit(1762698409.023:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26174 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 906.667577][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 906.720168][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 906.732520][ T30] audit: type=1326 audit(1762698409.023:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26174 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 906.756612][ T30] audit: type=1326 audit(1762698409.033:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26174 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 906.864385][ T938] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 906.943972][ T30] audit: type=1326 audit(1762698409.033:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26174 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 907.056274][ T938] usb 5-1: USB disconnect, device number 65 [ 910.051725][T15606] team0 (unregistering): Port device team_slave_1 removed [ 910.437875][T26243] netlink: 'syz.3.6714': attribute type 4 has an invalid length. [ 910.495903][T26244] netlink: 'syz.3.6714': attribute type 4 has an invalid length. [ 910.643670][T15606] team0 (unregistering): Port device team_slave_0 removed [ 911.628485][ T938] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 911.788303][ T938] usb 2-1: Using ep0 maxpacket: 16 [ 911.797469][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 911.810424][ T938] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 911.820401][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.828772][ T938] usb 2-1: Product: syz [ 911.833492][ T938] usb 2-1: Manufacturer: syz [ 911.838108][ T938] usb 2-1: SerialNumber: syz [ 911.853184][ T938] usb 2-1: config 0 descriptor?? [ 911.862378][ T938] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 911.872511][ T938] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 911.893031][T26257] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6716'. [ 912.495268][ T938] em28xx 2-1:0.0: chip ID is em2765 [ 913.295878][ T938] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 913.308198][ T938] em28xx 2-1:0.0: board has no eeprom [ 914.448010][T26263] em28xx 2-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 914.508415][ T938] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 914.519216][ T938] em28xx 2-1:0.0: dvb set to bulk mode. [ 914.526832][ T5885] em28xx 2-1:0.0: Binding DVB extension [ 914.581522][ T938] usb 2-1: USB disconnect, device number 33 [ 914.602653][ T938] em28xx 2-1:0.0: Disconnecting em28xx [ 915.124873][ T5885] em28xx 2-1:0.0: Registering input extension [ 915.250438][ T938] em28xx 2-1:0.0: Closing input extension [ 915.549241][ T938] em28xx 2-1:0.0: Freeing device [ 916.029855][T26342] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 920.613553][T26418] binder: BINDER_SET_CONTEXT_MGR already set [ 920.619773][T26418] binder: 26415:26418 ioctl 4018620d 200000000040 returned -16 [ 921.278345][ T938] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 921.438547][ T938] usb 3-1: Using ep0 maxpacket: 32 [ 921.448993][ T938] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 921.462262][ T938] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 921.497109][ T938] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 921.528081][ T938] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 921.590434][ T938] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 921.600026][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.608038][ T938] usb 3-1: Product: syz [ 921.638255][ T938] usb 3-1: Manufacturer: syz [ 921.642991][ T938] usb 3-1: SerialNumber: syz [ 921.699398][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 921.709277][ T938] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input91 [ 921.918301][ T938] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 921.940534][ T938] (id 0x00) [ 922.128281][ T938] rc_core: IR keymap rc-imon-pad not found [ 922.135472][ T938] Registered IR keymap rc-empty [ 922.149935][ T938] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 922.179624][ T938] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 922.219729][ T938] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 922.233007][ T938] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input92 [ 922.258877][ T938] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:66> initialized [ 923.843068][T26484] imon:send_packet: packet tx failed (-71) [ 923.849854][T17085] usb 3-1: USB disconnect, device number 66 [ 923.868578][T26484] imon:vfd_write: send packet #4 failed [ 925.706062][T26527] binder: BINDER_SET_CONTEXT_MGR already set [ 925.712584][T26527] binder: 26526:26527 ioctl 4018620d 200000004a80 returned -16 [ 925.723995][T26527] binder: 26526:26527 ioctl c0306201 200000004a40 returned -22 [ 931.555746][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.562280][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.819322][T24593] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 932.049949][T24593] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 932.098481][T24593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.131043][T24593] usb 3-1: Product: syz [ 932.135255][T24593] usb 3-1: Manufacturer: syz [ 932.156733][T24593] usb 3-1: SerialNumber: syz [ 932.350071][ T5900] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 932.739936][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 932.752202][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 932.764891][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 932.792727][T24593] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 932.825941][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 932.835864][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.890407][ T5900] usb 5-1: Product: syz [ 932.897995][ T5900] usb 5-1: Manufacturer: syz [ 932.904139][T24593] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 932.915697][ T5900] usb 5-1: SerialNumber: syz [ 932.924291][ T5900] usb 5-1: config 0 descriptor?? [ 932.935493][ T5900] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 932.952611][ T5900] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 933.581598][ T5900] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 933.596002][ T5900] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 934.590627][T24593] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 934.609085][T24593] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 934.638698][T24593] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 934.717737][T24593] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 934.745669][T24593] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 934.766523][ T5900] em28xx 5-1:0.0: AC97 vendor ID = 0x00fc00fe [ 934.785175][T24593] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 934.854376][T24593] usb 3-1: USB disconnect, device number 67 [ 934.952782][T26633] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 934.959456][T26633] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 935.012977][ T5900] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 935.024897][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 935.116558][T26633] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 935.135329][T26633] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 935.147066][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 935.192078][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 935.270531][T26633] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 935.284733][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 935.291471][T26633] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 935.315023][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 935.361942][T26633] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 935.383856][T26633] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 935.392696][ T5900] usb 5-1: USB disconnect, device number 66 [ 935.434176][T26633] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 935.740942][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 935.740959][ T30] audit: type=1326 audit(1762698439.353:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26647 comm="syz.2.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7cd8f6c9 code=0x7ffc0000 [ 935.769554][ C1] vkms_vblank_simulate: vblank timer overrun [ 936.261654][ T30] audit: type=1326 audit(1762698439.353:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26647 comm="syz.2.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7cd8f6c9 code=0x7ffc0000 [ 936.307201][ T30] audit: type=1326 audit(1762698439.353:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26647 comm="syz.2.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0a7cd8f6c9 code=0x7ffc0000 [ 936.404254][ T30] audit: type=1326 audit(1762698439.353:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26647 comm="syz.2.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7cd8f6c9 code=0x7ffc0000 [ 936.635819][ T30] audit: type=1326 audit(1762698439.353:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26647 comm="syz.2.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7cd8f6c9 code=0x7ffc0000 [ 936.638546][T26665] syzkaller0: create flow: hash 3690644513 index 1 [ 936.658275][ C1] vkms_vblank_simulate: vblank timer overrun [ 936.821617][ T30] audit: type=1326 audit(1762698439.353:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26647 comm="syz.2.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0a7cd8f6c9 code=0x7ffc0000 [ 936.948344][ T30] audit: type=1326 audit(1762698439.363:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26647 comm="syz.2.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7cd8f6c9 code=0x7ffc0000 [ 936.970837][ C1] vkms_vblank_simulate: vblank timer overrun [ 936.980461][T20170] Bluetooth: hci4: command 0x0406 tx timeout [ 936.986741][T20170] Bluetooth: hci3: command 0x0406 tx timeout [ 937.016789][ T30] audit: type=1326 audit(1762698439.363:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26647 comm="syz.2.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7cd8f6c9 code=0x7ffc0000 [ 937.039297][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.138366][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 937.179107][ T30] audit: type=1326 audit(1762698439.363:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26647 comm="syz.2.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a7cd8f6c9 code=0x7ffc0000 [ 937.203597][ T30] audit: type=1326 audit(1762698439.363:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26647 comm="syz.2.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7cd8f6c9 code=0x7ffc0000 [ 937.314211][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 937.389276][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 937.567755][ T13] syzkaller0: tun_net_xmit 76 [ 937.574827][ T13] syzkaller0: tun_net_xmit 48 [ 937.587881][T26660] syzkaller0: delete flow: hash 3690644513 index 1 [ 938.808906][T26707] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6816'. [ 939.218981][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 939.418671][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 939.458219][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 941.548940][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 942.458051][T26707] bridge_slave_1: left allmulticast mode [ 942.465073][T26707] bridge_slave_1: left promiscuous mode [ 942.471807][T26707] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.483395][T26707] bridge_slave_0: left allmulticast mode [ 942.498254][T26707] bridge_slave_0: left promiscuous mode [ 942.504108][T26707] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.198257][T23809] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 944.418779][T23809] usb 2-1: config 0 has no interfaces? [ 944.440762][T23809] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 944.483601][T23809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.511903][T26749] cgroup: fork rejected by pids controller in /syz7 [ 944.550668][T23809] usb 2-1: Product: syz [ 944.554890][T23809] usb 2-1: Manufacturer: syz [ 944.756452][T23809] usb 2-1: SerialNumber: syz [ 944.809048][T23809] usb 2-1: config 0 descriptor?? [ 945.657862][T26806] syzkaller0: entered promiscuous mode [ 945.668353][T26806] syzkaller0: entered allmulticast mode [ 945.747044][ T24] usb 2-1: USB disconnect, device number 34 [ 946.836086][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 946.836105][ T30] audit: type=1326 audit(1762698450.443:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26823 comm="syz.1.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 946.976620][ T30] audit: type=1326 audit(1762698450.443:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26823 comm="syz.1.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 947.000708][ T30] audit: type=1326 audit(1762698450.463:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26823 comm="syz.1.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 947.025347][ T30] audit: type=1326 audit(1762698450.463:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26823 comm="syz.1.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 947.048527][ T30] audit: type=1326 audit(1762698450.463:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26823 comm="syz.1.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 947.071507][ T30] audit: type=1326 audit(1762698450.463:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26823 comm="syz.1.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 947.275695][T26835] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 947.291502][T26835] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 947.316710][ T30] audit: type=1326 audit(1762698450.463:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26823 comm="syz.1.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 947.327026][T26835] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 947.391477][ T30] audit: type=1326 audit(1762698450.483:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26823 comm="syz.1.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 947.410357][T26835] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 947.465803][T26835] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 947.494948][ T30] audit: type=1326 audit(1762698450.483:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26823 comm="syz.1.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 947.505713][T26835] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 947.580717][ T30] audit: type=1326 audit(1762698450.483:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26823 comm="syz.1.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab998f6c9 code=0x7ffc0000 [ 947.590231][T26835] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 947.663158][T26835] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 947.690797][T26835] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 947.736347][T26835] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 947.768370][T26836] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 949.456883][ T5828] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 949.680137][ T5828] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 949.723280][ T5828] usb 2-1: config 0 has no interface number 0 [ 949.879409][ T5828] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 949.895160][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.927093][ T5828] usb 2-1: Product: syz [ 949.954219][ T5828] usb 2-1: Manufacturer: syz [ 949.968671][ T5828] usb 2-1: SerialNumber: syz [ 949.996557][ T5828] usb 2-1: config 0 descriptor?? [ 950.098100][ T5828] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 950.110627][ T5828] ems_usb 2-1:0.204: probe with driver ems_usb failed with error -22 [ 950.581246][ T1211] usb 2-1: USB disconnect, device number 35 [ 952.979203][ T1211] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 953.193523][ T1211] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 953.224896][ T1211] usb 2-1: config 0 has no interface number 0 [ 953.303523][ T1211] usb 2-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=51.8f [ 953.319408][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.347890][ T1211] usb 2-1: Product: syz [ 953.369395][ T1211] usb 2-1: Manufacturer: syz [ 953.385614][ T1211] usb 2-1: SerialNumber: syz [ 953.406844][ T1211] usb 2-1: config 0 descriptor?? [ 953.638579][ T1211] gspca_main: spca501-2.14.0 probing 040a:0002 [ 953.958184][T26963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 953.965991][T26963] IPv6: NLM_F_CREATE should be set when creating new route [ 954.071115][T26963] lo: entered allmulticast mode [ 954.158739][T26963] tunl0: entered allmulticast mode [ 954.552790][T26963] gre0: entered allmulticast mode [ 954.672259][ T1211] gspca_spca501: reg write: error -71 [ 954.677736][ T1211] spca501 2-1:0.9: Reg write failed for 0x00,0x00,0x05 [ 954.688230][T26963] gretap0: entered allmulticast mode [ 954.698565][ T1211] spca501 2-1:0.9: probe with driver spca501 failed with error -22 [ 954.751104][ T1211] usb 2-1: USB disconnect, device number 36 [ 954.821734][T26963] erspan0: entered allmulticast mode [ 954.851419][T26963] ip_vti0: entered allmulticast mode [ 954.885161][T26963] ip6_vti0: entered allmulticast mode [ 954.925883][T26963] sit0: entered allmulticast mode [ 954.945800][T26963] ip6tnl0: entered allmulticast mode [ 955.003878][T26963] ip6gre0: entered allmulticast mode [ 955.043990][T26963] ip6gretap0: entered allmulticast mode [ 955.079625][T26963] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.087365][T26963] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.115218][T26963] bridge0: entered allmulticast mode [ 955.154399][T26963] vcan0: entered allmulticast mode [ 955.187415][T26963] bond0: entered allmulticast mode [ 955.208357][T26963] bond_slave_0: entered allmulticast mode [ 955.231182][T26963] bond_slave_1: entered allmulticast mode [ 955.247188][T26963] team0: entered allmulticast mode [ 955.268576][T26963] team_slave_0: entered allmulticast mode [ 955.493115][T26963] team_slave_1: entered allmulticast mode [ 955.517399][T26963] geneve0: entered allmulticast mode [ 955.544782][T26963] batman_adv: batadv0: Interface deactivated: dummy0 [ 955.588690][T26963] dummy0: entered allmulticast mode [ 955.681192][T26963] nlmon0: entered allmulticast mode [ 955.723633][T26963] caif0: entered allmulticast mode [ 955.747736][T26963] batadv0: entered allmulticast mode [ 955.796070][T26963] vxcan0: entered allmulticast mode [ 955.813200][T26963] vxcan1: entered allmulticast mode [ 955.836399][T26963] veth0: entered allmulticast mode [ 955.854568][T26963] veth1: entered allmulticast mode [ 955.982600][T26963] wg0: entered allmulticast mode [ 956.027446][T26963] wg1: entered allmulticast mode [ 956.033835][T21880] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 956.136402][T26963] wg2: entered allmulticast mode [ 956.147048][T26996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6869'. [ 956.160829][T26963] veth0_to_bridge: entered allmulticast mode [ 956.173648][T26963] veth1_to_bridge: entered allmulticast mode [ 956.190328][T26963] veth0_to_bond: entered allmulticast mode [ 956.198418][T21880] usb 4-1: Using ep0 maxpacket: 32 [ 956.204913][T21880] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 956.215697][T21880] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 956.241174][T26963] veth1_to_bond: entered allmulticast mode [ 956.247968][T21880] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 956.287161][T26963] veth0_to_team: entered allmulticast mode [ 956.294504][T21880] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 956.329557][T26963] veth1_to_team: entered allmulticast mode [ 956.350713][T21880] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 956.361435][T21880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.370003][T21880] usb 4-1: Product: syz [ 956.377183][T26963] veth0_to_batadv: entered allmulticast mode [ 956.385420][T21880] usb 4-1: Manufacturer: syz [ 956.397552][T21880] usb 4-1: SerialNumber: syz [ 956.408098][T26963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.425667][T26963] batadv_slave_0: entered allmulticast mode [ 956.438960][T26963] veth1_to_batadv: entered allmulticast mode [ 956.445109][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 956.447938][T26963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.460607][T21880] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input93 [ 956.479335][T26963] batadv_slave_1: entered allmulticast mode [ 956.491381][T26963] xfrm0: entered allmulticast mode [ 956.503026][T26963] veth0_to_hsr: entered allmulticast mode [ 956.515341][T26963] hsr_slave_0: entered allmulticast mode [ 956.523501][T26963] veth1_to_hsr: entered allmulticast mode [ 956.534435][T26963] hsr_slave_1: entered allmulticast mode [ 956.544407][T26963] hsr0: entered allmulticast mode [ 956.552863][T26963] veth1_virt_wifi: entered allmulticast mode [ 956.562793][T26963] veth0_virt_wifi: entered allmulticast mode [ 956.572760][T26963] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 956.584712][T26963] veth1_vlan: entered allmulticast mode [ 956.592968][T26963] veth0_vlan: entered allmulticast mode [ 956.607500][T26963] vlan0: entered allmulticast mode [ 956.613287][T26963] vlan1: entered allmulticast mode [ 956.619436][T26963] macvlan0: entered allmulticast mode [ 956.630340][T26963] macvlan1: entered allmulticast mode [ 956.648766][T26963] ipvlan0: entered allmulticast mode [ 956.654218][T26963] ipvlan1: entered allmulticast mode [ 956.668803][T26963] veth1_macvtap: entered allmulticast mode [ 956.671903][T21880] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 956.680286][T26963] veth0_macvtap: entered allmulticast mode [ 956.687856][T21880] (id 0x00) [ 956.822425][T26963] macvtap0: entered allmulticast mode [ 956.830697][T26963] macsec0: entered allmulticast mode [ 956.852333][T26963] geneve1: entered allmulticast mode [ 956.863025][T26963] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 956.906214][T21880] rc_core: IR keymap rc-imon-pad not found [ 956.928691][T21880] Registered IR keymap rc-empty [ 956.934638][T26963] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 956.934724][T21880] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 956.953308][T21880] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 957.209242][T21880] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 957.221330][T21880] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input94 [ 957.236000][T26963] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 957.246042][T26963] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 957.272996][T21880] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:56> initialized [ 957.296650][T26963] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 957.362194][T26963] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 957.394987][T26963] veth2: entered allmulticast mode [ 957.414031][T26963] veth3: entered allmulticast mode [ 957.549981][T26963] ip6gre1: left promiscuous mode [ 957.579610][T26963] vlan2: entered allmulticast mode [ 957.586536][T26963] batadv0.5: entered allmulticast mode [ 957.620733][T26963] bridge2: entered allmulticast mode [ 957.639360][T26963] mac80211_hwsim hwsim45 wlan2: entered allmulticast mode [ 957.646701][T26963] veth4: entered allmulticast mode [ 957.652150][T26963] veth5: entered allmulticast mode [ 957.774414][ T2996] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.807943][ T2996] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.840160][ T2996] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.849244][ T2996] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.877928][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 957.877945][ T30] audit: type=1326 audit(1762698461.483:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27014 comm="syz.4.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4578f6c9 code=0x7ffc0000 [ 957.985036][ T30] audit: type=1326 audit(1762698461.483:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27014 comm="syz.4.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4578f6c9 code=0x7ffc0000 [ 958.058511][ T30] audit: type=1326 audit(1762698461.483:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27014 comm="syz.4.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2f4578f6c9 code=0x7ffc0000 [ 958.108209][ T30] audit: type=1326 audit(1762698461.483:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27014 comm="syz.4.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4578f6c9 code=0x7ffc0000 [ 958.141376][ T30] audit: type=1326 audit(1762698461.483:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27014 comm="syz.4.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f2f4578f6c9 code=0x7ffc0000 [ 958.164308][ T30] audit: type=1326 audit(1762698461.523:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27014 comm="syz.4.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4578f6c9 code=0x7ffc0000 [ 958.187899][ T30] audit: type=1326 audit(1762698461.523:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27014 comm="syz.4.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4578f6c9 code=0x7ffc0000 [ 958.245589][T27022] imon:send_packet: packet tx failed (-71) [ 958.262231][T24593] usb 4-1: USB disconnect, device number 56 [ 958.268645][T27022] imon:vfd_write: send packet #3 failed [ 958.323160][ T30] audit: type=1326 audit(1762698461.523:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27014 comm="syz.4.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f4578f6c9 code=0x7ffc0000 [ 958.391705][ T30] audit: type=1326 audit(1762698461.523:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27014 comm="syz.4.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4578f6c9 code=0x7ffc0000 [ 958.482671][ T30] audit: type=1326 audit(1762698461.523:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27014 comm="syz.4.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f4578f6c9 code=0x7ffc0000 [ 959.033600][T27038] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 961.018209][T24593] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 961.294314][T24593] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0 [ 961.323646][T24593] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid wMaxPacketSize 0 [ 961.355812][T24593] usb 5-1: config 0 interface 0 altsetting 10 bulk endpoint 0xB has invalid maxpacket 0 [ 961.591228][T24593] usb 5-1: config 0 interface 0 has no altsetting 0 [ 961.624951][T24593] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 961.648491][T24593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.667793][T24593] usb 5-1: Product: syz [ 961.677648][T24593] usb 5-1: Manufacturer: syz [ 961.971240][T24593] usb 5-1: SerialNumber: syz [ 962.050538][T24593] usb 5-1: config 0 descriptor?? [ 962.061714][T24593] ir_toy 5-1:0.0: required endpoints not found [ 962.281650][ T938] usb 5-1: USB disconnect, device number 67 [ 962.419413][T27076] binder_alloc: 27075: pid 27075 spamming oneway? 1 buffers allocated for a total size of 4096 [ 963.648677][T24593] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 963.888456][ T938] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 963.943224][T24593] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 963.952721][T24593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.961035][T24593] usb 2-1: Product: syz [ 963.965311][T24593] usb 2-1: Manufacturer: syz [ 963.974411][T24593] usb 2-1: SerialNumber: syz [ 964.196880][ T938] usb 3-1: config 252 has an invalid interface number: 107 but max is 0 [ 964.215654][ T938] usb 3-1: config 252 has no interface number 0 [ 964.224078][ T938] usb 3-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 964.276052][T27092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.299376][T27092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.313541][ T938] usb 3-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 964.369851][T24593] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 964.392307][ T938] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 964.412418][T24593] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 964.425582][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.464871][ T938] usb 3-1: Product: syz [ 964.475025][T24593] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 964.498371][ T938] usb 3-1: Manufacturer: syz [ 964.502996][ T938] usb 3-1: SerialNumber: syz [ 964.522858][T24593] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 964.740543][T24593] usb 2-1: USB disconnect, device number 37 [ 964.992088][T27103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6898'. [ 965.063639][T27106] bridge0: port 1(veth0_to_bond) entered blocking state [ 965.084999][T27106] bridge0: port 1(veth0_to_bond) entered disabled state [ 965.122265][T27106] veth0_to_bond: entered allmulticast mode [ 965.151006][T27106] veth0_to_bond: entered promiscuous mode [ 966.772051][T27124] syzkaller0: entered promiscuous mode [ 966.787169][T27124] syzkaller0: entered allmulticast mode [ 967.459676][ T938] usb 3-1: USB disconnect, device number 68 [ 968.097498][T27150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6914'. [ 968.278261][T23809] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 968.522216][T23809] usb 2-1: Using ep0 maxpacket: 16 [ 968.534349][T23809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.545078][T23809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 968.761978][T23809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 968.840063][T23809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 968.896273][T23809] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 968.993853][T23809] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 969.003391][T23809] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 969.011559][T23809] usb 2-1: Manufacturer: syz [ 969.026575][T23809] usb 2-1: config 0 descriptor?? [ 970.166041][T27184] netlink: 3672 bytes leftover after parsing attributes in process `syz.4.6924'. [ 970.555657][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 970.555699][ T30] audit: type=1326 audit(1762698474.163:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.7.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 970.637271][ T30] audit: type=1326 audit(1762698474.173:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.7.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 970.929094][ T938] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 970.993458][ T30] audit: type=1326 audit(1762698474.173:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.7.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 971.008212][ T5885] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 971.117777][ T30] audit: type=1326 audit(1762698474.173:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.7.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e27b8df10 code=0x7ffc0000 [ 971.198547][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 971.208242][T23809] rc_core: IR keymap rc-hauppauge not found [ 971.219928][T23809] Registered IR keymap rc-empty [ 971.226761][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.227116][ T30] audit: type=1326 audit(1762698474.173:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.7.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 971.263301][ T938] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 971.278920][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 971.321430][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 971.334560][ T30] audit: type=1326 audit(1762698474.173:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.7.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 971.357336][ T5885] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 971.366493][ T938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.369038][T23809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 971.388627][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.390050][ T938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 971.417190][ T5885] usb 3-1: config 0 descriptor?? [ 971.438833][T23809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input96 [ 971.483494][ T30] audit: type=1326 audit(1762698474.173:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.7.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e27b8f6c9 code=0x7ffc0000 [ 971.526444][ T938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 971.531076][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 971.535661][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.612114][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 971.658533][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 971.678303][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 971.723904][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 971.732689][ T938] usb 4-1: Product: syz [ 971.736894][ T938] usb 4-1: Manufacturer: syz [ 971.748346][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 971.748547][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 971.768250][ T938] usb 4-1: SerialNumber: syz [ 971.808875][ T5885] usb 3-1: USB disconnect, device number 69 [ 971.848284][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 971.888471][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 971.918279][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 971.968297][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 972.034156][T23809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 972.080399][T23809] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 972.138211][T23809] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 972.181883][T23809] usb 2-1: USB disconnect, device number 38 [ 972.268419][ T938] usb 4-1: 0:2 : does not exist [ 972.278598][ T5885] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 972.477142][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 972.536419][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.557951][ T5885] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 972.585282][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.676944][ T5885] usb 3-1: config 0 descriptor?? [ 972.714934][ T5885] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 972.753913][ T5885] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 973.256051][ T5885] usb 3-1: USB disconnect, device number 70 [ 973.263956][ T5885] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 974.214098][ T938] usb 4-1: USB disconnect, device number 57 [ 974.301524][ T6741] udevd[6741]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 974.573617][ T5885] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 974.736141][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 974.745198][ T5885] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 974.755912][ T5885] usb 3-1: config 0 has no interface number 0 [ 974.778197][ T5885] usb 3-1: config 0 interface 12 has no altsetting 0 [ 974.836459][ T5885] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 975.045077][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.074046][ T5885] usb 3-1: Product: syz [ 975.088530][ T5885] usb 3-1: Manufacturer: syz [ 975.093209][ T5885] usb 3-1: SerialNumber: syz [ 975.126532][ T5885] usb 3-1: config 0 descriptor?? [ 975.178252][T24593] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 975.352528][T24593] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 975.378753][T24593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 975.406395][T24593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 975.487428][T24593] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 975.522115][T24593] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 975.705195][T24593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.748855][T24593] usb 4-1: config 0 descriptor?? [ 975.925194][T27232] gretap0: entered promiscuous mode [ 976.256977][T24593] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 976.373531][T27246] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6944'. [ 976.415744][T27246] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6944'. [ 976.707901][T23809] usb 4-1: USB disconnect, device number 58 [ 977.728276][ T5885] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 977.736697][ T5885] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 977.749606][ T5885] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 977.757497][ T5885] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 977.818889][ T5885] usb 3-1: USB disconnect, device number 71 [ 978.809993][T27278] xt_CT: No such helper "pptp" [ 979.538278][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 979.700614][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 979.713979][ T24] usb 4-1: config 0 has no interface number 0 [ 979.738052][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 979.754323][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.772178][ T24] usb 4-1: Product: syz [ 979.809134][ T24] usb 4-1: Manufacturer: syz [ 979.813880][ T24] usb 4-1: SerialNumber: syz [ 979.835642][ T24] usb 4-1: config 0 descriptor?? [ 980.067872][ T24] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 980.097263][T27303] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 980.117792][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 980.155555][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 980.229500][ T24] usb 4-1: media controller created [ 980.403699][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 980.591019][ T24] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 980.608430][T27313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 980.727761][ T24] usb 4-1: USB disconnect, device number 59 [ 981.971283][T27334] netlink: 'syz.2.6971': attribute type 9 has an invalid length. [ 981.971306][T27334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6971'. [ 982.232189][T27334] macvlan2: entered promiscuous mode [ 982.232441][T27334] hsr0: entered promiscuous mode [ 982.232768][T27334] macvlan2: entered allmulticast mode [ 982.232784][T27334] hsr0: entered allmulticast mode [ 982.232798][T27334] hsr_slave_0: entered allmulticast mode [ 982.232814][T27334] hsr_slave_1: entered allmulticast mode [ 982.779935][T27345] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.798937][T27381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6985'. [ 987.963143][T27397] syzkaller0: entered promiscuous mode [ 987.985454][T27397] syzkaller0: entered allmulticast mode [ 988.508825][ T5828] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 988.527712][T27406] syzkaller0: entered promiscuous mode [ 988.579512][T27406] syzkaller0: entered allmulticast mode [ 988.685385][ T5828] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 988.730489][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 988.748813][ T5828] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 988.854846][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 988.911854][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 988.953258][ T5828] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 988.983672][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 989.005196][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 989.033684][ T5828] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 989.068809][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 989.089332][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 989.116654][ T5828] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 989.290195][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 989.309283][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 989.318270][ T5828] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 989.329801][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 989.337764][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 989.347128][ T5828] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 989.358412][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 989.369688][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 989.399824][ T5828] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 989.605487][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 989.619759][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 989.630240][ T5828] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 989.658160][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 989.668837][ T5828] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 989.713332][ T5828] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 989.723455][ T5828] usb 2-1: Product: syz [ 989.762602][ T5828] usb 2-1: Manufacturer: syz [ 989.767652][ T5828] usb 2-1: SerialNumber: syz [ 989.829875][ T5828] usb 2-1: config 0 descriptor?? [ 989.862441][ T5828] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 990.188780][ T24] usb 2-1: USB disconnect, device number 39 [ 990.218786][ T24] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 991.994210][T27446] tipc: Failed to remove unknown binding: 66,1,1/0:1101445327/1101445329 [ 992.014470][T27446] tipc: Failed to remove unknown binding: 66,1,1/0:1101445327/1101445329 [ 992.024124][T27446] tipc: Failed to remove unknown binding: 66,1,1/0:1101445327/1101445329 [ 993.015262][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.021823][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.397466][ T5828] IPVS: starting estimator thread 0... [ 993.492602][T27458] IPVS: using max 33 ests per chain, 79200 per kthread [ 995.624929][T27468] syzkaller0: entered promiscuous mode [ 995.656979][T27468] syzkaller0: entered allmulticast mode [ 996.138693][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 996.348555][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 996.417321][ T24] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 996.436066][ T24] usb 3-1: config 0 has no interface number 0 [ 996.448181][ T24] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 996.477579][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.505882][ T24] usb 3-1: config 0 descriptor?? [ 996.704845][ T24] viperboard 3-1:0.143: version 0.00 found at bus 003 address 072 [ 997.149861][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 997.200368][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 998.673631][ T5828] usb 3-1: USB disconnect, device number 72 [ 998.813863][T27500] binder_alloc: 27499: pid 27499 spamming oneway? 1 buffers allocated for a total size of 4096 [ 999.458182][T17085] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 999.618185][T17085] usb 2-1: Using ep0 maxpacket: 16 [ 999.624769][T17085] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 999.648601][T17085] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 999.663251][T17085] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 999.675427][T17085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.685452][T17085] usb 2-1: Product: syz [ 1000.048251][T17085] usb 2-1: Manufacturer: syz [ 1000.053226][T17085] usb 2-1: SerialNumber: syz [ 1000.061889][T17085] usb 2-1: config 0 descriptor?? [ 1000.070892][T17085] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1000.101475][T17085] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1000.130263][T27513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7023'. [ 1000.429556][T27513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7023'. [ 1000.675900][T17085] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1000.684727][T17085] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1001.448038][T17085] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1001.727178][ T5885] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1002.028211][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 1002.038522][ T5885] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1002.046962][ T5885] usb 3-1: config 0 has no interface number 0 [ 1002.229703][T17085] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1002.270166][ T5885] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1002.283166][T17085] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1002.291102][T17085] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1002.297590][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.321406][T17085] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1002.327941][ T5885] usb 3-1: Product: syz [ 1002.346140][ T5885] usb 3-1: Manufacturer: syz [ 1002.351266][T17085] usb 2-1: USB disconnect, device number 40 [ 1002.357442][ T5885] usb 3-1: SerialNumber: syz [ 1002.558859][ T5885] usb 3-1: config 0 descriptor?? [ 1002.659108][ T5885] smsc95xx v2.0.0 [ 1002.928842][T27539] syz_tun: entered allmulticast mode [ 1002.976746][T27539] dvmrp8: entered allmulticast mode [ 1003.117916][T27538] syz_tun: left allmulticast mode [ 1003.123233][ T5885] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1003.166921][ T5885] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1004.098221][T24593] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1004.281609][T24593] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.292197][T24593] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1004.308517][T24593] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1004.353181][T24593] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1004.390356][T24593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.412222][T24593] usb 5-1: Product: syz [ 1004.420667][T24593] usb 5-1: Manufacturer: syz [ 1004.430820][T24593] usb 5-1: SerialNumber: syz [ 1004.959221][T24593] usb 5-1: USB disconnect, device number 68 [ 1005.194857][ T5885] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 1005.207262][ T5885] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1005.257802][ T5885] usb 3-1: USB disconnect, device number 73 [ 1005.788245][ T30] audit: type=1804 audit(1762698509.343:1700): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7038" name="/newroot/314/file1" dev="fuse" ino=1 res=1 errno=0 [ 1006.781329][T27585] tipc: Started in network mode [ 1006.786427][T27585] tipc: Node identity 22f899413a15, cluster identity 4711 [ 1006.894583][T27585] tipc: Enabled bearer , priority 0 [ 1006.963045][T27585] syzkaller0: entered promiscuous mode [ 1006.973709][T27585] syzkaller0: entered allmulticast mode [ 1007.039428][T27586] syzkaller0: MTU too low for tipc bearer [ 1007.096077][T27586] tipc: Disabling bearer [ 1007.261620][T27594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.272061][T27594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.283450][T27594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.293237][T27594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.648215][ T5885] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1008.408495][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 1008.440886][ T5885] usb 3-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1008.463875][ T5885] usb 3-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1008.481044][ T5885] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1008.487916][ T5885] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1008.497203][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.511397][ T5885] usb 3-1: config 0 descriptor?? [ 1008.658334][T23809] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1008.820627][T23809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1008.840873][T23809] usb 2-1: not running at top speed; connect to a high speed hub [ 1008.842166][T27608] binder: BINDER_SET_CONTEXT_MGR already set [ 1008.855192][T27608] binder: 27607:27608 ioctl 4018620d 200000000040 returned -16 [ 1008.885300][T23809] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 1008.915653][T23809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.935417][T23809] usb 2-1: config 1 has no interface number 0 [ 1008.958240][T23809] usb 2-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1009.039155][T27595] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1009.049681][T23809] usb 2-1: config 1 interface 138 has no altsetting 0 [ 1009.072099][T23809] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1009.082368][T23809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.132606][T23809] usb 2-1: Product: syz [ 1009.137393][T23809] usb 2-1: Manufacturer: syz [ 1009.155503][T23809] usb 2-1: SerialNumber: syz [ 1009.161068][ T5885] playstation 0003:054C:09CC.004C: hidraw0: USB HID vff.ed Device [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 1009.467130][ T5885] playstation 0003:054C:09CC.004C: Failed to retrieve feature with reportID 18: -71 [ 1009.501254][ T5885] playstation 0003:054C:09CC.004C: Failed to retrieve DualShock4 pairing info: -71 [ 1009.522608][T23809] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1009.551971][ T5885] playstation 0003:054C:09CC.004C: Failed to get MAC address from DualShock4 [ 1009.597562][ T5885] playstation 0003:054C:09CC.004C: Failed to create dualshock4. [ 1009.644519][ T5885] playstation 0003:054C:09CC.004C: probe with driver playstation failed with error -71 [ 1009.687704][ T5885] usb 3-1: USB disconnect, device number 74 [ 1009.804369][T23809] usb 2-1: USB disconnect, device number 41 [ 1010.690520][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1010.808221][T23809] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1010.848266][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1010.855248][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.876925][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1010.926091][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.958250][T23809] usb 2-1: Using ep0 maxpacket: 32 [ 1010.966510][ T24] usb 3-1: config 0 descriptor?? [ 1010.994262][T23809] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.023389][T23809] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1011.134407][T23809] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1011.202466][T23809] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1011.262973][T23809] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1011.272529][T23809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.318787][T23809] usb 2-1: Product: syz [ 1011.324085][T23809] usb 2-1: Manufacturer: syz [ 1011.361628][T23809] usb 2-1: SerialNumber: syz [ 1011.411634][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1011.422034][ T24] mcp2221 0003:04D8:00DD.004D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1011.475401][T23809] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input98 [ 1011.651166][ T24] usb 3-1: USB disconnect, device number 75 [ 1011.661144][T23809] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1011.694841][T23809] (id 0x00) [ 1011.908341][T23809] rc_core: IR keymap rc-imon-pad not found [ 1011.914546][T23809] Registered IR keymap rc-empty [ 1011.919951][T23809] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1012.185916][T23809] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1012.234923][T23809] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1012.277377][T23809] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input99 [ 1012.296469][T23809] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:42> initialized [ 1012.816193][T27654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7064'. [ 1012.825669][T27654] bridge_slave_1: left allmulticast mode [ 1012.831423][T27654] bridge_slave_1: left promiscuous mode [ 1012.837286][T27654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.876071][T27654] bridge_slave_0: left allmulticast mode [ 1012.882670][T27654] bridge_slave_0: left promiscuous mode [ 1012.889081][T27654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.501293][T23809] usb 2-1: USB disconnect, device number 42 [ 1017.479977][T27702] syzkaller0: entered promiscuous mode [ 1017.531199][T27702] syzkaller0: entered allmulticast mode [ 1018.838232][ T5885] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1019.078538][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 1019.132705][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.248261][ T5885] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1019.278432][ T5885] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1019.287509][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.369585][ T5885] usb 3-1: config 0 descriptor?? [ 1019.431445][ T5885] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1019.439614][T27728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1019.473713][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 1019.595161][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1019.636749][ T5885] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1019.681862][ T5885] usb 3-1: media controller created [ 1019.861823][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1020.045626][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 1020.124180][ T5885] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1020.215714][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input100 [ 1020.299541][ T5885] dvb-usb: schedule remote query interval to 150 msecs. [ 1020.325721][ T5885] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1020.408065][ T5885] usb 3-1: USB disconnect, device number 76 [ 1021.171483][ T5885] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1022.181561][T27758] usb usb8: usbfs: process 27758 (syz.4.7089) did not claim interface 0 before use [ 1022.787108][T27761] hsr0: left allmulticast mode [ 1022.808585][T27761] hsr_slave_0: left allmulticast mode [ 1022.848219][T27761] hsr_slave_1: left allmulticast mode [ 1022.853783][T27761] hsr0: left promiscuous mode [ 1023.877279][T27781] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1023.978029][T27775] create_pit_timer: 10 callbacks suppressed [ 1023.978044][T27775] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 1024.030512][T27775] kvm: requested 143314 ns i8254 timer period limited to 200000 ns [ 1024.098629][T27775] kvm: requested 101409 ns i8254 timer period limited to 200000 ns [ 1025.161046][T27797] syzkaller1: entered promiscuous mode [ 1025.166776][T27797] syzkaller1: entered allmulticast mode [ 1025.480702][T27800] syzkaller0: entered promiscuous mode [ 1025.508407][T27800] syzkaller0: entered allmulticast mode [ 1030.259155][T24593] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1030.418251][T24593] usb 5-1: Using ep0 maxpacket: 16 [ 1030.425046][T24593] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1030.434726][T24593] usb 5-1: config 0 has no interface number 0 [ 1030.445511][T24593] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1030.465700][T24593] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1030.479188][T24593] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1030.500944][T24593] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1030.515781][T24593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.530441][T24593] usb 5-1: Product: syz [ 1030.538791][T24593] usb 5-1: Manufacturer: syz [ 1030.546154][T24593] usb 5-1: SerialNumber: syz [ 1030.589146][T24593] usb 5-1: config 0 descriptor?? [ 1030.595010][T27849] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1030.602941][T27849] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1030.927952][T27849] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1030.936032][T27849] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1031.375967][T24593] Error reading MAC address [ 1031.388034][T27849] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1031.398361][T27849] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1033.290987][T24593] sr9700 5-1:0.41 eth21: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, b6:7e:7d:d7:a1:75 [ 1033.448205][T24593] usb 5-1: USB disconnect, device number 69 [ 1033.629594][T24593] sr9700 5-1:0.41 eth21: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 1034.243055][T27888] syzkaller0: entered promiscuous mode [ 1034.249456][T23809] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1034.250337][T27888] syzkaller0: entered allmulticast mode [ 1034.418225][T23809] usb 3-1: Using ep0 maxpacket: 16 [ 1034.440625][T23809] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1034.452240][T23809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1035.021254][T23809] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1035.038688][T23809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.048411][T23809] usb 3-1: Product: syz [ 1035.067315][T23809] usb 3-1: Manufacturer: syz [ 1035.087602][T23809] usb 3-1: SerialNumber: syz [ 1035.404035][T23809] usb 3-1: 0:2 : does not exist [ 1035.432107][T23809] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1035.467382][T23809] usb 3-1: USB disconnect, device number 77 [ 1036.574371][T27920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1036.986076][T27920] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1037.006344][T27920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1037.012779][T27920] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1037.028223][T27920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1037.341554][T27920] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1037.449450][T27920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1037.518323][T27920] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1037.541920][T27920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1037.547835][T27920] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1037.819789][T27938] netlink: 'syz.2.7141': attribute type 1 has an invalid length. [ 1038.649313][T27938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7141'. [ 1038.789880][T27938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1038.983406][T27938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1039.090929][T27938] bond3: (slave geneve2): making interface the new active one [ 1039.170457][T27938] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1039.209090][ T2996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1039.218042][ T2996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1039.346623][ T2996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1039.379703][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1044.588302][T23809] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 1044.832714][T23809] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1044.848900][T23809] usb 4-1: config 0 has no interface number 0 [ 1045.078396][T23809] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1045.093416][T23809] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1045.373295][T23809] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1045.392213][T23809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.542744][T23809] usb 4-1: config 0 descriptor?? [ 1045.575466][T27989] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1045.848662][T23809] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1045.927995][T28012] netlink: 'syz.2.7161': attribute type 10 has an invalid length. [ 1045.948162][T27989] binder: 27987:27989 ioctl 4018620d 0 returned -22 [ 1045.980475][T28012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.993019][T27989] binder: 27987:27989 ioctl 4018620d 0 returned -22 [ 1046.079679][T23809] usb 4-1: USB disconnect, device number 60 [ 1046.085668][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1046.150379][T28012] bond0: (slave team0): Enslaving as an active interface with an up link [ 1046.356610][T28011] delete_channel: no stack [ 1046.758462][ T5885] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1047.045071][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 1047.418555][ T5885] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1047.436794][ T5885] usb 3-1: config 0 has no interface number 0 [ 1047.443447][ T5885] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1047.457076][ T5885] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1047.480371][ T5885] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1047.489663][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.497890][ T5885] usb 3-1: Product: syz [ 1047.502725][ T5885] usb 3-1: Manufacturer: syz [ 1047.507517][ T5885] usb 3-1: SerialNumber: syz [ 1047.519058][ T5885] usb 3-1: config 0 descriptor?? [ 1048.426479][ T5885] appletouch 3-1:0.85: Geyser mode initialized. [ 1048.458413][ T5885] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input101 [ 1048.793732][T28041] netlink: 'syz.3.7170': attribute type 1 has an invalid length. [ 1048.944087][T28044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7170'. [ 1048.998515][ T5900] usb 3-1: USB disconnect, device number 78 [ 1049.041204][ T5900] appletouch 3-1:0.85: input: appletouch disconnected [ 1049.088797][T28041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1049.140326][T28041] bond1: (slave bond2): making interface the new active one [ 1049.159462][T28041] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1049.182128][T28044] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1049.219886][T28044] bond1 (unregistering): Released all slaves [ 1049.988759][T23809] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1050.278278][T23809] usb 2-1: Using ep0 maxpacket: 32 [ 1050.301721][T23809] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.569077][T23809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1050.575859][T23809] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 1050.585698][T23809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.638606][T23809] usb 2-1: config 0 descriptor?? [ 1051.269162][T23809] aquacomputer_d5next 0003:0C70:F00E.004E: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0 [ 1051.488215][T17085] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1051.678187][T17085] usb 5-1: Using ep0 maxpacket: 8 [ 1051.776509][T28059] warning: `syz.1.7176' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1051.840204][T17085] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1051.854854][T28059] dvmrp8: entered allmulticast mode [ 1051.860391][T17085] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1051.872868][T17085] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1051.883307][T17085] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1051.893487][T28078] dvmrp8: left allmulticast mode [ 1051.921581][T17085] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1051.987775][T28059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.007492][T28059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.024881][T17085] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1052.054565][T17085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.219530][ T5885] usb 2-1: USB disconnect, device number 43 [ 1052.602888][T28089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7185'. [ 1052.641446][T28089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7185'. [ 1053.173233][ T5900] usb 5-1: USB disconnect, device number 70 [ 1054.434531][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.441055][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.591331][T28110] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1057.307360][T28144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7204'. [ 1057.420467][T17085] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1057.639855][T17085] usb 5-1: Using ep0 maxpacket: 16 [ 1057.668905][T17085] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1057.690903][T17085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1057.711662][T17085] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1057.721591][T17085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.734004][T17085] usb 5-1: Product: syz [ 1057.747018][T28146] [ 1057.749380][T28146] ===================================================== [ 1057.756319][T28146] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1057.764321][T28146] syzkaller #0 Not tainted [ 1057.769007][T28146] ----------------------------------------------------- [ 1057.775960][T28146] syz.2.7201/28146 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1057.783705][T28146] ffff888077358948 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1057.792441][T28146] [ 1057.792441][T28146] and this task is already holding: [ 1057.799905][T28146] ffff888062ca5468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1057.808465][T28146] which would create a new lock dependency: [ 1057.814340][T28146] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 1057.822069][T28146] [ 1057.822069][T28146] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1057.831497][T28146] (kbd_event_lock){..-.}-{3:3} [ 1057.831522][T28146] [ 1057.831522][T28146] ... which became SOFTIRQ-irq-safe at: [ 1057.844126][T28146] lock_acquire+0x120/0x360 [ 1057.848710][T28146] _raw_spin_lock+0x2e/0x40 [ 1057.853286][T28146] kbd_event+0xd2/0x3f70 [ 1057.857605][T28146] input_handle_events_default+0xd4/0x1a0 [ 1057.863391][T28146] input_pass_values+0x288/0x890 [ 1057.868470][T28146] input_event_dispose+0x3e5/0x6b0 [ 1057.873648][T28146] input_event+0x89/0xe0 [ 1057.877955][T28146] hidinput_hid_event+0x145e/0x1dd0 [ 1057.883223][T28146] hid_process_event+0x4be/0x620 [ 1057.888229][T28146] hid_report_raw_event+0xe91/0x16d0 [ 1057.893585][T28146] hid_input_report+0x43e/0x520 [ 1057.898500][T28146] hid_irq_in+0x47e/0x6d0 [ 1057.902894][T28146] __usb_hcd_giveback_urb+0x376/0x540 [ 1057.908333][T28146] dummy_timer+0x85f/0x44c0 [ 1057.912983][T28146] __hrtimer_run_queues+0x52c/0xc60 [ 1057.918246][T28146] hrtimer_run_softirq+0x187/0x2b0 [ 1057.923424][T28146] handle_softirqs+0x286/0x870 [ 1057.928270][T28146] __irq_exit_rcu+0xca/0x1f0 [ 1057.932919][T28146] irq_exit_rcu+0x9/0x30 [ 1057.937255][T28146] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1057.942956][T28146] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1057.949004][T28146] __kasan_check_byte+0x2d/0x40 [ 1057.953923][T28146] lock_acquire+0x8d/0x360 [ 1057.958401][T28146] kernfs_root+0x38/0x230 [ 1057.962813][T28146] kernfs_link_sibling+0x396/0x3e0 [ 1057.967990][T28146] kernfs_add_one+0x1e0/0x520 [ 1057.972732][T28146] kernfs_create_dir_ns+0xde/0x130 [ 1057.977910][T28146] sysfs_create_dir_ns+0x123/0x280 [ 1057.983085][T28146] kobject_add_internal+0x59f/0xb40 [ 1057.988343][T28146] kobject_add+0x155/0x220 [ 1057.992826][T28146] device_add+0x408/0xb50 [ 1057.997223][T28146] usb_new_device+0xa39/0x16f0 [ 1058.002060][T28146] hub_event+0x2958/0x4a20 [ 1058.006661][T28146] process_scheduled_works+0xae1/0x17b0 [ 1058.012276][T28146] worker_thread+0x8a0/0xda0 [ 1058.016939][T28146] kthread+0x711/0x8a0 [ 1058.021080][T28146] ret_from_fork+0x4bc/0x870 [ 1058.025738][T28146] ret_from_fork_asm+0x1a/0x30 [ 1058.030560][T28146] [ 1058.030560][T28146] to a SOFTIRQ-irq-unsafe lock: [ 1058.037552][T28146] (tasklist_lock){.+.+}-{3:3} [ 1058.037570][T28146] [ 1058.037570][T28146] ... which became SOFTIRQ-irq-unsafe at: [ 1058.050341][T28146] ... [ 1058.050349][T28146] lock_acquire+0x120/0x360 [ 1058.057472][T28146] _raw_read_lock+0x36/0x50 [ 1058.062041][T28146] __do_wait+0xde/0x740 [ 1058.066267][T28146] do_wait+0x1f8/0x510 [ 1058.070406][T28146] kernel_wait+0xab/0x170 [ 1058.074799][T28146] call_usermodehelper_exec_work+0xbe/0x230 [ 1058.080758][T28146] process_scheduled_works+0xae1/0x17b0 [ 1058.086367][T28146] worker_thread+0x8a0/0xda0 [ 1058.091019][T28146] kthread+0x711/0x8a0 [ 1058.095149][T28146] ret_from_fork+0x4bc/0x870 [ 1058.099799][T28146] ret_from_fork_asm+0x1a/0x30 [ 1058.104628][T28146] [ 1058.104628][T28146] other info that might help us debug this: [ 1058.104628][T28146] [ 1058.114838][T28146] Chain exists of: [ 1058.114838][T28146] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1058.114838][T28146] [ 1058.127623][T28146] Possible interrupt unsafe locking scenario: [ 1058.127623][T28146] [ 1058.136032][T28146] CPU0 CPU1 [ 1058.141388][T28146] ---- ---- [ 1058.146816][T28146] lock(tasklist_lock); [ 1058.151047][T28146] local_irq_disable(); [ 1058.157878][T28146] lock(kbd_event_lock); [ 1058.164711][T28146] lock(&tty->flow.lock); [ 1058.171626][T28146] [ 1058.175051][T28146] lock(kbd_event_lock); [ 1058.179530][T28146] [ 1058.179530][T28146] *** DEADLOCK *** [ 1058.179530][T28146] [ 1058.187658][T28146] 6 locks held by syz.2.7201/28146: [ 1058.192838][T28146] #0: ffff888062ca50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1058.202573][T28146] #1: ffff888062ca52e8 (&tty->termios_rwsem/1){++++}-{4:4}, at: tty_set_termios+0x138/0x17e0 [ 1058.212832][T28146] #2: ffff888062ca50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1058.222129][T28146] #3: ffff888062ca5468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1058.231077][T28146] #4: ffff888062ca50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1058.240363][T28146] #5: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1058.249555][T28146] [ 1058.249555][T28146] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1058.260383][T28146] -> (kbd_event_lock){..-.}-{3:3} { [ 1058.265666][T28146] IN-SOFTIRQ-W at: [ 1058.269714][T28146] lock_acquire+0x120/0x360 [ 1058.276117][T28146] _raw_spin_lock+0x2e/0x40 [ 1058.282517][T28146] kbd_event+0xd2/0x3f70 [ 1058.288565][T28146] input_handle_events_default+0xd4/0x1a0 [ 1058.296087][T28146] input_pass_values+0x288/0x890 [ 1058.302912][T28146] input_event_dispose+0x3e5/0x6b0 [ 1058.310090][T28146] input_event+0x89/0xe0 [ 1058.316147][T28146] hidinput_hid_event+0x145e/0x1dd0 [ 1058.323155][T28146] hid_process_event+0x4be/0x620 [ 1058.329898][T28146] hid_report_raw_event+0xe91/0x16d0 [ 1058.336988][T28146] hid_input_report+0x43e/0x520 [ 1058.343641][T28146] hid_irq_in+0x47e/0x6d0 [ 1058.349780][T28146] __usb_hcd_giveback_urb+0x376/0x540 [ 1058.357054][T28146] dummy_timer+0x85f/0x44c0 [ 1058.363367][T28146] __hrtimer_run_queues+0x52c/0xc60 [ 1058.370388][T28146] hrtimer_run_softirq+0x187/0x2b0 [ 1058.377325][T28146] handle_softirqs+0x286/0x870 [ 1058.383885][T28146] __irq_exit_rcu+0xca/0x1f0 [ 1058.390291][T28146] irq_exit_rcu+0x9/0x30 [ 1058.396329][T28146] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1058.403763][T28146] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1058.411545][T28146] __kasan_check_byte+0x2d/0x40 [ 1058.418193][T28146] lock_acquire+0x8d/0x360 [ 1058.424411][T28146] kernfs_root+0x38/0x230 [ 1058.430548][T28146] kernfs_link_sibling+0x396/0x3e0 [ 1058.437479][T28146] kernfs_add_one+0x1e0/0x520 [ 1058.444271][T28146] kernfs_create_dir_ns+0xde/0x130 [ 1058.451212][T28146] sysfs_create_dir_ns+0x123/0x280 [ 1058.458143][T28146] kobject_add_internal+0x59f/0xb40 [ 1058.465237][T28146] kobject_add+0x155/0x220 [ 1058.471469][T28146] device_add+0x408/0xb50 [ 1058.477622][T28146] usb_new_device+0xa39/0x16f0 [ 1058.484202][T28146] hub_event+0x2958/0x4a20 [ 1058.490519][T28146] process_scheduled_works+0xae1/0x17b0 [ 1058.497887][T28146] worker_thread+0x8a0/0xda0 [ 1058.504286][T28146] kthread+0x711/0x8a0 [ 1058.510163][T28146] ret_from_fork+0x4bc/0x870 [ 1058.516562][T28146] ret_from_fork_asm+0x1a/0x30 [ 1058.523127][T28146] INITIAL USE at: [ 1058.527086][T28146] lock_acquire+0x120/0x360 [ 1058.533311][T28146] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1058.540231][T28146] vt_reset_unicode+0x2b/0x160 [ 1058.546717][T28146] reset_vc+0x68/0x1b0 [ 1058.552506][T28146] vc_init+0x70/0x4a0 [ 1058.558206][T28146] con_init+0x385/0x9c0 [ 1058.564086][T28146] console_init+0x10e/0x430 [ 1058.570302][T28146] start_kernel+0x254/0x410 [ 1058.576515][T28146] x86_64_start_reservations+0x24/0x30 [ 1058.583686][T28146] x86_64_start_kernel+0x143/0x1c0 [ 1058.590510][T28146] common_startup_64+0x13e/0x147 [ 1058.597521][T28146] } [ 1058.600094][T28146] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1058.607989][T28146] -> (&tty->flow.lock){....}-{3:3} { [ 1058.613277][T28146] INITIAL USE at: [ 1058.617164][T28146] lock_acquire+0x120/0x360 [ 1058.623218][T28146] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1058.629963][T28146] start_tty+0x20/0x70 [ 1058.635599][T28146] n_tty_set_termios+0xa7c/0x1090 [ 1058.642283][T28146] tty_set_termios+0xda4/0x17e0 [ 1058.648772][T28146] set_termios+0x516/0x6c0 [ 1058.654742][T28146] tty_mode_ioctl+0x47e/0x740 [ 1058.660970][T28146] tty_ioctl+0x9c6/0xde0 [ 1058.666760][T28146] __se_sys_ioctl+0xfc/0x170 [ 1058.672896][T28146] do_syscall_64+0xfa/0xfa0 [ 1058.678945][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.686388][T28146] } [ 1058.688867][T28146] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1058.697525][T28146] ... acquired at: [ 1058.701309][T28146] lock_acquire+0x120/0x360 [ 1058.705965][T28146] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1058.711319][T28146] stop_tty+0x2f/0x150 [ 1058.715578][T28146] kbd_event+0x2b72/0x3f70 [ 1058.720160][T28146] input_handle_events_default+0xd4/0x1a0 [ 1058.726044][T28146] input_pass_values+0x288/0x890 [ 1058.731141][T28146] input_event_dispose+0x330/0x6b0 [ 1058.736415][T28146] input_inject_event+0x1dd/0x340 [ 1058.741684][T28146] evdev_write+0x2fc/0x480 [ 1058.746383][T28146] vfs_write+0x27e/0xb30 [ 1058.750809][T28146] ksys_write+0x145/0x250 [ 1058.755300][T28146] do_syscall_64+0xfa/0xfa0 [ 1058.759960][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.766011][T28146] [ 1058.768318][T28146] [ 1058.768318][T28146] the dependencies between the lock to be acquired [ 1058.768325][T28146] and SOFTIRQ-irq-unsafe lock: [ 1058.781804][T28146] -> (tasklist_lock){.+.+}-{3:3} { [ 1058.787352][T28146] HARDIRQ-ON-R at: [ 1058.791498][T28146] lock_acquire+0x120/0x360 [ 1058.797983][T28146] _raw_read_lock+0x36/0x50 [ 1058.804487][T28146] __do_wait+0xde/0x740 [ 1058.810711][T28146] do_wait+0x1f8/0x510 [ 1058.816763][T28146] kernel_wait+0xab/0x170 [ 1058.823069][T28146] call_usermodehelper_exec_work+0xbe/0x230 [ 1058.830937][T28146] process_scheduled_works+0xae1/0x17b0 [ 1058.838462][T28146] worker_thread+0x8a0/0xda0 [ 1058.845033][T28146] kthread+0x711/0x8a0 [ 1058.851083][T28146] ret_from_fork+0x4bc/0x870 [ 1058.857652][T28146] ret_from_fork_asm+0x1a/0x30 [ 1058.864392][T28146] SOFTIRQ-ON-R at: [ 1058.868532][T28146] lock_acquire+0x120/0x360 [ 1058.875118][T28146] _raw_read_lock+0x36/0x50 [ 1058.881608][T28146] __do_wait+0xde/0x740 [ 1058.887752][T28146] do_wait+0x1f8/0x510 [ 1058.893863][T28146] kernel_wait+0xab/0x170 [ 1058.900188][T28146] call_usermodehelper_exec_work+0xbe/0x230 [ 1058.908165][T28146] process_scheduled_works+0xae1/0x17b0 [ 1058.915714][T28146] worker_thread+0x8a0/0xda0 [ 1058.922301][T28146] kthread+0x711/0x8a0 [ 1058.928361][T28146] ret_from_fork+0x4bc/0x870 [ 1058.934943][T28146] ret_from_fork_asm+0x1a/0x30 [ 1058.941702][T28146] INITIAL USE at: [ 1058.945760][T28146] lock_acquire+0x120/0x360 [ 1058.952158][T28146] _raw_write_lock_irq+0xa2/0xf0 [ 1058.959022][T28146] copy_process+0x224f/0x3c00 [ 1058.965592][T28146] kernel_clone+0x21e/0x840 [ 1058.972007][T28146] user_mode_thread+0xdd/0x140 [ 1058.978679][T28146] rest_init+0x23/0x300 [ 1058.984735][T28146] start_kernel+0x3ae/0x410 [ 1058.991136][T28146] x86_64_start_reservations+0x24/0x30 [ 1058.998498][T28146] x86_64_start_kernel+0x143/0x1c0 [ 1059.005509][T28146] common_startup_64+0x13e/0x147 [ 1059.012339][T28146] INITIAL READ USE at: [ 1059.016819][T28146] lock_acquire+0x120/0x360 [ 1059.023662][T28146] _raw_read_lock+0x36/0x50 [ 1059.030492][T28146] __do_wait+0xde/0x740 [ 1059.036972][T28146] do_wait+0x1f8/0x510 [ 1059.043375][T28146] kernel_wait+0xab/0x170 [ 1059.050066][T28146] call_usermodehelper_exec_work+0xbe/0x230 [ 1059.058291][T28146] process_scheduled_works+0xae1/0x17b0 [ 1059.066172][T28146] worker_thread+0x8a0/0xda0 [ 1059.073088][T28146] kthread+0x711/0x8a0 [ 1059.079505][T28146] ret_from_fork+0x4bc/0x870 [ 1059.086444][T28146] ret_from_fork_asm+0x1a/0x30 [ 1059.093526][T28146] } [ 1059.096172][T28146] ... key at: [] tasklist_lock+0x18/0x40 [ 1059.104043][T28146] ... acquired at: [ 1059.108092][T28146] lock_acquire+0x120/0x360 [ 1059.112755][T28146] _raw_read_lock+0x36/0x50 [ 1059.117499][T28146] send_sigurg+0x12b/0x420 [ 1059.122081][T28146] sk_send_sigurg+0x6c/0x2e0 [ 1059.126818][T28146] queue_oob+0x420/0x4f0 [ 1059.131211][T28146] unix_stream_sendmsg+0xc3f/0xdf0 [ 1059.136474][T28146] __sock_sendmsg+0x21c/0x270 [ 1059.141299][T28146] ____sys_sendmsg+0x52d/0x830 [ 1059.146213][T28146] ___sys_sendmsg+0x21f/0x2a0 [ 1059.151046][T28146] __sys_sendmmsg+0x227/0x430 [ 1059.155875][T28146] __x64_sys_sendmmsg+0xa0/0xc0 [ 1059.160887][T28146] do_syscall_64+0xfa/0xfa0 [ 1059.165563][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.171607][T28146] [ 1059.173910][T28146] -> (&f_owner->lock){....}-{3:3} { [ 1059.179199][T28146] INITIAL USE at: [ 1059.183153][T28146] lock_acquire+0x120/0x360 [ 1059.189368][T28146] _raw_write_lock_irq+0xa2/0xf0 [ 1059.196021][T28146] __f_setown+0x67/0x370 [ 1059.201993][T28146] tty_fasync+0x2dc/0x350 [ 1059.208176][T28146] do_fcntl+0x1099/0x1910 [ 1059.214238][T28146] __se_sys_fcntl+0xc8/0x150 [ 1059.220555][T28146] do_syscall_64+0xfa/0xfa0 [ 1059.226780][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.234415][T28146] INITIAL READ USE at: [ 1059.238813][T28146] lock_acquire+0x120/0x360 [ 1059.245478][T28146] _raw_read_lock_irqsave+0xaf/0x100 [ 1059.252927][T28146] send_sigio+0x38/0x370 [ 1059.259330][T28146] kill_fasync+0x24d/0x4d0 [ 1059.265903][T28146] tty_wakeup+0xbe/0x100 [ 1059.272473][T28146] pty_unthrottle+0x3c/0x60 [ 1059.279173][T28146] __tty_perform_flush+0x158/0x390 [ 1059.286440][T28146] tty_ioctl+0x9c6/0xde0 [ 1059.292832][T28146] __se_sys_ioctl+0xfc/0x170 [ 1059.299576][T28146] do_syscall_64+0xfa/0xfa0 [ 1059.306233][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.314281][T28146] } [ 1059.316847][T28146] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1059.325759][T28146] ... acquired at: [ 1059.329638][T28146] lock_acquire+0x120/0x360 [ 1059.334304][T28146] _raw_read_lock_irqsave+0xaf/0x100 [ 1059.339749][T28146] send_sigio+0x38/0x370 [ 1059.344145][T28146] kill_fasync+0x24d/0x4d0 [ 1059.348716][T28146] tty_wakeup+0xbe/0x100 [ 1059.353112][T28146] pty_unthrottle+0x3c/0x60 [ 1059.357765][T28146] __tty_perform_flush+0x158/0x390 [ 1059.363488][T28146] tty_ioctl+0x9c6/0xde0 [ 1059.367971][T28146] __se_sys_ioctl+0xfc/0x170 [ 1059.372720][T28146] do_syscall_64+0xfa/0xfa0 [ 1059.377387][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.383441][T28146] [ 1059.385760][T28146] -> (&new->fa_lock){...-}-{3:3} { [ 1059.390859][T28146] IN-SOFTIRQ-R at: [ 1059.394819][T28146] lock_acquire+0x120/0x360 [ 1059.400958][T28146] _raw_read_lock_irqsave+0xaf/0x100 [ 1059.407883][T28146] kill_fasync+0x199/0x4d0 [ 1059.413926][T28146] sock_wake_async+0x137/0x160 [ 1059.420320][T28146] sock_def_readable+0x3bb/0x550 [ 1059.426888][T28146] tcp_data_queue+0x201e/0x64a0 [ 1059.433374][T28146] tcp_rcv_established+0x1335/0x2670 [ 1059.440302][T28146] tcp_v4_do_rcv+0xa90/0x1430 [ 1059.446608][T28146] tcp_v4_rcv+0x2675/0x2f20 [ 1059.452744][T28146] ip_protocol_deliver_rcu+0x221/0x440 [ 1059.459841][T28146] ip_local_deliver_finish+0x3bb/0x6f0 [ 1059.466939][T28146] NF_HOOK+0x30c/0x3a0 [ 1059.472650][T28146] NF_HOOK+0x30c/0x3a0 [ 1059.478368][T28146] __netif_receive_skb+0x143/0x380 [ 1059.485131][T28146] process_backlog+0x60e/0x14f0 [ 1059.491629][T28146] __napi_poll+0xc7/0x360 [ 1059.497602][T28146] net_rx_action+0x5f7/0xdf0 [ 1059.503826][T28146] handle_softirqs+0x286/0x870 [ 1059.510309][T28146] do_softirq+0xec/0x180 [ 1059.516177][T28146] __local_bh_enable_ip+0x17d/0x1c0 [ 1059.523008][T28146] sk_stream_wait_memory+0x71f/0xf70 [ 1059.529929][T28146] tcp_sendmsg_locked+0x1fc2/0x5540 [ 1059.536771][T28146] tcp_sendmsg+0x2f/0x50 [ 1059.542664][T28146] __sock_sendmsg+0x19c/0x270 [ 1059.548993][T28146] __sys_sendto+0x3bd/0x520 [ 1059.555140][T28146] __x64_sys_sendto+0xde/0x100 [ 1059.561717][T28146] do_syscall_64+0xfa/0xfa0 [ 1059.567957][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.575515][T28146] INITIAL USE at: [ 1059.579569][T28146] lock_acquire+0x120/0x360 [ 1059.585616][T28146] _raw_write_lock_irq+0xa2/0xf0 [ 1059.592183][T28146] fasync_remove_entry+0xf1/0x1c0 [ 1059.598922][T28146] sock_fasync+0x85/0xf0 [ 1059.604706][T28146] __fput+0x8a2/0xa70 [ 1059.610229][T28146] task_work_run+0x1d4/0x260 [ 1059.616483][T28146] exit_to_user_mode_loop+0xe9/0x130 [ 1059.623428][T28146] do_syscall_64+0x2bd/0xfa0 [ 1059.629576][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.637017][T28146] INITIAL READ USE at: [ 1059.641418][T28146] lock_acquire+0x120/0x360 [ 1059.647931][T28146] _raw_read_lock_irqsave+0xaf/0x100 [ 1059.655209][T28146] kill_fasync+0x199/0x4d0 [ 1059.661618][T28146] sock_wake_async+0x137/0x160 [ 1059.668366][T28146] sk_wake_async+0x189/0x280 [ 1059.674942][T28146] tcp_rcv_state_process+0x1d9d/0x44d0 [ 1059.682381][T28146] tcp_v4_do_rcv+0x6bb/0x1430 [ 1059.689036][T28146] __release_sock+0x265/0x3a0 [ 1059.695687][T28146] release_sock+0x5f/0x1f0 [ 1059.702083][T28146] __inet_stream_connect+0x8df/0xe70 [ 1059.709353][T28146] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 1059.716528][T28146] tcp_sendmsg_locked+0x4cc9/0x5540 [ 1059.723704][T28146] tcp_sendmsg+0x2f/0x50 [ 1059.729949][T28146] __sock_sendmsg+0x19c/0x270 [ 1059.736602][T28146] __sys_sendto+0x3bd/0x520 [ 1059.743080][T28146] __x64_sys_sendto+0xde/0x100 [ 1059.749816][T28146] do_syscall_64+0xfa/0xfa0 [ 1059.756485][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.764382][T28146] } [ 1059.766867][T28146] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1059.775524][T28146] ... acquired at: [ 1059.779334][T28146] lock_acquire+0x120/0x360 [ 1059.784026][T28146] _raw_read_lock_irqsave+0xaf/0x100 [ 1059.789548][T28146] kill_fasync+0x199/0x4d0 [ 1059.794115][T28146] __start_tty+0x18c/0x220 [ 1059.798687][T28146] start_tty+0x2b/0x70 [ 1059.802904][T28146] n_tty_set_termios+0xa7c/0x1090 [ 1059.808166][T28146] tty_set_termios+0xda4/0x17e0 [ 1059.813178][T28146] set_termios+0x516/0x6c0 [ 1059.817757][T28146] tty_mode_ioctl+0x47e/0x740 [ 1059.822589][T28146] tty_ioctl+0x9c6/0xde0 [ 1059.826999][T28146] __se_sys_ioctl+0xfc/0x170 [ 1059.831739][T28146] do_syscall_64+0xfa/0xfa0 [ 1059.836394][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.842438][T28146] [ 1059.844739][T28146] [ 1059.844739][T28146] stack backtrace: [ 1059.850610][T28146] CPU: 1 UID: 0 PID: 28146 Comm: syz.2.7201 Not tainted syzkaller #0 PREEMPT(full) [ 1059.850624][T28146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1059.850631][T28146] Call Trace: [ 1059.850639][T28146] [ 1059.850644][T28146] dump_stack_lvl+0x189/0x250 [ 1059.850661][T28146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1059.850674][T28146] ? __pfx__printk+0x10/0x10 [ 1059.850685][T28146] validate_chain+0x1f05/0x2140 [ 1059.850702][T28146] __lock_acquire+0xab9/0xd20 [ 1059.850712][T28146] ? kill_fasync+0x199/0x4d0 [ 1059.850724][T28146] lock_acquire+0x120/0x360 [ 1059.850733][T28146] ? kill_fasync+0x199/0x4d0 [ 1059.850746][T28146] _raw_read_lock_irqsave+0xaf/0x100 [ 1059.850760][T28146] ? kill_fasync+0x199/0x4d0 [ 1059.850770][T28146] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1059.850784][T28146] kill_fasync+0x199/0x4d0 [ 1059.850795][T28146] ? kill_fasync+0x53/0x4d0 [ 1059.850806][T28146] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 1059.850817][T28146] __start_tty+0x18c/0x220 [ 1059.850829][T28146] start_tty+0x2b/0x70 [ 1059.850840][T28146] n_tty_set_termios+0xa7c/0x1090 [ 1059.850852][T28146] ? __pfx_n_tty_set_termios+0x10/0x10 [ 1059.850861][T28146] tty_set_termios+0xda4/0x17e0 [ 1059.850873][T28146] ? __pfx_tty_set_termios+0x10/0x10 [ 1059.850887][T28146] set_termios+0x516/0x6c0 [ 1059.850899][T28146] ? __pfx_set_termios+0x10/0x10 [ 1059.850910][T28146] ? tty_ldisc_ref_wait+0x25/0x70 [ 1059.850925][T28146] tty_mode_ioctl+0x47e/0x740 [ 1059.850936][T28146] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 1059.850947][T28146] ? tty_ldisc_ref_wait+0x25/0x70 [ 1059.850958][T28146] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1059.850972][T28146] ? n_tty_ioctl_helper+0x8e/0x340 [ 1059.850983][T28146] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1059.850993][T28146] tty_ioctl+0x9c6/0xde0 [ 1059.851005][T28146] ? __pfx_tty_ioctl+0x10/0x10 [ 1059.851017][T28146] __se_sys_ioctl+0xfc/0x170 [ 1059.851029][T28146] do_syscall_64+0xfa/0xfa0 [ 1059.851042][T28146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.851051][T28146] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1059.851061][T28146] ? clear_bhb_loop+0x60/0xb0 [ 1059.851071][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.851087][T28146] RIP: 0033:0x7f0a7cd8f6c9 [ 1059.851099][T28146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1059.851108][T28146] RSP: 002b:00007f0a7db86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1059.851120][T28146] RAX: ffffffffffffffda RBX: 00007f0a7cfe6090 RCX: 00007f0a7cd8f6c9 [ 1059.851127][T28146] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000004 [ 1059.851134][T28146] RBP: 00007f0a7ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1059.851140][T28146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.851146][T28146] R13: 00007f0a7cfe6128 R14: 00007f0a7cfe6090 R15: 00007f0a7d10fa28 [ 1059.851158][T28146] [ 1060.134795][ C1] vkms_vblank_simulate: vblank timer overrun [ 1060.145537][T17085] usb 5-1: Manufacturer: syz [ 1060.150215][T17085] usb 5-1: SerialNumber: syz [ 1060.212014][T17085] usb 5-1: config 0 descriptor?? [ 1060.268912][T17085] usb 5-1: can't set config #0, error -71 [ 1060.276232][T17085] usb 5-1: USB disconnect, device number 71