last executing test programs: 13m47.481586411s ago: executing program 32 (id=471): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f00000027c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006c00)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r2, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000002200), 0x0, 0x0, 0x2) 13m33.704172352s ago: executing program 33 (id=588): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 13m29.744403898s ago: executing program 34 (id=617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@multicast, @local, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote, @private1, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xda, 0x0, 0x4100, 0x407}}}}}}, 0x0) 13m19.524140187s ago: executing program 35 (id=691): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet_sctp(r1, &(0x7f0000002140)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="ae", 0x1}], 0x1, 0x0, 0x0, 0x84}], 0x1, 0x4088010) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0xa000201c}) 12m27.42055011s ago: executing program 36 (id=1057): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NL80211_CMD_GET_KEY(r1, 0x0, 0xc045) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r2 = syz_open_dev$ndb(&(0x7f0000000640), 0x0, 0xa001) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x5}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m39.47368672s ago: executing program 37 (id=1896): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 10m16.235794587s ago: executing program 8 (id=2069): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m15.663418924s ago: executing program 8 (id=2072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10m15.263694293s ago: executing program 8 (id=2075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x101, 0x2, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0xc1c9a326d7c51995}, 0x4009004) 10m15.079583765s ago: executing program 8 (id=2077): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) 10m14.966349808s ago: executing program 8 (id=2078): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40900, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}], 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m14.699600684s ago: executing program 8 (id=2080): syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000694000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x1, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m14.232773525s ago: executing program 38 (id=2080): syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000694000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x1, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m18.930032446s ago: executing program 0 (id=2343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) r1 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r2, 0x4, 0x3, 0x4, 0x2, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x7800, 0x3, 0xfffffff9}}) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = dup2(r1, r1) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="6059292e001406fffe80000000000000ffffffffb33a58ad00000000000000000000ffff0a0101014e224e20d5e24dc6c47bf48f5f"], 0x3c) 9m18.775765304s ago: executing program 0 (id=2344): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 9m16.822057231s ago: executing program 0 (id=2360): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 9m16.438805983s ago: executing program 0 (id=2364): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 9m16.123337388s ago: executing program 0 (id=2367): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) 9m15.874229002s ago: executing program 0 (id=2368): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 9m15.370175706s ago: executing program 39 (id=2368): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 7m26.551874694s ago: executing program 9 (id=2999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 7m24.64218108s ago: executing program 9 (id=3006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m24.266748132s ago: executing program 9 (id=3008): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000006c0)={0x0, 0x11}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m21.110201956s ago: executing program 9 (id=3019): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2cd2, 0x400) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) dup3(r3, r1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 7m20.847170076s ago: executing program 9 (id=3021): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000040)={0x8000000000000001, 0x9, 0x800000, 0x0, 0x5, 0x1, 0x0, &(0x7f0000000000)=[{0x11, 0xfe, 0x1}]}) 7m20.615690898s ago: executing program 9 (id=3022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) mprotect(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m19.983411844s ago: executing program 40 (id=3022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"e58478412e3a859a3fc07b090369a4535b9987ad425e0410aa28c2c9d60964db7bbe8effdc771bf3344e383022ff3ce4550cde0b5465a60810e2c3b50d1c156d8584d2e829e20bc8db93fec1cd061903cd63004f1ec23f28332dc757da88e3544a802172ce3a8966a858eaac3438a5606a0bdc642acb98e36c6394e4b1b9e0d551f303e9e6bf16533990449ec4b6f29f9c1c530ee45898ab5723594983928c9f9b34a6df97e22b8f2c688ec23b6cc00c7ced5156ab85ea39633d98b75b00e63e81707ece8eb813b9bed8531ad733c7d3d6b531046f8862fc3be37f58b222ce7062bc7c83568bf6e0f7cc98aabc491b330a81cd33075247869df250672fed3cb1f2c098a059e2e6665939f5d1cccc1fc5d0ea0b241233d8322e487b5482a9f3059b711535f56cc874f8608fb2331f277df4f33f87e61a574f3e42464733a235a8694ef330ab727f9bb5a6cdc679fda3bc8893209b9a0df1383e447f02105095072206c5d133998a28541c561020e708c21e084822b35a65870d28680d7dc795cdc728e65f93155ab63bef983bcd1632f80f7900053cf518479b6d47b004fe00c3dbd85a9d7552028807b3d83af72b756089d73fb4e431a7a882ba77207ec5b7074f7d00ec85bf26d433e20b2dc2f212354b4c5bd9e4add011ac37f6392bf9b075e535bc5c9682ef3a034dcaeb5886b61ba1b5853117de5a16f01e55c013c905048bd27fe05a82c7ed0bbb2c7431143544485b0886de7fd4e189f301de869edd028f8e222730c31d326658cb34d59fb299b66634b81d3f9d2c157d05d5e22be6a220dd10fb6ba5cbd998756c4c7f6c3e0f7357a473cbef998fda4eeb3abb8972884000d44fd620a831f8b94e836cb4a3f0a0aab4083038aa345016e52c1984c28381ac072599cf4d99d645588b0dbaaceadaa5343bc53a1d6a98fea5a557e283b87ce26229e848bef4db9a2f14b71d02ce27dc28795fb47b36b5cf0ab2c3db7fc0e1aa490eef6e9850016d66ac58232622132be22ab71ea29338c7c6bce6a3c764294f364198fb000aa1f0d5bbf01e984d923944a1b42e2d465d5c974d7ee525525047951c13426d877f7ee1912dd3d581f2dd292a6644bc2b2aa37388741752b7b5c629963ff13993b9dc0dd8114d72b4b7c19392af92c05916e5b17d56a310145632ea8b43132095f9ae28c11efe5ef023ee11174eb32c68cbe8dc9c39bb1d30d00bf7fd55b156f2c8d01fb806db4e43724c24e682af53d67a740dd02c60ba3e62b5dfa974f9aca295dfc9184c4102b676c033ed3ff11e8cdb1c8d8b2d42631538cdd5dfad44d6d31065c41fa3fa9e0c4b9c7dfd37da81fc385b9d3f644c2524d4edad5b13eaddd0520cdf2b99cb9e9dc92accfd6854f5a5796a7be474edf1ed4af98b753f11d4dd82d00393d3199bd7dd29547237b0439c77e9a1dab9f1e173"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) mprotect(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m12.671521385s ago: executing program 3 (id=3323): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4048080}], 0x1, 0x44) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, 0xffff, 0xffc0}, 0x90) 6m12.469543412s ago: executing program 3 (id=3324): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, 0x0, 0x0, 0x7d, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 6m6.796453501s ago: executing program 3 (id=3351): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6m6.538655751s ago: executing program 3 (id=3353): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) 6m6.327439248s ago: executing program 3 (id=3354): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, 0x0, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008044}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 6m6.1352395s ago: executing program 3 (id=3356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x30, 0x19, 0xe0}, {0x41000, 0x3000, 0xe, 0x0, 0x6, 0x5, 0x7d, 0x8, 0xbe, 0x3, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0xb, 0x8, 0x7, 0xe}, {0x0, 0x9000, 0xb, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0x2, 0x80, 0xf, 0x1, 0xfd}, {0x3000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x231a6004, 0x86}, 0x80000031, 0x0, 0x50000, 0x42024, 0xb, 0x0, 0x3000, [0x6840000000000001, 0x3, 0x1fc0000000000000, 0xff]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = dup2(r3, r4) close_range(r5, 0xffffffffffffffff, 0x0) 6m5.495229788s ago: executing program 41 (id=3356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x30, 0x19, 0xe0}, {0x41000, 0x3000, 0xe, 0x0, 0x6, 0x5, 0x7d, 0x8, 0xbe, 0x3, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0xb, 0x8, 0x7, 0xe}, {0x0, 0x9000, 0xb, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0x2, 0x80, 0xf, 0x1, 0xfd}, {0x3000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x231a6004, 0x86}, 0x80000031, 0x0, 0x50000, 0x42024, 0xb, 0x0, 0x3000, [0x6840000000000001, 0x3, 0x1fc0000000000000, 0xff]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = dup2(r3, r4) close_range(r5, 0xffffffffffffffff, 0x0) 5m39.300337551s ago: executing program 6 (id=3454): close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 5m36.851995537s ago: executing program 6 (id=3464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd00000010000100090810000c00000000040000", 0x58}], 0x1) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 5m35.773930134s ago: executing program 6 (id=3468): socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x16b0, &(0x7f0000000040)={0x0, 0x81fa, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x1007721, 0x16, 0x0, 0x31) 5m33.691731922s ago: executing program 6 (id=3473): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 5m32.696088406s ago: executing program 6 (id=3476): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) 5m29.911767984s ago: executing program 6 (id=3483): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x159}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) 5m29.628845548s ago: executing program 42 (id=3483): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x159}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) 10.343960078s ago: executing program 7 (id=4620): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.887414568s ago: executing program 4 (id=4631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000001040), 0x1003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x26, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.562818817s ago: executing program 5 (id=4632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000a003000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0b80000000000000140312800b0001006970766c616e00000400028d"], 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYRESOCT=0x0], 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x90, r5, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3778fbec7d0a55f9a942295bdf166ed9c0694effb95bba77"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4917cbcaf7f07b66c247334463398d22cf78a57eaebcf784"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e8040d9db94f98814dfa102f26ff657955f35620f714b00a"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x90}, 0x1, 0x0, 0x0, 0x404c004}, 0x80) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) syz_open_dev$loop(&(0x7f00000007c0), 0x5, 0x40) 7.134573579s ago: executing program 7 (id=4634): syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x88000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 6.757039014s ago: executing program 7 (id=4635): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.649570313s ago: executing program 7 (id=4636): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x52b01) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000440)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x6080, 0x0) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000300)="cf2ae5242d1f0414fe9d60ed3ece90ef8127fa9495e0374f2d2e813615dc3b0663015a859622cc5c50748c73b11ac24ff0358916c6d458663f82ef789a32563e92b6761200"/79, 0x4f, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f0000000680)="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", 0x25c, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 5.757213489s ago: executing program 4 (id=4638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x4, 0xfffffffc, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x252, 0x1}}]}, {0xfffffe29}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 5.406311244s ago: executing program 4 (id=4639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000850) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x5, 0xc7, 0x6, 0x3ff, 0x12f9cdc5, 0x7, 0x3, 0x4b6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.095307772s ago: executing program 5 (id=4640): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165cc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 4.994367783s ago: executing program 2 (id=4641): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r1 = userfaultfd(0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) recvmmsg(r0, &(0x7f00000092c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/76, 0x4c}], 0x1, &(0x7f0000000100)=""/46, 0x2e}, 0x3}, {{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000980)=""/20, 0x14}, {&(0x7f00000009c0)=""/114, 0x72}, {&(0x7f0000000a40)=""/61, 0x3d}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/221, 0xdd}, {&(0x7f0000002980)=""/39, 0x27}], 0x6, &(0x7f0000002a40)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000003a40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003ac0)=""/183, 0xb7}, {&(0x7f0000003b80)=""/208, 0xd0}, {&(0x7f0000003c80)=""/74, 0x4a}], 0x3}, 0x60f}, {{&(0x7f0000003d40)=@llc, 0x80, &(0x7f0000005080)=[{&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/128, 0x80}, {&(0x7f0000004ec0)=""/98, 0x62}, {&(0x7f0000004f40)=""/252, 0xfc}, {&(0x7f0000005040)=""/36, 0x24}], 0x6}, 0x7}, {{&(0x7f0000005100)=@generic, 0x80, &(0x7f0000006600)=[{&(0x7f0000005180)=""/95, 0x5f}, {&(0x7f0000005200)=""/3, 0x3}, {&(0x7f0000005240)=""/152, 0x98}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/131, 0x83}, {&(0x7f00000063c0)=""/163, 0xa3}, {&(0x7f0000006480)=""/84, 0x54}, {&(0x7f0000006500)=""/226, 0xe2}], 0x8, &(0x7f0000006680)=""/86, 0x56}, 0x7ff}, {{&(0x7f0000006700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000007880)=[{&(0x7f0000006780)=""/4096, 0x1000}, {&(0x7f0000007780)=""/210, 0xd2}], 0x2, &(0x7f00000078c0)=""/98, 0x62}, 0xdf}, {{&(0x7f0000008e40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000009180)=[{&(0x7f0000008ec0)=""/204, 0xcc}, {&(0x7f0000008fc0)=""/166, 0xa6}, {&(0x7f0000009080)=""/22, 0x16}, {&(0x7f00000090c0)=""/139, 0x8b}], 0x4, &(0x7f00000091c0)=""/224, 0xe0}, 0x401}], 0x7, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000a80)=0x0) sched_setattr(r2, &(0x7f0000000ac0)={0x38, 0x0, 0x0, 0x9de, 0x3, 0x6, 0x80000000, 0x7, 0x319, 0x7}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x1, 0x0, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e3, &(0x7f0000000000)) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r7, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.990701346s ago: executing program 5 (id=4642): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1007, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.871594509s ago: executing program 4 (id=4643): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.819699833s ago: executing program 5 (id=4644): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x7, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4) 4.69124678s ago: executing program 2 (id=4645): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.343132671s ago: executing program 7 (id=4646): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580)) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 4.268057201s ago: executing program 4 (id=4647): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x8, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.748902752s ago: executing program 5 (id=4649): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.450927702s ago: executing program 7 (id=4651): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$unix(0x1, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa401020301090224000100000000090400000243"], 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xc8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.427808665s ago: executing program 2 (id=4652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) 2.350620279s ago: executing program 4 (id=4653): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2f5, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) write$char_usb(r2, 0x0, 0x0) 2.028863578s ago: executing program 1 (id=4654): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e36dba0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.844468682s ago: executing program 1 (id=4655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x7, 0x48c1, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xe, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x808, 0x205, 0x0, 0xc}, 0x8, 0xffffffff, 0x5, 0x0, 0x9, 0x8, 0x49, 0xd, 0x1, 0x1, {0x7, 0x3, 0x101000, 0x101, 0xfffffffe, 0x401}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.344103319s ago: executing program 1 (id=4656): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) 1.246243365s ago: executing program 1 (id=4657): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.195547665s ago: executing program 2 (id=4658): socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) 1.029825581s ago: executing program 1 (id=4659): socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000000070103000000000000000300000001"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.012569182s ago: executing program 5 (id=4660): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x101, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 272.099857ms ago: executing program 2 (id=4661): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000240)={0x1, 0x80}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x40}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}}, 0x0) 152.456808ms ago: executing program 1 (id=4662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$sock(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000018c0)}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="260f882b000000430f1bd9460f2355c402d1aa045af2440f07460f01c566baf80cb8b0439287ef66bafc0ced430f01bf470000003ef3410fc7720248b80b83f09c6f777d3a0f23d00f21f835000000080f23f8", 0x53}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x2, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x5, 0x7, 0x9, 0x3, 0x15, "4bf8269dc8c718c9d46b6fed87700d14836709"}) 0s ago: executing program 2 (id=4663): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xe79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86g\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf17\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\tA\xed\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x00', 0x42, 0x4c, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.693427][T13672] usb 2-1: config 0 interface 41 has no altsetting 0 [ 773.711812][T13672] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 773.728257][T13672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.745807][T13672] usb 2-1: Product: syz [ 773.755511][T13672] usb 2-1: Manufacturer: syz [ 773.760279][T13672] usb 2-1: SerialNumber: syz [ 773.769724][T13672] usb 2-1: config 0 descriptor?? [ 773.785119][T13672] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 773.825531][T13126] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 773.826746][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 773.865030][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.878553][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.904700][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 773.918474][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.949901][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 773.962772][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.985474][T13126] usb 3-1: Using ep0 maxpacket: 8 [ 774.027153][T13126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.057438][T13126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.078426][T13126] usb 3-1: config 1 has no interface number 0 [ 774.099216][T13126] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 774.108936][T13126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.145762][T13126] usb 3-1: Product: syz [ 774.175176][T13126] usb 3-1: Manufacturer: syz [ 774.185292][T13126] usb 3-1: SerialNumber: syz [ 774.207315][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 774.222530][ T24] usbtmc 5-1:16.0: can't read capabilities [ 774.505952][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.515102][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.524191][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.545749][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.555012][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.564119][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.576318][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.585562][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.603824][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.616241][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.625384][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.634537][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.646489][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.655845][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.664962][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.675046][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 774.689229][ T24] usb 5-1: USB disconnect, device number 34 [ 776.229211][ T24] usb 2-1: USB disconnect, device number 37 [ 776.985492][T13126] usb 3-1: USB disconnect, device number 59 [ 777.057423][T19755] udevd[19755]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.010396][T19790] syzkaller0: entered promiscuous mode [ 779.055113][T19790] syzkaller0: entered allmulticast mode [ 779.248320][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 779.382596][T13126] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 779.417312][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 779.430040][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 779.452806][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 779.462600][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.479087][ T24] usb 6-1: Product: syz [ 779.489477][ T24] usb 6-1: Manufacturer: syz [ 779.502266][ T24] usb 6-1: SerialNumber: syz [ 779.526434][ T24] usb 6-1: config 0 descriptor?? [ 779.597046][T13126] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 779.616907][T13126] usb 3-1: config 0 has no interface number 0 [ 779.623268][T13126] usb 3-1: config 0 interface 213 altsetting 101 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.650456][T13126] usb 3-1: config 0 interface 213 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.661439][T13126] usb 3-1: config 0 interface 213 has no altsetting 0 [ 779.682814][T13126] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 779.719499][T13126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.758751][T19799] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4014'. [ 779.763820][T13126] usb 3-1: config 0 descriptor?? [ 779.967617][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4014'. [ 780.240002][T13126] usbhid 3-1:0.213: can't add hid device: -71 [ 780.255597][T13126] usbhid 3-1:0.213: probe with driver usbhid failed with error -71 [ 780.277784][T13126] usb 3-1: USB disconnect, device number 60 [ 784.264397][T19856] netlink: 'syz.7.4023': attribute type 13 has an invalid length. [ 785.704337][ T29] audit: type=1804 audit(1776047682.262:100): pid=19864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4025" name="/newroot/338/file1" dev="fuse" ino=1 res=1 errno=0 [ 785.861926][T19856] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.869882][T19856] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.905556][T19868] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 786.017740][T19856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.048511][T19856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.097222][T19868] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 786.106985][T19868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.115623][T19868] usb 3-1: Product: syz [ 786.120165][T19868] usb 3-1: Manufacturer: syz [ 786.124984][T19868] usb 3-1: SerialNumber: syz [ 786.414663][ T1091] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.439929][ T1091] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.450440][ T1091] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.507734][ T1091] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.532123][T19888] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4028'. [ 786.558870][T13669] usb 6-1: USB disconnect, device number 26 [ 786.560796][T19868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 786.609875][T19868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 787.023809][T19897] syzkaller0: entered promiscuous mode [ 787.040859][T19897] syzkaller0: entered allmulticast mode [ 787.688433][T19902] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4032'. [ 787.866731][T19868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 787.880330][T19868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 788.312750][T19868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 788.327028][T19868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 788.360251][T19868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 788.399964][T19868] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 788.460027][T19868] usb 3-1: USB disconnect, device number 61 [ 789.149281][T13669] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 789.345439][T13669] usb 6-1: Using ep0 maxpacket: 16 [ 789.358048][T19919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4037'. [ 789.411294][T13669] usb 6-1: config 0 has no interfaces? [ 789.419329][T13669] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 789.435256][T13669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.464040][T13669] usb 6-1: config 0 descriptor?? [ 789.509263][T19919] vlan3: entered allmulticast mode [ 789.520555][T19919] bridge3: entered allmulticast mode [ 789.529469][T19921] bridge3: port 1(erspan0) entered blocking state [ 789.538579][T19921] bridge3: port 1(erspan0) entered disabled state [ 789.547004][T19921] erspan0: entered allmulticast mode [ 789.572807][T19921] erspan0: entered promiscuous mode [ 789.775222][T19913] kvm: kvm [19912]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 789.909338][T19913] kvm: kvm [19912]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 790.174192][T13669] usb 6-1: USB disconnect, device number 27 [ 791.921596][T19948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 792.757516][T19955] syzkaller0: entered promiscuous mode [ 792.763223][T19955] syzkaller0: entered allmulticast mode [ 793.043760][T19960] syzkaller0: entered promiscuous mode [ 793.065538][T19960] syzkaller0: entered allmulticast mode [ 793.500461][T19950] syz.2.4045 (19950): drop_caches: 1 [ 794.262776][T19982] syzkaller0: entered promiscuous mode [ 794.268737][T19982] syzkaller0: entered allmulticast mode [ 794.397972][T19985] syzkaller0: entered promiscuous mode [ 794.405143][T19985] syzkaller0: entered allmulticast mode [ 796.298171][T20006] syzkaller0: entered promiscuous mode [ 796.324174][T20006] syzkaller0: entered allmulticast mode [ 796.724505][T20009] syzkaller0: entered promiscuous mode [ 796.731215][T20009] syzkaller0: entered allmulticast mode [ 797.015469][T19868] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 797.119169][T20019] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 797.140394][T20019] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 797.170812][ T12] syzkaller0: tun_net_xmit 76 [ 797.176360][T19868] usb 5-1: Using ep0 maxpacket: 16 [ 797.185802][T19868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 797.213962][ T12] syzkaller0: tun_net_xmit 48 [ 797.220006][ T5907] syzkaller0: tun_net_xmit 76 [ 797.227666][T20018] syzkaller0: tun_net_xmit 28 [ 797.232355][T19868] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 797.262866][T19868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.265977][T13669] syzkaller0: tun_net_xmit 76 [ 797.281661][T19868] usb 5-1: Product: syz [ 797.291644][T19868] usb 5-1: Manufacturer: syz [ 797.332931][T19868] usb 5-1: SerialNumber: syz [ 797.338291][T20000] syz.7.4061 (20000): drop_caches: 1 [ 797.362695][T19868] usb 5-1: config 0 descriptor?? [ 797.377861][T19868] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 797.395413][T19868] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 797.416240][T13669] syzkaller0: tun_net_xmit 76 [ 798.389073][T19868] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 798.835848][T19868] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 798.846040][T19868] em28xx 5-1:0.0: board has no eeprom [ 799.838133][T19868] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 799.847439][T19868] em28xx 5-1:0.0: dvb set to bulk mode. [ 799.856567][ T9407] em28xx 5-1:0.0: Binding DVB extension [ 800.825671][T20013] em28xx 5-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 800.866394][T13669] usb 5-1: USB disconnect, device number 35 [ 800.873308][T13669] em28xx 5-1:0.0: Disconnecting em28xx [ 801.095895][ T9407] em28xx 5-1:0.0: Registering input extension [ 801.120996][T13669] em28xx 5-1:0.0: Closing input extension [ 801.173313][T13669] em28xx 5-1:0.0: Freeing device [ 802.667150][T13669] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 802.827698][T13669] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 802.859673][T13669] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 802.882346][T13669] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 802.945506][T13669] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.991172][T20060] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 803.009051][T13669] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 803.290673][ T9407] usb 8-1: USB disconnect, device number 14 [ 804.195629][T13669] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 804.375433][T13669] usb 8-1: Using ep0 maxpacket: 16 [ 804.406853][T13669] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 804.416555][T13669] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.439514][T13669] usb 8-1: config 0 descriptor?? [ 804.473244][T13669] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 805.009478][T20083] syzkaller0: entered promiscuous mode [ 805.015210][T20083] syzkaller0: entered allmulticast mode [ 805.109882][T20088] sctp: [Deprecated]: syz.1.4082 (pid 20088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 805.109882][T20088] Use struct sctp_sack_info instead [ 805.532529][T20104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4088'. [ 807.229655][T13669] gspca_sonixj: reg_w1 err -71 [ 807.234974][T13669] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 807.249580][T13669] usb 8-1: USB disconnect, device number 15 [ 808.899073][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.905887][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.297652][T20104] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 809.408158][T20109] tipc: Enabling of bearer rejected, failed to enable media [ 809.666043][ T9407] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 809.699971][T20136] syzkaller0: entered promiscuous mode [ 809.709804][T20136] syzkaller0: entered allmulticast mode [ 809.849697][ T9407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.860936][ T9407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.871981][ T9407] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 809.885449][ T9407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.908345][ T9407] usb 6-1: config 0 descriptor?? [ 809.956106][T19868] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 810.276887][T19868] usb 2-1: Using ep0 maxpacket: 16 [ 810.291190][T19868] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 810.321017][T19868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 810.401429][T19868] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 810.417022][T20147] syzkaller0: entered promiscuous mode [ 810.424538][T20147] syzkaller0: entered allmulticast mode [ 810.434379][T19868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.454054][T19868] usb 2-1: Product: syz [ 810.475087][T19868] usb 2-1: Manufacturer: syz [ 810.481481][T19868] usb 2-1: SerialNumber: syz [ 810.521821][ T9407] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 810.529970][ T9407] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 810.538074][T19868] usb 2-1: config 0 descriptor?? [ 810.554519][T19868] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 810.570365][ T9407] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0025/input/input69 [ 810.589826][T19868] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 810.715153][ T9407] cm6533_jd 0003:0D8C:0022.0025: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 810.804459][ T9407] usb 6-1: USB disconnect, device number 28 [ 811.142925][T20152] fido_id[20152]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 811.166650][T19868] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 811.177469][T19868] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 811.405340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 811.495391][T13669] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 811.590920][T20162] syzkaller0: entered promiscuous mode [ 811.607138][T20162] syzkaller0: entered allmulticast mode [ 811.719606][T13669] usb 5-1: Using ep0 maxpacket: 16 [ 811.782119][T13669] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.820193][T19868] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 811.840325][T19868] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 811.952157][T13669] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.001336][T13669] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 812.012622][T13669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.023197][T19868] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 812.055943][T19868] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 812.301311][T19868] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 812.312350][T19868] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 812.339957][T19868] usb 2-1: USB disconnect, device number 38 [ 812.454028][T13669] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 812.505796][ T5907] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 812.735178][ T5907] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 812.744547][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.775591][ T5907] usb 6-1: Product: syz [ 812.785414][ T5907] usb 6-1: Manufacturer: syz [ 812.795491][ T5907] usb 6-1: SerialNumber: syz [ 813.156115][T13669] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 813.234204][ T5907] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 813.429663][ T5907] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 813.506200][T13669] usb 3-1: Using ep0 maxpacket: 16 [ 813.513164][T13669] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 813.530613][T13669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 813.544487][T13669] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 813.562553][T13669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.650003][T13669] usb 3-1: Product: syz [ 813.654361][T13669] usb 3-1: Manufacturer: syz [ 813.659657][T13669] usb 3-1: SerialNumber: syz [ 813.858499][T13670] usb 5-1: reset high-speed USB device number 36 using dummy_hcd [ 814.420844][T13669] usb 3-1: config 0 descriptor?? [ 814.541919][T13669] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 814.595490][T13669] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 814.604214][T20183] syzkaller0: entered promiscuous mode [ 814.631670][T20183] syzkaller0: entered allmulticast mode [ 815.144263][T13669] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 815.151435][T13669] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 815.288086][ T5871] usb 5-1: USB disconnect, device number 36 [ 815.857651][T13669] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 815.865803][T13669] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 816.016346][ T5907] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 816.029987][ T5907] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 816.043042][ T5907] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 816.069079][ T5907] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 816.090138][ T5907] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 816.120166][ T5907] usb 6-1: USB disconnect, device number 29 [ 816.356543][T20202] tipc: Started in network mode [ 816.361539][T20202] tipc: Node identity 16c03467fbad, cluster identity 4711 [ 816.370249][T20202] tipc: Enabled bearer , priority 0 [ 816.383506][T20202] syzkaller0: entered promiscuous mode [ 816.389550][T20202] syzkaller0: entered allmulticast mode [ 816.426758][T20202] tipc: Resetting bearer [ 816.437774][T20201] tipc: Resetting bearer [ 816.461207][T20201] tipc: Disabling bearer [ 816.495634][T13669] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 816.511137][T13669] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 816.678442][T13669] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 816.694344][T13669] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 816.736989][T13669] usb 3-1: USB disconnect, device number 62 [ 816.906868][T20214] syzkaller0: entered promiscuous mode [ 816.912929][T20214] syzkaller0: entered allmulticast mode [ 816.924305][T20212] syzkaller0: entered promiscuous mode [ 816.933144][T20212] syzkaller0: entered allmulticast mode [ 817.227199][T20223] fuse: Bad value for 'fd' [ 819.545630][ T5907] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 819.758025][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.769908][ T5907] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 819.896446][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.923096][ T5907] usb 6-1: config 0 descriptor?? [ 819.934937][ T5907] usb 6-1: bad CDC descriptors [ 820.148227][ T5907] usb 6-1: USB disconnect, device number 30 [ 820.335108][T20261] syzkaller0: entered promiscuous mode [ 820.361897][T20261] syzkaller0: entered allmulticast mode [ 821.835736][ T9407] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 822.022059][ T9407] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 822.148267][ T9407] usb 2-1: config 0 has no interface number 0 [ 822.226740][ T9407] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 822.273671][T20294] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4138'. [ 822.280190][ T9407] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 822.303500][ T9407] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 822.375117][ T9407] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 822.391363][T20296] syzkaller0: entered promiscuous mode [ 822.405718][T20296] syzkaller0: entered allmulticast mode [ 822.411607][T20294] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4138'. [ 822.467250][T20294] team0: entered promiscuous mode [ 822.472499][T20294] team_slave_0: entered promiscuous mode [ 822.478850][T20294] team_slave_1: entered promiscuous mode [ 822.486857][T20294] bond0: entered promiscuous mode [ 822.501951][T20294] bond_slave_0: entered promiscuous mode [ 822.515552][ T9407] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 822.537106][ T9407] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 822.561001][T20294] bond_slave_1: entered promiscuous mode [ 822.582671][T20294] debugfs: 'hsr1' already exists in 'hsr' [ 822.589422][T20294] Cannot create hsr debugfs directory [ 822.597424][T20294] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 822.600943][ T9407] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 822.615646][T20294] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 822.628052][T20294] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 822.685868][ T9407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.782815][ T9407] usb 2-1: config 0 descriptor?? [ 822.799255][T20280] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 822.818890][T20280] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 822.863844][ T9407] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 823.108493][T20309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4142'. [ 823.118162][T20309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4142'. [ 823.215139][T20309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4142'. [ 823.297806][T20312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.310545][T20312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.468309][ T9407] usb 2-1: USB disconnect, device number 39 [ 823.474349][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 823.537449][ T9407] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 823.814969][T13669] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 823.985431][T13669] usb 6-1: Using ep0 maxpacket: 16 [ 823.993048][T13669] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 824.015448][T13669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 824.061314][T13669] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 824.296574][T13669] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.304878][T13669] usb 6-1: Product: syz [ 824.309314][T13669] usb 6-1: Manufacturer: syz [ 824.314105][T13669] usb 6-1: SerialNumber: syz [ 824.324003][T13669] usb 6-1: config 0 descriptor?? [ 824.331493][T13669] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 824.345181][T13669] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 824.986301][T13669] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 824.993339][T13669] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 825.068586][T20321] syzkaller0: entered promiscuous mode [ 825.106668][T20321] syzkaller0: entered allmulticast mode [ 826.243688][T13669] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 826.266195][T13669] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 826.281827][T13669] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 826.381425][T13669] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 826.902085][T13669] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 827.118688][T13669] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 827.173540][T13669] usb 6-1: USB disconnect, device number 31 [ 827.966161][T20351] vivid-000: ================= START STATUS ================= [ 828.219207][T20351] vivid-000: Radio HW Seek Mode: Bounded [ 828.234097][T20351] vivid-000: Radio Programmable HW Seek: false [ 828.242857][T20351] vivid-000: RDS Rx I/O Mode: Block I/O [ 828.292641][T20351] vivid-000: Generate RBDS Instead of RDS: false [ 828.301550][T20351] vivid-000: RDS Reception: true [ 828.676358][T20351] vivid-000: RDS Program Type: 0 inactive [ 828.783229][T20351] vivid-000: RDS PS Name: inactive [ 829.020844][T20351] vivid-000: RDS Radio Text: inactive [ 829.084729][T20351] vivid-000: RDS Traffic Announcement: false inactive [ 829.112979][T20351] vivid-000: RDS Traffic Program: false inactive [ 829.213660][T20351] vivid-000: RDS Music: false inactive [ 829.241799][T20351] vivid-000: ================== END STATUS ================== [ 830.085864][T13669] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 830.255584][T13669] usb 3-1: Using ep0 maxpacket: 16 [ 830.263843][T13669] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 830.275067][T13669] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 831.281781][T13669] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 831.341298][T13669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.353188][T13669] usb 3-1: Product: syz [ 831.464958][T13669] usb 3-1: Manufacturer: syz [ 831.481832][T13669] usb 3-1: SerialNumber: syz [ 831.720404][T20370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.730156][T20370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.764082][T13669] usb 3-1: USB disconnect, device number 63 [ 833.195812][ T9407] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 833.336718][T20413] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 833.379917][ T9407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.411913][ T9407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.441559][ T9407] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 833.459774][ T9407] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 833.469213][ T9407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.490183][ T9407] usb 3-1: config 0 descriptor?? [ 833.931411][ T9407] nti 0003:0757:0A00.0027: unknown main item tag 0x0 [ 833.943385][ T9407] nti 0003:0757:0A00.0027: unknown main item tag 0x0 [ 833.956254][ T9407] nti 0003:0757:0A00.0027: unknown main item tag 0x0 [ 834.006604][ T9407] nti 0003:0757:0A00.0027: unknown main item tag 0x0 [ 834.024442][ T9407] nti 0003:0757:0A00.0027: unknown main item tag 0x0 [ 834.057072][ T9407] nti 0003:0757:0A00.0027: unknown main item tag 0x0 [ 834.101258][ T9407] nti 0003:0757:0A00.0027: unknown main item tag 0x0 [ 834.113403][ T9407] nti 0003:0757:0A00.0027: unknown main item tag 0x0 [ 834.124160][ T9407] nti 0003:0757:0A00.0027: unknown main item tag 0x0 [ 834.133118][T20408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.142596][T20408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.155559][ T9407] nti 0003:0757:0A00.0027: unknown main item tag 0x0 [ 834.167166][ T9407] nti 0003:0757:0A00.0027: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.2-1/input0 [ 834.285188][ T9407] usb 3-1: USB disconnect, device number 64 [ 834.375452][T19868] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 834.387928][T13669] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 834.462792][T20427] fido_id[20427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 834.535466][T19868] usb 2-1: Using ep0 maxpacket: 8 [ 834.544237][T19868] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 834.670304][T13669] usb 6-1: Using ep0 maxpacket: 32 [ 834.681605][T13669] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 834.690480][T13669] usb 6-1: config 0 has no interface number 0 [ 834.697234][T13669] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 834.706238][T19868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.710237][T13669] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 834.725401][T13669] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.730649][T19868] usb 2-1: Product: syz [ 834.733511][T13669] usb 6-1: Product: syz [ 834.765710][T19868] usb 2-1: Manufacturer: syz [ 834.770470][T19868] usb 2-1: SerialNumber: syz [ 834.775949][T13669] usb 6-1: Manufacturer: syz [ 834.780998][T13669] usb 6-1: SerialNumber: syz [ 834.781987][T19868] usb 2-1: config 0 descriptor?? [ 834.789646][T13669] usb 6-1: config 0 descriptor?? [ 834.798579][T20426] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 835.022865][T20426] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 835.095501][T19868] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 836.520493][T19868] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 836.536693][T19868] usb 2-1: USB disconnect, device number 40 [ 837.501200][T20459] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4186'. [ 837.517794][T20459] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4186'. [ 837.574815][T20461] syzkaller0: entered promiscuous mode [ 837.585657][T20461] syzkaller0: entered allmulticast mode [ 837.715482][T13669] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 837.728483][T13669] asix 6-1:0.188: probe with driver asix failed with error -71 [ 837.792303][T13670] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 837.841575][T13669] usb 6-1: USB disconnect, device number 32 [ 838.192239][T20470] syz.4.4189 (20470): drop_caches: 1 [ 838.431569][T13670] usb 3-1: Using ep0 maxpacket: 8 [ 838.450017][T13670] usb 3-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 838.460392][T13670] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 838.493759][T13670] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 838.505629][T13670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.514582][T13670] usb 3-1: Product: syz [ 838.519473][T13670] usb 3-1: Manufacturer: syz [ 838.524129][T13670] usb 3-1: SerialNumber: syz [ 838.533174][T13670] usb 3-1: config 0 descriptor?? [ 838.547117][T20468] syz.7.4190 (20468): drop_caches: 1 [ 838.796816][T13670] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 838.825216][T13670] usb 3-1: USB disconnect, device number 65 [ 838.927871][T20470] syz.4.4189 (20470): drop_caches: 1 [ 839.044114][T20468] syz.7.4190 (20468): drop_caches: 1 [ 839.136295][T20480] fuse: Bad value for 'fd' [ 839.211155][T20482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4194'. [ 839.341272][T20482] bridge2: port 1(veth3) entered blocking state [ 839.361129][T20482] bridge2: port 1(veth3) entered disabled state [ 839.368367][T20482] veth3: entered allmulticast mode [ 839.376335][T20482] veth3: entered promiscuous mode [ 839.384450][T20489] bridge2: port 2(veth0_to_bond) entered blocking state [ 839.415542][T20489] bridge2: port 2(veth0_to_bond) entered disabled state [ 839.424916][T20489] veth0_to_bond: entered allmulticast mode [ 839.433367][T20489] veth0_to_bond: entered promiscuous mode [ 839.462109][T20482] bridge2: port 3(veth5) entered blocking state [ 839.471448][T20482] bridge2: port 3(veth5) entered disabled state [ 839.487893][T20482] veth5: entered allmulticast mode [ 839.496276][T20482] veth5: entered promiscuous mode [ 839.529621][T13670] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 839.725417][T13670] usb 6-1: Using ep0 maxpacket: 8 [ 840.202376][T13670] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 840.213063][T13670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.225407][T13670] usb 6-1: Product: syz [ 840.235764][T13670] usb 6-1: Manufacturer: syz [ 840.268622][T13669] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 840.338414][T13670] usb 6-1: SerialNumber: syz [ 840.346170][T13670] usb 6-1: config 0 descriptor?? [ 840.369888][T13670] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 840.403165][T20501] syzkaller0: entered promiscuous mode [ 840.409453][T20501] syzkaller0: entered allmulticast mode [ 840.510136][T13669] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 840.520393][T13669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.532222][T13669] usb 5-1: config 0 descriptor?? [ 840.748988][ T29] audit: type=1326 audit(1776047737.312:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20504 comm="syz.1.4202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bf4d9c819 code=0x0 [ 840.825665][T19868] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 840.975639][T19868] usb 8-1: Using ep0 maxpacket: 32 [ 840.994560][T19868] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 841.013144][T19868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.037044][T19868] usb 8-1: config 0 descriptor?? [ 841.252065][T19868] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 841.269190][T19868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 841.281262][T19868] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 841.290218][T19868] usb 8-1: media controller created [ 841.313126][T19868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 841.479854][T19868] az6027: usb out operation failed. (-71) [ 841.493447][T19868] az6027: usb out operation failed. (-71) [ 841.514954][T19868] stb0899_attach: Driver disabled by Kconfig [ 841.526622][T19868] az6027: no front-end attached [ 841.526622][T19868] [ 841.536291][T19868] az6027: usb out operation failed. (-71) [ 841.542556][T19868] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 841.566760][T19868] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input70 [ 841.584727][T20517] fuse: Bad value for 'fd' [ 841.604856][T19868] dvb-usb: schedule remote query interval to 400 msecs. [ 841.623745][T19868] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 841.654781][T19868] usb 8-1: USB disconnect, device number 16 [ 841.763001][T19868] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 841.839016][T20520] syzkaller0: entered promiscuous mode [ 841.844842][T20520] syzkaller0: entered allmulticast mode [ 842.058124][T20523] netlink: 'syz.1.4209': attribute type 13 has an invalid length. [ 842.085751][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'. [ 842.109472][T20523] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 842.386926][T20526] syzkaller0: entered promiscuous mode [ 842.392948][T20526] syzkaller0: entered allmulticast mode [ 843.395586][T13670] gspca_sonixj: i2c_w8 err -71 [ 843.435579][T13670] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 843.450268][T13669] usb 5-1: Cannot set autoneg [ 843.455747][T13669] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 843.471766][T13670] usb 6-1: USB disconnect, device number 33 [ 843.504530][T13669] usb 5-1: USB disconnect, device number 37 [ 843.642242][T20536] tipc: Started in network mode [ 843.664779][T20536] tipc: Node identity 8e7277817495, cluster identity 4711 [ 843.675875][T20536] tipc: Enabled bearer , priority 0 [ 843.697737][T20536] syzkaller0: entered promiscuous mode [ 843.703281][T20536] syzkaller0: entered allmulticast mode [ 843.753093][T20536] tipc: Resetting bearer [ 843.762541][T20535] tipc: Resetting bearer [ 843.798004][T20535] tipc: Disabling bearer [ 843.818273][T20538] syzkaller0: entered promiscuous mode [ 843.823783][T20538] syzkaller0: entered allmulticast mode [ 844.845683][T19868] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 845.145916][T19868] usb 3-1: Using ep0 maxpacket: 32 [ 845.156692][T19868] usb 3-1: config 1 interface 0 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 1024 [ 845.174077][T19868] usb 3-1: config 1 interface 0 has no altsetting 0 [ 845.185958][T20568] syzkaller0: entered promiscuous mode [ 845.191807][T20568] syzkaller0: entered allmulticast mode [ 845.396352][T19868] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 845.406675][T19868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.425590][T19868] usb 3-1: Product: syz [ 845.429852][T19868] usb 3-1: Manufacturer: syz [ 845.434513][T19868] usb 3-1: SerialNumber: syz [ 845.456868][T20554] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 845.532444][T20570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4223'. [ 845.704525][T19868] usb 3-1: USB disconnect, device number 66 [ 846.863118][T20592] syzkaller0: entered promiscuous mode [ 846.877233][T20592] syzkaller0: entered allmulticast mode [ 847.077620][T13669] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 847.261665][T13669] usb 8-1: Using ep0 maxpacket: 8 [ 847.298461][T13669] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 847.317066][T13669] usb 8-1: config 0 has no interface number 0 [ 847.323427][T13669] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 847.356305][T13669] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 847.380787][T13669] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 847.397558][T20605] syzkaller0: entered promiscuous mode [ 847.403972][T13669] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 847.410208][T20605] syzkaller0: entered allmulticast mode [ 847.420394][T13669] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 847.458503][T20609] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4237'. [ 847.459248][T13669] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.488348][T13669] usb 8-1: config 0 descriptor?? [ 847.496354][T20609] netlink: 990 bytes leftover after parsing attributes in process `syz.2.4237'. [ 847.513525][T13669] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 847.865994][T13669] usb 8-1: USB disconnect, device number 17 [ 847.899930][T13669] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 848.573576][T20628] syzkaller0: entered promiscuous mode [ 848.587902][T20628] syzkaller0: entered allmulticast mode [ 849.656229][T20640] syzkaller0: entered promiscuous mode [ 849.661853][T20640] syzkaller0: entered allmulticast mode [ 849.828877][T20643] kernel read not supported for file /¡sxt (pid: 20643 comm: syz.2.4247) [ 849.868704][ T29] audit: type=1800 audit(1776047746.432:102): pid=20643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4247" name=A17378741A dev="mqueue" ino=112027 res=0 errno=0 [ 850.318576][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4251'. [ 850.492041][T20654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4251'. [ 850.504399][T20654] 8021q: adding VLAN 0 to HW filter on device bond3 [ 850.653811][T13669] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 850.812568][T20672] xt_hashlimit: max too large, truncated to 1048576 [ 850.875418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 850.905395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 850.939364][T13669] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 850.953071][T20665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.088830][T13669] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 851.219778][T13669] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 851.250611][T13669] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 851.290481][T13669] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 851.532686][T13669] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 851.543537][T13669] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 851.557286][T13669] usb 6-1: Product: syz [ 851.561632][T13669] usb 6-1: Manufacturer: syz [ 851.821315][T13669] cdc_wdm 6-1:1.0: skipping garbage [ 851.835434][T13669] cdc_wdm 6-1:1.0: skipping garbage [ 851.840893][T13669] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 851.862639][T20674] tipc: Enabled bearer , priority 0 [ 851.870654][T20674] syzkaller0: entered promiscuous mode [ 851.876597][T20674] syzkaller0: entered allmulticast mode [ 851.900807][T20674] tipc: Resetting bearer [ 851.909618][T20673] tipc: Resetting bearer [ 851.943922][T20673] tipc: Disabling bearer [ 852.023709][T13669] usb 6-1: USB disconnect, device number 34 [ 853.292065][ T29] audit: type=1326 audit(1776047749.852:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20678 comm="syz.7.4260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9eb139c819 code=0x0 [ 853.907415][T13669] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 854.095609][T13669] usb 2-1: Using ep0 maxpacket: 32 [ 854.108301][T13669] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 854.154787][T20696] syzkaller0: entered promiscuous mode [ 854.160871][T20696] syzkaller0: entered allmulticast mode [ 854.200534][T13669] usb 2-1: config 0 has no interface number 0 [ 854.218369][T13669] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 854.510502][T13669] usb 2-1: config 0 interface 85 has no altsetting 0 [ 854.667664][T13669] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 854.704752][T13669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.735343][T13669] usb 2-1: Product: syz [ 854.749804][T13669] usb 2-1: Manufacturer: syz [ 854.833503][T13669] usb 2-1: SerialNumber: syz [ 854.857097][T13669] usb 2-1: config 0 descriptor?? [ 856.215541][T13669] appletouch 2-1:0.85: Geyser mode initialized. [ 856.223575][T13669] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input71 [ 856.279184][T20713] syzkaller0: entered promiscuous mode [ 856.300263][T20713] syzkaller0: entered allmulticast mode [ 856.376490][T20714] tipc: Started in network mode [ 856.407830][T20714] tipc: Node identity 32004501b2fc, cluster identity 4711 [ 856.469449][T20714] tipc: Enabled bearer , priority 0 [ 856.566187][T20713] tipc: Resetting bearer [ 856.710072][T20713] tipc: Disabling bearer [ 857.156535][ T9407] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 857.209386][T19868] usb 2-1: USB disconnect, device number 41 [ 857.254457][T19868] appletouch 2-1:0.85: input: appletouch disconnected [ 857.335664][ T9407] usb 3-1: Using ep0 maxpacket: 32 [ 857.346519][ T9407] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 857.357765][ T9407] usb 3-1: config 0 has no interface number 0 [ 857.373371][ T9407] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 857.382943][ T9407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.394467][ T9407] usb 3-1: Product: syz [ 857.410695][ T9407] usb 3-1: Manufacturer: syz [ 857.422580][ T9407] usb 3-1: SerialNumber: syz [ 857.432518][ T9407] usb 3-1: config 0 descriptor?? [ 857.506355][T13669] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 857.543595][T20733] syzkaller0: entered promiscuous mode [ 857.550265][T20733] syzkaller0: entered allmulticast mode [ 857.597415][T20733] tipc: Enabled bearer , priority 0 [ 857.615625][T20731] tipc: Resetting bearer [ 857.661709][T20731] tipc: Disabling bearer [ 857.675408][T13669] usb 8-1: Using ep0 maxpacket: 8 [ 857.682877][T13669] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 857.693393][T13669] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 857.715406][T13669] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 857.735626][T13669] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.752579][T13669] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 857.765478][T13669] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.874378][ T9407] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 857.912518][ T9407] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 858.055967][T13669] usb 8-1: GET_CAPABILITIES returned 0 [ 858.062583][T13669] usbtmc 8-1:16.0: can't read capabilities [ 858.278610][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 858.291819][T13669] usb 8-1: USB disconnect, device number 18 [ 859.140607][T20756] syzkaller0: entered promiscuous mode [ 859.146595][T20756] syzkaller0: entered allmulticast mode [ 859.198051][T20762] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4286'. [ 859.207926][T20762] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4286'. [ 859.224234][T20762] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4286'. [ 859.431437][T20766] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 859.440389][T20766] kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 859.458819][T20766] kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 859.469940][T20766] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 859.479754][T20766] kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 859.559587][T20766] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 859.569136][T20766] kvm: requested 60342 ns i8254 timer period limited to 200000 ns [ 859.578498][T20766] kvm: requested 151695 ns i8254 timer period limited to 200000 ns [ 860.260973][ T9407] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 860.333297][ T9407] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 860.469407][ T9407] usb 3-1: USB disconnect, device number 67 [ 860.574948][T20780] vlan2: entered promiscuous mode [ 860.583317][T20780] syz_tun: entered promiscuous mode [ 861.277357][T20788] syzkaller0: entered promiscuous mode [ 861.304474][T20788] syzkaller0: entered allmulticast mode [ 861.824865][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4297'. [ 862.476451][ T9407] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 862.785409][ T9407] usb 6-1: Using ep0 maxpacket: 32 [ 862.957289][ T29] audit: type=1800 audit(1776047759.382:104): pid=20830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4305" name="bus" dev="ramfs" ino=112515 res=0 errno=0 [ 863.055528][T13669] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 863.188974][T20835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 863.256077][T13669] usb 3-1: Using ep0 maxpacket: 16 [ 863.329310][T13669] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.370996][T13669] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.405462][T20833] bond1: (slave ip6gretap1): making interface the new active one [ 863.415855][ T9407] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.426455][ T9407] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 863.449674][T13669] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 863.466302][T13669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.474797][T20833] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 863.637382][T13669] usb 3-1: Product: syz [ 863.641624][T13669] usb 3-1: Manufacturer: syz [ 863.685456][T13669] usb 3-1: SerialNumber: syz [ 863.884821][ T9407] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 863.956119][ T9407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.974770][T13669] usb 3-1: 0:2 : does not exist [ 864.005935][ T9407] usb 6-1: Product: syz [ 864.007058][T13669] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 864.010265][ T9407] usb 6-1: Manufacturer: syz [ 864.010289][ T9407] usb 6-1: SerialNumber: syz [ 864.036571][ T9407] usb 6-1: config 0 descriptor?? [ 864.314382][T13669] usb 3-1: USB disconnect, device number 68 [ 864.540158][T19726] udevd[19726]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 864.576050][ T5871] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 864.793961][ T5871] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 864.828808][ T5871] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.895397][ T5871] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 864.934666][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.975798][T13669] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 865.006604][ T5871] usbtmc 5-1:16.0: bulk endpoints not found [ 865.058421][ T9407] usb 6-1: USB disconnect, device number 35 [ 865.218549][T13669] usb 3-1: Using ep0 maxpacket: 32 [ 865.259741][T13669] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 865.268504][T13669] usb 3-1: config 0 has no interface number 1 [ 865.345809][T13669] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 865.355112][T13669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.385483][T13669] usb 3-1: Product: syz [ 865.392222][T13669] usb 3-1: Manufacturer: syz [ 865.409077][T13669] usb 3-1: SerialNumber: syz [ 865.439614][T13669] usb 3-1: config 0 descriptor?? [ 865.889699][T20845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.973822][T20845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.986376][T13669] snd-usb-6fire 3-1:0.111: unknown device firmware state received from device: [ 866.029074][T13669] 31 db 99 aa dd 09 f1 37 [ 866.202845][T13669] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -5 [ 866.237905][T20858] tipc: Enabling of bearer rejected, failed to enable media [ 866.403891][T13669] usb 3-1: USB disconnect, device number 69 [ 866.878396][T20863] syzkaller0: entered promiscuous mode [ 866.964306][T20863] syzkaller0: entered allmulticast mode [ 867.240559][ T5871] usb 5-1: USB disconnect, device number 38 [ 867.416501][T13669] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 867.555664][ T9407] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 867.587731][T13669] usb 3-1: not running at top speed; connect to a high speed hub [ 867.621315][T13669] usb 3-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 867.645369][T13669] usb 3-1: config 1 interface 0 altsetting 248 endpoint 0x82 has invalid maxpacket 991, setting to 64 [ 867.658732][T13669] usb 3-1: config 1 interface 0 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 867.695482][T13669] usb 3-1: config 1 interface 0 has no altsetting 0 [ 867.709909][T13669] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.716109][ T9407] usb 8-1: Using ep0 maxpacket: 32 [ 867.725770][T13669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.742476][ T9407] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.745713][T13669] usb 3-1: Product: ꮑ䊫䋃ꘊ눞㳩㶲ᵦ￭ﮒԅí¨î†ì¹˜í°æ¤¸æ•€ç›–箬儎쿙왻胾儽ä ã€¸ã¿§íœ…é‹äŒ½é­‡æ¦ƒç½–儾绋拯煡峒苲î–̫肸黨譒蘙篊鿑臒醽ﬢҢ㽖筓拌뢧飶î™à¬«á¶ªéœŠá‡‰ê¯’紘螳֖鑿헰ﶪ预簸拸庻㉨ᥪ擆ḋ㣈৻߷탫ä¶ä›®ê‡ºâ¶½é©§ï™­ï«½å€è«Íৎ铤寘簽슴ॸ [ 867.755377][ T9407] usb 8-1: config 0 has no interfaces? [ 867.834244][ T9407] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 867.865618][T13669] usb 3-1: SerialNumber: syz [ 867.881754][ T9407] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.899616][T20871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 867.908771][T20871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 867.934457][ T9407] usb 8-1: Product: syz [ 867.944554][ T9407] usb 8-1: Manufacturer: syz [ 867.945678][T20871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 867.960036][ T9407] usb 8-1: SerialNumber: syz [ 867.988655][ T9407] usb 8-1: config 0 descriptor?? [ 868.459862][T13669] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 868.483585][T13669] usb 3-1: USB disconnect, device number 70 [ 868.610077][ T9407] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 868.740725][T19868] usb 8-1: USB disconnect, device number 19 [ 868.785393][ T9407] usb 6-1: Using ep0 maxpacket: 16 [ 868.794680][ T9407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.816985][ T9407] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 868.922849][ T9407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.937457][ T9407] usb 6-1: config 0 descriptor?? [ 869.404262][ T9407] corsair 0003:1B1C:1B02.0028: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 869.658947][ T9407] corsair 0003:1B1C:1B02.0028: Failed to get K90 initial state (error -32). [ 869.731444][ T9407] usb 6-1: USB disconnect, device number 36 [ 869.899250][T20921] netlink: 'syz.7.4335': attribute type 1 has an invalid length. [ 870.137610][T20923] veth5: entered promiscuous mode [ 870.173795][T20923] bond4: (slave veth5): Enslaving as an active interface with a down link [ 870.242485][T20928] loop5: detected capacity change from 0 to 7 [ 870.267265][T20928] Dev loop5: unable to read RDB block 7 [ 870.279110][T20928] loop5: unable to read partition table [ 870.301938][T20928] loop5: partition table beyond EOD, truncated [ 870.333491][T20928] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 870.366730][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.369126][T20911] fido_id[20911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 870.373359][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.450005][ T5195] Dev loop5: unable to read RDB block 7 [ 870.467831][ T5195] loop5: unable to read partition table [ 870.475717][ T5195] loop5: partition table beyond EOD, truncated [ 870.488339][T20924] bond4: (slave veth7): Enslaving as an active interface with a down link [ 870.566647][T20921] bond4: entered promiscuous mode [ 870.572102][T20921] bond4: entered allmulticast mode [ 870.629299][T20921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 870.995631][T13669] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 871.174999][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4343'. [ 871.187086][T13669] usb 2-1: Using ep0 maxpacket: 16 [ 871.199353][T13669] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.214167][T13669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 871.229905][T13669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 871.251092][T13669] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 871.276372][T13669] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 871.326693][T13669] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 871.337462][T13669] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 871.370646][T13669] usb 2-1: Manufacturer: syz [ 871.387130][T13669] usb 2-1: config 0 descriptor?? [ 872.045412][T13669] rc_core: IR keymap rc-hauppauge not found [ 872.051405][T13669] Registered IR keymap rc-empty [ 872.195150][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.296517][T20963] tipc: Failed to remove unknown binding: 66,1,1/0:4093787587/4093787589 [ 872.308417][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.337217][T20963] tipc: Failed to remove unknown binding: 66,1,1/0:4093787587/4093787589 [ 872.338223][T13669] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 872.346283][T20963] tipc: Failed to remove unknown binding: 66,1,1/0:4093787587/4093787589 [ 872.436032][T13669] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input72 [ 872.510832][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.585565][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.637969][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.681355][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.722090][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.766909][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.815470][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.846081][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.855589][ T9407] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 872.877841][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.931419][T13669] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 872.958912][T13669] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 872.977419][T13669] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 873.014193][T13669] usb 2-1: USB disconnect, device number 42 [ 873.031198][ T9407] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 873.106182][ T9407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.154138][ T9407] usb 6-1: Product: syz [ 873.171220][ T9407] usb 6-1: Manufacturer: syz [ 873.180736][ T9407] usb 6-1: SerialNumber: syz [ 873.569279][T20975] syzkaller0: entered promiscuous mode [ 873.581705][T20975] syzkaller0: entered allmulticast mode [ 873.610776][ T9407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 873.628079][ T9407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 873.832498][T13669] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 874.003092][T13669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.037197][T13669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1280, setting to 1024 [ 874.060691][T13669] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 874.089144][T13669] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 874.104872][T13669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.134692][T13669] usb 2-1: config 0 descriptor?? [ 874.147415][T20977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 874.347718][T20984] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 874.376063][T20984] kvm: pic: non byte read [ 874.381499][T20984] kvm: pic: single mode not supported [ 874.381698][T20984] kvm: pic: non byte read [ 874.410382][T20984] kvm: pic: non byte read [ 874.424564][T20984] kvm: pic: non byte read [ 874.439169][T20984] kvm: pic: non byte read [ 874.448881][T20984] kvm: pic: non byte read [ 874.453921][T20984] kvm: pic: level sensitive irq not supported [ 874.454137][T20984] kvm: pic: non byte read [ 874.469330][T20984] kvm: pic: non byte read [ 874.707748][T13669] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 875.279795][T13669] usb 2-1: USB disconnect, device number 43 [ 875.457712][T20995] fido_id[20995]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:047F:FFFF.0029/report_descriptor': No such file or directory [ 875.780386][T20999] syzkaller0: entered promiscuous mode [ 875.786314][T20999] syzkaller0: entered allmulticast mode [ 876.130427][T21006] syzkaller0: entered promiscuous mode [ 876.147773][T21006] syzkaller0: entered allmulticast mode [ 876.233844][ T9407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 876.262698][ T9407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 876.295419][ T9407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 876.312074][ T9407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 876.330794][ T9407] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 876.382329][ T9407] usb 6-1: USB disconnect, device number 37 [ 876.915910][T19868] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 876.966944][T21030] netlink: 'syz.5.4366': attribute type 1 has an invalid length. [ 876.990853][T21025] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 877.098131][T19868] usb 2-1: config 127 has an invalid interface number: 84 but max is 0 [ 877.106694][T19868] usb 2-1: config 127 has no interface number 0 [ 877.115618][T19868] usb 2-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 877.125053][T19868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.133666][T19868] usb 2-1: Product: syz [ 877.138024][T19868] usb 2-1: Manufacturer: syz [ 877.142962][T19868] usb 2-1: SerialNumber: syz [ 877.175796][T21034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4366'. [ 877.300953][T21032] bond1: (slave geneve2): making interface the new active one [ 877.313993][T21032] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 877.398807][T19868] gspca_main: spca501-2.14.0 probing 040a:0002 [ 877.410842][T21034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 877.456682][ T1091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 877.486200][ T1091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 877.565416][ T1091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 877.591890][ T1091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 878.072736][T19868] gspca_spca501: reg write: error -71 [ 878.081288][T19868] spca501 2-1:127.84: Reg write failed for 0x00,0x01,0x02 [ 878.096940][T19868] spca501 2-1:127.84: probe with driver spca501 failed with error -22 [ 878.114592][T19868] usb 2-1: USB disconnect, device number 44 [ 879.181388][T21061] loop7: detected capacity change from 0 to 7 [ 879.234324][T19726] Dev loop7: unable to read RDB block 7 [ 879.240413][T19726] loop7: unable to read partition table [ 879.250345][T19726] loop7: partition table beyond EOD, truncated [ 879.361428][T19868] syzkaller0: tun_net_xmit 76 [ 879.370656][T21061] Dev loop7: unable to read RDB block 7 [ 879.396305][T21061] loop7: unable to read partition table [ 879.424948][T21061] loop7: partition table beyond EOD, truncated [ 879.461108][T19868] syzkaller0: tun_net_xmit 76 [ 879.465398][T21061] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 879.564251][T21067] syzkaller0: entered promiscuous mode [ 879.577632][ T5871] syzkaller0: tun_net_xmit 76 [ 879.582704][T21067] syzkaller0: entered allmulticast mode [ 879.668159][ T5195] Dev loop7: unable to read RDB block 7 [ 879.674155][ T5195] loop7: unable to read partition table [ 879.680485][ T5195] loop7: partition table beyond EOD, truncated [ 880.095646][T19868] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 880.278944][T19868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.291863][T19868] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 880.309492][T19868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.334396][T19868] usb 8-1: config 0 descriptor?? [ 881.185638][T19868] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 881.226346][T19868] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.002A/input/input73 [ 881.364475][T19868] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 882.108230][T13669] usb 8-1: USB disconnect, device number 20 [ 886.747169][T21081] tipc: Enabling of bearer rejected, failed to enable media [ 887.122468][T21114] netlink: 'syz.2.4388': attribute type 21 has an invalid length. [ 887.131042][T19868] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 887.324765][T21114] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4388'. [ 887.338487][T21114] netlink: 'syz.2.4388': attribute type 1 has an invalid length. [ 887.347370][T21114] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4388'. [ 887.406923][T19868] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 887.422378][T19868] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.467112][T19868] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 887.487115][T19868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.715198][T19868] usb 6-1: usb_control_msg returned -32 [ 887.783991][T19868] usbtmc 6-1:16.0: can't read capabilities [ 888.289431][T19868] usb 6-1: USB disconnect, device number 38 [ 889.083938][T21144] netlink: 'syz.4.4397': attribute type 1 has an invalid length. [ 889.254122][T21144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 889.339365][T21144] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4397'. [ 889.379871][T21146] kvm: kvm [21145]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 889.404514][T21146] kvm: kvm [21145]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 889.416094][T21144] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 889.453124][T21144] bond2: (slave batadv1): making interface the new active one [ 889.488656][T21144] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 889.878475][T21157] warning: `syz.4.4399' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 890.186563][T21170] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4400'. [ 890.270035][T21170] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4400'. [ 890.806895][T21174] sctp: [Deprecated]: syz.2.4403 (pid 21174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 890.806895][T21174] Use struct sctp_sack_info instead [ 892.039608][T21185] syzkaller0: entered promiscuous mode [ 892.046252][T21185] syzkaller0: entered allmulticast mode [ 892.825392][ T5871] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 893.100306][ T5871] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 893.122735][ T5871] usb 5-1: config 0 interface 0 has no altsetting 0 [ 893.156740][ T5871] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 893.185513][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 893.395442][ T5871] usb 5-1: Product: syz [ 893.409902][ T5871] usb 5-1: Manufacturer: syz [ 893.446033][ T5871] usb 5-1: SerialNumber: syz [ 893.454401][ T5871] usb 5-1: config 0 descriptor?? [ 893.460542][T21196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 893.483026][ T5871] usb 5-1: selecting invalid altsetting 0 [ 893.867560][T21196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.889823][T21196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.997913][ T5871] usb 5-1: USB disconnect, device number 39 [ 895.075419][ T9407] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 895.245665][ T9407] usb 6-1: Using ep0 maxpacket: 8 [ 895.258333][ T9407] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 895.279519][ T9407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.351027][ T9407] pvrusb2: Hardware description: Terratec Grabster AV400 [ 895.382463][ T9407] pvrusb2: ********** [ 895.412279][ T9407] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 895.453592][ T9407] pvrusb2: Important functionality might not be entirely working. [ 895.524683][ T9407] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 895.525915][T21223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4418'. [ 895.623902][ T9407] pvrusb2: ********** [ 895.683502][ T2348] pvrusb2: Invalid write control endpoint [ 895.716801][T21223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 895.845035][ T2348] pvrusb2: Invalid write control endpoint [ 895.865613][T21227] bond3: entered promiscuous mode [ 895.874151][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 895.903840][T21227] bond3: entered allmulticast mode [ 895.909716][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 895.939392][T21227] 8021q: adding VLAN 0 to HW filter on device bond3 [ 895.949043][T21227] team0: Port device bond3 added [ 895.956074][T21228] syzkaller0: entered promiscuous mode [ 895.962056][T21228] syzkaller0: entered allmulticast mode [ 895.982366][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 896.000256][ T2348] pvrusb2: Device being rendered inoperable [ 896.012823][T21215] pvrusb2: Attempted to execute control transfer when device not ok [ 896.034236][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 896.038263][ T5871] usb 6-1: USB disconnect, device number 39 [ 896.050209][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 896.072285][T21223] ip6gretap2: entered promiscuous mode [ 896.093165][T21223] ip6gretap2: entered allmulticast mode [ 896.101728][ T2348] pvrusb2: Attached sub-driver cx25840 [ 896.110244][T21223] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 896.119640][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 896.130821][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 898.265922][ T9407] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 898.455784][ T9407] usb 3-1: Using ep0 maxpacket: 16 [ 898.522728][ T9407] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 898.532756][ T9407] usb 3-1: config 0 has no interface number 0 [ 898.574865][ T9407] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.605462][ T5871] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 898.616951][ T9407] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.645768][ T9407] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 898.696439][ T9407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.736447][ T9407] usb 3-1: config 0 descriptor?? [ 898.759938][ T5871] usb 8-1: Using ep0 maxpacket: 16 [ 898.797105][ T5871] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 898.813789][ T5871] usb 8-1: config 0 has no interface number 0 [ 898.839626][ T5871] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 898.892682][ T5871] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 898.980816][ T5871] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 899.012523][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.036791][ T5871] usb 8-1: Product: syz [ 899.041141][ T5871] usb 8-1: Manufacturer: syz [ 899.067271][ T5871] usb 8-1: SerialNumber: syz [ 899.146850][ T5871] usb 8-1: config 0 descriptor?? [ 899.162147][T21268] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 899.178045][ T9407] holtek_mouse 0003:04D9:A081.002B: item fetching failed at offset 5/8 [ 899.191813][T21268] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 899.198865][ T9407] holtek_mouse 0003:04D9:A081.002B: hid parse failed: -22 [ 899.371656][ T9407] holtek_mouse 0003:04D9:A081.002B: probe with driver holtek_mouse failed with error -22 [ 899.503440][T21268] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 899.511364][T21268] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 899.915326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 901.060388][T21284] netlink: 'syz.1.4433': attribute type 1 has an invalid length. [ 901.169065][T21284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4433'. [ 901.197704][T21284] 8021q: adding VLAN 0 to HW filter on device bond4 [ 901.337955][T21286] 8021q: adding VLAN 0 to HW filter on device bond4 [ 901.375940][T21286] bond4: (slave geneve3): making interface the new active one [ 901.392177][T21286] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 901.410068][ T5871] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 901.429153][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 901.468904][ T6199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 901.495705][ T6199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 901.506640][ T9407] usb 3-1: USB disconnect, device number 71 [ 901.526984][ T6199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 901.892459][ T5871] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 902.377242][ T5871] asix 8-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 902.525846][ T5871] asix 8-1:0.251: probe with driver asix failed with error -5 [ 902.598578][ T5871] usb 8-1: USB disconnect, device number 21 [ 903.380257][T21305] syzkaller0: entered promiscuous mode [ 903.405506][T21305] syzkaller0: entered allmulticast mode [ 903.914953][T21310] binder: BINDER_SET_CONTEXT_MGR already set [ 903.921429][T21310] binder: 21309:21310 ioctl 4018620d 200000004a80 returned -16 [ 903.985792][T21314] syzkaller0: entered promiscuous mode [ 904.087242][ T29] audit: type=1400 audit(1776047800.642:105): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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syzkaller0: entered promiscuous mode [ 904.441735][T21320] syzkaller0: entered allmulticast mode [ 904.919627][T21323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4443'. [ 905.166743][T21329] veth3: entered allmulticast mode [ 905.196743][T21329] bond2: (slave veth3): Enslaving as an active interface with an up link [ 905.255934][T21323] bond2 (unregistering): (slave veth3): Releasing backup interface [ 905.341099][T21323] bond2 (unregistering): Released all slaves [ 905.818826][T13670] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 905.976060][T13670] usb 2-1: Using ep0 maxpacket: 32 [ 905.985852][T13670] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.018544][T13670] usb 2-1: config 0 has no interfaces? [ 906.036824][T13670] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 906.070323][T13670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.112576][T13670] usb 2-1: config 0 descriptor?? [ 906.392402][T21350] netlink: 'syz.4.4450': attribute type 10 has an invalid length. [ 906.405395][ T5871] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 906.480622][T13669] usb 2-1: USB disconnect, device number 45 [ 906.489657][T21350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.507813][T21350] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 906.609820][ T5871] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 906.618569][ T5871] usb 8-1: config 0 has no interface number 0 [ 906.633268][ T5871] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 906.647042][ T5871] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 906.664512][ T5871] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 906.745474][ T5871] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 906.793968][ T5871] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 906.812112][ T5871] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 906.833041][ T5871] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 906.847453][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.870779][ T5871] usb 8-1: config 0 descriptor?? [ 906.880366][T21352] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 906.919731][T21352] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 907.002378][ T5871] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 907.600491][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4452'. [ 907.671722][T21352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.722329][T21352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.806365][T21352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.863379][T21363] binder: 21361:21363 ioctl c0306201 200000000540 returned -14 [ 907.875788][T21352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.965620][ T5871] usb 8-1: USB disconnect, device number 22 [ 907.987628][ T5871] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 908.462497][T21376] syzkaller0: entered promiscuous mode [ 908.468755][T21376] syzkaller0: entered allmulticast mode [ 908.583961][T21379] syzkaller0: entered promiscuous mode [ 908.615595][T21379] syzkaller0: entered allmulticast mode [ 908.693465][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4458'. [ 909.009301][T21388] TC_ACT_REPEAT abuse ? [ 909.785406][ T9407] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 909.953738][T21417] syzkaller0: entered promiscuous mode [ 909.955679][ T9407] usb 6-1: Using ep0 maxpacket: 32 [ 909.969473][T21417] syzkaller0: entered allmulticast mode [ 909.985988][ T9407] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 909.997994][ T9407] usb 6-1: config 0 has no interface number 0 [ 910.015748][ T9407] usb 6-1: config 0 interface 12 has no altsetting 0 [ 910.026957][ T9407] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 910.043252][ T9407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.062673][ T9407] usb 6-1: Product: syz [ 910.071985][T21419] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 910.082976][ T9407] usb 6-1: Manufacturer: syz [ 910.105195][ T9407] usb 6-1: SerialNumber: syz [ 910.123980][ T9407] usb 6-1: config 0 descriptor?? [ 910.669668][T21425] syzkaller0: entered promiscuous mode [ 910.687888][T21425] syzkaller0: entered allmulticast mode [ 911.771952][ T9407] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 911.780974][ T9407] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 911.844670][T21438] input: syz0 as /devices/virtual/input/input74 [ 911.860491][ T9407] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 911.918357][ T9407] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 911.999168][ T9407] usb 6-1: USB disconnect, device number 40 [ 912.339261][T21441] syzkaller0: entered promiscuous mode [ 912.345006][T21441] syzkaller0: entered allmulticast mode [ 913.369267][T21460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.386133][T21460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.645762][ T9407] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 913.995600][ T9407] usb 6-1: Using ep0 maxpacket: 32 [ 914.004139][ T9407] usb 6-1: unable to get BOS descriptor or descriptor too short [ 914.022772][ T9407] usb 6-1: config 1 has an invalid interface number: 255 but max is 2 [ 914.039705][ T9407] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.080685][ T9407] usb 6-1: config 1 has no interface number 2 [ 914.188747][ T9407] usb 6-1: config 1 interface 255 has no altsetting 0 [ 914.200349][ T9407] usb 6-1: config 1 interface 1 has no altsetting 0 [ 914.235446][ T9407] usb 6-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 914.245023][ T9407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.259472][ T9407] usb 6-1: Product: syz [ 914.268758][ T9407] usb 6-1: Manufacturer: syz [ 914.283634][ T9407] usb 6-1: SerialNumber: syz [ 914.636365][ T9407] usb 6-1: USB disconnect, device number 41 [ 914.743973][T19726] udevd[19726]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 915.729165][T21491] netlink: 'syz.4.4492': attribute type 1 has an invalid length. [ 916.639572][T21491] 8021q: adding VLAN 0 to HW filter on device bond4 [ 916.663425][T21494] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 916.696682][T21494] bond4: entered allmulticast mode [ 916.773983][T21495] bond4: (slave ip6gretap3): Enslaving as an active interface with an up link [ 916.845901][T21500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4494'. [ 917.022926][T21505] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1980170576 (3960341152 ns) > initial count (2789370162 ns). Using initial count to start timer. [ 917.253676][ T5907] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 917.560294][T21510] tipc: Enabled bearer , priority 0 [ 917.582261][T21510] syzkaller0: entered promiscuous mode [ 917.587877][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.588169][ T5907] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 917.598530][T21510] syzkaller0: entered allmulticast mode [ 917.656390][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.679449][T21510] tipc: Resetting bearer [ 917.697930][T21508] tipc: Resetting bearer [ 917.754223][T21508] tipc: Disabling bearer [ 917.768739][ T5907] usb 5-1: config 0 descriptor?? [ 917.810988][ T5907] pwc: Askey VC010 type 2 USB webcam detected. [ 918.017555][T21515] syzkaller0: entered promiscuous mode [ 918.031357][T21515] syzkaller0: entered allmulticast mode [ 918.184983][ T5907] pwc: recv_control_msg error -32 req 02 val 2b00 [ 918.214614][ T5907] pwc: recv_control_msg error -32 req 02 val 2700 [ 918.231811][ T5907] pwc: recv_control_msg error -32 req 02 val 2c00 [ 918.266455][T21522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4503'. [ 918.270260][ T5907] pwc: recv_control_msg error -32 req 04 val 1000 [ 918.306495][ T5907] pwc: recv_control_msg error -32 req 04 val 1300 [ 918.329378][ T5907] pwc: recv_control_msg error -32 req 04 val 1400 [ 918.338807][T21522] macvtap1: entered promiscuous mode [ 918.340432][ T5907] pwc: recv_control_msg error -32 req 02 val 2000 [ 918.362132][ T5907] pwc: recv_control_msg error -32 req 02 val 2100 [ 918.371258][ T5907] pwc: recv_control_msg error -32 req 04 val 1500 [ 918.388798][ T5907] pwc: recv_control_msg error -32 req 02 val 2500 [ 918.398111][T21522] bridge0: entered promiscuous mode [ 918.403564][T21522] macvtap1: entered allmulticast mode [ 918.406723][ T5907] pwc: recv_control_msg error -32 req 02 val 2400 [ 918.418741][ T5907] pwc: recv_control_msg error -32 req 02 val 2600 [ 918.449494][T21522] bridge0: entered allmulticast mode [ 918.452728][T21523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4504'. [ 918.471103][T21524] macvtap1: left promiscuous mode [ 918.476387][T21524] bridge0: left promiscuous mode [ 918.481718][T21524] macvtap1: left allmulticast mode [ 918.487336][T21524] bridge0: left allmulticast mode [ 918.544680][T21529] syzkaller0: entered promiscuous mode [ 918.565645][T21529] syzkaller0: entered allmulticast mode [ 918.633949][ T5907] pwc: recv_control_msg error -71 req 02 val 2800 [ 918.642725][ T5907] pwc: recv_control_msg error -71 req 04 val 1100 [ 918.669237][ T5907] pwc: recv_control_msg error -71 req 04 val 1200 [ 918.696693][ T5907] pwc: Registered as video103. [ 918.709424][ T5907] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input75 [ 918.760243][ T5907] usb 5-1: USB disconnect, device number 40 [ 919.059685][ T5871] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 919.255654][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 919.266080][ T5871] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.280621][ T5871] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.295209][ T5871] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 919.331825][T21543] netlink: zone id is out of range [ 919.337390][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.337406][T21543] netlink: zone id is out of range [ 919.368212][T21543] netlink: zone id is out of range [ 919.389789][T21543] netlink: zone id is out of range [ 919.396890][T21543] netlink: zone id is out of range [ 919.407065][T21543] netlink: zone id is out of range [ 919.417295][T21543] netlink: zone id is out of range [ 919.425114][T21543] netlink: zone id is out of range [ 919.436257][T21543] netlink: zone id is out of range [ 919.443095][T21543] netlink: zone id is out of range [ 919.821200][ T5871] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 919.881943][T21545] syzkaller0: entered promiscuous mode [ 919.887911][T21545] syzkaller0: entered allmulticast mode [ 920.126173][ T5907] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 920.263611][ T9407] usb 2-1: USB disconnect, device number 46 [ 920.276499][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 920.284784][ T5907] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 920.294642][ T5907] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 920.303822][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 920.316223][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 920.332824][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 920.343285][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 920.358051][ T5907] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 920.369424][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.427252][ T5907] usb 5-1: config 0 descriptor?? [ 920.546134][T21560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 920.646124][T21547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.657923][T21547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.676410][ T5907] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 920.712083][ T5907] usb 5-1: USB disconnect, device number 41 [ 920.743857][ T5907] usblp0: removed [ 920.815560][ T5900] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 920.845770][T13669] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 920.975430][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 920.988772][ T5900] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 921.004979][ T5900] usb 6-1: config 0 has no interface number 0 [ 921.029900][T13669] usb 8-1: unable to get BOS descriptor or descriptor too short [ 921.039310][ T5900] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 921.054982][T13669] usb 8-1: not running at top speed; connect to a high speed hub [ 921.064940][T13669] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 921.083592][ T5900] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 921.093747][T13669] usb 8-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 921.109329][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.122149][ T5900] usb 6-1: Product: syz [ 921.128745][T13669] usb 8-1: config 1 interface 0 has no altsetting 0 [ 921.138252][ T5900] usb 6-1: Manufacturer: syz [ 921.145390][ T5900] usb 6-1: SerialNumber: syz [ 921.154124][T13669] usb 8-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 921.171678][ T5900] usb 6-1: config 0 descriptor?? [ 921.180523][T13669] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.193151][T21559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 921.206116][ T5907] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 921.235051][T13669] usb 8-1: Product: syz [ 921.308580][T13669] usb 8-1: Manufacturer: syz [ 921.316914][T13669] usb 8-1: SerialNumber: syz [ 921.397293][T21560] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 921.422302][T21559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 921.671963][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 921.680807][ T5907] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 921.690298][ T5907] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 921.723960][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 921.780033][T13669] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input76 [ 921.800676][ T5180] bcm5974 8-1:1.0: could not read from device [ 921.820958][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.820986][ T5180] bcm5974 8-1:1.0: could not read from device [ 921.858582][T13669] usb 8-1: USB disconnect, device number 23 [ 921.903196][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 922.131481][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 922.175890][ T5907] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 922.195676][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.227978][ T5907] usb 5-1: config 0 descriptor?? [ 922.451858][ T5907] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 922.733048][T21579] syzkaller0: entered promiscuous mode [ 922.739920][T21579] syzkaller0: entered allmulticast mode [ 922.788898][ C1] usblp0: nonzero read bulk status received: -71 [ 922.799063][ T5907] usb 5-1: USB disconnect, device number 42 [ 923.335983][ T9407] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 923.655396][ T9407] usb 5-1: Using ep0 maxpacket: 8 [ 923.673829][ T9407] usb 5-1: unable to get BOS descriptor or descriptor too short [ 923.683651][ T9407] usb 5-1: config 31 has an invalid interface number: 152 but max is 0 [ 923.693510][ T9407] usb 5-1: config 31 has no interface number 0 [ 923.709661][ T9407] usb 5-1: config 31 interface 152 has no altsetting 0 [ 924.000990][ T9407] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=6b.29 [ 924.015505][ T9407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.024861][ T9407] usb 5-1: Product: syz [ 924.030335][ T9407] usb 5-1: Manufacturer: syz [ 924.035867][ T9407] usb 5-1: SerialNumber: syz [ 924.092379][T21546] usblp0: removed [ 924.109417][ T9407] usb_ehset_test 5-1:31.152: probe with driver usb_ehset_test failed with error -32 [ 924.236565][ T9407] usb 5-1: USB disconnect, device number 43 [ 924.298094][T21591] syzkaller0: entered promiscuous mode [ 924.329791][T21591] syzkaller0: entered allmulticast mode [ 924.583266][ T5900] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 924.604599][ T5900] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 924.635612][ T5900] asix 6-1:0.188: probe with driver asix failed with error -71 [ 924.658326][ T5900] usb 6-1: USB disconnect, device number 42 [ 924.738642][T21596] syzkaller0: entered promiscuous mode [ 924.753315][T21596] syzkaller0: entered allmulticast mode [ 925.075611][ T9407] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 925.295862][ T9407] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.308849][ T9407] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 925.332905][ T9407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.430186][T21607] tipc: Enabling of bearer rejected, failed to enable media [ 925.499864][ T9407] usb 5-1: config 0 descriptor?? [ 925.941582][ T29] audit: type=1804 audit(1776047822.492:106): pid=21614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4529" name="/newroot/965/file1" dev="fuse" ino=1 res=1 errno=0 [ 925.976323][ T9407] ath6kl: Failed to read usb control message: -71 [ 925.982881][ T9407] ath6kl: Unable to read the bmi data from the device: -71 [ 926.001007][ T9407] ath6kl: Unable to recv target info: -71 [ 926.015690][ T9407] ath6kl: Failed to init ath6kl core: -71 [ 926.022341][ T9407] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 926.056436][ T9407] usb 5-1: USB disconnect, device number 44 [ 926.473377][T21628] syzkaller0: entered promiscuous mode [ 926.483211][T21628] syzkaller0: entered allmulticast mode [ 928.462239][T21660] binder: BINDER_SET_CONTEXT_MGR already set [ 928.468973][T21660] binder: 21659:21660 ioctl 4018620d 200000004a80 returned -16 [ 928.700909][T21665] geneve4: entered promiscuous mode [ 929.909955][ T9407] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 930.105512][ T5907] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 930.128971][ T9407] usb 5-1: Using ep0 maxpacket: 16 [ 930.167239][ T9407] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 930.423486][ T5907] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.447809][ T5907] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 930.483766][ T5907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.500152][ T9407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 930.530656][ T5907] usb 8-1: config 0 descriptor?? [ 930.546314][ T9407] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 930.556027][ T9407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.567985][ T5907] pwc: Askey VC010 type 2 USB webcam detected. [ 930.579536][ T9407] usb 5-1: Product: syz [ 930.584055][ T9407] usb 5-1: Manufacturer: syz [ 930.611899][ T9407] usb 5-1: SerialNumber: syz [ 930.643742][ T9407] usb 5-1: config 0 descriptor?? [ 930.664891][ T9407] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 930.687866][ T9407] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 930.970868][ T5907] pwc: recv_control_msg error -32 req 02 val 2b00 [ 930.978852][ T5907] pwc: recv_control_msg error -32 req 02 val 2700 [ 930.987474][ T5907] pwc: recv_control_msg error -32 req 02 val 2c00 [ 930.996377][ T5907] pwc: recv_control_msg error -32 req 04 val 1000 [ 931.004060][ T5907] pwc: recv_control_msg error -32 req 04 val 1300 [ 931.012256][ T5907] pwc: recv_control_msg error -32 req 04 val 1400 [ 931.020250][ T5907] pwc: recv_control_msg error -32 req 02 val 2000 [ 931.055719][ T5907] pwc: recv_control_msg error -32 req 02 val 2100 [ 931.063325][ T5907] pwc: recv_control_msg error -32 req 04 val 1500 [ 931.071946][ T5907] pwc: recv_control_msg error -32 req 02 val 2500 [ 931.084337][ T5907] pwc: recv_control_msg error -32 req 02 val 2400 [ 931.106737][ T5907] pwc: recv_control_msg error -32 req 02 val 2600 [ 931.272519][ T9407] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 931.279897][ T9407] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 931.328218][ T5907] pwc: recv_control_msg error -71 req 02 val 2800 [ 931.350425][ T5907] pwc: recv_control_msg error -71 req 04 val 1100 [ 931.371112][ T5907] pwc: recv_control_msg error -71 req 04 val 1200 [ 931.465094][ T5907] pwc: Registered as video103. [ 931.486177][ T5907] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input77 [ 931.584112][ T5907] usb 8-1: USB disconnect, device number 24 [ 931.770748][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.777908][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.906302][ T9407] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 931.918370][ T9407] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 931.941352][ T9407] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 931.971229][ T9407] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 931.978575][ T9407] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 931.992184][ T9407] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 932.125062][T21691] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4561'. [ 932.224780][ T9407] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 932.231393][ T9407] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 932.241340][ T9407] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 932.248708][ T9407] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 932.266353][ T9407] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 932.314029][ T9407] usb 5-1: USB disconnect, device number 45 [ 932.418592][ T5900] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 932.439116][ T5907] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 932.704103][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 932.704761][ T5900] usb 8-1: Using ep0 maxpacket: 8 [ 932.716648][ T5900] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 932.719687][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.728144][ T5900] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 932.747167][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.750788][ T5900] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 932.766747][ T5900] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 932.779919][ T5907] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 932.789844][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.853013][ T5907] usb 3-1: Product: syz [ 932.857748][ T5900] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.891921][ T5900] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 932.901941][ T5907] usb 3-1: Manufacturer: syz [ 932.911072][ T5907] usb 3-1: SerialNumber: syz [ 933.077770][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.140910][ T5907] usb 3-1: 0:2 : does not exist [ 933.161253][ T5907] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 933.271335][ T5907] usb 3-1: USB disconnect, device number 72 [ 933.303662][ T5900] usb 8-1: usb_control_msg returned -32 [ 933.326780][T19726] udevd[19726]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 933.330671][ T5900] usbtmc 8-1:16.0: can't read capabilities [ 933.603371][T21707] syzkaller0: entered promiscuous mode [ 933.613526][T21697] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 933.613947][ T5907] usb 8-1: USB disconnect, device number 25 [ 933.651404][T21707] syzkaller0: entered allmulticast mode [ 933.854446][T21713] syzkaller0: entered promiscuous mode [ 933.861059][T21713] syzkaller0: entered allmulticast mode [ 935.346000][ T5900] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 935.471104][T21737] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 935.655831][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 935.691019][ T5900] usb 5-1: config 0 has no interfaces? [ 935.703457][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 935.713428][ T5900] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 935.721991][ T5900] usb 5-1: Manufacturer: syz [ 935.733909][ T5900] usb 5-1: config 0 descriptor?? [ 935.793875][T21744] syzkaller0: entered promiscuous mode [ 935.800019][T21744] syzkaller0: entered allmulticast mode [ 935.972891][ T5900] usb 5-1: USB disconnect, device number 46 [ 936.636817][T21763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4574'. [ 936.891991][T21768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 940.973342][T21787] netlink: 'syz.2.4579': attribute type 1 has an invalid length. [ 944.295880][ T5907] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 944.554790][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 944.568486][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 944.601826][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 944.612440][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 944.627089][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 944.644494][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 944.672714][ T5907] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 944.682314][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.690984][ T5907] usb 5-1: Product: syz [ 944.695184][ T5907] usb 5-1: Manufacturer: syz [ 944.700564][ T5907] usb 5-1: SerialNumber: syz [ 944.709258][ T5907] usb 5-1: config 0 descriptor?? [ 944.748576][ T5907] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 944.768136][ T5907] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 945.473195][T21787] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 947.756855][T13669] usb 5-1: USB disconnect, device number 47 [ 949.463626][T21847] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 949.570259][T21844] kvm_pr_unimpl_wrmsr: 703 callbacks suppressed [ 949.570277][T21844] kvm_intel: kvm [21843]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 949.626674][T21844] kvm_intel: kvm [21843]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 949.690159][T21844] kvm_intel: kvm [21843]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 949.726821][T21844] kvm_intel: kvm [21843]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 949.760424][T21844] kvm_intel: kvm [21843]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 949.855997][T21844] kvm_intel: kvm [21843]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 949.937563][T21844] kvm_intel: kvm [21843]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 949.994616][T21844] kvm_intel: kvm [21843]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 950.062341][T21844] kvm_intel: kvm [21843]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 950.111693][T21861] syzkaller0: entered promiscuous mode [ 950.122291][T21844] kvm_intel: kvm [21843]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 950.133740][T21861] syzkaller0: entered allmulticast mode [ 950.423590][T21866] syzkaller0: entered promiscuous mode [ 950.432561][T21866] syzkaller0: entered allmulticast mode [ 950.549804][T21868] syzkaller0: entered promiscuous mode [ 950.563675][T21868] syzkaller0: entered allmulticast mode [ 950.722919][T21875] netlink: 'syz.5.4605': attribute type 1 has an invalid length. [ 950.815539][T21875] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4605'. [ 950.905495][T21878] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4605'. [ 950.922264][T21875] bond2: (slave bridge2): making interface the new active one [ 950.939783][T21875] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 950.982794][T21878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 951.141065][T21882] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 951.210628][T21882] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 951.329441][T21891] net_ratelimit: 105 callbacks suppressed [ 951.329462][T21891] IPVS: sh: FWM 3 0x00000003 - no destination available [ 951.400472][ T5907] IPVS: starting estimator thread 0... [ 951.530121][T21893] IPVS: using max 50 ests per chain, 120000 per kthread [ 951.713358][T21898] kAFS: unable to lookup cell 'ÿ' [ 951.723688][T21899] kAFS: unable to lookup cell '(,c¾Ì' [ 952.168776][T21903] tipc: Enabled bearer , priority 0 [ 952.191387][T21903] syzkaller0: entered promiscuous mode [ 952.225876][T21903] syzkaller0: entered allmulticast mode [ 952.470045][T21907] tipc: Resetting bearer [ 952.556321][T21902] tipc: Resetting bearer [ 952.717046][T21902] tipc: Disabling bearer [ 952.926964][T21911] syzkaller0: entered promiscuous mode [ 952.966515][T21911] syzkaller0: entered allmulticast mode [ 953.103786][T21914] netlink: 'syz.4.4610': attribute type 6 has an invalid length. [ 953.111785][T21914] IPv6: NLM_F_CREATE should be specified when creating new route [ 953.536745][T21913] syzkaller0: entered promiscuous mode [ 953.550290][T21913] syzkaller0: entered allmulticast mode [ 954.236409][ T5907] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 954.259233][T21932] syzkaller0: entered promiscuous mode [ 954.303017][T21932] syzkaller0: entered allmulticast mode [ 954.459567][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 954.524899][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.544403][ T5907] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 954.599766][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.639794][ T5907] usb 2-1: config 0 descriptor?? [ 954.668900][ T5907] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input78 [ 955.158876][ T5180] bcm5974 2-1:0.0: could not read from device [ 955.203572][T21927] bcm5974 2-1:0.0: could not read from device [ 955.242166][ T5180] bcm5974 2-1:0.0: could not read from device [ 955.252076][ T5907] usb 2-1: USB disconnect, device number 47 [ 955.264259][T21936] tipc: Enabled bearer , priority 0 [ 955.278448][T19726] bcm5974 2-1:0.0: could not read from device [ 955.292946][T21936] syzkaller0: entered promiscuous mode [ 955.299484][T21936] syzkaller0: entered allmulticast mode [ 955.311815][T21936] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 956.200536][T21948] tipc: Resetting bearer [ 956.235808][T21935] tipc: Resetting bearer [ 956.420807][T21935] tipc: Disabling bearer [ 956.554798][ T9407] tipc: Node number set to 3983357031 [ 956.648602][T21952] netlink: 'syz.1.4622': attribute type 1 has an invalid length. [ 957.063947][T21963] syzkaller0: entered promiscuous mode [ 957.099104][T21963] syzkaller0: entered allmulticast mode [ 957.418240][ T9407] hid_parser_main: 28 callbacks suppressed [ 957.418267][ T9407] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 957.467785][ T9407] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 957.501651][ T9407] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 957.719487][T21984] fido_id[21984]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 958.559728][T22004] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4633'. [ 958.815384][ T5871] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 958.855432][ T9407] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 958.978370][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 958.995395][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 959.047347][ T5871] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 959.069610][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.088735][ T5871] usb 6-1: config 0 descriptor?? [ 959.105608][ T9407] usb 3-1: Using ep0 maxpacket: 32 [ 959.117764][ T9407] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 959.156007][ T9407] usb 3-1: config 0 has no interface number 0 [ 959.162287][ T9407] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 959.247811][ T9407] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 959.282818][ T9407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.378175][ T9407] usb 3-1: Product: syz [ 959.389014][ T9407] usb 3-1: Manufacturer: syz [ 959.397141][ T9407] usb 3-1: SerialNumber: syz [ 959.412007][ T9407] usb 3-1: config 0 descriptor?? [ 959.493349][T21995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.662752][ T5871] ath6kl: Failed to submit usb control message: -71 [ 959.678455][ T5871] ath6kl: unable to send the bmi data to the device: -71 [ 959.712085][ T5871] ath6kl: Unable to send get target info: -71 [ 959.739236][ T5871] ath6kl: Failed to init ath6kl core: -71 [ 959.786923][ T5871] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 959.805584][ T9407] usb 3-1: USB disconnect, device number 73 [ 959.878494][ T5871] usb 6-1: USB disconnect, device number 43 [ 959.899125][T22019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4638'. [ 959.918478][T22019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4638'. [ 959.966480][T22019] syzkaller0: entered promiscuous mode [ 959.975635][T22019] syzkaller0: entered allmulticast mode [ 960.090265][T22021] tipc: Enabled bearer , priority 0 [ 960.100210][T22021] syzkaller0: entered promiscuous mode [ 960.106022][T22021] syzkaller0: entered allmulticast mode [ 960.134604][T22021] tipc: Resetting bearer [ 960.144453][T22020] tipc: Resetting bearer [ 960.170133][T22020] tipc: Disabling bearer [ 960.825746][T22033] syzkaller0: entered promiscuous mode [ 960.875329][ T29] audit: type=1326 audit(1776047857.412:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22030 comm="syz.4.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c059c819 code=0x7ffc0000 [ 960.894172][T22033] syzkaller0: entered allmulticast mode [ 960.962823][ T29] audit: type=1326 audit(1776047857.412:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22030 comm="syz.4.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c059c819 code=0x7ffc0000 [ 961.028369][ T29] audit: type=1326 audit(1776047857.412:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22030 comm="syz.4.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c059c819 code=0x7ffc0000 [ 961.106039][T22033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.155338][ T29] audit: type=1326 audit(1776047857.412:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22030 comm="syz.4.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f10c059c819 code=0x7ffc0000 [ 961.266864][ T29] audit: type=1326 audit(1776047857.462:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22030 comm="syz.4.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10c055d04e code=0x7ffc0000 [ 962.029386][ T29] audit: type=1326 audit(1776047857.502:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22030 comm="syz.4.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10c055d04e code=0x7ffc0000 [ 962.255734][ T29] audit: type=1326 audit(1776047857.502:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22030 comm="syz.4.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10c055d04e code=0x7ffc0000 [ 962.293608][T22048] netlink: 'syz.4.4647': attribute type 1 has an invalid length. [ 962.307177][T22049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4648'. [ 962.316401][ T29] audit: type=1326 audit(1776047857.512:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22030 comm="syz.4.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10c055d04e code=0x7ffc0000 [ 962.488664][ T29] audit: type=1326 audit(1776047857.512:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22030 comm="syz.4.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c059c819 code=0x7ffc0000 [ 962.512364][ T29] audit: type=1326 audit(1776047857.512:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22030 comm="syz.4.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c059c819 code=0x7ffc0000 [ 962.555093][T22048] 8021q: adding VLAN 0 to HW filter on device bond5 [ 962.577892][T22049] vlan0: entered promiscuous mode [ 962.585676][T22049] team0: entered promiscuous mode [ 962.590902][T22049] team_slave_0: entered promiscuous mode [ 962.625511][T22049] team_slave_1: entered promiscuous mode [ 962.774713][T22050] vlan2: entered allmulticast mode [ 962.780761][T22050] bond5: entered allmulticast mode [ 962.805130][T22051] bond5: (slave geneve2): making interface the new active one [ 962.870830][T22051] geneve2: entered allmulticast mode [ 962.926562][T22051] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 962.987321][T19600] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0 [ 963.022705][T19600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.052119][T19600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.072363][T19600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.167173][T22059] tipc: Failed to remove unknown binding: 66,0,0/0:4083108762/4083108764 [ 963.167265][T22059] tipc: Failed to remove unknown binding: 66,0,0/0:4083108762/4083108763 [ 963.173656][T22059] tipc: Failed to remove unknown binding: 66,0,0/0:4083108762/4083108764 [ 963.173694][T22059] tipc: Failed to remove unknown binding: 66,0,0/0:4083108762/4083108763 [ 963.187532][ T5871] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 963.335910][ T5871] usb 6-1: Using ep0 maxpacket: 16 [ 963.343526][ T5871] usb 6-1: config 0 has no interfaces? [ 963.353193][ T5871] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 963.373078][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.392794][ T5871] usb 6-1: config 0 descriptor?? [ 963.403801][T22067] syzkaller0: entered promiscuous mode [ 963.415115][T22067] syzkaller0: entered allmulticast mode [ 963.435518][ T5900] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 963.585429][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 963.592901][ T5900] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 963.604356][ T5900] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 963.626669][T22054] kvm: kvm [22053]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 963.635715][ T5900] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 963.648378][T22054] kvm: kvm [22053]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 963.660566][ T5900] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 963.674752][ T9407] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 963.700509][ T5900] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 963.710490][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.744811][T22073] tipc: Enabled bearer , priority 0 [ 963.762618][ T5900] usb 5-1: Product: syz [ 963.768885][T22073] syzkaller0: entered promiscuous mode [ 963.776876][ T5900] usb 5-1: Manufacturer: syz [ 963.787465][ T5900] usb 5-1: SerialNumber: syz [ 963.793732][T22073] syzkaller0: entered allmulticast mode [ 963.803078][ T5871] usb 6-1: USB disconnect, device number 44 [ 963.863955][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 963.874894][ T5900] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input79 [ 963.913094][T22073] tipc: Resetting bearer [ 963.942220][T22071] tipc: Resetting bearer [ 963.972323][T22071] tipc: Disabling bearer [ 963.997690][ T9407] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.008076][ T9407] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 964.056730][ T9407] usb 8-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 964.066186][ T9407] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.074435][ T9407] usb 8-1: Product: syz [ 964.079027][ T9407] usb 8-1: Manufacturer: syz [ 964.083751][ T9407] usb 8-1: SerialNumber: syz [ 964.105470][ T5900] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 964.124984][ T9407] usb 8-1: config 0 descriptor?? [ 964.141338][ T5900] (id 0x00) [ 964.265977][ T5900] rc_core: IR keymap rc-imon-pad not found [ 964.272818][ T5900] Registered IR keymap rc-empty [ 964.282993][ T5900] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 964.342778][ T5900] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 964.366945][T22058] qrtr: Invalid version 18 [ 964.376419][ T5900] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 964.412029][ T5900] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input80 [ 964.481271][ T5900] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:48> initialized [ 965.323608][T22091] imon:send_packet: packet tx failed (-71) [ 965.329096][ T5871] usb 5-1: USB disconnect, device number 48 [ 965.359255][T19868] usb 8-1: USB disconnect, device number 26 [ 965.398940][T22091] imon:vfd_write: send packet #0 failed [ 965.593406][T22103] [ 965.595763][T22103] ===================================================== [ 965.602695][T22103] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 965.610236][T22103] syzkaller #0 Tainted: G L [ 965.616233][T22103] ----------------------------------------------------- [ 965.623210][T22103] syz.1.4662/22103 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 965.631028][T22103] ffff88805c7b4468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150 [ 965.639670][T22103] [ 965.639670][T22103] and this task is already holding: [ 965.647145][T22103] ffffffff8effe518 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 965.647279][T22103] which would create a new lock dependency: [ 965.647291][T22103] (kbd_event_lock){..-.}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 965.662573][T22103] [ 965.662573][T22103] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 965.662586][T22103] (kbd_event_lock){..-.}-{3:3} [ 965.662606][T22103] [ 965.662606][T22103] ... which became SOFTIRQ-irq-safe at: [ 965.662619][T22103] lock_acquire+0xf0/0x2e0 [ 965.697395][T22103] _raw_spin_lock+0x2e/0x40 [ 965.701999][T22103] kbd_event+0xd6/0x40d0 [ 965.706362][T22103] input_handle_events_default+0xd4/0x1a0 [ 965.712279][T22103] input_pass_values+0x288/0x890 [ 965.717576][T22103] input_event_dispose+0x3e5/0x6b0 [ 965.722834][T22103] input_event+0x89/0xe0 [ 965.727200][T22103] hidinput_hid_event+0x14cb/0x1ed0 [ 965.732590][T22103] hid_process_event+0x4be/0x620 [ 965.737831][T22103] hid_report_raw_event+0xec2/0x1730 [ 965.743404][T22103] hid_input_report+0x44b/0x580 [ 965.748467][T22103] hid_irq_in+0x47e/0x6d0 [ 965.753254][T22103] __usb_hcd_giveback_urb+0x376/0x540 [ 965.758888][T22103] dummy_timer+0xbbd/0x4650 [ 965.763620][T22103] __hrtimer_run_queues+0x53a/0xcc0 [ 965.769025][T22103] hrtimer_run_softirq+0x182/0x5a0 [ 965.774269][T22103] handle_softirqs+0x22a/0x870 [ 965.779181][T22103] __irq_exit_rcu+0x5f/0x150 [ 965.783962][T22103] irq_exit_rcu+0x9/0x30 [ 965.788386][T22103] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 965.794170][T22103] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 965.800246][T22103] __sanitizer_cov_trace_const_cmp4+0x0/0x90 [ 965.806408][T22103] page_table_check_clear+0x178/0x5f0 [ 965.811974][T22103] unmap_page_range+0x33b3/0x48f0 [ 965.817218][T22103] unmap_vmas+0x48f/0x6a0 [ 965.821674][T22103] exit_mmap+0x280/0xa10 [ 965.826046][T22103] __mmput+0x118/0x430 [ 965.830435][T22103] exit_mm+0x168/0x220 [ 965.834617][T22103] do_exit+0x6a2/0x23c0 [ 965.838983][T22103] do_group_exit+0x21b/0x2d0 [ 965.843690][T22103] get_signal+0x1284/0x1330 [ 965.848720][T22103] arch_do_signal_or_restart+0xbc/0x830 [ 965.854540][T22103] irqentry_exit+0x176/0x620 [ 965.859495][T22103] asm_exc_page_fault+0x26/0x30 [ 965.864445][T22103] [ 965.864445][T22103] to a SOFTIRQ-irq-unsafe lock: [ 965.871625][T22103] (tasklist_lock){.+.+}-{3:3} [ 965.871666][T22103] [ 965.871666][T22103] ... which became SOFTIRQ-irq-unsafe at: [ 965.884480][T22103] ... [ 965.884492][T22103] lock_acquire+0xf0/0x2e0 [ 965.891880][T22103] _raw_read_lock+0x36/0x50 [ 965.896501][T22103] __do_wait+0xde/0x740 [ 965.900760][T22103] do_wait+0x1e7/0x540 [ 965.905034][T22103] kernel_wait+0xd6/0x1c0 [ 965.909549][T22103] call_usermodehelper_exec_work+0xbe/0x230 [ 965.915817][T22103] process_scheduled_works+0xb6e/0x18c0 [ 965.921466][T22103] worker_thread+0xa53/0xfc0 [ 965.926266][T22103] kthread+0x388/0x470 [ 965.930613][T22103] ret_from_fork+0x51e/0xb90 [ 965.935316][T22103] ret_from_fork_asm+0x1a/0x30 [ 965.940230][T22103] [ 965.940230][T22103] other info that might help us debug this: [ 965.940230][T22103] [ 965.950483][T22103] Chain exists of: [ 965.950483][T22103] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 965.950483][T22103] [ 965.963654][T22103] Possible interrupt unsafe locking scenario: [ 965.963654][T22103] [ 965.972003][T22103] CPU0 CPU1 [ 965.977467][T22103] ---- ---- [ 965.982923][T22103] lock(tasklist_lock); [ 965.987180][T22103] local_irq_disable(); [ 965.994329][T22103] lock(kbd_event_lock); [ 966.001375][T22103] lock(&tty->flow.lock); [ 966.008329][T22103] [ 966.011912][T22103] lock(kbd_event_lock); [ 966.016432][T22103] [ 966.016432][T22103] *** DEADLOCK *** [ 966.016432][T22103] [ 966.024710][T22103] 5 locks held by syz.1.4662/22103: [ 966.029924][T22103] #0: ffff88802b526118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 966.039267][T22103] #1: ffff88802b3de230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 966.049652][T22103] #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 966.059506][T22103] #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 966.069190][T22103] #4: ffffffff8effe518 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 966.078295][T22103] [ 966.078295][T22103] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 966.088890][T22103] -> (kbd_event_lock){..-.}-{3:3} { [ 966.094136][T22103] IN-SOFTIRQ-W at: [ 966.098386][T22103] lock_acquire+0xf0/0x2e0 [ 966.104468][T22103] _raw_spin_lock+0x2e/0x40 [ 966.110716][T22103] kbd_event+0xd6/0x40d0 [ 966.116620][T22103] input_handle_events_default+0xd4/0x1a0 [ 966.124012][T22103] input_pass_values+0x288/0x890 [ 966.130705][T22103] input_event_dispose+0x3e5/0x6b0 [ 966.137568][T22103] input_event+0x89/0xe0 [ 966.143503][T22103] hidinput_hid_event+0x14cb/0x1ed0 [ 966.150631][T22103] hid_process_event+0x4be/0x620 [ 966.157417][T22103] hid_report_raw_event+0xec2/0x1730 [ 966.164393][T22103] hid_input_report+0x44b/0x580 [ 966.170907][T22103] hid_irq_in+0x47e/0x6d0 [ 966.176902][T22103] __usb_hcd_giveback_urb+0x376/0x540 [ 966.184027][T22103] dummy_timer+0xbbd/0x4650 [ 966.190199][T22103] __hrtimer_run_queues+0x53a/0xcc0 [ 966.197152][T22103] hrtimer_run_softirq+0x182/0x5a0 [ 966.204197][T22103] handle_softirqs+0x22a/0x870 [ 966.210619][T22103] __irq_exit_rcu+0x5f/0x150 [ 966.216954][T22103] irq_exit_rcu+0x9/0x30 [ 966.223044][T22103] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 966.230332][T22103] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 966.238063][T22103] __sanitizer_cov_trace_const_cmp4+0x0/0x90 [ 966.245760][T22103] page_table_check_clear+0x178/0x5f0 [ 966.253093][T22103] unmap_page_range+0x33b3/0x48f0 [ 966.259792][T22103] unmap_vmas+0x48f/0x6a0 [ 966.265794][T22103] exit_mmap+0x280/0xa10 [ 966.271886][T22103] __mmput+0x118/0x430 [ 966.277658][T22103] exit_mm+0x168/0x220 [ 966.283441][T22103] do_exit+0x6a2/0x23c0 [ 966.283473][T22103] do_group_exit+0x21b/0x2d0 [ 966.295556][T22103] get_signal+0x1284/0x1330 [ 966.301751][T22103] arch_do_signal_or_restart+0xbc/0x830 [ 966.308978][T22103] irqentry_exit+0x176/0x620 [ 966.315507][T22103] asm_exc_page_fault+0x26/0x30 [ 966.322113][T22103] INITIAL USE at: [ 966.326105][T22103] lock_acquire+0xf0/0x2e0 [ 966.332187][T22103] _raw_spin_lock_irqsave+0x40/0x60 [ 966.338979][T22103] vt_reset_unicode+0x2b/0x1a0 [ 966.345414][T22103] reset_vc+0x68/0x1b0 [ 966.351199][T22103] vc_init+0x70/0x4a0 [ 966.357053][T22103] con_init+0x377/0x6a0 [ 966.362793][T22103] console_init+0x10b/0x4d0 [ 966.369203][T22103] start_kernel+0x22b/0x3d0 [ 966.375630][T22103] x86_64_start_reservations+0x24/0x30 [ 966.382870][T22103] x86_64_start_kernel+0x143/0x1c0 [ 966.389746][T22103] common_startup_64+0x13e/0x147 [ 966.396288][T22103] } [ 966.398803][T22103] ... key at: [] kbd_event_lock+0x18/0xa0 [ 966.406767][T22103] [ 966.406767][T22103] the dependencies between the lock to be acquired [ 966.406777][T22103] and SOFTIRQ-irq-unsafe lock: [ 966.420470][T22103] -> (tasklist_lock){.+.+}-{3:3} { [ 966.425920][T22103] HARDIRQ-ON-R at: [ 966.430347][T22103] lock_acquire+0xf0/0x2e0 [ 966.437057][T22103] _raw_read_lock+0x36/0x50 [ 966.443828][T22103] __do_wait+0xde/0x740 [ 966.450182][T22103] do_wait+0x1e7/0x540 [ 966.456448][T22103] kernel_wait+0xd6/0x1c0 [ 966.462960][T22103] call_usermodehelper_exec_work+0xbe/0x230 [ 966.471297][T22103] process_scheduled_works+0xb6e/0x18c0 [ 966.479156][T22103] worker_thread+0xa53/0xfc0 [ 966.485940][T22103] kthread+0x388/0x470 [ 966.492363][T22103] ret_from_fork+0x51e/0xb90 [ 966.499222][T22103] ret_from_fork_asm+0x1a/0x30 [ 966.506177][T22103] SOFTIRQ-ON-R at: [ 966.510452][T22103] lock_acquire+0xf0/0x2e0 [ 966.517132][T22103] _raw_read_lock+0x36/0x50 [ 966.523818][T22103] __do_wait+0xde/0x740 [ 966.530155][T22103] do_wait+0x1e7/0x540 [ 966.536487][T22103] kernel_wait+0xd6/0x1c0 [ 966.542996][T22103] call_usermodehelper_exec_work+0xbe/0x230 [ 966.551160][T22103] process_scheduled_works+0xb6e/0x18c0 [ 966.558895][T22103] worker_thread+0xa53/0xfc0 [ 966.565674][T22103] kthread+0x388/0x470 [ 966.571918][T22103] ret_from_fork+0x51e/0xb90 [ 966.578698][T22103] ret_from_fork_asm+0x1a/0x30 [ 966.585666][T22103] INITIAL USE at: [ 966.589915][T22103] lock_acquire+0xf0/0x2e0 [ 966.596443][T22103] _raw_write_lock_irq+0x3d/0x50 [ 966.603514][T22103] copy_process+0x247a/0x3cd0 [ 966.610426][T22103] kernel_clone+0x248/0x8e0 [ 966.617461][T22103] user_mode_thread+0x110/0x180 [ 966.624416][T22103] rest_init+0x23/0x300 [ 966.630669][T22103] start_kernel+0x385/0x3d0 [ 966.637597][T22103] x86_64_start_reservations+0x24/0x30 [ 966.645352][T22103] x86_64_start_kernel+0x143/0x1c0 [ 966.652773][T22103] common_startup_64+0x13e/0x147 [ 966.660185][T22103] INITIAL READ USE at: [ 966.664802][T22103] lock_acquire+0xf0/0x2e0 [ 966.672017][T22103] _raw_read_lock+0x36/0x50 [ 966.679338][T22103] __do_wait+0xde/0x740 [ 966.686225][T22103] do_wait+0x1e7/0x540 [ 966.692841][T22103] kernel_wait+0xd6/0x1c0 [ 966.699960][T22103] call_usermodehelper_exec_work+0xbe/0x230 [ 966.708585][T22103] process_scheduled_works+0xb6e/0x18c0 [ 966.716943][T22103] worker_thread+0xa53/0xfc0 [ 966.724089][T22103] kthread+0x388/0x470 [ 966.730949][T22103] ret_from_fork+0x51e/0xb90 [ 966.738079][T22103] ret_from_fork_asm+0x1a/0x30 [ 966.745426][T22103] } [ 966.748314][T22103] ... key at: [] tasklist_lock+0x18/0x40 [ 966.756862][T22103] ... acquired at: [ 966.761128][T22103] _raw_read_lock+0x36/0x50 [ 966.766014][T22103] send_sigio+0x101/0x370 [ 966.770715][T22103] dnotify_handle_event+0x169/0x440 [ 966.776097][T22103] fsnotify+0x1831/0x1ae0 [ 966.780606][T22103] fsnotify_move+0x1d7/0x5b0 [ 966.785639][T22103] vfs_rename+0xcdd/0xeb0 [ 966.790154][T22103] filename_renameat2+0x539/0x9c0 [ 966.795459][T22103] __se_sys_renameat2+0x5a/0x2c0 [ 966.800735][T22103] do_syscall_64+0x14d/0xf80 [ 966.805520][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.811876][T22103] [ 966.814223][T22103] -> (&f_owner->lock){...-}-{3:3} { [ 966.819740][T22103] IN-SOFTIRQ-R at: [ 966.824065][T22103] lock_acquire+0xf0/0x2e0 [ 966.830510][T22103] _raw_read_lock_irqsave+0x48/0x60 [ 966.838376][T22103] send_sigurg+0x55/0x420 [ 966.845012][T22103] sk_send_sigurg+0x6c/0x2e0 [ 966.851625][T22103] tcp_check_urg+0x200/0x760 [ 966.860768][T22103] tcp_urg+0x15d/0x410 [ 966.867302][T22103] tcp_rcv_established+0xf3a/0x2740 [ 966.874513][T22103] tcp_v4_do_rcv+0xa90/0x1430 [ 966.881293][T22103] tcp_v4_rcv+0x2825/0x31f0 [ 966.888204][T22103] ip_protocol_deliver_rcu+0x221/0x440 [ 966.895794][T22103] ip_local_deliver_finish+0x3bb/0x6f0 [ 966.903545][T22103] NF_HOOK+0x336/0x3c0 [ 966.909640][T22103] NF_HOOK+0x336/0x3c0 [ 966.915744][T22103] process_backlog+0xaa3/0x1950 [ 966.922732][T22103] __napi_poll+0xae/0x340 [ 966.929618][T22103] net_rx_action+0x627/0xf70 [ 966.936408][T22103] handle_softirqs+0x22a/0x870 [ 966.943999][T22103] do_softirq+0x76/0xd0 [ 966.950309][T22103] __local_bh_enable_ip+0xf8/0x130 [ 966.958194][T22103] sk_stream_wait_memory+0x72b/0xf80 [ 966.965944][T22103] tcp_sendmsg_locked+0x23ba/0x5490 [ 966.973376][T22103] tcp_sendmsg+0x2f/0x50 [ 966.979763][T22103] __sys_sendto+0x5de/0x710 [ 966.986392][T22103] __x64_sys_sendto+0xde/0x100 [ 966.993167][T22103] do_syscall_64+0x14d/0xf80 [ 967.000113][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.008252][T22103] INITIAL USE at: [ 967.012600][T22103] lock_acquire+0xf0/0x2e0 [ 967.019025][T22103] _raw_write_lock_irq+0x3d/0x50 [ 967.026239][T22103] __f_setown+0x67/0x370 [ 967.032412][T22103] generic_setlease+0xacf/0xff0 [ 967.039261][T22103] do_fcntl_add_lease+0x35e/0x470 [ 967.046295][T22103] fcntl_setdeleg+0x14c/0x1e0 [ 967.052976][T22103] do_fcntl+0xe6d/0x1a20 [ 967.059308][T22103] __se_sys_fcntl+0xc8/0x150 [ 967.066386][T22103] do_syscall_64+0x14d/0xf80 [ 967.072912][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.080718][T22103] INITIAL READ USE at: [ 967.085263][T22103] lock_acquire+0xf0/0x2e0 [ 967.092168][T22103] _raw_read_lock_irqsave+0x48/0x60 [ 967.099830][T22103] send_sigio+0x38/0x370 [ 967.106610][T22103] kill_fasync+0x24d/0x4d0 [ 967.113378][T22103] lease_break_callback+0x26/0x30 [ 967.121230][T22103] __break_lease+0x81c/0x1e80 [ 967.128551][T22103] try_break_deleg+0xfc/0x180 [ 967.135596][T22103] vfs_rename+0x861/0xeb0 [ 967.142384][T22103] filename_renameat2+0x539/0x9c0 [ 967.150029][T22103] __se_sys_rename+0x55/0x2c0 [ 967.157535][T22103] do_syscall_64+0x14d/0xf80 [ 967.164485][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.172771][T22103] } [ 967.175473][T22103] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 967.184814][T22103] ... acquired at: [ 967.188879][T22103] _raw_read_lock_irqsave+0x48/0x60 [ 967.194376][T22103] send_sigio+0x38/0x370 [ 967.198825][T22103] kill_fasync+0x24d/0x4d0 [ 967.203702][T22103] lease_break_callback+0x26/0x30 [ 967.209027][T22103] __break_lease+0x81c/0x1e80 [ 967.214102][T22103] try_break_deleg+0xfc/0x180 [ 967.219327][T22103] vfs_rename+0x861/0xeb0 [ 967.223890][T22103] filename_renameat2+0x539/0x9c0 [ 967.229196][T22103] __se_sys_rename+0x55/0x2c0 [ 967.234164][T22103] do_syscall_64+0x14d/0xf80 [ 967.238985][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.245129][T22103] [ 967.247507][T22103] -> (&new->fa_lock){...-}-{3:3} { [ 967.252750][T22103] IN-SOFTIRQ-R at: [ 967.256945][T22103] lock_acquire+0xf0/0x2e0 [ 967.263394][T22103] _raw_read_lock_irqsave+0x48/0x60 [ 967.270449][T22103] kill_fasync+0x199/0x4d0 [ 967.276835][T22103] sock_wake_async+0x137/0x160 [ 967.283433][T22103] sock_def_readable+0x3c1/0x580 [ 967.290337][T22103] tcp_data_queue+0x1e2e/0x5e50 [ 967.297024][T22103] tcp_rcv_established+0xf45/0x2740 [ 967.304055][T22103] tcp_v4_do_rcv+0xa90/0x1430 [ 967.310647][T22103] tcp_v4_rcv+0x2825/0x31f0 [ 967.317106][T22103] ip_protocol_deliver_rcu+0x221/0x440 [ 967.324411][T22103] ip_local_deliver_finish+0x3bb/0x6f0 [ 967.331974][T22103] NF_HOOK+0x336/0x3c0 [ 967.338046][T22103] NF_HOOK+0x336/0x3c0 [ 967.344032][T22103] process_backlog+0xaa3/0x1950 [ 967.350801][T22103] __napi_poll+0xae/0x340 [ 967.357048][T22103] net_rx_action+0x627/0xf70 [ 967.363465][T22103] handle_softirqs+0x22a/0x870 [ 967.370058][T22103] do_softirq+0x76/0xd0 [ 967.376135][T22103] __local_bh_enable_ip+0xf8/0x130 [ 967.383187][T22103] sk_stream_wait_memory+0x72b/0xf80 [ 967.390658][T22103] tcp_sendmsg_locked+0x23ba/0x5490 [ 967.397740][T22103] tcp_sendmsg+0x2f/0x50 [ 967.403842][T22103] __sys_sendto+0x5de/0x710 [ 967.410258][T22103] __x64_sys_sendto+0xde/0x100 [ 967.417038][T22103] do_syscall_64+0x14d/0xf80 [ 967.423824][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.431640][T22103] INITIAL USE at: [ 967.435626][T22103] lock_acquire+0xf0/0x2e0 [ 967.441787][T22103] _raw_write_lock_irq+0x3d/0x50 [ 967.448475][T22103] fasync_remove_entry+0xf1/0x1c0 [ 967.455266][T22103] lease_modify+0x4f7/0x6c0 [ 967.461541][T22103] locks_remove_file+0x5f0/0xf70 [ 967.468394][T22103] __fput+0x3ae/0xa70 [ 967.474224][T22103] task_work_run+0x1d9/0x270 [ 967.480557][T22103] exit_to_user_mode_loop+0xed/0x480 [ 967.487597][T22103] do_syscall_64+0x32d/0xf80 [ 967.493942][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.501662][T22103] INITIAL READ USE at: [ 967.506085][T22103] lock_acquire+0xf0/0x2e0 [ 967.512686][T22103] _raw_read_lock_irqsave+0x48/0x60 [ 967.520073][T22103] kill_fasync+0x199/0x4d0 [ 967.526676][T22103] lease_break_callback+0x26/0x30 [ 967.533892][T22103] __break_lease+0x81c/0x1e80 [ 967.540749][T22103] try_break_deleg+0xfc/0x180 [ 967.547738][T22103] vfs_rename+0x861/0xeb0 [ 967.554278][T22103] filename_renameat2+0x539/0x9c0 [ 967.561692][T22103] __se_sys_rename+0x55/0x2c0 [ 967.568583][T22103] do_syscall_64+0x14d/0xf80 [ 967.575384][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.583555][T22103] } [ 967.586248][T22103] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 967.595308][T22103] ... acquired at: [ 967.599207][T22103] _raw_read_lock_irqsave+0x48/0x60 [ 967.604883][T22103] kill_fasync+0x199/0x4d0 [ 967.609666][T22103] __start_tty+0x18c/0x220 [ 967.614356][T22103] tty_send_xchar+0x1d2/0x4d0 [ 967.619231][T22103] tty_ioctl+0x9c5/0xde0 [ 967.623778][T22103] __se_sys_ioctl+0xfc/0x170 [ 967.628790][T22103] do_syscall_64+0x14d/0xf80 [ 967.633671][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.639755][T22103] [ 967.642094][T22103] -> (&tty->flow.lock){....}-{3:3} { [ 967.648124][T22103] INITIAL USE at: [ 967.652132][T22103] lock_acquire+0xf0/0x2e0 [ 967.658217][T22103] _raw_spin_lock_irqsave+0x40/0x60 [ 967.664987][T22103] start_tty+0x20/0x70 [ 967.670804][T22103] n_tty_set_termios+0xa7c/0x10c0 [ 967.677486][T22103] tty_set_termios+0xdb3/0x1800 [ 967.684003][T22103] set_termios+0x566/0x710 [ 967.690245][T22103] tty_mode_ioctl+0x4a6/0x7d0 [ 967.696579][T22103] tty_ioctl+0x9c5/0xde0 [ 967.702479][T22103] __se_sys_ioctl+0xfc/0x170 [ 967.708648][T22103] do_syscall_64+0x14d/0xf80 [ 967.714808][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.722266][T22103] } [ 967.724774][T22103] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 967.733675][T22103] ... acquired at: [ 967.737491][T22103] _raw_spin_lock_irqsave+0x40/0x60 [ 967.743275][T22103] stop_tty+0x2f/0x150 [ 967.747642][T22103] kbd_event+0x2ec1/0x40d0 [ 967.752334][T22103] input_handle_events_default+0xd4/0x1a0 [ 967.758430][T22103] input_pass_values+0x288/0x890 [ 967.763950][T22103] input_event_dispose+0x330/0x6b0 [ 967.769277][T22103] input_inject_event+0x1dd/0x340 [ 967.774713][T22103] evdev_write+0x325/0x4c0 [ 967.779885][T22103] vfs_write+0x29a/0xb90 [ 967.784407][T22103] ksys_write+0x150/0x270 [ 967.789116][T22103] do_syscall_64+0x14d/0xf80 [ 967.794081][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.800272][T22103] [ 967.802619][T22103] [ 967.802619][T22103] stack backtrace: [ 967.809214][T22103] CPU: 1 UID: 0 PID: 22103 Comm: syz.1.4662 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.809239][T22103] Tainted: [L]=SOFTLOCKUP [ 967.809245][T22103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 967.809255][T22103] Call Trace: [ 967.809265][T22103] [ 967.809273][T22103] dump_stack_lvl+0xe8/0x150 [ 967.809296][T22103] __lock_acquire+0x2a94/0x2cf0 [ 967.809325][T22103] lock_acquire+0xf0/0x2e0 [ 967.809344][T22103] ? stop_tty+0x2f/0x150 [ 967.809361][T22103] _raw_spin_lock_irqsave+0x40/0x60 [ 967.809380][T22103] ? stop_tty+0x2f/0x150 [ 967.809394][T22103] stop_tty+0x2f/0x150 [ 967.809408][T22103] kbd_event+0x2ec1/0x40d0 [ 967.809430][T22103] ? __pfx_kbd_event+0x10/0x10 [ 967.809450][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 967.809475][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 967.809495][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 967.809518][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 967.809538][T22103] ? lock_acquire+0xf0/0x2e0 [ 967.809559][T22103] input_handle_events_default+0xd4/0x1a0 [ 967.809580][T22103] ? input_pass_values+0x8d/0x890 [ 967.809594][T22103] input_pass_values+0x288/0x890 [ 967.809611][T22103] ? input_handle_event+0x70c/0xf30 [ 967.809634][T22103] input_event_dispose+0x330/0x6b0 [ 967.809657][T22103] input_inject_event+0x1dd/0x340 [ 967.809679][T22103] ? input_inject_event+0xb6/0x340 [ 967.809700][T22103] evdev_write+0x325/0x4c0 [ 967.809719][T22103] ? __pfx_evdev_write+0x10/0x10 [ 967.809736][T22103] ? bpf_lsm_file_permission+0x9/0x20 [ 967.809757][T22103] ? security_file_permission+0x75/0x260 [ 967.809829][T22103] ? rw_verify_area+0x255/0x4d0 [ 967.809846][T22103] ? __pfx_evdev_write+0x10/0x10 [ 967.809862][T22103] vfs_write+0x29a/0xb90 [ 967.809881][T22103] ? __pfx_vfs_write+0x10/0x10 [ 967.809899][T22103] ? __fget_files+0x2a/0x420 [ 967.809913][T22103] ? __fget_files+0x2a/0x420 [ 967.809926][T22103] ? __fget_files+0x3a0/0x420 [ 967.809939][T22103] ? __fget_files+0x2a/0x420 [ 967.809955][T22103] ksys_write+0x150/0x270 [ 967.809973][T22103] ? __pfx_ksys_write+0x10/0x10 [ 967.809993][T22103] do_syscall_64+0x14d/0xf80 [ 967.810014][T22103] ? trace_irq_disable+0x3b/0x150 [ 967.810028][T22103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.810044][T22103] ? clear_bhb_loop+0x40/0x90 [ 967.810062][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.810078][T22103] RIP: 0033:0x7f2bf4d9c819 [ 967.810095][T22103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.810109][T22103] RSP: 002b:00007f2bf5bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 967.810128][T22103] RAX: ffffffffffffffda RBX: 00007f2bf5016090 RCX: 00007f2bf4d9c819 [ 967.810140][T22103] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000008 [ 967.810151][T22103] RBP: 00007f2bf4e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 967.810162][T22103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.810178][T22103] R13: 00007f2bf5016128 R14: 00007f2bf5016090 R15: 00007f2bf513fa48 [ 967.810195][T22103] [ 967.810203][T22103] ================================================================== [ 968.126840][T22103] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28b/0x2f0 [ 968.134762][T22103] Read of size 4 at addr ffff88805c7b4454 by task syz.1.4662/22103 [ 968.142765][T22103] [ 968.145206][T22103] CPU: 1 UID: 0 PID: 22103 Comm: syz.1.4662 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.145234][T22103] Tainted: [L]=SOFTLOCKUP [ 968.145242][T22103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 968.145256][T22103] Call Trace: [ 968.145267][T22103] [ 968.145276][T22103] dump_stack_lvl+0xe8/0x150 [ 968.145307][T22103] print_report+0xba/0x230 [ 968.145327][T22103] ? do_raw_spin_lock+0x28b/0x2f0 [ 968.145344][T22103] kasan_report+0x117/0x150 [ 968.145365][T22103] ? do_raw_spin_lock+0x28b/0x2f0 [ 968.145383][T22103] do_raw_spin_lock+0x28b/0x2f0 [ 968.145401][T22103] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 968.145432][T22103] _raw_spin_lock_irqsave+0x4c/0x60 [ 968.145453][T22103] stop_tty+0x2f/0x150 [ 968.145470][T22103] kbd_event+0x2ec1/0x40d0 [ 968.145490][T22103] ? __pfx_kbd_event+0x10/0x10 [ 968.145511][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 968.145536][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 968.145557][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 968.145580][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 968.145601][T22103] ? lock_acquire+0xf0/0x2e0 [ 968.145621][T22103] input_handle_events_default+0xd4/0x1a0 [ 968.145644][T22103] ? input_pass_values+0x8d/0x890 [ 968.145658][T22103] input_pass_values+0x288/0x890 [ 968.145676][T22103] ? input_handle_event+0x70c/0xf30 [ 968.145698][T22103] input_event_dispose+0x330/0x6b0 [ 968.145721][T22103] input_inject_event+0x1dd/0x340 [ 968.145743][T22103] ? input_inject_event+0xb6/0x340 [ 968.145765][T22103] evdev_write+0x325/0x4c0 [ 968.145783][T22103] ? __pfx_evdev_write+0x10/0x10 [ 968.145800][T22103] ? bpf_lsm_file_permission+0x9/0x20 [ 968.145821][T22103] ? security_file_permission+0x75/0x260 [ 968.145843][T22103] ? rw_verify_area+0x255/0x4d0 [ 968.145861][T22103] ? __pfx_evdev_write+0x10/0x10 [ 968.145878][T22103] vfs_write+0x29a/0xb90 [ 968.145897][T22103] ? __pfx_vfs_write+0x10/0x10 [ 968.145915][T22103] ? __fget_files+0x2a/0x420 [ 968.145930][T22103] ? __fget_files+0x2a/0x420 [ 968.145943][T22103] ? __fget_files+0x3a0/0x420 [ 968.145956][T22103] ? __fget_files+0x2a/0x420 [ 968.145973][T22103] ksys_write+0x150/0x270 [ 968.145991][T22103] ? __pfx_ksys_write+0x10/0x10 [ 968.146011][T22103] do_syscall_64+0x14d/0xf80 [ 968.146033][T22103] ? trace_irq_disable+0x3b/0x150 [ 968.146048][T22103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.146064][T22103] ? clear_bhb_loop+0x40/0x90 [ 968.146083][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.146099][T22103] RIP: 0033:0x7f2bf4d9c819 [ 968.146116][T22103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.146131][T22103] RSP: 002b:00007f2bf5bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 968.146151][T22103] RAX: ffffffffffffffda RBX: 00007f2bf5016090 RCX: 00007f2bf4d9c819 [ 968.146165][T22103] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000008 [ 968.146230][T22103] RBP: 00007f2bf4e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 968.146242][T22103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.146254][T22103] R13: 00007f2bf5016128 R14: 00007f2bf5016090 R15: 00007f2bf513fa48 [ 968.146277][T22103] [ 968.146284][T22103] [ 968.467407][T22103] Allocated by task 22103: [ 968.471830][T22103] kasan_save_track+0x3e/0x80 [ 968.476523][T22103] __kasan_kmalloc+0x93/0xb0 [ 968.481122][T22103] __kmalloc_cache_noprof+0x31c/0x660 [ 968.486821][T22103] alloc_tty_struct+0xa6/0x7a0 [ 968.491674][T22103] tty_init_dev+0x59/0x4d0 [ 968.496091][T22103] tty_open+0x862/0xd70 [ 968.500363][T22103] chrdev_open+0x4cd/0x5e0 [ 968.504801][T22103] do_dentry_open+0x785/0x14e0 [ 968.509574][T22103] vfs_open+0x3b/0x340 [ 968.513658][T22103] path_openat+0x2e08/0x3860 [ 968.518261][T22103] do_file_open+0x23e/0x4a0 [ 968.522773][T22103] do_sys_openat2+0x113/0x200 [ 968.527467][T22103] __x64_sys_openat+0x138/0x170 [ 968.532327][T22103] do_syscall_64+0x14d/0xf80 [ 968.536930][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.542868][T22103] [ 968.545198][T22103] Freed by task 5871: [ 968.549178][T22103] kasan_save_track+0x3e/0x80 [ 968.553952][T22103] kasan_save_free_info+0x46/0x50 [ 968.559070][T22103] __kasan_slab_free+0x5c/0x80 [ 968.563840][T22103] kfree+0x1c1/0x630 [ 968.567738][T22103] process_scheduled_works+0xb6e/0x18c0 [ 968.573467][T22103] worker_thread+0xa53/0xfc0 [ 968.578071][T22103] kthread+0x388/0x470 [ 968.582231][T22103] ret_from_fork+0x51e/0xb90 [ 968.587102][T22103] ret_from_fork_asm+0x1a/0x30 [ 968.591884][T22103] [ 968.594298][T22103] Last potentially related work creation: [ 968.600228][T22103] kasan_save_stack+0x3e/0x60 [ 968.604908][T22103] kasan_record_aux_stack+0xbd/0xd0 [ 968.610203][T22103] insert_work+0x3d/0x330 [ 968.614663][T22103] __queue_work+0xd03/0x1020 [ 968.619388][T22103] queue_work_on+0x106/0x1d0 [ 968.624005][T22103] tty_release_struct+0xb8/0xd0 [ 968.628950][T22103] tty_release+0xcb0/0x1710 [ 968.633552][T22103] __fput+0x44f/0xa70 [ 968.637548][T22103] task_work_run+0x1d9/0x270 [ 968.642158][T22103] exit_to_user_mode_loop+0xed/0x480 [ 968.647741][T22103] do_syscall_64+0x32d/0xf80 [ 968.652435][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.658626][T22103] [ 968.660965][T22103] The buggy address belongs to the object at ffff88805c7b4000 [ 968.660965][T22103] which belongs to the cache kmalloc-cg-2k of size 2048 [ 968.675288][T22103] The buggy address is located 1108 bytes inside of [ 968.675288][T22103] freed 2048-byte region [ffff88805c7b4000, ffff88805c7b4800) [ 968.689436][T22103] [ 968.691766][T22103] The buggy address belongs to the physical page: [ 968.698174][T22103] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c7b0 [ 968.707020][T22103] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 968.715517][T22103] memcg:ffff88805c7b0811 [ 968.720015][T22103] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 968.727651][T22103] page_type: f5(slab) [ 968.731660][T22103] raw: 00fff00000000040 ffff88813fe023c0 dead000000000100 dead000000000122 [ 968.740526][T22103] raw: 0000000000000000 0000100000080008 00000000f5000000 ffff88805c7b0811 [ 968.749222][T22103] head: 00fff00000000040 ffff88813fe023c0 dead000000000100 dead000000000122 [ 968.757913][T22103] head: 0000000000000000 0000100000080008 00000000f5000000 ffff88805c7b0811 [ 968.766593][T22103] head: 00fff00000000003 ffffea000171ec01 00000000ffffffff 00000000ffffffff [ 968.775366][T22103] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 968.784122][T22103] page dumped because: kasan: bad access detected [ 968.790795][T22103] page_owner tracks the page as allocated [ 968.796597][T22103] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6195, tgid 6195 (kworker/u8:13), ts 395750667778, free_ts 395711278784 [ 968.818493][T22103] post_alloc_hook+0x231/0x280 [ 968.823450][T22103] get_page_from_freelist+0x24dc/0x2580 [ 968.829181][T22103] __alloc_frozen_pages_noprof+0x18d/0x380 [ 968.835257][T22103] allocate_slab+0x77/0x660 [ 968.839782][T22103] refill_objects+0x331/0x3c0 [ 968.844471][T22103] __pcs_replace_empty_main+0x2e6/0x730 [ 968.850319][T22103] __kmalloc_noprof+0x474/0x760 [ 968.855289][T22103] __register_sysctl_table+0x72/0x1340 [ 968.860786][T22103] __devinet_sysctl_register+0x386/0x490 [ 968.866433][T22103] devinet_sysctl_register+0x187/0x200 [ 968.871916][T22103] inetdev_init+0x2a4/0x4e0 [ 968.876458][T22103] inetdev_event+0x30d/0x1610 [ 968.881248][T22103] notifier_call_chain+0x1be/0x400 [ 968.886381][T22103] register_netdevice+0x173a/0x1cf0 [ 968.891614][T22103] nsim_create+0xb92/0x1100 [ 968.896692][T22103] __nsim_dev_port_add+0x72a/0xb50 [ 968.901958][T22103] page last free pid 5840 tgid 5840 stack trace: [ 968.908305][T22103] __free_frozen_pages+0xc2b/0xdb0 [ 968.913544][T22103] __folio_put+0x414/0x4f0 [ 968.917974][T22103] skb_release_data+0x3de/0x8f0 [ 968.923236][T22103] __kfree_skb+0x5d/0x210 [ 968.927614][T22103] tcp_ack+0x2826/0x7da0 [ 968.932060][T22103] tcp_rcv_established+0x1478/0x2740 [ 968.937826][T22103] tcp_v4_do_rcv+0xa90/0x1430 [ 968.942533][T22103] tcp_v4_rcv+0x2825/0x31f0 [ 968.947331][T22103] ip_protocol_deliver_rcu+0x221/0x440 [ 968.953345][T22103] ip_local_deliver_finish+0x3bb/0x6f0 [ 968.958824][T22103] NF_HOOK+0x336/0x3c0 [ 968.962909][T22103] ip_sublist_rcv_finish+0x1f0/0x240 [ 968.968201][T22103] ip_sublist_rcv+0x761/0xa70 [ 968.972884][T22103] ip_list_rcv+0x3f1/0x450 [ 968.977567][T22103] __netif_receive_skb_list_core+0x7e5/0x810 [ 968.983555][T22103] netif_receive_skb_list_internal+0x995/0xcf0 [ 968.989732][T22103] [ 968.992072][T22103] Memory state around the buggy address: [ 968.997702][T22103] ffff88805c7b4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 969.005764][T22103] ffff88805c7b4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 969.013841][T22103] >ffff88805c7b4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 969.021908][T22103] ^ [ 969.028602][T22103] ffff88805c7b4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 969.036666][T22103] ffff88805c7b4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 969.044727][T22103] ================================================================== [ 969.052960][T22103] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 969.060345][T22103] CPU: 1 UID: 0 PID: 22103 Comm: syz.1.4662 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.071389][T22103] Tainted: [L]=SOFTLOCKUP [ 969.076237][T22103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 969.086474][T22103] Call Trace: [ 969.089763][T22103] [ 969.092704][T22103] vpanic+0x56c/0xa60 [ 969.096717][T22103] ? __pfx_vpanic+0x10/0x10 [ 969.101244][T22103] panic+0xc5/0xd0 [ 969.104973][T22103] ? __pfx_panic+0x10/0x10 [ 969.109419][T22103] ? do_raw_spin_lock+0x28b/0x2f0 [ 969.114538][T22103] ? do_raw_spin_lock+0x28b/0x2f0 [ 969.119566][T22103] ? do_raw_spin_lock+0x28b/0x2f0 [ 969.124597][T22103] check_panic_on_warn+0x89/0xb0 [ 969.129567][T22103] ? do_raw_spin_lock+0x28b/0x2f0 [ 969.134689][T22103] end_report+0x73/0x180 [ 969.138952][T22103] ? do_raw_spin_lock+0x28b/0x2f0 [ 969.144328][T22103] kasan_report+0x128/0x150 [ 969.148931][T22103] ? do_raw_spin_lock+0x28b/0x2f0 [ 969.154054][T22103] do_raw_spin_lock+0x28b/0x2f0 [ 969.158910][T22103] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 969.164567][T22103] _raw_spin_lock_irqsave+0x4c/0x60 [ 969.169809][T22103] stop_tty+0x2f/0x150 [ 969.173996][T22103] kbd_event+0x2ec1/0x40d0 [ 969.178518][T22103] ? __pfx_kbd_event+0x10/0x10 [ 969.183335][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 969.188559][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 969.193509][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 969.198549][T22103] ? __lock_acquire+0x6b5/0x2cf0 [ 969.203498][T22103] ? lock_acquire+0xf0/0x2e0 [ 969.208100][T22103] input_handle_events_default+0xd4/0x1a0 [ 969.213923][T22103] ? input_pass_values+0x8d/0x890 [ 969.218948][T22103] input_pass_values+0x288/0x890 [ 969.223894][T22103] ? input_handle_event+0x70c/0xf30 [ 969.229112][T22103] input_event_dispose+0x330/0x6b0 [ 969.234616][T22103] input_inject_event+0x1dd/0x340 [ 969.239754][T22103] ? input_inject_event+0xb6/0x340 [ 969.244877][T22103] evdev_write+0x325/0x4c0 [ 969.249401][T22103] ? __pfx_evdev_write+0x10/0x10 [ 969.254525][T22103] ? bpf_lsm_file_permission+0x9/0x20 [ 969.260091][T22103] ? security_file_permission+0x75/0x260 [ 969.265827][T22103] ? rw_verify_area+0x255/0x4d0 [ 969.270709][T22103] ? __pfx_evdev_write+0x10/0x10 [ 969.275650][T22103] vfs_write+0x29a/0xb90 [ 969.279911][T22103] ? __pfx_vfs_write+0x10/0x10 [ 969.284696][T22103] ? __fget_files+0x2a/0x420 [ 969.289299][T22103] ? __fget_files+0x2a/0x420 [ 969.293989][T22103] ? __fget_files+0x3a0/0x420 [ 969.298718][T22103] ? __fget_files+0x2a/0x420 [ 969.303320][T22103] ksys_write+0x150/0x270 [ 969.307669][T22103] ? __pfx_ksys_write+0x10/0x10 [ 969.312626][T22103] do_syscall_64+0x14d/0xf80 [ 969.317227][T22103] ? trace_irq_disable+0x3b/0x150 [ 969.322345][T22103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.328511][T22103] ? clear_bhb_loop+0x40/0x90 [ 969.333371][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.339452][T22103] RIP: 0033:0x7f2bf4d9c819 [ 969.343898][T22103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.363872][T22103] RSP: 002b:00007f2bf5bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 969.372306][T22103] RAX: ffffffffffffffda RBX: 00007f2bf5016090 RCX: 00007f2bf4d9c819 [ 969.380399][T22103] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000008 [ 969.388384][T22103] RBP: 00007f2bf4e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 969.396366][T22103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.404689][T22103] R13: 00007f2bf5016128 R14: 00007f2bf5016090 R15: 00007f2bf513fa48 [ 969.412685][T22103] [ 969.415869][T22103] Kernel Offset: disabled [ 969.420197][T22103] Rebooting in 86400 seconds..