last executing test programs: 17m20.19002664s ago: executing program 32 (id=237): syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) 16m19.526215177s ago: executing program 33 (id=791): openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x7f, 0x3ff, 0x7, 0x9, 0x1b, "03f37f0ce56ca288"}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m48.790364895s ago: executing program 34 (id=984): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x2) 14m48.941021383s ago: executing program 35 (id=1413): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000011, 0x32, 0x0, 0xffffd000) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080)=0x1) 14m16.526811939s ago: executing program 1 (id=1626): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m16.189001892s ago: executing program 1 (id=1627): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x6, 0x804, 0x7, 0xf, 0xd, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x103, 0x3, 0x1000000000001], 0x8000000, 0x34f201}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) 14m16.036225032s ago: executing program 1 (id=1629): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) 14m15.957662698s ago: executing program 1 (id=1630): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 14m15.870010999s ago: executing program 1 (id=1632): syz_mount_image$fuse(0x0, &(0x7f0000002280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x10, 0x0, 0x9}, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x20000) 14m14.57595646s ago: executing program 1 (id=1649): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 14m14.335657805s ago: executing program 36 (id=1649): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 12m25.88079156s ago: executing program 7 (id=2378): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000200)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 12m22.771776421s ago: executing program 7 (id=2395): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0317fffffffe0000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="1e"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 12m22.446540215s ago: executing program 7 (id=2398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0xa846, 0x10, 0x3, 0x178}, &(0x7f0000002380)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 12m21.049561354s ago: executing program 7 (id=2405): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r1, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 12m20.815169063s ago: executing program 7 (id=2407): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESOCT=r0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x564f143a, 0x85, 0x6, 0xf, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) dup3(r1, 0xffffffffffffffff, 0x6700000000000000) pipe2$9p(0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 12m19.347792914s ago: executing program 7 (id=2425): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x6e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x20400100, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000540)={0x50, 0x0, 0xd992, {0x7, 0x2b, 0x7f, 0x35432006, 0x27, 0x201, 0x7ff, 0x0, 0x0, 0x0, 0xc0, 0x8001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x2) 12m19.057046501s ago: executing program 37 (id=2425): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x6e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x20400100, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000540)={0x50, 0x0, 0xd992, {0x7, 0x2b, 0x7f, 0x35432006, 0x27, 0x201, 0x7ff, 0x0, 0x0, 0x0, 0xc0, 0x8001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x2) 9m42.887691924s ago: executing program 8 (id=3197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 9m42.518420946s ago: executing program 8 (id=3200): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x2000c801) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 9m42.07396024s ago: executing program 8 (id=3204): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x2, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 9m40.325070461s ago: executing program 8 (id=3208): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x6}]}) openat$kvm(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r2, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 9m39.149168207s ago: executing program 8 (id=3213): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a00)={0x2, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x30000, 0xfc, &(0x7f0000000880)=""/252}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 9m38.2785236s ago: executing program 8 (id=3217): add_key(0x0, 0x0, &(0x7f0000000140)="b4e81fa315c945757593e1a2a830de23811bf587184192defb08f6937654590d985211e3fde72d52594ee1ab255e15eee3ecff7c51301270b35a81fbc3213e9cceeab9061b30eebc057c2cb5df4f4e2487686c8e6b4cc70261097d9cc08cbb2ee0ae472896754d0e3db2983ecd5c68d54f7cd9fbafbaa434c21e37c0ae43d0a468", 0x81, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) select(0x40, &(0x7f0000000080)={0x2, 0x2, 0x823, 0x1f, 0x5, 0x2, 0x8, 0x80000001}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000380)="0f01764a652e36f2f0fe040f0e0f30baf80c66b81e17898f66efbafc0cedd9fa3eff580376870f015a000f01f6", 0x2d}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m37.549988312s ago: executing program 38 (id=3217): add_key(0x0, 0x0, &(0x7f0000000140)="b4e81fa315c945757593e1a2a830de23811bf587184192defb08f6937654590d985211e3fde72d52594ee1ab255e15eee3ecff7c51301270b35a81fbc3213e9cceeab9061b30eebc057c2cb5df4f4e2487686c8e6b4cc70261097d9cc08cbb2ee0ae472896754d0e3db2983ecd5c68d54f7cd9fbafbaa434c21e37c0ae43d0a468", 0x81, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) select(0x40, &(0x7f0000000080)={0x2, 0x2, 0x823, 0x1f, 0x5, 0x2, 0x8, 0x80000001}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000380)="0f01764a652e36f2f0fe040f0e0f30baf80c66b81e17898f66efbafc0cedd9fa3eff580376870f015a000f01f6", 0x2d}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m51.005856463s ago: executing program 0 (id=3386): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) unshare(0x20060400) fsync(r2) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r2) 8m50.523138805s ago: executing program 0 (id=3400): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = syz_io_uring_setup(0x118d, &(0x7f0000000500)={0x0, 0x8d2dc, 0x0, 0x3, 0x4000c2, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x77cf, 0x0, 0x0, 0x0) 8m48.410965366s ago: executing program 0 (id=3394): socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f0000000440)={0x0, 0x5331, 0x10100, 0x1000006, 0x294}, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x23, 0x0, 0x0) 8m48.159600067s ago: executing program 0 (id=3396): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 8m47.69041177s ago: executing program 6 (id=3398): socket$inet6(0xa, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8m46.635722344s ago: executing program 0 (id=3401): statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x6000, 0x20, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x6}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m45.750503116s ago: executing program 6 (id=3406): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ftruncate(r1, 0x5) sendfile(r0, r1, 0x0, 0x7ffff004) 8m45.692456622s ago: executing program 0 (id=3408): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00030000000000004c001280110001006272696467655f736c61766500000000340005800500190002"], 0x98}}, 0x0) 8m45.308999988s ago: executing program 39 (id=3408): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010011a80100005800400058008000000000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839fda9d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008002c000000000005000600000000001400190002"], 0x270}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00030000000000004c001280110001006272696467655f736c61766500000000340005800500190002"], 0x98}}, 0x0) 8m45.290305222s ago: executing program 6 (id=3411): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m42.942139915s ago: executing program 6 (id=3415): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c05, r3) dup2(r2, r0) 8m42.600140831s ago: executing program 6 (id=3416): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000020c0)=""/4082, 0xff2}], 0x1) 8m42.215378096s ago: executing program 6 (id=3417): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x400022c, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1000, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r3, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) 8m41.656864327s ago: executing program 40 (id=3417): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x400022c, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1000, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r3, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) 14.940477302s ago: executing program 9 (id=5122): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), 0x4) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = memfd_create(&(0x7f0000000100)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1m\x13}\xe1\xdf4f!\xd5d\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85\b\x00\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5>j\x87\x04\x11y\xa1\xc8\x9f\x9etiHv\xef\x1a\xedS\xd6\x91%||/c\x87\x94Y\xa0\x8e\x03\x00\x00\x00\x00\x00\x00\x003:\x99\x1e\xac`\x00\x00\x00\x00m\xeaB\xf0K\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80', 0x1) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x200000083}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 12.556328299s ago: executing program 9 (id=5129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000040) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c0019800800"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000170a01020000ddffffff00000700000a0900010740000000000c0005400000000000000004"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x31f07beb2700b496) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000500)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x20}) syz_usb_connect(0x2, 0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902310001080010000904df0003080662ff09050c02200006060309050710000201020704f99fbb0905"], 0x0) 9.16244348s ago: executing program 2 (id=5145): pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000300)=0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg$alg(r2, &(0x7f0000005180)=[{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000001600)="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", 0xa04}], 0x1, 0x0, 0x0, 0x20000004}], 0x1, 0x20008044) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.031626835s ago: executing program 2 (id=5136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xfffa, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e001}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x0, 0xb}, {0x5, 0x7}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.790738849s ago: executing program 9 (id=5138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000225c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000022540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x8d0, 0xfff, 0x401, 0x5, 0x9, 0x0, 0x401, 0x9}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.50001495s ago: executing program 5 (id=5139): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 8.49871595s ago: executing program 3 (id=5140): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = fsmount(r2, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) 8.483566431s ago: executing program 2 (id=5141): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0xc8, 0x29, 0x4, {0x4, 0x16, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x58, 0x29, 0x36, {0x5e, 0x7, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x170}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.185420368s ago: executing program 2 (id=5142): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000002440)={0x0, 0x0, 0x0, @raw}) ioctl$CEC_ADAP_G_CAPS(r4, 0xc04c6100, &(0x7f0000000100)) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff5, &(0x7f00000013c0)=""/4085}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 6.779922411s ago: executing program 9 (id=5143): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x6, 0x6, 0x80000fffffffd}, {0x15, 0x1, 0x6, 0x2, 0x0, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x3, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0x31, 0x4, 0x200}], 0xfffffffe}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x360, 0x360, 0x1a0, 0x1a0, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 6.058643859s ago: executing program 5 (id=5144): socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) listen(0xffffffffffffffff, 0x80) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000240)={@host, 0x8}) 5.833010182s ago: executing program 3 (id=5146): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8a080, 0x39, 0x15}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xffffffffffffffe3, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080) 5.832695707s ago: executing program 5 (id=5147): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.07688648s ago: executing program 2 (id=5149): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x28900) syz_usb_connect(0x4, 0x5f, &(0x7f0000000140)=ANY=[@ANYRES8=r2], 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x200080d4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.592687859s ago: executing program 4 (id=5150): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) mmap(&(0x7f00004a5000/0x1000)=nil, 0x1000, 0x2000002, 0x11, r0, 0x0) 4.052731473s ago: executing program 3 (id=5151): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)}, {0x0}], 0x2) mknod$loop(0x0, 0x0, 0x1) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 3.51638652s ago: executing program 3 (id=5152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff0200"/55], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b12", 0x3c, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a40)) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100000001}}, 0x30) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r1], 0x64}}, 0x0) 3.474421223s ago: executing program 9 (id=5153): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x14927e, 0x41) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) pipe(0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.120569833s ago: executing program 5 (id=5154): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2202c800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0x6, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x88) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_udp(0xa, 0x2, 0x0) 2.740277177s ago: executing program 4 (id=5155): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x3ff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') fcntl$getownex(r1, 0x10, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000340)) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.832298655s ago: executing program 3 (id=5156): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 1.487833438s ago: executing program 5 (id=5157): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0xd0, 0x29, 0x4, {0x4, 0x16, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x180}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.410011879s ago: executing program 9 (id=5158): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FADVISE={0x18, 0x9, 0x0, @fd_index=0x7, 0x6, 0x0, 0x10001, 0x1, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2, 0x10a5, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r2, 0x0, 0x154) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x2) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="85ca2373e8d4", 0x6}], 0x1) socket$inet_sctp(0x2, 0x5, 0x84) 1.241633811s ago: executing program 2 (id=5159): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.083414171s ago: executing program 4 (id=5160): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0xc000, @remote}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f00000000c0)) sendmsg$nl_route(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) 730.759998ms ago: executing program 4 (id=5161): socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x200080, 0x112) fanotify_init(0x200, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 728.32768ms ago: executing program 5 (id=5162): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x3ff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') fcntl$getownex(r1, 0x10, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000340)) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/225, 0xe1}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 188.963218ms ago: executing program 4 (id=5163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0xc0045103, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x103200, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x14318}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 40.115203ms ago: executing program 3 (id=5164): pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000300)=0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg$alg(r2, &(0x7f0000005180)=[{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000001600)="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", 0xa04}], 0x1, 0x0, 0x0, 0x20000004}], 0x1, 0x20008044) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=5165): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1, 0x200001}, 0xff, 0x8, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x3}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000004080009000b000000", 0x24) syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket(0x22, 0x3, 0x1) r1 = gettid() rt_tgsigqueueinfo(0x0, r1, 0xb, &(0x7f00000019c0)={0x0, 0x3, 0x4}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) getrlimit(0x5, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x76, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x944, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSKEYCODE(r2, 0x40084504, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f00000003c0)=@ethtool_gstrings={0x1b, 0x6}}) kernel console output (not intermixed with test programs): udit(1768382508.990:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.3.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 964.214188][ T30] audit: type=1326 audit(1768382508.990:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.3.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 964.237551][ T30] audit: type=1326 audit(1768382508.990:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.3.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 964.260991][T22343] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 964.379166][ T30] audit: type=1326 audit(1768382508.990:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.3.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 964.406478][ T30] audit: type=1326 audit(1768382508.990:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.3.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 964.432478][ T30] audit: type=1326 audit(1768382508.990:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.3.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 964.774095][ T30] audit: type=1326 audit(1768382508.990:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.3.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 964.818583][ T30] audit: type=1326 audit(1768382508.990:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.3.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 965.948946][T22362] syzkaller0: entered promiscuous mode [ 965.954460][T22362] syzkaller0: entered allmulticast mode [ 966.388419][ T796] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 966.807868][T19641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.091027][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.206698][ T796] usb 5-1: config index 0 descriptor too short (expected 25964, got 441) [ 967.225220][ T796] usb 5-1: config 121 has too many interfaces: 115, using maximum allowed: 32 [ 967.276023][T21328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.284724][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.308931][ T796] usb 5-1: config 121 has an invalid descriptor of length 0, skipping remainder of the config [ 967.329622][ T796] usb 5-1: config 121 has 0 interfaces, different from the descriptor's value: 115 [ 967.339499][ T796] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 967.491159][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.770730][ T796] usb 5-1: string descriptor 0 read error: -71 [ 967.798997][ T796] usb 5-1: USB disconnect, device number 58 [ 968.095729][ T5864] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 968.255713][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 968.268145][ T5864] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 968.279657][ T5864] usb 3-1: config 1 has no interface number 1 [ 968.289309][ T5864] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 968.309048][ T5864] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 968.315195][T22392] netlink: 'syz.3.4660': attribute type 1 has an invalid length. [ 968.491733][T22392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4660'. [ 968.501142][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.510158][ T5864] usb 3-1: Product: syz [ 968.512128][T22392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 968.518239][ T5864] usb 3-1: Manufacturer: syz [ 968.527939][ T5864] usb 3-1: SerialNumber: syz [ 968.602723][T22399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.611165][T22399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.619791][T22399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.631793][T22392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 968.719045][T22392] bond3: (slave geneve2): making interface the new active one [ 968.746547][ T5864] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 968.774023][T22392] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 968.778307][ T5864] usb 3-1: USB disconnect, device number 27 [ 968.800638][T22399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.835819][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 968.852153][T22399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.867676][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 968.881240][T22401] loop6: detected capacity change from 0 to 2640 [ 968.888767][T22401] buffer_io_error: 11 callbacks suppressed [ 968.888778][T22401] Buffer I/O error on dev loop6, logical block 0, async page read [ 968.906809][T22399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.915426][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 968.933614][T21992] udevd[21992]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 968.954516][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 969.026856][T22401] Buffer I/O error on dev loop6, logical block 0, async page read [ 969.067737][T22401] Buffer I/O error on dev loop6, logical block 0, async page read [ 969.132188][T22405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4663'. [ 969.288696][T22401] Buffer I/O error on dev loop6, logical block 0, async page read [ 969.301846][T22401] Buffer I/O error on dev loop6, logical block 0, async page read [ 969.309955][T22401] Buffer I/O error on dev loop6, logical block 0, async page read [ 969.363890][T22401] Buffer I/O error on dev loop6, logical block 0, async page read [ 969.455749][T22401] Buffer I/O error on dev loop6, logical block 0, async page read [ 969.463622][T22401] ldm_validate_partition_table(): Disk read failed. [ 969.542292][T22401] Buffer I/O error on dev loop6, logical block 0, async page read [ 970.250523][T22401] Buffer I/O error on dev loop6, logical block 0, async page read [ 970.270108][T22401] Dev loop6: unable to read RDB block 0 [ 970.294740][T22401] loop6: unable to read partition table [ 970.304707][T22401] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 971.096196][ T796] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 971.215700][T21328] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 971.359859][ T796] usb 10-1: Using ep0 maxpacket: 8 [ 971.378380][ T796] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 971.406682][ T796] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.419695][ T796] usb 10-1: Product: syz [ 971.448725][T21328] usb 6-1: Using ep0 maxpacket: 16 [ 971.462239][ T796] usb 10-1: Manufacturer: syz [ 971.462563][T21328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 971.516282][T21328] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 971.526047][T21328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.537490][T21328] usb 6-1: Product: syz [ 971.543018][T21328] usb 6-1: Manufacturer: syz [ 971.543031][ T796] usb 10-1: SerialNumber: syz [ 971.553540][ T796] usb 10-1: config 0 descriptor?? [ 971.577424][T21328] usb 6-1: SerialNumber: syz [ 971.599619][T21328] usb 6-1: config 0 descriptor?? [ 971.618457][ T796] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 971.634112][T21328] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 971.669499][T21328] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 972.254227][T21328] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 972.422814][ T9319] net_ratelimit: 1019 callbacks suppressed [ 972.422834][ T9319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.671758][T21328] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 972.679842][T21328] em28xx 6-1:0.0: board has no eeprom [ 973.025977][T21328] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 973.041277][T21328] em28xx 6-1:0.0: dvb set to bulk mode. [ 973.041714][ T301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.065254][T21327] em28xx 6-1:0.0: Binding DVB extension [ 973.355888][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.912767][T22446] syzkaller0: entered promiscuous mode [ 973.918424][T22446] syzkaller0: entered allmulticast mode [ 974.039349][T22448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4674'. [ 974.237575][T22424] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 974.257808][T21328] usb 6-1: USB disconnect, device number 31 [ 974.315323][T21328] em28xx 6-1:0.0: Disconnecting em28xx [ 974.329147][T21326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.386798][T21327] em28xx 6-1:0.0: Registering input extension [ 974.393081][T21328] em28xx 6-1:0.0: Closing input extension [ 974.493194][T21312] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 974.509497][T21328] em28xx 6-1:0.0: Freeing device [ 974.546280][ T796] gspca_sonixj: i2c_w8 err -71 [ 974.643632][ T796] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 974.672040][ T796] usb 10-1: USB disconnect, device number 36 [ 974.717552][T21312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.735666][T21312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.763196][T21312] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 974.774550][T21312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.810288][T21312] usb 3-1: config 0 descriptor?? [ 975.427632][T22468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.436753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.264023][T21312] hid-led 0003:27B8:01ED.0035: probe with driver hid-led failed with error -71 [ 976.362889][T21312] usb 3-1: USB disconnect, device number 28 [ 976.421292][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.015771][T21328] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 977.190053][T21328] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 977.215766][T21328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.232241][T21328] usb 6-1: Product: syz [ 977.242361][T21328] usb 6-1: Manufacturer: syz [ 977.252480][T21328] usb 6-1: SerialNumber: syz [ 977.300550][T21328] usb 6-1: config 0 descriptor?? [ 977.568493][T22506] syz.2.4689: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 977.628864][T22506] CPU: 0 UID: 0 PID: 22506 Comm: syz.2.4689 Tainted: G L syzkaller #0 PREEMPT(full) [ 977.628895][T22506] Tainted: [L]=SOFTLOCKUP [ 977.628903][T22506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 977.628915][T22506] Call Trace: [ 977.628923][T22506] [ 977.628933][T22506] dump_stack_lvl+0xe8/0x150 [ 977.628962][T22506] warn_alloc+0x214/0x310 [ 977.629087][T22506] ? stack_trace_save+0x9c/0xe0 [ 977.629114][T22506] ? __pfx_warn_alloc+0x10/0x10 [ 977.629139][T22506] ? kasan_save_track+0x4f/0x80 [ 977.629182][T22506] ? kasan_save_track+0x3e/0x80 [ 977.629197][T22506] ? __kasan_kmalloc+0x93/0xb0 [ 977.629215][T22506] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 977.629256][T22506] ? xskq_create+0x56/0x170 [ 977.629272][T22506] ? xsk_setsockopt+0x4dc/0x8d0 [ 977.629294][T22506] ? do_sock_setsockopt+0x17c/0x1b0 [ 977.629314][T22506] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 977.629332][T22506] ? do_syscall_64+0xec/0xf80 [ 977.629448][T22506] __vmalloc_node_range_noprof+0x134/0x16a0 [ 977.629497][T22506] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 977.629524][T22506] ? __kasan_kmalloc+0x93/0xb0 [ 977.629548][T22506] vmalloc_user_noprof+0xad/0xf0 [ 977.629564][T22506] ? xskq_create+0xbf/0x170 [ 977.629582][T22506] xskq_create+0xbf/0x170 [ 977.629601][T22506] xsk_init_queue+0xb0/0x110 [ 977.629645][T22506] xsk_setsockopt+0x4dc/0x8d0 [ 977.629672][T22506] ? __pfx_xsk_setsockopt+0x10/0x10 [ 977.629696][T22506] ? __pfx_aa_sk_perm+0x10/0x10 [ 977.629761][T22506] ? aa_sock_opt_perm+0xff/0x1a0 [ 977.629815][T22506] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 977.629863][T22506] ? __pfx_xsk_setsockopt+0x10/0x10 [ 977.629890][T22506] do_sock_setsockopt+0x17c/0x1b0 [ 977.629915][T22506] __x64_sys_setsockopt+0x13f/0x1b0 [ 977.629939][T22506] do_syscall_64+0xec/0xf80 [ 977.629959][T22506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.629977][T22506] ? trace_irq_disable+0x37/0x100 [ 977.629998][T22506] ? clear_bhb_loop+0x60/0xb0 [ 977.630020][T22506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.630039][T22506] RIP: 0033:0x7f71bfd8f749 [ 977.630057][T22506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.630073][T22506] RSP: 002b:00007f71c0bfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 977.630094][T22506] RAX: ffffffffffffffda RBX: 00007f71bffe6090 RCX: 00007f71bfd8f749 [ 977.630108][T22506] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 977.630120][T22506] RBP: 00007f71bfe13f91 R08: 0000000000000004 R09: 0000000000000000 [ 977.630134][T22506] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.630147][T22506] R13: 00007f71bffe6128 R14: 00007f71bffe6090 R15: 00007f71c010fa28 [ 977.630177][T22506] [ 977.674264][T22508] syzkaller0: entered promiscuous mode [ 977.674288][T22508] syzkaller0: entered allmulticast mode [ 977.692369][T22506] Mem-Info: [ 977.692388][T22506] active_anon:10666 inactive_anon:0 isolated_anon:0 [ 977.692388][T22506] active_file:17544 inactive_file:40295 isolated_file:0 [ 977.692388][T22506] unevictable:768 dirty:160 writeback:0 [ 977.692388][T22506] slab_reclaimable:7224 slab_unreclaimable:159817 [ 977.692388][T22506] mapped:46471 shmem:1948 pagetables:2260 [ 977.692388][T22506] sec_pagetables:0 bounce:0 [ 977.692388][T22506] kernel_misc_reclaimable:0 [ 977.692388][T22506] free:1210854 free_pcp:26158 free_cma:0 [ 977.692449][T22506] Node 0 active_anon:42664kB inactive_anon:0kB active_file:70116kB inactive_file:160976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:185864kB dirty:640kB writeback:0kB shmem:6256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:15388kB pagetables:8892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 977.692502][T22506] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 977.692551][T22506] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 977.692610][T22506] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 977.692653][T22506] Node 0 DMA32 free:977788kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42664kB inactive_anon:0kB active_file:70116kB inactive_file:160976kB unevictable:1536kB writepending:640kB zspages:0kB present:3129332kB managed:2559500kB mlocked:0kB bounce:0kB free_pcp:39856kB local_pcp:22140kB free_cma:0kB [ 977.692713][T22506] lowmem_reserve[]: 0 0 1 1 1 [ 977.692755][T22506] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 977.692810][T22506] lowmem_reserve[]: 0 0 0 0 0 [ 977.692857][T22506] Node 1 Normal free:3850268kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:64776kB local_pcp:33508kB free_cma:0kB [ 977.692917][T22506] lowmem_reserve[]: 0 0 0 0 0 [ 977.692960][T22506] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 977.693092][T22506] Node 0 DMA32: 5428*4kB (UME) 3628*8kB (UME) 2711*16kB (UME) 1332*32kB (UME) 772*64kB (UME) 347*128kB (UME) 301*256kB (UME) 131*512kB (UME) 83*1024kB (UME) 7*2048kB (UM) 123*4096kB (M) = 977824kB [ 977.693347][T22506] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 977.693506][T22506] Node 1 Normal: 169*4kB (UME) 55*8kB (UME) 48*16kB (UME) 190*32kB (UME) 50*64kB (UME) 9*128kB (UME) 6*256kB (UM) 7*512kB (UME) 3*1024kB (UME) 4*2048kB (UE) 933*4096kB (UM) = 3850268kB [ 977.693680][T22506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 977.693691][T22506] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 977.693699][T22506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 977.693708][T22506] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 977.693717][T22506] 59783 total pagecache pages [ 977.693722][T22506] 0 pages in swap cache [ 977.693726][T22506] Free swap = 124996kB [ 977.693731][T22506] Total swap = 124996kB [ 977.693736][T22506] 2097051 pages RAM [ 977.693743][T22506] 0 pages HighMem/MovableOnly [ 977.693750][T22506] 425086 pages reserved [ 977.693758][T22506] 0 pages cma reserved [ 977.771382][T21328] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 978.251228][ T301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.817611][T14641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.369344][T21328] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 979.373174][T21328] usb 6-1: USB disconnect, device number 32 [ 979.435863][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.123303][T22516] tipc: Enabled bearer , priority 0 [ 980.137388][T22516] syzkaller0: entered promiscuous mode [ 980.146360][T22516] syzkaller0: entered allmulticast mode [ 980.409390][T22517] syzkaller0: entered promiscuous mode [ 980.429414][T22517] syzkaller0: entered allmulticast mode [ 980.488395][T22529] tipc: Resetting bearer [ 980.628512][T22514] tipc: Resetting bearer [ 980.705056][T22514] tipc: Disabling bearer [ 981.355943][T21326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.727599][T22547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.760520][T22547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.799091][T22547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.902196][T22547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.913067][T22547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.029277][T22547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.918611][ T5938] net_ratelimit: 1019 callbacks suppressed [ 983.918630][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.562937][ T6531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.946207][T22560] tipc: Enabling of bearer rejected, failed to enable media [ 984.955494][T22564] syz_tun: entered allmulticast mode [ 985.376965][ T5864] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 985.517809][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.606076][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.675422][ T5864] usb 4-1: config 0 has no interfaces? [ 985.715445][ T5864] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 985.733753][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.766717][ T5864] usb 4-1: Product: syz [ 985.777742][ T5864] usb 4-1: Manufacturer: syz [ 985.785084][ T5864] usb 4-1: SerialNumber: syz [ 985.802416][ T5864] usb 4-1: config 0 descriptor?? [ 985.996268][ T5864] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 986.033812][ T796] usb 4-1: USB disconnect, device number 32 [ 986.145681][ T5864] usb 10-1: Using ep0 maxpacket: 8 [ 986.161897][ T5864] usb 10-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 986.258687][ T5864] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.279594][ T5864] usb 10-1: Product: syz [ 986.287337][ T5864] usb 10-1: Manufacturer: syz [ 986.305298][ T5864] usb 10-1: SerialNumber: syz [ 986.602094][ T5864] usb 10-1: config 0 descriptor?? [ 986.652079][ T5864] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 988.074817][ T5864] pwc: send_video_command error -71 [ 988.136141][ T796] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 988.173440][ T5864] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 988.201478][ T5864] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 988.237217][ T5864] usb 10-1: USB disconnect, device number 37 [ 988.395828][T21328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.555826][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.029963][T22619] syzkaller0: entered promiscuous mode [ 989.036576][ T6531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.115066][T22619] syzkaller0: entered allmulticast mode [ 989.139268][T22623] TC_ACT_REPEAT abuse ? [ 989.570141][T22622] syzkaller0: entered promiscuous mode [ 989.575961][T22622] syzkaller0: entered allmulticast mode [ 990.406374][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.013428][T22643] usb usb8: usbfs: process 22643 (syz.2.4725) did not claim interface 0 before use [ 991.596135][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.881838][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.917455][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.043098][T22601] syz.4.4713 (22601): drop_caches: 1 [ 993.055559][T22600] syz.4.4713 (22600): drop_caches: 1 [ 994.640162][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.806541][ T9319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.435890][T21328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.563723][T22664] netlink: 'syz.5.4730': attribute type 1 has an invalid length. [ 995.643138][T22664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 995.692576][T21326] IPVS: starting estimator thread 0... [ 995.709904][T22667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 995.719479][T22667] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 995.731560][T22667] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 995.819599][T22675] IPVS: using max 31 ests per chain, 74400 per kthread [ 996.105658][T22664] veth1_to_batadv: entered promiscuous mode [ 996.628472][T22664] bond2: (slave veth1_to_batadv): Enslaving as an active interface with a down link [ 996.640676][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.719998][T22684] vlan0: entered allmulticast mode [ 996.734187][T22684] bond2: entered allmulticast mode [ 996.945714][T21326] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 997.120314][T21326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.132923][T21326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.145451][T21326] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 997.158152][T21326] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 997.171826][T21326] usb 3-1: Manufacturer: syz [ 997.188014][T21326] usb 3-1: config 0 descriptor?? [ 997.425769][ T796] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 997.455678][ T5864] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 997.589821][ T796] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 997.613732][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.630304][ T5864] usb 4-1: config 9 has an invalid interface number: 3 but max is 0 [ 997.655103][ T796] usb 5-1: Product: syz [ 997.663813][ T5864] usb 4-1: config 9 has no interface number 0 [ 997.672622][ T796] usb 5-1: Manufacturer: syz [ 997.679931][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.689283][ T5864] usb 4-1: config 9 interface 3 has no altsetting 0 [ 997.696072][ T796] usb 5-1: SerialNumber: syz [ 997.704308][ T5864] usb 4-1: New USB device found, idVendor=0fcf, idProduct=1003, bcdDevice=87.04 [ 997.715383][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.724508][ T796] usb 5-1: config 0 descriptor?? [ 997.734473][ T5864] usb 4-1: Product: syz [ 997.740890][ T5864] usb 4-1: Manufacturer: syz [ 997.749037][ T5864] usb 4-1: SerialNumber: syz [ 998.243931][T22694] netlink: 'syz.3.4737': attribute type 10 has an invalid length. [ 998.354560][T22694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.420246][ T796] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 998.431167][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4737'. [ 998.448635][T21326] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input71 [ 998.470837][T22694] bond0: entered promiscuous mode [ 998.487475][T22694] bond_slave_0: entered promiscuous mode [ 998.494280][T22694] bond_slave_1: entered promiscuous mode [ 998.506543][T22694] dummy0: entered promiscuous mode [ 998.514548][T22694] team0: Port device bond0 added [ 998.534417][T21326] uclogic 0003:256C:006D.0036: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 998.718517][T21326] usb 3-1: USB disconnect, device number 29 [ 999.323179][T22713] fido_id[22713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 999.798966][ T796] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 999.812774][ T796] usb 5-1: USB disconnect, device number 59 [ 999.926682][T22709] team_slave_0: left promiscuous mode [ 999.972200][T22709] team0 (unregistering): Port device team_slave_0 removed [ 1000.012264][T22709] team_slave_1: left promiscuous mode [ 1000.057933][T22709] team0 (unregistering): Port device team_slave_1 removed [ 1000.077787][T22709] bond0: left promiscuous mode [ 1000.095279][T22709] bond_slave_0: left promiscuous mode [ 1000.110169][T22709] bond_slave_1: left promiscuous mode [ 1000.126893][T22709] dummy0: left promiscuous mode [ 1000.157863][T22709] team0 (unregistering): Port device bond0 removed [ 1000.208427][T22717] bond5: (slave dummy0): Releasing active interface [ 1000.215188][T22717] dummy0: left allmulticast mode [ 1000.236160][T22717] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1000.352721][ T5864] hub 4-1:9.3: bad descriptor, ignoring hub [ 1000.360199][ T5864] hub 4-1:9.3: probe with driver hub failed with error -5 [ 1000.416634][ T5864] cp210x 4-1:9.3: cp210x converter detected [ 1000.441640][ T5864] cp210x 4-1:9.3: failed to get vendor val 0x370b size 1: -71 [ 1000.472059][ T5864] cp210x 4-1:9.3: querying part number failed [ 1000.529424][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4744'. [ 1000.558938][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.603026][ T5864] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1000.632589][T22725] syz_tun (unregistering): left allmulticast mode [ 1000.646589][ T5864] usb 4-1: USB disconnect, device number 34 [ 1000.840962][T21326] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1001.020931][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.031590][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1001.050097][ T5864] cp210x 4-1:9.3: device disconnected [ 1001.175645][T21326] usb 3-1: Using ep0 maxpacket: 32 [ 1001.325073][T21326] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1001.336395][T21326] usb 3-1: config 5 has an invalid interface number: 52 but max is 0 [ 1001.345719][T21326] usb 3-1: config 5 has no interface number 0 [ 1001.351967][T21326] usb 3-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1001.711439][T21326] usb 3-1: string descriptor 0 read error: -22 [ 1001.719512][T21326] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 1001.759493][T21326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.850022][T22722] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1001.869603][T21326] aircable 3-1:5.52: aircable converter detected [ 1001.881833][T21326] usb 3-1: aircable converter now attached to ttyUSB0 [ 1002.644334][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.761760][T21326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.818409][T22735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4748'. [ 1002.916423][T22722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1003.046687][T21326] usb 3-1: USB disconnect, device number 30 [ 1003.062190][T21326] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 1003.300973][T21326] aircable 3-1:5.52: device disconnected [ 1003.513904][T22751] syzkaller0: entered promiscuous mode [ 1003.524935][T22751] syzkaller0: entered allmulticast mode [ 1004.739540][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.469463][T22774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4759'. [ 1005.491436][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1005.491448][ T30] audit: type=1804 audit(1768382550.380:760): pid=22772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4758" name="/newroot/277/file1" dev="fuse" ino=1 res=1 errno=0 [ 1005.794602][T22776] bridge9: port 1(veth7) entered blocking state [ 1005.844237][T22776] bridge9: port 1(veth7) entered disabled state [ 1005.869027][T22776] veth7: entered allmulticast mode [ 1005.885752][T22776] veth7: entered promiscuous mode [ 1005.951799][T22774] bridge9: port 2(veth0_to_bond) entered blocking state [ 1005.983225][T22774] bridge9: port 2(veth0_to_bond) entered disabled state [ 1005.999165][T22774] veth0_to_bond: entered allmulticast mode [ 1006.019499][T22774] veth0_to_bond: entered promiscuous mode [ 1006.033206][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1006.133115][ T30] audit: type=1326 audit(1768382551.020:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22777 comm="syz.9.4760" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54e518f749 code=0x0 [ 1006.318827][ T7609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.355764][T21328] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1006.372616][T22780] bridge9: port 3(veth9) entered blocking state [ 1006.394367][T22780] bridge9: port 3(veth9) entered disabled state [ 1006.439934][T22780] veth9: entered allmulticast mode [ 1006.468271][T22780] veth9: entered promiscuous mode [ 1006.686060][ T5864] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1006.846857][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 1006.857248][ T5864] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1006.866122][ T5864] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1007.000842][ T5864] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1007.188285][ T5864] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1007.216008][ T5864] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.271263][T23181] syzkaller0: entered promiscuous mode [ 1007.279938][ T5864] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1007.292550][T23181] syzkaller0: entered allmulticast mode [ 1007.308384][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.325737][T18451] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1007.505791][T18451] usb 6-1: Using ep0 maxpacket: 8 [ 1007.649798][T18451] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 1007.662404][T18451] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1007.674653][T18451] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.701970][T22791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4763'. [ 1007.711983][T18451] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 1007.731377][T22791] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4763'. [ 1007.758147][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.799957][T18451] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1007.810688][ T5864] usb 3-1: GET_CAPABILITIES returned 0 [ 1007.838328][ T5864] usbtmc 3-1:16.0: can't read capabilities [ 1007.846208][T18451] usb 6-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1007.861145][T18451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.010973][T18451] usb 6-1: config 0 descriptor?? [ 1008.245872][ T3912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.477222][T18451] microsoft 0003:045E:00F9.0037: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.5-1/input0 [ 1008.514362][T18451] microsoft 0003:045E:00F9.0037: no inputs found [ 1008.521554][T18451] microsoft 0003:045E:00F9.0037: could not initialize ff, continuing anyway [ 1008.554233][T23184] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 1008.662605][T21328] usb 6-1: USB disconnect, device number 33 [ 1008.766784][T18451] usb 3-1: USB disconnect, device number 31 [ 1009.092549][T23201] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1009.111489][T23201] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 1009.667689][ T5864] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1010.026529][ T5864] usb 3-1: device descriptor read/64, error -71 [ 1010.155845][T21326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.190818][T23218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4777'. [ 1010.365661][ T5864] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1010.530971][ T5864] usb 3-1: device descriptor read/64, error -71 [ 1010.646753][ T5864] usb usb3-port1: attempt power cycle [ 1010.805894][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.045750][ T5864] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1011.206394][ T5864] usb 3-1: device descriptor read/8, error -71 [ 1011.475830][ T5864] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1011.506093][ T3912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.528602][ T5864] usb 3-1: device descriptor read/8, error -71 [ 1011.645927][ T5864] usb usb3-port1: unable to enumerate USB device [ 1012.040879][T23235] netlink: 'syz.3.4781': attribute type 1 has an invalid length. [ 1012.174097][T23235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1012.210979][T23239] macvlan0: entered promiscuous mode [ 1012.236976][T23239] macvlan0: entered allmulticast mode [ 1012.287314][T23235] bond4: (slave ip6gretap0): making interface the new active one [ 1012.322149][T23235] bond4: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1012.866964][ T5864] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1013.025790][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 1013.038664][ T5864] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1013.056675][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1013.093200][ T5864] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1013.222557][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.247368][ T5864] usb 6-1: Product: syz [ 1013.251579][ T5864] usb 6-1: Manufacturer: syz [ 1013.283194][ T5864] usb 6-1: SerialNumber: syz [ 1013.298769][ T5864] usb 6-1: config 0 descriptor?? [ 1013.318893][T23257] syzkaller0: entered promiscuous mode [ 1013.341128][T23257] syzkaller0: entered allmulticast mode [ 1013.362175][ T5864] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1013.395235][ T5864] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1013.856585][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.969083][ T5864] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1013.977588][ T5864] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1013.997281][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.218714][T21326] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1014.399899][T21326] usb 5-1: Using ep0 maxpacket: 16 [ 1014.418492][T21326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.455685][T21326] usb 5-1: config 0 has no interfaces? [ 1014.473439][T21326] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1014.486244][T21326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.514799][T21326] usb 5-1: config 0 descriptor?? [ 1014.630470][ T5864] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1014.640129][ T5864] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1014.747341][T21326] usb 5-1: USB disconnect, device number 60 [ 1014.831995][ T5864] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1014.839777][ T5864] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1014.848122][ T5864] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1014.855215][ T5864] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1015.785982][ T5864] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1015.856065][ T5864] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1015.888800][ T5864] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1015.968360][ T5864] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1015.975334][ T5864] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1015.985391][ T5864] usb 6-1: USB disconnect, device number 34 [ 1016.885155][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.196359][T21328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.198834][T23294] kvm_intel: kvm [23293]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 1017.208214][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.216597][T23294] kvm_intel: kvm [23293]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 1017.217441][T23294] kvm_intel: kvm [23293]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 1017.218301][T23294] kvm_intel: kvm [23293]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 1017.219073][T23294] kvm_intel: kvm [23293]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 1017.219848][T23294] kvm_intel: kvm [23293]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 1017.220648][T23294] kvm_intel: kvm [23293]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 1017.221466][T23294] kvm_intel: kvm [23293]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 1017.222163][T23294] kvm_intel: kvm [23293]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 1017.222865][T23294] kvm_intel: kvm [23293]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 1019.104245][ T30] audit: type=1326 audit(1768382563.990:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.3.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 1019.196359][ T30] audit: type=1326 audit(1768382564.020:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.3.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 1019.271054][ T30] audit: type=1326 audit(1768382564.020:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.3.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 1019.334479][ T30] audit: type=1326 audit(1768382564.020:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.3.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 1019.375693][T21328] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 1019.526413][ T30] audit: type=1326 audit(1768382564.020:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.3.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 1019.589946][ T30] audit: type=1326 audit(1768382564.020:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.3.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 1019.617553][T21328] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1019.633097][T21328] usb 5-1: config 0 has no interface number 0 [ 1019.647854][T21328] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1019.668115][ T30] audit: type=1326 audit(1768382564.020:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.3.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 1019.707706][T21328] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1019.733725][T21328] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1019.756333][ T3912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.818540][ T30] audit: type=1326 audit(1768382564.020:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.3.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 1020.218924][T21328] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1020.240089][T21328] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1020.258435][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.305795][ T30] audit: type=1326 audit(1768382564.020:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.3.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 1020.328335][T21328] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1020.372730][T21328] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1020.415955][ T30] audit: type=1326 audit(1768382564.020:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.3.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903178f749 code=0x7ffc0000 [ 1020.442399][T21328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.457010][T21328] usb 5-1: config 0 descriptor?? [ 1020.465282][T23316] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1020.477095][T23316] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1020.511361][T21328] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1021.030444][T21326] usb 5-1: USB disconnect, device number 61 [ 1021.069410][T21326] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1022.360093][T19330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.276224][T21313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.900309][T23359] loop6: detected capacity change from 0 to 2640 [ 1023.981529][T23359] buffer_io_error: 11 callbacks suppressed [ 1023.981548][T23359] Buffer I/O error on dev loop6, logical block 0, async page read [ 1024.242911][T21326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.417545][T23359] Buffer I/O error on dev loop6, logical block 0, async page read [ 1024.437197][T23359] Buffer I/O error on dev loop6, logical block 0, async page read [ 1024.463502][T23359] Buffer I/O error on dev loop6, logical block 0, async page read [ 1024.491602][T23359] Buffer I/O error on dev loop6, logical block 0, async page read [ 1024.523652][T23359] Buffer I/O error on dev loop6, logical block 0, async page read [ 1024.563241][T23359] Buffer I/O error on dev loop6, logical block 0, async page read [ 1024.676197][T23359] Buffer I/O error on dev loop6, logical block 0, async page read [ 1024.711053][T23359] ldm_validate_partition_table(): Disk read failed. [ 1024.731364][T23359] Buffer I/O error on dev loop6, logical block 0, async page read [ 1024.752310][T23359] Buffer I/O error on dev loop6, logical block 0, async page read [ 1024.782238][T23359] Dev loop6: unable to read RDB block 0 [ 1024.837332][T23369] lo: entered allmulticast mode [ 1024.854188][T23369] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4817'. [ 1024.864879][T23366] lo: left allmulticast mode [ 1024.884933][T23359] loop6: unable to read partition table [ 1024.910306][T23359] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1025.036019][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.052075][T23361] loop6: detected capacity change from 2640 to 524288000 [ 1025.744827][T21326] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1025.907336][T21326] usb 4-1: not running at top speed; connect to a high speed hub [ 1025.917239][T21326] usb 4-1: config 68 has an invalid interface number: 25 but max is 0 [ 1026.257410][T21326] usb 4-1: config 68 has no interface number 0 [ 1026.474377][T21326] usb 4-1: config 68 interface 25 has no altsetting 0 [ 1026.483890][T21313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.804823][T21326] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice=8a.8c [ 1026.845613][T21326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.873901][T21326] usb 4-1: Product: syz [ 1026.885623][T21326] usb 4-1: Manufacturer: syz [ 1026.908075][T21326] usb 4-1: SerialNumber: syz [ 1027.171226][T21326] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:68.25/input/input72 [ 1027.200406][ T5183] bcm5974 4-1:68.25: could not read from device [ 1027.209317][T23393] netlink: 'syz.9.4825': attribute type 1 has an invalid length. [ 1027.228921][ T5183] bcm5974 4-1:68.25: could not read from device [ 1027.239127][T21326] usb 4-1: USB disconnect, device number 36 [ 1027.246763][ T5183] bcm5974 4-1:68.25: could not read from device [ 1027.264563][ T5183] bcm5974 4-1:68.25: could not read from device [ 1027.276907][T23393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1027.392545][T23393] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1027.514484][T23393] vlan2: entered allmulticast mode [ 1027.548489][T23393] veth1: entered allmulticast mode [ 1027.554544][T23402] netlink: 'syz.5.4827': attribute type 3 has an invalid length. [ 1027.565021][T23393] bond1: (slave vlan2): Opening slave failed [ 1027.845644][T21326] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1028.015958][T21326] usb 6-1: Using ep0 maxpacket: 16 [ 1028.040973][T21326] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1028.055655][T21326] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.067037][T21313] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1028.076643][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.165785][T21326] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1028.175992][T21326] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1028.205730][T21326] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1028.227946][T21326] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.237810][T21326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1028.245727][T21313] usb 5-1: Using ep0 maxpacket: 16 [ 1028.247176][T21326] usb 6-1: SerialNumber: syz [ 1028.263648][T23402] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1028.271213][T23402] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1028.283457][T21326] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1028.404958][T23412] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1028.668819][T21313] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1028.683672][T21313] usb 5-1: config 0 has no interface number 0 [ 1028.692021][T21313] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.142734][T21313] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.162749][T21313] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1029.195863][T21313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.280742][T21313] usb 5-1: config 0 descriptor?? [ 1029.564990][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.792385][T21313] holtek_mouse 0003:04D9:A081.0038: item fetching failed at offset 5/8 [ 1029.807334][T21313] holtek_mouse 0003:04D9:A081.0038: hid parse failed: -22 [ 1029.815095][T21313] holtek_mouse 0003:04D9:A081.0038: probe with driver holtek_mouse failed with error -22 [ 1030.602856][T21326] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 1030.668822][T21326] usb 6-1: USB disconnect, device number 35 [ 1031.245734][T21327] usb 5-1: USB disconnect, device number 62 [ 1031.297893][T21326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.786120][T21327] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1031.975467][T21327] usb 5-1: Using ep0 maxpacket: 8 [ 1031.990777][T23443] input: syz0 as /devices/virtual/input/input73 [ 1032.000913][T21327] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1032.033255][T21327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.041525][T21327] usb 5-1: Product: syz [ 1032.045817][T21327] usb 5-1: Manufacturer: syz [ 1032.055801][T21327] usb 5-1: SerialNumber: syz [ 1032.075131][T21327] usb 5-1: config 0 descriptor?? [ 1032.311576][T21327] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1032.683114][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.198750][T21313] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1033.314824][T23455] bond1: (slave dummy0): Releasing active interface [ 1033.335951][T23455] dummy0: left promiscuous mode [ 1033.349880][T23455] dummy0: left allmulticast mode [ 1033.378389][T21313] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1033.394552][T21313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.404614][T23455] bridge_slave_0: left allmulticast mode [ 1033.415748][T23455] bridge_slave_0: left promiscuous mode [ 1033.423559][T21313] usb 3-1: Product: syz [ 1033.438541][T21313] usb 3-1: Manufacturer: syz [ 1033.438642][T23455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.443189][T21313] usb 3-1: SerialNumber: syz [ 1033.494087][T23455] bridge_slave_1: left allmulticast mode [ 1033.525698][T23455] bridge_slave_1: left promiscuous mode [ 1033.551459][T23455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.589836][T23455] bond0: (slave bond_slave_0): Releasing backup interface [ 1033.601865][T23455] bond0: (slave bond_slave_1): Releasing backup interface [ 1033.631697][T23455] team0: Port device team_slave_0 removed [ 1033.662141][T23455] team0: Port device team_slave_1 removed [ 1033.673566][T23455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.706250][T23455] bond2: (slave veth1_to_batadv): Releasing active interface [ 1033.736155][T23455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.774026][T23455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1033.846708][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.903963][T21313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1033.931066][T21313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1034.055660][T21328] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1034.170322][T21327] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1034.235229][T21327] usb 5-1: USB disconnect, device number 63 [ 1034.288536][T21328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.302069][T21328] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1034.312020][T21328] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1034.362167][T21328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.392591][T21328] usb 4-1: config 0 descriptor?? [ 1035.019650][T21327] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1035.164441][T21313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1035.177621][T21313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1035.237800][T21327] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.248406][T21327] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1035.260173][T21327] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1035.270573][T21327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.278916][T21327] usb 5-1: Product: syz [ 1035.283179][T21327] usb 5-1: Manufacturer: syz [ 1035.288250][T21327] usb 5-1: SerialNumber: syz [ 1035.297967][T21327] usb 5-1: config 0 descriptor?? [ 1035.741212][T23482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1035.757862][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.042152][T21313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 1036.079928][T21313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1036.134704][T21313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1036.172782][T21313] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1036.191378][T23492] netlink: 'syz.5.4852': attribute type 10 has an invalid length. [ 1036.234989][T21313] usb 3-1: USB disconnect, device number 36 [ 1036.850098][T23502] syzkaller0: entered promiscuous mode [ 1036.856040][T23502] syzkaller0: entered allmulticast mode [ 1037.295259][T23512] syzkaller0: entered promiscuous mode [ 1037.315902][T23512] syzkaller0: entered allmulticast mode [ 1037.380107][T21313] usb 4-1: USB disconnect, device number 37 [ 1037.867184][ T5864] usb 5-1: USB disconnect, device number 64 [ 1038.317358][T21328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.796036][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.595953][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.873518][T23440] syz.9.4834 (23440) used greatest stack depth: 18816 bytes left [ 1040.316642][T21328] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1040.488708][T21328] usb 4-1: Using ep0 maxpacket: 16 [ 1040.500254][T21328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.511537][T21328] usb 4-1: config 0 has no interfaces? [ 1040.517129][T21328] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1040.536170][T21328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.554211][T21328] usb 4-1: config 0 descriptor?? [ 1040.849322][ T5864] usb 4-1: USB disconnect, device number 38 [ 1041.836668][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.023684][T23515] vlan2: entered promiscuous mode [ 1042.032254][T23515] bridge0: entered promiscuous mode [ 1042.313077][T23549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4864'. [ 1042.369688][T23547] netlink: 'syz.9.4865': attribute type 4 has an invalid length. [ 1043.751992][T21328] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1044.105703][T21328] usb 5-1: Using ep0 maxpacket: 32 [ 1044.114262][T19392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.124063][T21328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.145148][T21328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.165333][T21328] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1044.205978][T21328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.215840][T21328] usb 5-1: config 0 descriptor?? [ 1044.228262][T21328] hub 5-1:0.0: USB hub found [ 1044.588962][T21328] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1044.719567][ T7607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.933104][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.132850][T21328] usbhid 5-1:0.0: can't add hid device: -71 [ 1045.146621][T21328] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1045.180680][T21328] usb 5-1: USB disconnect, device number 65 [ 1045.428834][T21327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.564052][T23576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1046.570468][T23576] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1046.577036][T23576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1046.583201][T23576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1046.589722][T23576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1046.806141][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1046.806157][ T30] audit: type=1804 audit(1768382591.700:777): pid=23596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4876" name="/newroot/319/file1" dev="fuse" ino=1 res=1 errno=0 [ 1046.812451][T23598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4878'. [ 1047.071748][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4877'. [ 1047.538784][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 1047.678780][T23618] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.4884'. [ 1047.996299][ T1131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.997069][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.997714][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.595844][T21328] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 1048.635729][T23591] Bluetooth: hci3: command 0x0406 tx timeout [ 1048.636611][T23626] Bluetooth: hci0: command 0x0406 tx timeout [ 1048.642640][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 1048.654058][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 1048.810919][T21328] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.833058][T21328] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1049.038953][T21328] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1049.061114][T21328] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.079701][T21328] usb 10-1: Product: syz [ 1049.091496][T21328] usb 10-1: Manufacturer: syz [ 1049.106760][T21328] usb 10-1: SerialNumber: syz [ 1049.359015][T21328] usb 10-1: 0:2 : does not exist [ 1049.377651][T21328] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1049.538105][T21328] usb 10-1: USB disconnect, device number 38 [ 1049.739636][T23470] udevd[23470]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.836351][ T7609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.845496][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.028668][T23646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.187012][T23646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.329037][T23646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.384955][T23646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.461770][T23646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.585606][T23646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.677936][T23646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.698253][T23646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.675744][T21312] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1052.875894][T21312] usb 10-1: Using ep0 maxpacket: 32 [ 1052.884687][T21312] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.917577][T21312] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.968134][T21312] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1053.001203][T21312] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.046401][T21312] usb 10-1: config 0 descriptor?? [ 1053.070161][T21312] hub 10-1:0.0: USB hub found [ 1053.497288][T21312] hub 10-1:0.0: 1 port detected [ 1053.925648][ T30] audit: type=1326 audit(1768382598.800:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.9.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e518f749 code=0x7ffc0000 [ 1054.076983][ T30] audit: type=1326 audit(1768382598.800:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.9.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f54e518f749 code=0x7ffc0000 [ 1054.127114][T23664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.175072][ T30] audit: type=1326 audit(1768382598.800:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.9.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e518f749 code=0x7ffc0000 [ 1054.308238][T23664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.329621][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.336303][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.338163][ T30] audit: type=1326 audit(1768382598.800:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.9.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f54e518f749 code=0x7ffc0000 [ 1054.473033][ T30] audit: type=1326 audit(1768382598.800:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.9.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54e512b829 code=0x7ffc0000 [ 1054.535655][ T30] audit: type=1326 audit(1768382598.800:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.9.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e518f749 code=0x7ffc0000 [ 1054.563965][T21312] hub 10-1:0.0: activate --> -90 [ 1054.635443][ T30] audit: type=1326 audit(1768382598.800:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.9.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54e518f34b code=0x7ffc0000 [ 1054.696860][ T30] audit: type=1326 audit(1768382598.800:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.9.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54e518f34b code=0x7ffc0000 [ 1054.885859][T21328] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1054.918584][T21312] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 1054.923165][ T30] audit: type=1326 audit(1768382598.800:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.9.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f54e51c2005 code=0x7ffc0000 [ 1054.941955][ T5864] usb 10-1: USB disconnect, device number 39 [ 1054.955255][T21312] usb 10-1-port1: cannot disable (err = -71) [ 1055.038105][ T30] audit: type=1326 audit(1768382599.000:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23663 comm="syz.9.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e518f749 code=0x7ffc0000 [ 1055.095977][T21328] usb 3-1: Using ep0 maxpacket: 32 [ 1055.114721][T21328] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1055.138535][T21328] usb 3-1: config 0 has no interface number 0 [ 1055.163671][T21328] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1055.187976][T21328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.223936][T21328] usb 3-1: Product: syz [ 1055.233909][T21328] usb 3-1: Manufacturer: syz [ 1055.238929][T23678] picdev_write: 51 callbacks suppressed [ 1055.238946][T23678] kvm: pic: non byte write [ 1055.261283][T21328] usb 3-1: SerialNumber: syz [ 1055.294716][T21328] usb 3-1: config 0 descriptor?? [ 1055.337734][T21328] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1055.364788][T21328] usb 3-1: selecting invalid altsetting 1 [ 1055.398060][T21328] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1055.420335][T21328] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1055.519145][T21328] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1055.564056][T21328] usb 3-1: media controller created [ 1055.598027][T19641] net_ratelimit: 1020 callbacks suppressed [ 1055.598047][T19641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.616623][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.630323][T21328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1055.718810][T23685] tipc: Enabled bearer , priority 0 [ 1055.742550][T23685] syzkaller0: entered promiscuous mode [ 1055.758371][T21328] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1055.784680][T23685] syzkaller0: entered allmulticast mode [ 1055.814980][T21328] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1055.855751][T21328] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1055.919626][T23685] tipc: Resetting bearer [ 1055.949804][T21328] usb 3-1: USB disconnect, device number 37 [ 1056.089211][T23684] tipc: Resetting bearer [ 1056.186465][T23684] tipc: Disabling bearer [ 1056.386014][T23696] tipc: Enabled bearer , priority 0 [ 1056.427370][T23696] syzkaller0: entered promiscuous mode [ 1056.432866][T23696] syzkaller0: entered allmulticast mode [ 1056.518467][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.557815][T23696] tipc: Resetting bearer [ 1056.607099][T23695] tipc: Resetting bearer [ 1056.721523][T23695] tipc: Disabling bearer [ 1056.829367][T23688] syzkaller0: entered promiscuous mode [ 1057.630407][T23719] syzkaller0: entered promiscuous mode [ 1057.680285][T23719] syzkaller0: entered allmulticast mode [ 1058.392267][T23722] tipc: Started in network mode [ 1058.397395][T23722] tipc: Node identity 227fb875e7f4, cluster identity 4711 [ 1058.416711][T23722] tipc: Enabled bearer , priority 0 [ 1058.445301][T23722] syzkaller0: entered promiscuous mode [ 1058.472314][T23722] syzkaller0: entered allmulticast mode [ 1058.897138][T23730] tipc: Resetting bearer [ 1059.343330][T23721] tipc: Resetting bearer [ 1059.574403][T23721] tipc: Disabling bearer [ 1059.609405][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.632818][ T5864] tipc: Node number set to 3314268277 [ 1061.356312][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.373796][T19330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.787571][T21312] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1061.948284][T21312] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1061.996376][T21312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.033661][T21312] usb 4-1: config 0 descriptor?? [ 1062.146830][T23765] netlink: 'syz.2.4923': attribute type 1 has an invalid length. [ 1062.636359][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.766030][T21328] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1062.970362][T21328] usb 6-1: Using ep0 maxpacket: 8 [ 1063.004326][T21328] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1063.032785][T21328] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1063.291277][T21328] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 1063.335736][T21328] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1063.400038][T21328] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.479754][T21328] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1063.575635][T21327] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1063.587262][T21328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.939266][T21327] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1064.029583][T21327] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1064.051212][T21328] usb 6-1: GET_CAPABILITIES returned 0 [ 1064.106157][T21328] usbtmc 6-1:16.0: can't read capabilities [ 1064.117097][T21327] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1064.171097][T21327] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.238160][T23783] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1064.271737][T21327] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1064.394350][T21312] pegasus 4-1:0.0: setup Pegasus II specific registers [ 1064.430252][T23787] [U]  [ 1064.440636][T23787] [U] K{‘ [ 1064.455952][T23787] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖÆ¯¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 1064.463527][T23787] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 1064.480926][T23787] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 1064.501442][T23783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.517853][T23783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.591473][T23787] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)޹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 1065.139072][T23787] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-ɿ߿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 1065.200255][T21327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.209075][T23787] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 1065.231743][T21312] pegasus 4-1:0.0: can't locate MII phy, using default [ 1065.277553][T23787] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 1065.294355][T23787] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 1065.561384][T23787] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆÈ½ [ 1065.577454][T23787] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 1065.649888][T23787] [U] 22½“Æ©ÐÛ©X?0;3U± [ 1065.669001][T23787] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 1065.717980][ T796] usb 6-1: USB disconnect, device number 36 [ 1065.764575][T23787] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 1065.802807][T23787] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 1065.887566][ T5864] usb 10-1: USB disconnect, device number 40 [ 1065.919011][T23787] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 1065.961856][T23787] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 1066.000419][T23787] [U] ¹ EC [ 1066.003737][T23787] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙ߯Ë,ÎLÂ,Õ [ 1066.021228][T23796] tipc: Enabled bearer , priority 0 [ 1066.039117][T23796] syzkaller0: entered promiscuous mode [ 1066.045333][T23796] syzkaller0: entered allmulticast mode [ 1066.057058][T23787] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 1066.110294][T23796] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 1066.160435][T23796] tipc: Resetting bearer [ 1066.196955][T23794] tipc: Resetting bearer [ 1066.282768][T23794] tipc: Disabling bearer [ 1067.116025][ T301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.124180][ T301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.235921][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.530820][T23835] tipc: Enabled bearer , priority 0 [ 1068.550489][T23835] syzkaller0: entered promiscuous mode [ 1068.580448][T23835] syzkaller0: entered allmulticast mode [ 1068.774019][T23835] tipc: Resetting bearer [ 1068.835991][T23834] tipc: Resetting bearer [ 1068.946439][T23834] tipc: Disabling bearer [ 1068.978898][T23851] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4941'. [ 1069.564802][T23865] tipc: Enabled bearer , priority 0 [ 1069.578265][T23865] syzkaller0: entered promiscuous mode [ 1069.589597][T23865] syzkaller0: entered allmulticast mode [ 1069.621125][T23865] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1069.685217][T21327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.745239][T23872] tipc: Resetting bearer [ 1069.960366][T23864] tipc: Resetting bearer [ 1070.347213][T23864] tipc: Disabling bearer [ 1070.929016][T23885] syzkaller0: entered promiscuous mode [ 1070.945684][T23885] syzkaller0: entered allmulticast mode [ 1072.719272][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.878813][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.887361][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.038342][T23913] kvm: kvm [23912]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0xc1) = 0x1 [ 1073.108437][T23913] kvm: kvm [23912]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0xc2) = 0x1 [ 1073.157139][T23913] kvm: kvm [23912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1073.202120][T23913] kvm: kvm [23912]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x11e) = 0x1 [ 1073.266190][T21312] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1073.288964][T23913] kvm: kvm [23912]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x186) = 0x1 [ 1073.332607][T23913] kvm: kvm [23912]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x187) = 0x1 [ 1073.429741][T21312] usb 10-1: Using ep0 maxpacket: 32 [ 1073.441559][T21312] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1073.455677][T21312] usb 10-1: config 0 has no interface number 0 [ 1073.470576][T21312] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1073.489529][T21312] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1073.598552][T23913] kvm_pr_unimpl_wrmsr: 664 callbacks suppressed [ 1073.598567][T23913] kvm_intel: kvm [23912]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x1d9) = 0x1 [ 1073.623980][T21312] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1073.642819][T21312] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.671448][T21312] usb 10-1: Product: syz [ 1073.685472][T21312] usb 10-1: Manufacturer: syz [ 1073.742158][T21312] usb 10-1: SerialNumber: syz [ 1073.750971][T21312] usb 10-1: config 0 descriptor?? [ 1074.631856][T21312] appletouch 10-1:0.85: Geyser mode initialized. [ 1074.675036][T21312] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input74 [ 1075.267766][T21328] usb 10-1: USB disconnect, device number 41 [ 1075.280683][T21328] appletouch 10-1:0.85: input: appletouch disconnected [ 1075.757620][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.028165][T23956] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1076.402187][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1076.402199][ T30] audit: type=1804 audit(1768382621.290:808): pid=23958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4965" name="/newroot/299/file1" dev="fuse" ino=1 res=1 errno=0 [ 1078.046578][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.409892][T23981] tipc: Enabled bearer , priority 0 [ 1078.488117][T23981] syzkaller0: entered promiscuous mode [ 1078.493994][T23981] syzkaller0: entered allmulticast mode [ 1078.637512][ T9587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.730344][T23981] tipc: Resetting bearer [ 1078.738579][T23980] tipc: Resetting bearer [ 1078.757399][T23980] tipc: Disabling bearer [ 1078.795862][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.284857][T21326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.442573][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4974'. [ 1081.007881][T24008] netlink: 'syz.3.4976': attribute type 13 has an invalid length. [ 1081.269442][T24008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.278216][T24008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.733431][T24008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.801451][T24008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.326376][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.923616][ T5938] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.994668][ T5938] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1083.194883][ T5938] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.369708][ T5938] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1083.467674][ T5938] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.476903][ T5938] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1083.486338][ T5938] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.495629][ T5938] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1083.687396][T24039] tipc: Enabled bearer , priority 0 [ 1083.758809][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.770007][T24044] syz_tun: entered allmulticast mode [ 1083.776546][T24044] syz_tun: left allmulticast mode [ 1083.922435][T24039] syzkaller0: entered promiscuous mode [ 1083.988399][T24039] syzkaller0: entered allmulticast mode [ 1084.087256][T24039] tipc: Resetting bearer [ 1084.209110][T24038] tipc: Resetting bearer [ 1084.250483][T24038] tipc: Disabling bearer [ 1084.426671][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.357498][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.372030][T24072] syzkaller0: entered promiscuous mode [ 1085.385632][T24072] syzkaller0: entered allmulticast mode [ 1086.315978][T21326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.829915][T24087] netlink: 'syz.4.4995': attribute type 10 has an invalid length. [ 1086.887596][T24087] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1087.066560][T24090] tipc: Enabled bearer , priority 0 [ 1087.074240][T24090] syzkaller0: entered promiscuous mode [ 1087.086065][T24090] syzkaller0: entered allmulticast mode [ 1087.234770][T24103] tipc: Resetting bearer [ 1087.311061][T24089] tipc: Resetting bearer [ 1087.388011][T24089] tipc: Disabling bearer [ 1087.579792][T21326] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1088.017460][T21326] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1088.035783][T21326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.044067][T21326] usb 4-1: Product: syz [ 1088.050688][T21326] usb 4-1: Manufacturer: syz [ 1088.055909][T21326] usb 4-1: SerialNumber: syz [ 1088.098851][T21326] usb 4-1: config 0 descriptor?? [ 1088.110063][T21326] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 040 [ 1088.245706][T21328] usb 10-1: new full-speed USB device number 42 using dummy_hcd [ 1088.308101][T24109] random: crng reseeded on system resumption [ 1088.416799][T21328] usb 10-1: not running at top speed; connect to a high speed hub [ 1088.426943][T21328] usb 10-1: config 95 has an invalid interface number: 1 but max is 0 [ 1088.435351][T21328] usb 10-1: config 95 has no interface number 0 [ 1088.444027][T21328] usb 10-1: config 95 interface 1 has no altsetting 0 [ 1088.484246][T21328] usb 10-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1088.493880][T21328] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.515712][T21328] usb 10-1: Product: syz [ 1088.528227][T21328] usb 10-1: Manufacturer: syz [ 1088.544315][T21328] usb 10-1: SerialNumber: syz [ 1088.654424][T24114] syzkaller0: entered promiscuous mode [ 1088.662301][T24114] syzkaller0: entered allmulticast mode [ 1088.753434][T21326] i2c i2c-2: failure reading functionality [ 1088.763938][T21326] i2c i2c-2: connected i2c-tiny-usb device [ 1089.089575][T24117] tipc: Enabled bearer , priority 0 [ 1089.097473][T24117] syzkaller0: entered promiscuous mode [ 1089.103039][T24117] syzkaller0: entered allmulticast mode [ 1089.140915][T21328] usb 10-1: USB disconnect, device number 42 [ 1089.152711][T24117] tipc: Resetting bearer [ 1089.236317][T24116] tipc: Resetting bearer [ 1089.296109][T24116] tipc: Disabling bearer [ 1089.355784][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.434759][T24123] fuse: Bad value for 'user_id' [ 1089.444913][T24123] fuse: Bad value for 'user_id' [ 1089.525964][ T7609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.845091][T24135] input: syz0 as /devices/virtual/input/input75 [ 1090.145869][T21328] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1090.169228][T14641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.327691][T21326] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1090.424108][T24148] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1090.451022][T21328] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.462017][T21328] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1090.471306][T21328] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1090.490720][T21328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.512232][T21328] usb 3-1: config 0 descriptor?? [ 1090.525617][T21326] usb 5-1: Using ep0 maxpacket: 16 [ 1090.532976][T21326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.559345][T21326] usb 5-1: config 0 has no interfaces? [ 1090.567618][T21328] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1090.582190][T21326] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1090.593193][T21328] dvb-usb: bulk message failed: -22 (3/0) [ 1090.618259][T21326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.635254][T21328] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1090.651952][T21312] usb 4-1: USB disconnect, device number 40 [ 1090.670174][T21326] usb 5-1: config 0 descriptor?? [ 1090.688304][T21328] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1090.698380][T21328] usb 3-1: media controller created [ 1090.706350][T21327] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 1090.738858][T21328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1090.807869][T21328] dvb-usb: bulk message failed: -22 (6/0) [ 1090.821271][T21328] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1090.839758][T21328] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input76 [ 1090.887423][T21327] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1090.946636][T21328] dvb-usb: schedule remote query interval to 150 msecs. [ 1090.953971][T21327] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.957947][ T796] usb 5-1: USB disconnect, device number 66 [ 1091.034363][T21328] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1091.047544][T21327] usb 10-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1091.195487][T21328] dvb-usb: bulk message failed: -22 (1/0) [ 1091.202480][T21327] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.211908][T21328] dvb-usb: error while querying for an remote control event. [ 1091.348821][T21327] usb 10-1: config 0 descriptor?? [ 1091.386122][T21328] dvb-usb: bulk message failed: -22 (1/0) [ 1091.426388][T21328] dvb-usb: error while querying for an remote control event. [ 1091.610049][T21328] dvb-usb: bulk message failed: -22 (1/0) [ 1091.616139][T21328] dvb-usb: error while querying for an remote control event. [ 1091.648219][T21312] usb 3-1: USB disconnect, device number 38 [ 1091.848513][T21327] usbhid 10-1:0.0: can't add hid device: -71 [ 1091.858414][T21327] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1091.882805][T21327] usb 10-1: USB disconnect, device number 43 [ 1091.935205][T21312] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1092.004112][T24159] kvm: kvm [24158]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x64 [ 1092.036655][T24159] kvm: kvm [24158]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2900 [ 1092.203757][T24167] tipc: Enabled bearer , priority 0 [ 1092.215250][T24167] syzkaller0: entered promiscuous mode [ 1092.221723][T24167] syzkaller0: entered allmulticast mode [ 1092.339339][T24167] tipc: Resetting bearer [ 1092.455886][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.468035][T24166] tipc: Resetting bearer [ 1092.694793][T24166] tipc: Disabling bearer [ 1092.813702][T24180] tipc: Enabled bearer , priority 0 [ 1092.839135][T24181] syzkaller0: entered promiscuous mode [ 1092.844855][T24181] syzkaller0: entered allmulticast mode [ 1092.994056][T24179] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5022'. [ 1093.011671][T24176] tipc: Resetting bearer [ 1093.045316][T24175] tipc: Resetting bearer [ 1093.186018][T21328] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1093.213024][T24175] tipc: Disabling bearer [ 1093.345708][T21328] usb 5-1: Using ep0 maxpacket: 32 [ 1093.360267][T21328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.371739][T21327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.384088][T21328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.410941][T24197] tipc: Enabled bearer , priority 0 [ 1093.432225][T24197] syzkaller0: entered promiscuous mode [ 1093.438229][T24197] syzkaller0: entered allmulticast mode [ 1093.524138][T21328] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1093.590719][T21328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.606317][T24197] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5026'. [ 1093.641816][T21328] usb 5-1: config 0 descriptor?? [ 1093.684896][T24198] tipc: Resetting bearer [ 1093.911219][T24196] tipc: Resetting bearer [ 1094.078563][T24196] tipc: Disabling bearer [ 1094.104003][T24187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.136121][T24187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.212362][T21328] ft260 0003:0403:6030.0039: unknown main item tag 0x7 [ 1094.433755][T21328] ft260 0003:0403:6030.0039: chip code: 6424 8183 [ 1094.481017][T24208] binder: BINDER_SET_CONTEXT_MGR already set [ 1094.507924][T24208] binder: 24207:24208 ioctl 4018620d 200000000100 returned -16 [ 1094.532898][T24208] binder: BINDER_SET_CONTEXT_MGR already set [ 1094.546087][T24208] binder: 24207:24208 ioctl 4018620d 200000004a80 returned -16 [ 1094.637801][T21328] ft260 0003:0403:6030.0039: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1094.837272][T21328] ft260 0003:0403:6030.0039: failed to retrieve status: -32, no wakeup [ 1094.925714][T21326] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1095.150023][T21327] usb 5-1: USB disconnect, device number 67 [ 1095.175624][T21326] usb 6-1: Using ep0 maxpacket: 16 [ 1095.189429][T21326] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1095.211963][T21326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1095.223965][T21328] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1095.330410][T14641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.353230][T21326] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1095.362701][T21326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.370832][T21326] usb 6-1: Product: syz [ 1095.397874][T21326] usb 6-1: Manufacturer: syz [ 1095.402588][T21326] usb 6-1: SerialNumber: syz [ 1095.408853][T21326] usb 6-1: config 0 descriptor?? [ 1095.426632][T21326] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1095.449003][T21326] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1095.459615][T21328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1095.470540][T21328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1095.510006][T21328] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1095.520485][T21328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.528656][T21328] usb 4-1: Product: syz [ 1095.535788][T21328] usb 4-1: Manufacturer: syz [ 1095.540501][T21328] usb 4-1: SerialNumber: syz [ 1095.566581][T21328] usb 4-1: config 0 descriptor?? [ 1095.617635][T21328] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 1095.916551][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.048032][T21326] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1096.058877][T24226] kvm: pic: non byte write [ 1096.064329][T21326] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1096.395888][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.648653][T24237] sit2: entered allmulticast mode [ 1096.746208][T21326] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1096.761758][T21326] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1096.769232][T21326] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1096.836870][T21326] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1096.984425][T21327] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1097.235713][T21327] usb 3-1: Using ep0 maxpacket: 8 [ 1097.246583][T21327] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.269070][T21327] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1097.279039][T21327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.297070][T21327] usb 3-1: Product: syz [ 1097.313646][T21327] usb 3-1: Manufacturer: syz [ 1097.321132][T21327] usb 3-1: SerialNumber: syz [ 1097.354638][T21327] usb 3-1: config 0 descriptor?? [ 1097.435038][T21327] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1097.476281][T21326] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 1097.485259][T21326] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1097.685886][T21326] usb 6-1: USB disconnect, device number 37 [ 1097.716980][ T796] usb 3-1: USB disconnect, device number 39 [ 1097.909193][T21312] usb 4-1: USB disconnect, device number 41 [ 1098.174213][T24256] binder_alloc: 24255: binder_alloc_buf, no vma [ 1099.330105][T21326] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1099.397913][T24280] binder_alloc: 24279: binder_alloc_buf, no vma [ 1099.435981][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.508322][T21326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.596263][T21326] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1099.631996][T21326] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1099.656542][T21326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.696300][T21326] usb 3-1: config 0 descriptor?? [ 1099.756141][T21326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.124953][T24287] syzkaller0: entered promiscuous mode [ 1100.131120][T24287] syzkaller0: entered allmulticast mode [ 1101.037145][ T9587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.046283][ T3491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.499626][T21312] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1101.584722][T24313] binder_alloc: 24311: binder_alloc_buf, no vma [ 1101.676148][T21312] usb 4-1: Using ep0 maxpacket: 16 [ 1101.701775][T21312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.721971][T21312] usb 4-1: config 0 has no interfaces? [ 1101.743087][T21312] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1101.763234][T21312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.792544][T21312] usb 4-1: config 0 descriptor?? [ 1101.832926][T24315] kvm: kvm [24314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1101.851920][T24315] kvm: kvm [24314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x900000000000 [ 1101.904507][T24315] kvm: kvm [24314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x100000000000 [ 1101.917689][T24315] kvm: kvm [24314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000800 [ 1102.178921][T21326] usb 3-1: USB disconnect, device number 40 [ 1102.207805][T21312] usb 4-1: USB disconnect, device number 42 [ 1102.802720][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.135820][ T5864] IPVS: starting estimator thread 0... [ 1103.225762][T24329] IPVS: using max 52 ests per chain, 124800 per kthread [ 1103.265984][T21327] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1103.455652][T21327] usb 4-1: Using ep0 maxpacket: 32 [ 1103.455992][ T5864] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1103.463654][T21327] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1103.514873][T21327] usb 4-1: config 0 has no interface number 0 [ 1103.548480][T21327] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1103.560011][T21327] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1103.569666][T21327] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1103.579087][T21327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.591258][T21327] usb 4-1: Product: syz [ 1103.609659][T21327] usb 4-1: Manufacturer: syz [ 1103.614469][T21327] usb 4-1: SerialNumber: syz [ 1103.638978][T21327] usb 4-1: config 0 descriptor?? [ 1103.673668][ T5864] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1103.689370][ T5864] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.707292][ T5864] usb 10-1: Product: syz [ 1103.717362][ T5864] usb 10-1: Manufacturer: syz [ 1103.739927][ T5864] usb 10-1: SerialNumber: syz [ 1103.759139][ T5864] usb 10-1: config 0 descriptor?? [ 1103.779850][ T5864] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1103.792977][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1103.803740][ T5864] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1103.820722][ T5864] usb 10-1: media controller created [ 1103.849898][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1103.875664][T21326] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1103.956150][ T5864] DVB: Unable to find symbol mt352_attach() [ 1104.026585][T21326] usb 5-1: Using ep0 maxpacket: 16 [ 1104.034106][T21326] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1104.066098][T21326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1104.087149][ T5864] DVB: Unable to find symbol nxt6000_attach() [ 1104.089610][T21326] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1104.107199][T21326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.113648][ T5864] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1104.115466][T21326] usb 5-1: Product: syz [ 1104.129308][T21326] usb 5-1: Manufacturer: syz [ 1104.134043][T21326] usb 5-1: SerialNumber: syz [ 1104.148369][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input78 [ 1104.178778][T21326] usb 5-1: config 0 descriptor?? [ 1104.199033][T21326] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1104.214938][ T5864] dvb-usb: schedule remote query interval to 1000 msecs. [ 1104.218426][T21326] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1104.246181][ T5864] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1104.291062][ T5864] dvb-usb: bulk message failed: -22 (7/0) [ 1104.296984][ T5864] dvb-usb: bulk message failed: -22 (7/0) [ 1104.328544][ T5864] usb 10-1: USB disconnect, device number 44 [ 1104.382827][T21327] appletouch 4-1:0.85: Geyser mode initialized. [ 1104.492064][T21327] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input77 [ 1104.526529][ T5864] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1104.701205][T21327] usb 4-1: USB disconnect, device number 43 [ 1105.161710][T21326] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1105.189741][T21326] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1105.628654][T21327] appletouch 4-1:0.85: input: appletouch disconnected [ 1105.868197][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.038138][T21326] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1106.186490][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1106.193607][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1106.200751][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1106.210779][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1106.221462][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1106.818965][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.829063][T19330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.216277][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 20 [ 1107.226125][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 16 [ 1107.261812][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 12 [ 1107.305781][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 14 [ 1107.330496][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 18 [ 1107.362180][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 22 [ 1107.377223][T21326] em28xx 5-1:0.0: couldn't setup AC97 register 24 [ 1107.394891][T21326] em28xx 5-1:0.0: Binding audio extension [ 1107.401228][T21327] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1107.412241][T21326] em28xx 5-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 1107.422314][T21326] em28xx 5-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 1107.437581][T21329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.479019][T21326] em28xx 5-1:0.0: alt 0 doesn't exist on interface 7 [ 1107.657257][T24362] loop9: detected capacity change from 0 to 7 [ 1107.665804][T24362] Dev loop9: unable to read RDB block 7 [ 1107.671463][T24362] loop9: AHDI p3 p4 [ 1107.690747][T24362] loop9: partition table partially beyond EOD, truncated [ 1107.704663][T21326] usb 5-1: USB disconnect, device number 68 [ 1107.717988][T24362] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1107.738515][T21326] em28xx 5-1:0.0: Disconnecting em28xx [ 1107.765613][T21329] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1107.857015][T21326] em28xx 5-1:0.0: Closing audio extension [ 1107.894015][T21326] em28xx 5-1:0.0: Freeing device [ 1107.924782][T23470] udevd[23470]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1107.944549][T21327] usb 3-1: no configurations [ 1107.950137][T21327] usb 3-1: can't read configurations, error -22 [ 1108.026414][T21329] usb 6-1: Using ep0 maxpacket: 16 [ 1108.041732][T21329] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1108.068979][T21329] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.095762][T21328] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1108.116414][T21329] usb 6-1: config 0 has no interface number 0 [ 1108.131508][T21329] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1108.184963][T21329] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1108.195226][T21329] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1108.338620][T21329] usb 6-1: Product: syz [ 1108.349339][T21328] usb 10-1: config 0 has an invalid interface number: 122 but max is 0 [ 1108.360731][T21329] usb 6-1: SerialNumber: syz [ 1108.369598][T21328] usb 10-1: config 0 has no interface number 0 [ 1108.417346][T21329] usb 6-1: config 0 descriptor?? [ 1108.422396][T21328] usb 10-1: config 0 interface 122 has no altsetting 0 [ 1108.434940][T21329] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 1108.450859][T21328] usb 10-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1108.461334][T21328] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.480677][T21328] usb 10-1: Product: syz [ 1108.484968][T21328] usb 10-1: Manufacturer: syz [ 1108.495584][T21328] usb 10-1: SerialNumber: syz [ 1108.520973][T21328] usb 10-1: config 0 descriptor?? [ 1109.631449][ T30] audit: type=1326 audit(1768382654.430:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24388 comm="syz.4.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb3b8f749 code=0x7ffc0000 [ 1109.764338][ T30] audit: type=1326 audit(1768382654.430:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24388 comm="syz.4.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb3b8f749 code=0x7ffc0000 [ 1109.812389][ T30] audit: type=1326 audit(1768382654.430:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24388 comm="syz.4.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7fb3b8f749 code=0x7ffc0000 [ 1109.976960][ T30] audit: type=1326 audit(1768382654.430:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24388 comm="syz.4.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb3b8f749 code=0x7ffc0000 [ 1110.024247][ T30] audit: type=1326 audit(1768382654.430:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24388 comm="syz.4.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7fb3b8f749 code=0x7ffc0000 [ 1110.477251][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.515771][ T30] audit: type=1326 audit(1768382654.430:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24388 comm="syz.4.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb3b8f749 code=0x7ffc0000 [ 1110.539827][ T30] audit: type=1326 audit(1768382654.430:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24388 comm="syz.4.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f7fb3b8f749 code=0x7ffc0000 [ 1110.569521][ T30] audit: type=1326 audit(1768382654.470:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24388 comm="syz.4.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb3b8f749 code=0x7ffc0000 [ 1110.592619][ T30] audit: type=1326 audit(1768382654.490:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24388 comm="syz.4.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb3b8f749 code=0x7ffc0000 [ 1110.803892][ T5864] usb 6-1: USB disconnect, device number 38 [ 1111.484221][T21312] usb 10-1: USB disconnect, device number 45 [ 1111.526761][T21312] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1111.570293][T24409] syzkaller0: entered promiscuous mode [ 1111.576013][T24409] syzkaller0: entered allmulticast mode [ 1112.176088][T21327] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1112.387408][T21327] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.636687][T19148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.645065][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.704060][T21327] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1112.718008][T21327] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.737235][T21327] usb 10-1: config 0 descriptor?? [ 1112.808787][T21327] pwc: Askey VC010 type 2 USB webcam detected. [ 1113.264564][T21327] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1113.271824][T21329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.280780][T21327] pwc: recv_control_msg error -32 req 02 val 2700 [ 1113.344197][T21327] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1113.359191][T21327] pwc: recv_control_msg error -32 req 04 val 1000 [ 1113.368576][T21327] pwc: recv_control_msg error -32 req 04 val 1300 [ 1113.381126][T21327] pwc: recv_control_msg error -32 req 04 val 1400 [ 1113.390542][T21327] pwc: recv_control_msg error -32 req 02 val 2000 [ 1113.399097][T21327] pwc: recv_control_msg error -32 req 02 val 2100 [ 1113.406815][T21327] pwc: recv_control_msg error -32 req 04 val 1500 [ 1113.430529][T21327] pwc: recv_control_msg error -32 req 02 val 2500 [ 1113.440156][T21327] pwc: recv_control_msg error -32 req 02 val 2400 [ 1113.459898][T21327] pwc: recv_control_msg error -32 req 02 val 2600 [ 1113.472276][T21327] pwc: recv_control_msg error -32 req 02 val 2900 [ 1113.487050][T21327] pwc: recv_control_msg error -32 req 02 val 2800 [ 1113.709594][T21327] pwc: recv_control_msg error -71 req 04 val 1200 [ 1113.732438][T21327] pwc: Registered as video103. [ 1113.768799][T21327] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input79 [ 1113.793184][T21327] usb 10-1: USB disconnect, device number 46 [ 1115.634488][T24465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5093'. [ 1115.771647][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.778279][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.260136][T24478] trusted_key: encrypted_key: insufficient parameters specified [ 1116.371136][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.814830][T24499] netlink: 'syz.2.5101': attribute type 13 has an invalid length. [ 1118.285763][ T5864] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1118.477641][T14641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.494623][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.510178][T19148] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.535784][T19148] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.551642][T19148] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.557596][ T5864] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 1118.564785][T19148] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.600778][ T5864] usb 5-1: config 7 has no interface number 0 [ 1118.625273][ T5864] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1118.654949][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.668374][ T5864] usb 5-1: Product: syz [ 1118.677438][ T5864] usb 5-1: Manufacturer: syz [ 1118.687154][ T5864] usb 5-1: SerialNumber: syz [ 1118.699480][T24507] tipc: Enabled bearer , priority 0 [ 1118.713018][T24507] syzkaller0: entered promiscuous mode [ 1118.719568][T24507] syzkaller0: entered allmulticast mode [ 1118.751002][T24507] tipc: Resetting bearer [ 1118.759271][T24506] tipc: Resetting bearer [ 1118.809013][T24506] tipc: Disabling bearer [ 1119.081485][T24512] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1119.435999][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.487634][ T5864] as10x_usb: device has been detected [ 1119.494523][ T5864] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1119.518344][ T5864] usb 5-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1119.609051][ T5864] as10x_usb: error during firmware upload part1 [ 1119.625285][ T5864] Registered device Elgato EyeTV DTT Deluxe [ 1119.835924][T24504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5102'. [ 1119.863335][T24529] random: crng reseeded on system resumption [ 1120.083638][ T5864] usb 5-1: USB disconnect, device number 69 [ 1120.850983][ T5864] Unregistered device Elgato EyeTV DTT Deluxe [ 1120.852247][ T5864] as10x_usb: device has been disconnected [ 1120.891124][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.455609][T21327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.565710][T21312] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1122.876672][T21312] usb 10-1: Using ep0 maxpacket: 32 [ 1122.914641][T21312] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1122.968180][T21312] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1123.084436][T21312] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.258610][T21312] usb 10-1: Product: syz [ 1123.263188][T21312] usb 10-1: Manufacturer: syz [ 1123.570422][T21312] usb 10-1: SerialNumber: syz [ 1123.584180][T21312] usb 10-1: config 0 descriptor?? [ 1123.613247][T21312] usb 10-1: can't set config #0, error -71 [ 1123.759891][T21312] usb 10-1: USB disconnect, device number 47 [ 1124.171370][ T1131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.179740][ T7609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.543629][T24570] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5118'. [ 1125.136544][T24580] sctp: [Deprecated]: syz.9.5122 (pid 24580) Use of int in max_burst socket option deprecated. [ 1125.136544][T24580] Use struct sctp_assoc_value instead [ 1125.541694][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.922667][T24596] xt_hashlimit: size too large, truncated to 1048576 [ 1126.867798][T24611] random: crng reseeded on system resumption [ 1127.935816][T21327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.321978][T24620] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5129'. [ 1128.394936][T24620] loop2: detected capacity change from 0 to 7 [ 1128.402989][T24620] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1128.437331][T24620] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1128.581440][T24620] Dev loop2: unable to read RDB block 7 [ 1128.625925][T24620] loop2: unable to read partition table [ 1128.660267][T24620] loop2: partition table beyond EOD, truncated [ 1128.743770][T24620] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1128.905629][T21328] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 1129.200949][T21328] usb 10-1: config 8 has an invalid interface number: 223 but max is 0 [ 1129.222231][T21328] usb 10-1: config 8 has no interface number 0 [ 1129.240424][T21328] usb 10-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1129.276719][T21328] usb 10-1: config 8 interface 223 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1129.356129][T21328] usb 10-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1129.377604][T21328] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.400684][T21328] usb 10-1: Product: syz [ 1129.421861][T21328] usb 10-1: Manufacturer: syz [ 1129.454328][T21328] usb 10-1: SerialNumber: syz [ 1129.544629][ T5198] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1129.570849][ T5198] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1129.588233][ T5198] Dev loop2: unable to read RDB block 7 [ 1129.600192][ T5198] loop2: unable to read partition table [ 1129.698757][ T5198] loop2: partition table beyond EOD, truncated [ 1130.423011][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.446891][T21328] usb 10-1: USB disconnect, device number 48 [ 1130.453847][T14641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.955800][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.966694][T24648] tipc: Enabled bearer , priority 0 [ 1130.986754][T24648] syzkaller0: entered promiscuous mode [ 1131.006071][T24648] syzkaller0: entered allmulticast mode [ 1131.038401][T24648] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1131.189177][T24657] tipc: Resetting bearer [ 1131.245300][T24647] tipc: Resetting bearer [ 1131.266174][T21328] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1131.340201][T24647] tipc: Disabling bearer [ 1131.378194][T24659] syzkaller0: entered promiscuous mode [ 1131.426480][T24659] syzkaller0: entered allmulticast mode [ 1131.446234][T21328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.495833][T21328] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1131.504940][T21328] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1131.596009][T21328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.614625][T21328] usb 5-1: config 0 descriptor?? [ 1131.742369][T24667] tipc: Enabled bearer , priority 0 [ 1131.837673][T24659] tipc: Resetting bearer [ 1131.870413][T24658] tipc: Resetting bearer [ 1132.732946][T24658] tipc: Disabling bearer [ 1132.901305][T21328] tipc: Node number set to 3874893526 [ 1133.995923][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.352306][T24698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5146'. [ 1134.465769][T21328] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1134.639532][T21328] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.649945][T21328] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1134.695630][T21328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.702376][ T5864] usb 5-1: USB disconnect, device number 70 [ 1134.790997][T21328] usb 6-1: config 0 descriptor?? [ 1134.869598][T24701] netlink: 'syz.4.5148': attribute type 10 has an invalid length. [ 1134.880487][T21328] pwc: Askey VC010 type 2 USB webcam detected. [ 1135.395260][T21328] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1135.423456][T24707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5149'. [ 1135.440659][T24707] bond0: entered promiscuous mode [ 1135.448364][T24707] bond0: left promiscuous mode [ 1135.515901][T21328] pwc: recv_control_msg error -32 req 02 val 2700 [ 1135.524519][ T301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.536453][T21328] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1135.543502][T21328] pwc: recv_control_msg error -32 req 04 val 1000 [ 1135.556696][T21328] pwc: recv_control_msg error -32 req 04 val 1300 [ 1135.576529][T24707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5149'. [ 1135.589535][T24707] bond0: entered promiscuous mode [ 1135.595309][T24707] bond0: left promiscuous mode [ 1135.600672][T21328] pwc: recv_control_msg error -32 req 04 val 1400 [ 1135.657209][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.723724][T21328] pwc: recv_control_msg error -32 req 02 val 2000 [ 1135.760855][T21328] pwc: recv_control_msg error -32 req 02 val 2100 [ 1135.776376][T21328] pwc: recv_control_msg error -32 req 04 val 1500 [ 1135.801798][T21328] pwc: recv_control_msg error -32 req 02 val 2500 [ 1135.810539][T21328] pwc: recv_control_msg error -32 req 02 val 2400 [ 1135.818135][T21328] pwc: recv_control_msg error -32 req 02 val 2600 [ 1135.827023][T21328] pwc: recv_control_msg error -32 req 02 val 2900 [ 1135.843834][T21328] pwc: recv_control_msg error -32 req 02 val 2800 [ 1135.918058][T24714] netlink: 'syz.3.5151': attribute type 12 has an invalid length. [ 1136.053382][T21328] pwc: recv_control_msg error -71 req 04 val 1200 [ 1136.071300][T21328] pwc: Registered as video103. [ 1136.082578][T21328] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input80 [ 1136.142223][T21328] usb 6-1: USB disconnect, device number 39 [ 1136.618144][T24720] netlink: 'syz.3.5152': attribute type 9 has an invalid length. [ 1136.629641][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5152'. [ 1136.679987][T24720] macvlan1: entered promiscuous mode [ 1136.685453][T24720] hsr0: entered promiscuous mode [ 1136.690897][T24720] macvlan1: entered allmulticast mode [ 1136.696434][T24720] hsr0: entered allmulticast mode [ 1136.701546][T24720] hsr_slave_0: entered allmulticast mode [ 1136.707389][T24720] hsr_slave_1: entered allmulticast mode [ 1136.885830][T21327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.425685][T21312] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1138.585694][T21312] usb 4-1: Using ep0 maxpacket: 16 [ 1138.600335][T21312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.626139][T21312] usb 4-1: config 0 has no interfaces? [ 1138.631667][T21312] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1138.660608][T21312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.699596][T21312] usb 4-1: config 0 descriptor?? [ 1138.795881][T21327] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1138.944248][T21312] usb 4-1: USB disconnect, device number 44 [ 1138.960561][T24747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.969015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.977966][T21327] usb 10-1: Using ep0 maxpacket: 32 [ 1138.995286][T21327] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1139.008525][T24747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.019579][T21327] usb 10-1: config 0 has no interface number 0 [ 1139.027143][T21327] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1139.043357][T21327] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1139.064476][T21327] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.076483][T21327] usb 10-1: Product: syz [ 1139.093947][T21327] usb 10-1: Manufacturer: syz [ 1139.098820][T21327] usb 10-1: SerialNumber: syz [ 1139.155708][T21327] usb 10-1: config 0 descriptor?? [ 1139.174803][T21327] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1139.217977][T21327] em28xx 10-1:0.132: Video interface 132 found: [ 1139.869239][T21327] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1139.928273][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.969998][T24760] [ 1139.970009][T24760] ===================================================== [ 1139.970016][T24760] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1139.970036][T24760] syzkaller #0 Tainted: G L [ 1139.970046][T24760] ----------------------------------------------------- [ 1139.970053][T24760] syz.4.5165/24760 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1140.007481][T24760] ffff8880592c9468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150 [ 1140.007601][T24760] [ 1140.007601][T24760] and this task is already holding: [ 1140.007607][T24760] ffffffff8e783b38 (kbd_event_lock){....}-{3:3}, at: kbd_event+0xd2/0x3fa0 [ 1140.007655][T24760] which would create a new lock dependency: [ 1140.007660][T24760] (kbd_event_lock){....}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 1140.007684][T24760] [ 1140.007684][T24760] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1140.007690][T24760] (&dev->event_lock#2){..-.}-{3:3} [ 1140.007703][T24760] [ 1140.007703][T24760] ... which became SOFTIRQ-irq-safe at: [ 1140.007709][T24760] lock_acquire+0x107/0x340 [ 1140.007720][T24760] _raw_spin_lock_irqsave+0x40/0x60 [ 1140.007760][T24760] input_event+0x76/0xe0 [ 1140.007779][T24760] xpad360_process_packet+0x1fe/0xdd0 [ 1140.007793][T24760] xpad_irq_in+0x1583/0x25f0 [ 1140.007805][T24760] __usb_hcd_giveback_urb+0x376/0x540 [ 1140.007818][T24760] dummy_timer+0x85f/0x45b0 [ 1140.007833][T24760] __hrtimer_run_queues+0x51c/0xc30 [ 1140.007844][T24760] hrtimer_run_softirq+0x187/0x2b0 [ 1140.007856][T24760] handle_softirqs+0x22b/0x7c0 [ 1140.007865][T24760] __irq_exit_rcu+0x60/0x150 [ 1140.007874][T24760] irq_exit_rcu+0x9/0x30 [ 1140.007882][T24760] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1140.007910][T24760] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1140.007922][T24760] finish_task_switch+0x242/0x940 [ 1140.007937][T24760] __schedule+0x14a3/0x4fd0 [ 1140.007947][T24760] preempt_schedule_irq+0x4d/0xa0 [ 1140.007955][T24760] irqentry_exit+0x5e3/0x670 [ 1140.007964][T24760] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1140.007974][T24760] unwind_next_frame+0x881/0x23d0 [ 1140.007984][T24760] arch_stack_walk+0x11c/0x150 [ 1140.007994][T24760] stack_trace_save+0x9c/0xe0 [ 1140.008007][T24760] kasan_save_track+0x3e/0x80 [ 1140.008020][T24760] kasan_save_free_info+0x46/0x50 [ 1140.008032][T24760] __kasan_slab_free+0x5c/0x80 [ 1140.008041][T24760] kmem_cache_free+0x197/0x620 [ 1140.008054][T24760] do_sys_openat2+0x15a/0x200 [ 1140.008092][T24760] __x64_sys_openat+0x138/0x170 [ 1140.008104][T24760] do_syscall_64+0xec/0xf80 [ 1140.008118][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.008131][T24760] [ 1140.008131][T24760] to a SOFTIRQ-irq-unsafe lock: [ 1140.008136][T24760] (tasklist_lock){.+.+}-{3:3} [ 1140.008147][T24760] [ 1140.008147][T24760] ... which became SOFTIRQ-irq-unsafe at: [ 1140.008152][T24760] ... [ 1140.008154][T24760] lock_acquire+0x107/0x340 [ 1140.008163][T24760] _raw_read_lock+0x36/0x50 [ 1140.008171][T24760] __do_wait+0xde/0x740 [ 1140.008183][T24760] do_wait+0x1e8/0x4f0 [ 1140.008195][T24760] kernel_wait+0xab/0x170 [ 1140.008207][T24760] call_usermodehelper_exec_work+0xbe/0x230 [ 1140.008216][T24760] process_scheduled_works+0xad1/0x1770 [ 1140.008225][T24760] worker_thread+0x8a0/0xda0 [ 1140.008235][T24760] kthread+0x711/0x8a0 [ 1140.008245][T24760] ret_from_fork+0x510/0xa50 [ 1140.008253][T24760] ret_from_fork_asm+0x1a/0x30 [ 1140.008265][T24760] [ 1140.008265][T24760] other info that might help us debug this: [ 1140.008265][T24760] [ 1140.008269][T24760] Chain exists of: [ 1140.008269][T24760] &dev->event_lock#2 --> kbd_event_lock --> tasklist_lock [ 1140.008269][T24760] [ 1140.008289][T24760] Possible interrupt unsafe locking scenario: [ 1140.008289][T24760] [ 1140.008293][T24760] CPU0 CPU1 [ 1140.008297][T24760] ---- ---- [ 1140.008300][T24760] lock(tasklist_lock); [ 1140.008308][T24760] local_irq_disable(); [ 1140.008312][T24760] lock(&dev->event_lock#2); [ 1140.008323][T24760] lock(kbd_event_lock); [ 1140.008331][T24760] [ 1140.008334][T24760] lock(&dev->event_lock#2); [ 1140.008344][T24760] [ 1140.008344][T24760] *** DEADLOCK *** [ 1140.008344][T24760] [ 1140.008348][T24760] 5 locks held by syz.4.5165/24760: [ 1140.008355][T24760] #0: ffff88802a1fb118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1140.008381][T24760] #1: ffff888029fa7230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1140.008410][T24760] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1140.008436][T24760] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1140.008459][T24760] #4: ffffffff8e783b38 (kbd_event_lock){....}-{3:3}, at: kbd_event+0xd2/0x3fa0 [ 1140.008483][T24760] [ 1140.008483][T24760] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1140.008489][T24760] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1140.008505][T24760] IN-SOFTIRQ-W at: [ 1140.008512][T24760] lock_acquire+0x107/0x340 [ 1140.008521][T24760] _raw_spin_lock_irqsave+0x40/0x60 [ 1140.008534][T24760] input_event+0x76/0xe0 [ 1140.008546][T24760] xpad360_process_packet+0x1fe/0xdd0 [ 1140.008559][T24760] xpad_irq_in+0x1583/0x25f0 [ 1140.008571][T24760] __usb_hcd_giveback_urb+0x376/0x540 [ 1140.008584][T24760] dummy_timer+0x85f/0x45b0 [ 1140.008598][T24760] __hrtimer_run_queues+0x51c/0xc30 [ 1140.008609][T24760] hrtimer_run_softirq+0x187/0x2b0 [ 1140.008620][T24760] handle_softirqs+0x22b/0x7c0 [ 1140.008630][T24760] __irq_exit_rcu+0x60/0x150 [ 1140.008639][T24760] irq_exit_rcu+0x9/0x30 [ 1140.008648][T24760] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1140.008657][T24760] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1140.008667][T24760] finish_task_switch+0x242/0x940 [ 1140.008680][T24760] __schedule+0x14a3/0x4fd0 [ 1140.008688][T24760] preempt_schedule_irq+0x4d/0xa0 [ 1140.008704][T24760] irqentry_exit+0x5e3/0x670 [ 1140.008714][T24760] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1140.008724][T24760] unwind_next_frame+0x881/0x23d0 [ 1140.008735][T24760] arch_stack_walk+0x11c/0x150 [ 1140.008745][T24760] stack_trace_save+0x9c/0xe0 [ 1140.008759][T24760] kasan_save_track+0x3e/0x80 [ 1140.008768][T24760] kasan_save_free_info+0x46/0x50 [ 1140.008821][T24760] __kasan_slab_free+0x5c/0x80 [ 1140.008831][T24760] kmem_cache_free+0x197/0x620 [ 1140.008840][T24760] do_sys_openat2+0x15a/0x200 [ 1140.008853][T24760] __x64_sys_openat+0x138/0x170 [ 1140.008869][T24760] do_syscall_64+0xec/0xf80 [ 1140.008879][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.008888][T24760] INITIAL USE at: [ 1140.008895][T24760] lock_acquire+0x107/0x340 [ 1140.008903][T24760] _raw_spin_lock_irqsave+0x40/0x60 [ 1140.008922][T24760] input_inject_event+0xa5/0x340 [ 1140.008934][T24760] kbd_led_trigger_activate+0xbc/0x100 [ 1140.008946][T24760] led_trigger_set+0x52d/0x950 [ 1140.008990][T24760] led_trigger_set_default+0x260/0x2a0 [ 1140.009002][T24760] led_classdev_register_ext+0x73d/0x960 [ 1140.009018][T24760] input_leds_connect+0x517/0x790 [ 1140.009032][T24760] input_register_device+0xd00/0x1170 [ 1140.009046][T24760] atkbd_connect+0x73b/0xa50 [ 1140.009061][T24760] serio_driver_probe+0x82/0xd0 [ 1140.009070][T24760] really_probe+0x26d/0xad0 [ 1140.009110][T24760] __driver_probe_device+0x18c/0x320 [ 1140.009120][T24760] driver_probe_device+0x4f/0x240 [ 1140.009136][T24760] __driver_attach+0x349/0x650 [ 1140.009146][T24760] bus_for_each_dev+0x233/0x2b0 [ 1140.009184][T24760] serio_handle_event+0x1f9/0x8d0 [ 1140.009194][T24760] process_scheduled_works+0xad1/0x1770 [ 1140.009203][T24760] worker_thread+0x8a0/0xda0 [ 1140.009213][T24760] kthread+0x711/0x8a0 [ 1140.009224][T24760] ret_from_fork+0x510/0xa50 [ 1140.009233][T24760] ret_from_fork_asm+0x1a/0x30 [ 1140.009252][T24760] } [ 1140.009256][T24760] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 1140.009271][T24760] -> (kbd_event_lock){....}-{3:3} { [ 1140.009286][T24760] INITIAL USE at: [ 1140.009293][T24760] lock_acquire+0x107/0x340 [ 1140.009302][T24760] _raw_spin_lock_irqsave+0x40/0x60 [ 1140.009321][T24760] vt_reset_unicode+0x2b/0x1a0 [ 1140.009330][T24760] reset_vc+0x68/0x1b0 [ 1140.009372][T24760] vc_init+0x70/0x4a0 [ 1140.009384][T24760] con_init+0x385/0x9c0 [ 1140.009397][T24760] console_init+0xfc/0x3f0 [ 1140.009409][T24760] start_kernel+0x227/0x3d0 [ 1140.009419][T24760] x86_64_start_reservations+0x24/0x30 [ 1140.009431][T24760] x86_64_start_kernel+0x143/0x1c0 [ 1140.009442][T24760] common_startup_64+0x13e/0x147 [ 1140.009454][T24760] } [ 1140.009457][T24760] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1140.009494][T24760] ... acquired at: [ 1140.009498][T24760] _raw_spin_lock+0x2e/0x40 [ 1140.009511][T24760] kbd_event+0xd2/0x3fa0 [ 1140.009520][T24760] input_handle_events_default+0xd4/0x1a0 [ 1140.009535][T24760] input_pass_values+0x288/0x890 [ 1140.009545][T24760] input_event_dispose+0x330/0x6b0 [ 1140.009557][T24760] input_inject_event+0x1dd/0x340 [ 1140.009568][T24760] evdev_write+0x2fc/0x480 [ 1140.009578][T24760] vfs_write+0x27e/0xb30 [ 1140.009613][T24760] ksys_write+0x145/0x250 [ 1140.009621][T24760] do_syscall_64+0xec/0xf80 [ 1140.009631][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.009646][T24760] [ 1140.009649][T24760] [ 1140.009649][T24760] the dependencies between the lock to be acquired [ 1140.009653][T24760] and SOFTIRQ-irq-unsafe lock: [ 1140.009673][T24760] -> (tasklist_lock){.+.+}-{3:3} { [ 1140.009689][T24760] HARDIRQ-ON-R at: [ 1140.009695][T24760] lock_acquire+0x107/0x340 [ 1140.009710][T24760] _raw_read_lock+0x36/0x50 [ 1140.009719][T24760] __do_wait+0xde/0x740 [ 1140.009731][T24760] do_wait+0x1e8/0x4f0 [ 1140.009744][T24760] kernel_wait+0xab/0x170 [ 1140.009761][T24760] call_usermodehelper_exec_work+0xbe/0x230 [ 1140.009777][T24760] process_scheduled_works+0xad1/0x1770 [ 1140.009787][T24760] worker_thread+0x8a0/0xda0 [ 1140.009797][T24760] kthread+0x711/0x8a0 [ 1140.009809][T24760] ret_from_fork+0x510/0xa50 [ 1140.009817][T24760] ret_from_fork_asm+0x1a/0x30 [ 1140.009829][T24760] SOFTIRQ-ON-R at: [ 1140.009840][T24760] lock_acquire+0x107/0x340 [ 1140.009849][T24760] _raw_read_lock+0x36/0x50 [ 1140.009857][T24760] __do_wait+0xde/0x740 [ 1140.009869][T24760] do_wait+0x1e8/0x4f0 [ 1140.009880][T24760] kernel_wait+0xab/0x170 [ 1140.009897][T24760] call_usermodehelper_exec_work+0xbe/0x230 [ 1140.009906][T24760] process_scheduled_works+0xad1/0x1770 [ 1140.009915][T24760] worker_thread+0x8a0/0xda0 [ 1140.009924][T24760] kthread+0x711/0x8a0 [ 1140.009935][T24760] ret_from_fork+0x510/0xa50 [ 1140.009943][T24760] ret_from_fork_asm+0x1a/0x30 [ 1140.009955][T24760] INITIAL USE at: [ 1140.009961][T24760] lock_acquire+0x107/0x340 [ 1140.009974][T24760] _raw_write_lock_irq+0x3d/0x50 [ 1140.010015][T24760] copy_process+0x2185/0x3950 [ 1140.010026][T24760] kernel_clone+0x21e/0x820 [ 1140.010036][T24760] user_mode_thread+0xdd/0x140 [ 1140.010052][T24760] rest_init+0x23/0x300 [ 1140.010064][T24760] start_kernel+0x381/0x3d0 [ 1140.010073][T24760] x86_64_start_reservations+0x24/0x30 [ 1140.010086][T24760] x86_64_start_kernel+0x143/0x1c0 [ 1140.010098][T24760] common_startup_64+0x13e/0x147 [ 1140.010114][T24760] INITIAL READ USE at: [ 1140.010121][T24760] lock_acquire+0x107/0x340 [ 1140.010130][T24760] _raw_read_lock+0x36/0x50 [ 1140.010137][T24760] __do_wait+0xde/0x740 [ 1140.010149][T24760] do_wait+0x1e8/0x4f0 [ 1140.010161][T24760] kernel_wait+0xab/0x170 [ 1140.010173][T24760] call_usermodehelper_exec_work+0xbe/0x230 [ 1140.010181][T24760] process_scheduled_works+0xad1/0x1770 [ 1140.010196][T24760] worker_thread+0x8a0/0xda0 [ 1140.010205][T24760] kthread+0x711/0x8a0 [ 1140.010215][T24760] ret_from_fork+0x510/0xa50 [ 1140.010223][T24760] ret_from_fork_asm+0x1a/0x30 [ 1140.010235][T24760] } [ 1140.010238][T24760] ... key at: [] tasklist_lock+0x18/0x40 [ 1140.010304][T24760] ... acquired at: [ 1140.010308][T24760] _raw_read_lock+0x36/0x50 [ 1140.010321][T24760] send_sigurg+0x12b/0x420 [ 1140.010370][T24760] sk_send_sigurg+0x6c/0x2e0 [ 1140.010389][T24760] queue_oob+0x420/0x4f0 [ 1140.010399][T24760] unix_stream_sendmsg+0xc32/0xde0 [ 1140.010407][T24760] __sock_sendmsg+0x21c/0x270 [ 1140.010420][T24760] ____sys_sendmsg+0x52d/0x820 [ 1140.010435][T24760] ___sys_sendmsg+0x21f/0x2a0 [ 1140.010445][T24760] __sys_sendmmsg+0x227/0x430 [ 1140.010456][T24760] __x64_sys_sendmmsg+0xa0/0xc0 [ 1140.010466][T24760] do_syscall_64+0xec/0xf80 [ 1140.010475][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.010484][T24760] [ 1140.010487][T24760] -> (&f_owner->lock){....}-{3:3} { [ 1140.010507][T24760] INITIAL USE at: [ 1140.010513][T24760] lock_acquire+0x107/0x340 [ 1140.010521][T24760] _raw_write_lock_irq+0x3d/0x50 [ 1140.010530][T24760] __f_setown+0x67/0x370 [ 1140.010547][T24760] generic_setlease+0xb6c/0xea0 [ 1140.010577][T24760] do_fcntl_add_lease+0x34d/0x460 [ 1140.010594][T24760] fcntl_setlease+0x123/0x180 [ 1140.010604][T24760] do_fcntl+0x867/0x1a50 [ 1140.010617][T24760] __se_sys_fcntl+0xc8/0x150 [ 1140.010630][T24760] do_syscall_64+0xec/0xf80 [ 1140.010645][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.010654][T24760] INITIAL READ USE at: [ 1140.010660][T24760] lock_acquire+0x107/0x340 [ 1140.010669][T24760] _raw_read_lock_irqsave+0x48/0x60 [ 1140.010682][T24760] send_sigio+0x38/0x370 [ 1140.010694][T24760] kill_fasync+0x24d/0x4d0 [ 1140.010706][T24760] lease_break_callback+0x26/0x30 [ 1140.010718][T24760] __break_lease+0x6e3/0x1490 [ 1140.010728][T24760] do_dentry_open+0x73a/0x1420 [ 1140.010739][T24760] vfs_open+0x3b/0x340 [ 1140.010755][T24760] path_openat+0x340e/0x3dd0 [ 1140.010763][T24760] do_filp_open+0x1fa/0x410 [ 1140.010776][T24760] do_sys_openat2+0x121/0x200 [ 1140.010789][T24760] __x64_sys_openat+0x138/0x170 [ 1140.010805][T24760] do_syscall_64+0xec/0xf80 [ 1140.010816][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.010825][T24760] } [ 1140.010829][T24760] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1140.010846][T24760] ... acquired at: [ 1140.010850][T24760] _raw_read_lock_irqsave+0x48/0x60 [ 1140.010858][T24760] send_sigio+0x38/0x370 [ 1140.010870][T24760] kill_fasync+0x24d/0x4d0 [ 1140.010887][T24760] lease_break_callback+0x26/0x30 [ 1140.010898][T24760] __break_lease+0x6e3/0x1490 [ 1140.010908][T24760] do_dentry_open+0x73a/0x1420 [ 1140.010918][T24760] vfs_open+0x3b/0x340 [ 1140.010928][T24760] path_openat+0x340e/0x3dd0 [ 1140.010941][T24760] do_filp_open+0x1fa/0x410 [ 1140.010949][T24760] do_sys_openat2+0x121/0x200 [ 1140.010960][T24760] __x64_sys_openat+0x138/0x170 [ 1140.010970][T24760] do_syscall_64+0xec/0xf80 [ 1140.010984][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.010993][T24760] [ 1140.010996][T24760] -> (&new->fa_lock){....}-{3:3} { [ 1140.011011][T24760] INITIAL USE at: [ 1140.011016][T24760] lock_acquire+0x107/0x340 [ 1140.011029][T24760] _raw_write_lock_irq+0x3d/0x50 [ 1140.011039][T24760] fasync_remove_entry+0xf1/0x1c0 [ 1140.011051][T24760] lease_modify+0x1ca/0x3c0 [ 1140.011061][T24760] locks_remove_file+0x4bf/0xe20 [ 1140.011071][T24760] __fput+0x3ab/0xa70 [ 1140.011087][T24760] task_work_run+0x1d4/0x260 [ 1140.011099][T24760] exit_to_user_mode_loop+0xef/0x4e0 [ 1140.011108][T24760] do_syscall_64+0x2c1/0xf80 [ 1140.011118][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.011127][T24760] INITIAL READ USE at: [ 1140.011133][T24760] lock_acquire+0x107/0x340 [ 1140.011142][T24760] _raw_read_lock_irqsave+0x48/0x60 [ 1140.011152][T24760] kill_fasync+0x199/0x4d0 [ 1140.011171][T24760] lease_break_callback+0x26/0x30 [ 1140.011183][T24760] __break_lease+0x6e3/0x1490 [ 1140.011194][T24760] do_dentry_open+0x73a/0x1420 [ 1140.011205][T24760] vfs_open+0x3b/0x340 [ 1140.011217][T24760] path_openat+0x340e/0x3dd0 [ 1140.011225][T24760] do_filp_open+0x1fa/0x410 [ 1140.011233][T24760] do_sys_openat2+0x121/0x200 [ 1140.011244][T24760] __x64_sys_openat+0x138/0x170 [ 1140.011261][T24760] do_syscall_64+0xec/0xf80 [ 1140.011270][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.011280][T24760] } [ 1140.011283][T24760] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1140.011294][T24760] ... acquired at: [ 1140.011298][T24760] _raw_read_lock_irqsave+0x48/0x60 [ 1140.011306][T24760] kill_fasync+0x199/0x4d0 [ 1140.011318][T24760] __start_tty+0x18c/0x220 [ 1140.011335][T24760] tty_send_xchar+0x1d2/0x4d0 [ 1140.011375][T24760] tty_ioctl+0x9c6/0xde0 [ 1140.011388][T24760] __se_sys_ioctl+0xfc/0x170 [ 1140.011401][T24760] do_syscall_64+0xec/0xf80 [ 1140.011411][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.011420][T24760] [ 1140.011423][T24760] -> (&tty->flow.lock){....}-{3:3} { [ 1140.011443][T24760] INITIAL USE at: [ 1140.011449][T24760] lock_acquire+0x107/0x340 [ 1140.011458][T24760] _raw_spin_lock_irqsave+0x40/0x60 [ 1140.011471][T24760] start_tty+0x20/0x70 [ 1140.011483][T24760] n_tty_set_termios+0xa7c/0x10c0 [ 1140.011494][T24760] tty_set_termios+0xda4/0x17e0 [ 1140.011506][T24760] set_termios+0x516/0x6c0 [ 1140.011523][T24760] tty_mode_ioctl+0x47e/0x740 [ 1140.011535][T24760] tty_ioctl+0x9c6/0xde0 [ 1140.011544][T24760] __se_sys_ioctl+0xfc/0x170 [ 1140.011557][T24760] do_syscall_64+0xec/0xf80 [ 1140.011571][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.011580][T24760] } [ 1140.011584][T24760] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1140.011596][T24760] ... acquired at: [ 1140.011600][T24760] _raw_spin_lock_irqsave+0x40/0x60 [ 1140.011613][T24760] stop_tty+0x2f/0x150 [ 1140.011624][T24760] kbd_event+0x2b9f/0x3fa0 [ 1140.011633][T24760] input_handle_events_default+0xd4/0x1a0 [ 1140.011643][T24760] input_pass_values+0x288/0x890 [ 1140.011654][T24760] input_event_dispose+0x330/0x6b0 [ 1140.011671][T24760] input_inject_event+0x1dd/0x340 [ 1140.011682][T24760] evdev_write+0x2fc/0x480 [ 1140.011691][T24760] vfs_write+0x27e/0xb30 [ 1140.011699][T24760] ksys_write+0x145/0x250 [ 1140.011707][T24760] do_syscall_64+0xec/0xf80 [ 1140.011716][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.011725][T24760] [ 1140.011728][T24760] [ 1140.011728][T24760] stack backtrace: [ 1140.011738][T24760] CPU: 0 UID: 0 PID: 24760 Comm: syz.4.5165 Tainted: G L syzkaller #0 PREEMPT(full) [ 1140.011752][T24760] Tainted: [L]=SOFTLOCKUP [ 1140.011761][T24760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1140.011768][T24760] Call Trace: [ 1140.011786][T24760] [ 1140.011792][T24760] dump_stack_lvl+0xe8/0x150 [ 1140.011804][T24760] __lock_acquire+0x2a95/0x2cf0 [ 1140.011824][T24760] ? stop_tty+0x2f/0x150 [ 1140.011836][T24760] lock_acquire+0x107/0x340 [ 1140.011845][T24760] ? stop_tty+0x2f/0x150 [ 1140.011860][T24760] _raw_spin_lock_irqsave+0x40/0x60 [ 1140.011873][T24760] ? stop_tty+0x2f/0x150 [ 1140.011886][T24760] stop_tty+0x2f/0x150 [ 1140.011899][T24760] kbd_event+0x2b9f/0x3fa0 [ 1140.011911][T24760] ? __pfx_kbd_event+0x10/0x10 [ 1140.011925][T24760] ? finish_task_switch+0x23d/0x940 [ 1140.011939][T24760] ? lockdep_hardirqs_on+0x7b/0x110 [ 1140.011949][T24760] ? __lock_acquire+0x6b6/0x2cf0 [ 1140.011960][T24760] ? __lock_acquire+0x6b6/0x2cf0 [ 1140.011970][T24760] ? __lock_acquire+0x6b6/0x2cf0 [ 1140.011984][T24760] ? __lock_acquire+0x6b6/0x2cf0 [ 1140.011996][T24760] ? __lock_acquire+0x6b6/0x2cf0 [ 1140.012005][T24760] ? input_pass_values+0x8d/0x890 [ 1140.012014][T24760] ? lock_acquire+0x107/0x340 [ 1140.012028][T24760] ? input_pass_values+0x8d/0x890 [ 1140.012038][T24760] input_handle_events_default+0xd4/0x1a0 [ 1140.012050][T24760] ? input_pass_values+0x8d/0x890 [ 1140.012059][T24760] input_pass_values+0x288/0x890 [ 1140.012074][T24760] ? input_handle_event+0x70c/0xf30 [ 1140.012087][T24760] input_event_dispose+0x330/0x6b0 [ 1140.012100][T24760] input_inject_event+0x1dd/0x340 [ 1140.012118][T24760] ? input_inject_event+0xb6/0x340 [ 1140.012132][T24760] evdev_write+0x2fc/0x480 [ 1140.012144][T24760] ? __pfx_evdev_write+0x10/0x10 [ 1140.012159][T24760] ? bpf_lsm_file_permission+0x9/0x20 [ 1140.012205][T24760] ? security_file_permission+0x75/0x290 [ 1140.012241][T24760] ? rw_verify_area+0x255/0x4d0 [ 1140.012254][T24760] ? __pfx_evdev_write+0x10/0x10 [ 1140.012264][T24760] vfs_write+0x27e/0xb30 [ 1140.012281][T24760] ? __pfx_vfs_write+0x10/0x10 [ 1140.012290][T24760] ? __fget_files+0x2a/0x420 [ 1140.012344][T24760] ? __fget_files+0x2a/0x420 [ 1140.012355][T24760] ? __fget_files+0x3a0/0x420 [ 1140.012366][T24760] ? __fget_files+0x2a/0x420 [ 1140.012379][T24760] ksys_write+0x145/0x250 [ 1140.012388][T24760] ? __pfx_ksys_write+0x10/0x10 [ 1140.012405][T24760] do_syscall_64+0xec/0xf80 [ 1140.012415][T24760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.012425][T24760] ? trace_irq_disable+0x37/0x100 [ 1140.012437][T24760] ? clear_bhb_loop+0x60/0xb0 [ 1140.012452][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.012463][T24760] RIP: 0033:0x7f7fb3b8f749 [ 1140.012474][T24760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1140.012488][T24760] RSP: 002b:00007f7fb49b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1140.012499][T24760] RAX: ffffffffffffffda RBX: 00007f7fb3de5fa0 RCX: 00007f7fb3b8f749 [ 1140.012508][T24760] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 1140.012515][T24760] RBP: 00007f7fb3c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1140.012525][T24760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.012532][T24760] R13: 00007f7fb3de6038 R14: 00007f7fb3de5fa0 R15: 00007f7fb3f0fa28 [ 1140.012542][T24760] [ 1140.094744][T21327] em28xx 10-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1140.094774][T21327] em28xx 10-1:0.132: board has no eeprom [ 1140.100172][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.100186][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.145847][T21327] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1140.145875][T21327] em28xx 10-1:0.132: analog set to bulk mode. [ 1140.145911][T21329] em28xx 10-1:0.132: Registering V4L2 extension [ 1140.154896][T21327] usb 10-1: USB disconnect, device number 49 [ 1140.155241][T21327] em28xx 10-1:0.132: Disconnecting em28xx [ 1140.235434][T21329] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1140.235451][T21329] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1140.235459][T21329] em28xx 10-1:0.132: No AC97 audio processor [ 1140.236217][T21329] usb 10-1: Decoder not found [ 1140.236227][T21329] em28xx 10-1:0.132: failed to create media graph [ 1140.236238][T21329] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1140.236716][T21329] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1140.236745][T21327] em28xx 10-1:0.132: Closing input extension [ 1140.237897][T21327] em28xx 10-1:0.132: Freeing device [ 1141.357001][T21327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.357356][T19392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.307050][T19330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.395842][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.436138][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.046011][T14641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.054163][ T301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog