last executing test programs: 12m52.670086929s ago: executing program 32 (id=856): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0x1469, &(0x7f00000000c0)={0x0, 0xc05, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) 11m51.72307753s ago: executing program 33 (id=1357): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x100000000, {0xb, 0xcbff, 0x0, {0x5, 0x4, 0x3, 0x6c, 0x7, 0x3, 0x3, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x40) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 11m27.910421911s ago: executing program 34 (id=1489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000340)="9a02000701660f38806b5bf367f08056000af08333c1ba4300edba4000ec0fc75dbb260f0d9100800fae9a0e00260f01c2", 0x31}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10, 0x1, 0x0, 0x2, 0x9, 0x1, 0x0, 0x7f, 0x1049, 0x0, 0xff, 0xef, 0x0, '\x00', 0x6d}) 10m54.273001453s ago: executing program 35 (id=1723): r0 = socket$kcm(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x9, 0x80000, 0xffffffff) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @mcast2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="ffa88387", 0x4}], 0x1}, 0x40810) 10m33.410063321s ago: executing program 5 (id=1912): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="388219d25a8985d3a909841c8e956469a15e906a4fad26298b696426a81fcf0d6134c5dfa3dac33b6ea4c5d859c2e1333584935ed9d80c184939089e0cb436417aef5dcfb0c878732c6827d278c2910d390115e202c3162f4711bda810555b179a84d7df9f870f6c7510312f0255ce1bef6e875780543aaaebfbdf8208ee5dfd0de60437108b819a35569013870ba0bd0700000000000000c69ac3d0f174042b37d31f7821f65636376ab7bac88a99fc39c60286cac8d3edb5ac4c768a68a43fc77a52adea3b7397aaa2433cad989958c9a6118c72006208f95199efe7d08508913b00711053120551466066aebc0f3f5c6fdb9693ae6c2dc5fa839b808b8789cb1f88514918a6aa1d1a76eb131ebf84a0edaa97fbbcff14101f79a159222f4b4f31942f18bd6f1d393d3e298803a8435d214fe2f7bb31e02e2a75370bffa78d6752c8a6221b50162f7ec7174c258e4b65bf2797b4f7b7fec7488a0675990a075f7ec74b93fd845a6a9e12b0baeda5c81ce23be3b4cc15b493d4b9ae40736c55fcb8266f33760fd09c80bee60e1d5269770dd67c34d6c7ee57d67558f6421b3002c66df981a3114be6e62d4ff999c7985aa767f0a073eb499257c7b1b977f18dfae99f3be0664bb0c0d96fe4f3b1df5d904744570d01b517cccdbf17dada77ad37099ff69c040c0826cb23a80391f341749f2c21c32b5977b796b6af2d7194f1af44f2e0a84bf102b28dff97fa723c6792e16807939429c921dcd26d375fe58c59bb76e3d5227a5c4e2331337c3592a7d84ac45b1bd268a9d66fc2fd03aa23a7bcd7ab711c4fca2958883260b5d5741b145717012d4aa15f2d49b54660a46ec7cd7f9181213acb61074c65189bda02ac65f0e916f9b9260fc4cfc4bad08afb07fde1c2dfbe7807835958ac127021a7a2da901700483f8e5809a51fcb9a455fcc58d4dd8745ad4af3567fa9ee1b8750543117a970bd98d2595da38f3ea455b1611d32870677b0e0605ac387ca068892e1fb81411f901a1137ab9f5b78d350aeec44957e54e28f9ceb6d5ce046237b979ce4f7e7211167a6d3a3e99b151c08bc2a1593174e18196290e16e517e3ac66dceb7b1cabca97c38a6aefe048aff9fb203e1e58e5343062cd36b65198005d0b8ae336a47e8e4372a73aee7131804013d24e3d9bcd5ae2dd7baf036d571ba12ea7f17976e3e20887d8f24db24b2eb3c5e3f3b9ca8611ad4f4be7aa435c9641f290fb478168d3e204edb8181eebe3acb2552ddfa1f01d368d6604c03f84cbe78ce58284dc3b99aef5936adce8fb81118af0ef5a236391b9856bed6d1bc6cf02990c48b7f6c917efdab113ce0851f87258fb0d3f8633c6d41f33cf76f54492c4a1dcd4459153cd28c6473351371c73d73dd8f9a22f175959febadb76a866a9625b926fa1a12b32ba97df3c2e3b5d6893fab9a6352f168c423b38db9d13895afe3a017d27c84b7c20363f4e8a81f0af52c5368b856ecab23f52cf87f1ee3f73bdefc424b253c9c55f91df8a02b7df35a7c7defb7d260e4edf040503ed18f16aaf742b2c30ffb7f0108a48f50a7e603e24e0399c309781689118b2f1c23721e2528a3f020a4a43cf5439d169b4c116c284aac82ca2a5cecafb97d9dffb2b56af3cd73fe9ca2553ad33c12add00f01fbf7e11f8b30d3bee0096418b1bfdf2f458d8534c3660da46483bcf884088c171d105ff05e441d018dcc495eb35ea1f921f98ad1f5a0bc0f5cf69450b70bbb2a24d427511baf0638d3b4da0fbdcbe126e2e9e415b81fb12239b424f8f553d73520aff5f212fad8a15760759dd4726bd2d05eda93ddb10cc2ae01977d1030480fddea6045be4a5983fb67a263bdb86f722592880e4feaf9767dc5352cd898da96b647eacb41d7c97a1e2bf1e48b548172a06ff21962e79ff3724b94c3e339dae7ac1e67225846da5e1399639885fea22620c9501dbb4b8ec62292c1b8392e20ad72bdd72c85d5aff8e7432117097bb4cc173de0f8dfed12134024d92c2c8512cbb96b31f156d759770467abf602e3a580bb0ee26137229e11df6986f33c8de3921b81ecc56f600f6fbe39787b72293d567c3d396ea4d65baa3fae1a25df344c5f33ec1fdcafefc0bee2c5cdf59dbb0408e99ca27f7a6872bfd2c20e11bd8c5b9a38fa98f30b5a56eb3dd10be3cfc60f43264a40ba7e91676920540b87d9b4f88b59f6ed8b66d5144930f0f4d3748084923b27082d8a175f955687cc1598d02937af997018a871db6e0c1db1e2e4431e452cdb0110c65bea7da6c8a9e4a66f0957fcdf1b8c7cb4d808b896ff217db472709690bf7ff4d4ca912017fd57812e1dac1c4d1db8d5113739e917bfba37581118e950ba1a77aa124b4de0611ab834f8a82794bbd0b0b14ef60031642a6bfe152975b1aee3b466d3d9780c0c3b47aacaa8630a117b25409bb49af1f4b6105f0002b84325dce613054b6402d68e16bf3baa7ec6e9bc39cf324759f92cb82492e9b653015f1d795145fa911ed77ac5acbcff00cbbc2db04d2753c937dac0d09dbba128dc2f5c5918febb6ffaca8feb5bdd2c54853b9efe9b93f5356ab3bfe67bad1985e4c7e32c23e47140c540acdf30aaa966627923dc904f334a309789e17af70c2094ae28375a9414233115a635bb783ff422cd130b9efd41dd1c667d571241dab5d773f83e897787094f130f51c6c34f5af6d67ec94e57c5f9c37aba10f0a0433fa55b6ca2ce88b5ff1f44985312efc85fd31cfbf2412431763ec5ed6f39a799171aad1db74fa5c04295f5476446e5c148ddd3062a8ec4e773dba59139e9d0eb72b327cdc6b306bd475ca92ee5310d72c0906faab2950cec8f8619e009cb8c52e75fbec8aa4ce2736b3326583d365da32284f2b5f5d3c849623d15da5e6b2d780de22cf3504e5f06bc502a174db330d72214849ebd6887bdf4e7763db928b159698ef4e0755946d3a3508f92f332dae105a4c177d3ece1c7360dbade67e339934509e2f38b4f5022f5584255163d152f07b987ba838e45d1e62f14e46c45fe9e8a34dc4ba572081e96e9a33f31509d9bd0a362dace52d3a877fd238890d658ff776224609529e4ad4dc5d9138b3a2750dcafbd04de7d3d94d2b00128db71571ca361e4e257dcbecafa1f236c5c7990a37933a62ad28f575d5641b672fbd6b67b52075cc8daf420e4fe703326c05795ec388f6bfcdefeedf0d50617e086f749f7c37aaae655c5e059cdf0a1d2140273b3e6a22f6f79f843e3a4d05e92565260d354d068a71cc9ac41556e795c84291490821f5e5134ec03faf8b1073b774eb6e81a48f16ab2c2b4ecc0ca758cfcf4d2301f524a2dafa7a1a0cccf08b325dde92ee365c23ac818e673e60d887f8a24e3395e02379341b2a21959d01812f2d2de3eed3616e1d38249b4ccb0bfff4049725324c5d3dae738673e8849a889badf69237f98878efdb3c3136db8a902b83a7fbf62f08501f1e55c2fdee54fbb8e824648e58bd8f45e729261c6e75637e454b14b3e7175ef81551e9ce6609d7b7e9e53467aec2ce5b34a1761ad6a510838bf2611722885251732ba1aa8782a4316619bd49194fc0ecb67b3ec0f199e6af276bfa9cae0769d2779f6579792dd100bbc9b8bcd94bfe7bf1fb985789917c2d83b14a8b028d79236e0b01f1cfa00b34554148643a9ec25053baa4b56a1dfec6c84c1767989f2a400beaf4373daaa7f578846ba90de1bf47a921a0dd4f22746ea82800bb2d51bb80d916148b1fbe8e7ebb69cf11c8bf588e2a0b95f6984e866c623a9015371d5d3495a3f3d9b42ee7828f1a3dce118a648342d0b0b8e17dc9cbc95c16fc7410f5a7ade7bf921279611e6f2cec5c945e4115142075287203b65f8a3b14d026c465b83a4447891dacbc37de3f23b801abd1a628973b5858a9fcfcb1c3923eaddc6fa3787f28f5ed0f2e1df91bf9d7396891b4efbe008e0818cb57d3eb178844e98db8b09fc859c11427adb4a92630aafc2ce7ae644f077bbfe3a899b6014be74be9277177d10c72f0b13998fb666af0cf0b28757c5ae8f5021c00adb414d16aea5cb23f22c7f526d8266e4b67b85f124704769e1187c3415acbf81cb3c2d5cc04d95edbd75bfdd32847e984a55d4dc1a7d3781bad2b6b62a576c10ff471e107add2a74e59ab11071bf5fb57c0cc34a45dc8796fe47000811cfea6cfb22c22e2b4656efd5ced8da97ca0179a6c3a4d58a7bd77260516107a9a72036c92c2dc800d825c3f45c6123a0332d37d7e29f84184e19decc59102950da0b0cef36160153f5a453c9c7fcfe2e145aae343fb9bb726bc3aefb9a604708d3ab1c5f51228ef8987a00ab2abfee2f3c1a38c48797035d43f74d1d6ac26df34926ce8d95d1d57f9e442398822b5014367dd8dde2db00ea5972dc8e782a7a193744d3bfa0298f353207e442716d26ba943821a6b0d2e112bd7033d7df3c99f0d875dca45f466567c198c16039b00f1125b77c1c560ac21ca70db4a642ed58f5f55db9acf206fcb3adb31731d9efb1b7dd9cc124858bc8fd9fe2651e31f152f05d2be376f3854d3de9dc464541bbdab3902773b3b5b2a14a20c0e80ae3a2ca02ddb584fab1767af0428969d4a9035cef9092d8d3bb48b8be88bac57d53c6e50b07fa51e0d9351159eb97741e09f55317c802fdb0cb172fa79b2ad25fd55613dbcad1f070a407facbcce6a229f4bc88de1ab99dea251a677209e9bc08fdb2e0299535beea1189044ab8c69c9196fb9d39b6c609c0c815ec929a01cd974d08b6f0e301991101ccb8c7e591f9cf1dd6fb6cfa17d6925d13bf18508103c44a52efb3701176d31e34207aed48792f5d7c4ddb6bb3bf6f0869f528363b7e0650b06b0e4caf53dc30157e80ae1e2432b60a1c64088eec7013a213ed65340adddf6940d277e87802729c3a6dc9c3d5919d835fd55642e15ffce4a9bd8553be5ec276d0867311f2b0e11173eedf0d7d5dcac0d44f8076ffd9ce8e90f828c4443c8b602db35ca19220f2cbc295e8fda0602e6437a46abc775da4237bede18196bb1e1106220235fd2072fa4375fd8bffa037afeddedc4477b315799176a23f47f48afc652fff5083c917ed1b4097cddd186921531357cd0da18996a152639692f5a2bf4c7745c3b640d7ca69e236edca95934c36ca4b9236d9cbbd3f248b948c942f65dfce17167628b4eb0c5893512c2d8439812bcea8d5fe6a229264723b66e4f2cb6f970139415440dde9946c5ad40032a1c5a18c248d35b73100d8f38aac9c5c302354a9db4e8d99a2d845f54a767c4a0623d40b998e28d454aff7defc9bb4cd3673374a33e641a6614c6b5546b3f70ed288f53def2e49baa32d1afb93b4c04a22b5c9ac3a23f1e0cb423eab40f51e2b3c170b501dc517abbac962784e1bd151815494d04e336ae2f16064ca27c7d776f8c5974a76e9b3d313446336e696e24202b2cb94603e2929906ad4000b13f0f7e7ecf6c2d7243e12d0aba4fb5d4a30de4e2c5a0ea8ade6d79bef8dead7b49ceaf6d7157a427382570771040c084c9feba727019c3b03dae0c5880b0a2dbd8150b743f987b5019b421c5d164150592ae0646217618c92e7876e6c4a2b0ecdfde08f04265e0bfa096a2d6f83953af12209e892a9a326368e0270f8e669ed5aca72579d1d6b806eaba059bb28c7f80fc1ce39b994e6816cac5df5cf9d40582bf9301b12deeb09a2eeab9c8a83a7d44d04a87ae0d4a590cb5f5e3824dc381fc56aca6787be5899aa3694f3b9a872b61dd5876c0f8ff3c81f38b4e52792254edfb954b157abd7b2ae2f4f8caee5b78886894e467e38a93c26cbc546022371b44360a317513341933a0db7ba88929844489e51259a489854f8160ad46594a19cbe799515f396168505520a5288d00f8093d3aef119d94a7863e67c9a7d6f900ba9834fd886044513ee1853713c2a4b5121487db6e7424a0b7f19895e5cf5e41e69c34b3378bae46e2e1c7d29c1cfe1bd0370bc2c0649ea144cd1d4d40fa57160cf856f3fb3dd3cd9ff014b4194837af58189305226b534e1a82297adb14e7af42693fa5065873cbb7fd7ceef5a41d8a63c1ec4a0b214182c5ee3cb9430f6dd7cd57fa56e1b6df932c683905f111867e5bc229bedbb3099a72644d96c38aef3e93268dcab401a2882f1f48c63dc068fc102adf0c8e8a1debdf454919cf7042c6b80955bd63cbc27d785e06ef360feb725748e8359e1fe6d64851ad9faf834d28e6273db6830eb655e6ca3d0d437dee2bd6d0ffbe9aac4e54af0e8436ab653f8d6580acb7388634f342b36fac1feb35526eeeb8602a31a65843c18a9bd463c365e42192f6aadaa1a6e4991e9340258532f4f4811788d8662925405b76db6aba7965aee669441818c5e96a3d945d81baebd00ba2d97414f1840b3dfc7d34d9fb13877d241744cad6a367dea3ff5c4f29fd41e06f85c67c614cfa307463b3a8550a5a31cadc8c7111f1236c9113b18c631cf9ede683818be932fc0c8f389457a05c1b02e7a380b27b10853c79d9495ffa702aa01a1953f269c952e4ee95b001c5ebbba33c902a7d3aa81ac9ff01b1f9ed97a6f280f3caae24cf236e41993cf991e7d8f3ff50a173997179a190d92a26beaef64eae0ebf824b485962089f8675c2cc176c2c052948176937a4074f2506edb7e60a65149ab319f76fff07cfde46f6799869202d735e5ae9f91f4d23150de807efd933ecab245fe128554664fc8a3f411a9e45e050ea40c68e45f57403dc62b3a6908df7f6d8cf9ef45133e56b5682757415093b49b86630758075103fe98f1d380f58829b796b9ea4f06499beaa81108976a3a70174c3542eb2130070b1c4354166049b412b2256be40a9d20e18a2600540e1e1c15549892310c09870dbf70874be181a0ed4009592bea754fe30ff3cd96a551071d7ce21c6cfd3e449dd8c39bd97ed47b16bf00096578342112fd1aaef915962aa9a3141276c7442aab367fdaa02b2db13bb1e1be5c7486464196541d584096200520a6a57a228466fef61e2f6f678ba9f3733f6ae80bdd6bf67dda5b13bb7c8d05d20825566ee3ddfb9c94dc270aebe3d5a24933ba6befcb65226de3f2d8fc6fb518a36bb655289d2daa616121a4ce08c9f4effc5127c90d93369d8345357c67e3bdc024263fd43d090b8f1643c75236ce000ba02001c5974035f733ecb05f35d3d205027b393b4bf33dd86050a9e2c8f779de8947a38ee7b2b2b39d427cf48a359f10bc0fbd50763c8f4727ba82a55f6c2e944b71f8e05626bef8e7598c55cd4e587686446adf394282e312d48e02b9ce324b8523b33978c9ed7e67b886479c8c36d136d276b34de843ccb98d624daee93cd3d5db695189a5b1f730091b6339d8ecb93485f9091b46e998ff1efad6d647a2b6d5f4647e84835cb1d863386a337c9ef4ec0ad827fd0acff7498422f8277052c53f0a7001b3771a19241b1d14021d6dbae44dc7fd92365012d1ced3c4f494699e398c404d8ffa5a6cd824e2f7638a4087693dc5191a7c6fb4fd29967e27988234c015a33db9ac71a416a8469f871b7da09c95f3331576c1b4f4c72b7b127ad2e48a57e28804efe74f8145aeaef16c03e2c3e99fe3ccaddded1da622fc62172e8f55d04e1305df63e789774d3640e6cf36ed53c2fcdeef189178dde1b60c640742c68d8d06cae2538b7b7d0ffe1905037537a754ba44950c4194c8013b5a4eb2a2b6406f9795d70e4321c7ab7e630381ce04e2e4f15e49153842118abb5179e246e41ffa49ed2b39b62ea47001f35229be23d332a81b5d47f88a5737b480f27ca75a653efa3afa257ef05e1b4da1cb84653b074e9aace9f6f4b94f48cf50b3fe2b1658d30e3f288b6d6a1164f3c9153b0f185c10a64c861889dc3faf8bebd6caab6f751a31109756cbc8b9a62384faa1a88b2ef8803855414dcc209329752a65b05a0784be9837e3a4a7cdc49b302a1e3e9be08080b6af5049702613b777e55b0033eab3ad76024a6132522289df20d753b595a48b1d116e792b51c9840541f16f56ef185a3c14e64b7e293c178ade690abeffc9d8f908bab3db2460d7f692e48dbdda353b6df648a98411bd8c70f95f6fb27390e6d3241f36fea36c0aea9198cd40fcc23b181d41fd91cf66570aaaf0688a4eff348b6f0e4c8bbda629cf269eafe2d60cab7108dbaeb0119ed441b7c4b379d0198be27dc6de0b53acca37dd9e5a40a558d8405de127fdd4b381a83d6d33b11061ef5428c08a8c64e73a3a6ccb11037cda942aa937f1ec14a9e2088acbb7b5489d173ce08ea04febb1cd93d7c0e1b3fb2facf8536e6568ea349647e2e449fe220516f5e94ab5727a91b92f9ac957cadb2e107b101c286e521d7742b86dc53df904cd29e6b7488ac8d149226254976858d25d388eb6842271f051a082e18d0549232dd0fdc8da13aaa44f925dc3f462a188cdc8e1573bf989d25243f975a7765cbe01e84ae4654fa60e20a39f89b53f008796c5360ca8ad4cd9adf0bac7862002f9a02a30aebadb738673bb12edb7f61755ca16defb8aca9bbcbf2fd39cd556369050407d4a7077b14cf922f3597af3e967ae63f1c1e8a6b6d10fcdb8aca23c2596b72155962438889005fb8a835153ac594f1a8edfef2ffc66db8d642beee43524f6f271a1c24824c92ad58531251df443d712615f7fff6a385298183cfce80296dc95ef4728b5b1b98549460efaa2d230453f8156b4c6d76e5bce6aa9e1b4da827a96949af8681edd094d0d63dc3b582a156480b1800130ec5543c40be0c561d90bb379db82a4b59b657b05333c958908bc65b3a26fa8d745d579b09b5fd5e2223e7c182bc7610d414a379ff9a8922909340433ac17b77130ed417bf23e4ae48ca4a834b038f977d0deefe1291e76395c35b4107b2de4178b1051251cacb6bff04fd2d092d6ae2a72b25213605ab08b71fe478927cf82353ebcf382630cee84d03bd38227bf8b12c1bca16686ec9ffe61aed4635328f39ee09aafebf30da052e0e4bf28da6badd62636022b130dc4f1e196ffce2051d3e7f80ae29a38abf6367f2555d93f6ad2ab346f3037737ca141dad639771645fd683361c2b67abf0b04c1846dff0ce319ae12a9c79a7bad5e8e6fac23ce85860d1201e69319c41924d87066f6f320006bb3fe802d04a5bedbf50dd15e22df446cd94be3486047315f9ba0fea5af6915ea399075704308653b03f29d4e99419a1a7f848302a46537a297f6331abc7c36df88bb535096135b971d41c4335eb8d2a9eac87061d16f2e6899662d327deb8fd788661d6d151a7e4d3f8cb8312a0b8b60807cb6abc7bad6b66e8d5a492cef77759055e15c7c37a20c751b9571e02ad40b65c0b17668eda7ef989f8bde821d2e9c7a119cac9ca3e925f51cf6c2bab2a406699555099e016944554222144a3e970220e01bfe3b152c955ee4e21716c1e521a4bb0228dcd9b0a237f8fc2ccf9b4ecd8d6e2eec4508cd6c6453db134def3be0808a9f0df28960e28385611ec490cdabd63cd76bc53fe10d67af82c755721f6ba406969969008dc072d1a3c0a64a95f5265e9529575bf1038fe0df1925bc40bd7d8831e891aab8f888d1906681a08fccac5bb4cb3c7e67ccdeff175b76d9bd7029f53e0ee15d8845504476940d05b87156cce1d5ed93671d5ee0ce0874f0606f7d09d15cf16d98a1cbb456a5704cffc0a3918ef543a6e9a67e965c4fbb8186991ac3ca2218244cdc44af93a08763e04cce549c5ab00146278a63c2c94859a91544efc6559061cf781ce86969f8b1f5b65389ab3b19c0cc41ddd39e614803b06599b8653ed64cf8e3605c69afc879ae03e6cc5f80f88fedae281d1adf53a9204c491204edb99d1106b68ccb21004d51c419842f3e1564b5a4e01e71a47135178d8d045b07c045cba01436cd0ce6a1ce9a480b1bd6eb48fe2888214ca31766f5c5144edf8bdf7edefe015cf95bc6834bb06aa157b76f9fbcbade1ceb547fa678ff33a24ed4cca831654c0b03bd1a52ceca4287171d524e37d42899a4c5c66da0586ffb7b4aead7cdf892ce24d66eaff3530dcca213f70cec1d24cd59bbdc12e3f6f4bd4d0a2b232fa5f9ce2c70aa529fc85d4d2183f4c20f154da58103cfeffd477901d188ea888aad45f778dc48969936ce7519d2e1f0e14b2fc8b02340af1f83119cb69ab38e5122223950d5045479cbfb0b989013e2b1b995d6c45656b8124e8fc54f7daf9409ff4ad5babdc9789e3d420cccb792bf06a75cbf2bcc8b45a394e62dce6ed5188495c0de5a86d00694fc70a41b1cede2e986a33c13a7bc88d9c79775dbb624b9d66c577466547183ca48a0279ccfc7bffe699d0f4f82bca906d0118865e8851b75f9914ae12a368c0e2881fbf8c1f4374c37fce575034bdac4a06e022e62b34874966952f0ffb6c9fc8138eff8e07ad630635772e84993af6d71dc3eb534bdb00475eeb433da5b6cdf9051a8898a8893ef0ea4102aa24968c2c8be9b5b02e07c075f59c3398e08876054135ad6be1c51a5e98e1400edcca8061640a0d20b3f7a92acff856d20703f70c2159f91f9419d34cfb87f890b578bed938ec52eb1b45fbef56828774cba3704e0a22b1fff7ff6bb94620c9f0317728ee32d09615d186138238fc529247e80fcf71e9269e72fa25962695e40a38a816c2eb5d5e3f169e5c54ae20cecdc206b8cc093f6f5d3461268ff8a7154bafe92cf145aa415556cd9c6b4f5693050d00d6e1f5441c67b4c3abf561803ef525f4e199b2cdd03b806c0d8606ecaf25ca51a750dab89d91aaab170fcb7b6f50766ab8f11cf177bd75e58d432c051cdafccde5fd81233f524d37a6ae391da09b381d46b1333a07d5632b9f83c1aa8cd44f417320550d5b9ae5118502ff8fe89fffba8e0cf4f8fa4c096ea4937b7b3ea6f9dc0fc13e2e2b4ca172c97b67a58404a335436658063a9bd1c71422e9ee5ef345df6534be0b0482273c4750b9ae92c463bb87e7de173b40a8709a4018bdbe9e799b0a95c5946dc424efaac67eb3fe869d49e040d94d42c1c7680c47c9bba3344f7034d68394e65f6d31b9e5b21a763429432b91b85e274a5675011b2d5442f1d329ccf1220275ba714738022742135bb9674a2544d23b09c93d1d07f35738abf59f44b894048faf09bf0467b9d8171afe57ee10c828640fed3801dc8711e0b678b30f42f396be642975cc2724110d48a59d3ae7160781b7a3f4973fc2d720440408ffced0e2b62728e7ef1f5228fab181fb9b7a1077e376df6c5aeba81e9fe3fc9f82919bf476f1e97c64da1aaa0fc7d1e0b31d8519717717a1ca1856bae339cb612e4880d0aed31500c80e63fc888389c20be12e73cb3299f7a23cfcfd47834ce9b0d92d7b732d15b2df232158cc9b690a0c7e9fd2c511bbce0a6aced586059a9446019ac26ce6eb9ab507dfb24c58acfe596dc2d67ff19569211078498f31e7998135b47a5e2f39b23e474bf74484690c080fc1b818474094d960fe89d45b43c926cc0e6b60bdf3fed333ade75161441c622005e243964d6603a29888a5e921a713e7403785a86103c7fa700", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x0, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002b40)='./file0\x00', 0x0) 10m33.033484626s ago: executing program 5 (id=1916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0x80, 0x0, '\x00', 0x1d}, {0x19, 0x9, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {}, {0x0, 0x4, 0x26}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x0, 0x0, 0xfe, '\x00', 0x7f}, {0x8, 0x6, 0xff, '\x00', 0x8}, {}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x5, 0x4e}, {0x4, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0xf, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x3, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0x12}, {0xfc, 0x81, 0xe}]}}) 10m32.70450894s ago: executing program 5 (id=1919): ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)=@fd={0x0, 0x3, 0x4, 0x10000, 0x4, {}, {0x1, 0x0, 0x7c, 0x3, 0xfe, 0x9, "9cf33445"}, 0xffffffff, 0x4, {}, 0x4}) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) 10m32.340661617s ago: executing program 5 (id=1922): syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8402, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 10m32.066231888s ago: executing program 5 (id=1926): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000003c0)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m31.584710161s ago: executing program 5 (id=1929): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f, 0x1}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 10m30.992192124s ago: executing program 36 (id=1929): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f, 0x1}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 9m56.855411289s ago: executing program 7 (id=2240): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65dd}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32], 0x0}, 0x94) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) 9m56.501871542s ago: executing program 7 (id=2244): fsopen(&(0x7f00000005c0)='ocfs2_dlmfs\x00', 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9m56.250185894s ago: executing program 7 (id=2245): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1a3807, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4f2a7b1674a2054a}) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0xad9, 0x800000, 0x62, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 9m54.997611106s ago: executing program 7 (id=2256): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 9m53.885284146s ago: executing program 7 (id=2266): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x4001000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000340)={&(0x7f00000000c0)=[{0xf20, 0x4201, 0x51, &(0x7f0000000100)="89a7718d5311dd169a7bb91b5eef85b4fb29e0bbbc667d89a89a94c1322c64200f154435982ed6952376046f10629231d9c542f55b8a8d778fb1b3bd304d44b28d87839c4b60c6b0544745649c6628ece5"}], 0x1}) 9m53.417940315s ago: executing program 7 (id=2269): socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 9m52.778178648s ago: executing program 37 (id=2269): socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 6m51.818124128s ago: executing program 0 (id=3384): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 6m50.713380042s ago: executing program 0 (id=3391): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = dup(r3) fanotify_mark(r4, 0x1, 0x48000047, r5, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 6m49.49895669s ago: executing program 0 (id=3399): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) 6m47.514167946s ago: executing program 0 (id=3405): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 6m47.251335318s ago: executing program 0 (id=3408): memfd_create(0x0, 0x3) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 6m46.936158836s ago: executing program 0 (id=3411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8070000", @ANYRES16=0x0, @ANYBLOB="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"], 0x7d8}, 0x1, 0x0, 0x0, 0x24048800}, 0x2040000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m45.50094022s ago: executing program 38 (id=3411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8070000", @ANYRES16=0x0, @ANYBLOB="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"], 0x7d8}, 0x1, 0x0, 0x0, 0x24048800}, 0x2040000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m15.215631058s ago: executing program 9 (id=3913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 5m12.736233915s ago: executing program 9 (id=3919): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) 5m10.474280586s ago: executing program 9 (id=3927): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a6, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5m10.284713275s ago: executing program 9 (id=3930): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 5m9.80854854s ago: executing program 9 (id=3933): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 5m8.188409107s ago: executing program 9 (id=3942): syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x583, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5m7.460680212s ago: executing program 39 (id=3942): syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x583, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4m25.279385304s ago: executing program 6 (id=4098): socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) eventfd(0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001680), 0x82602, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 4m24.191086514s ago: executing program 6 (id=4100): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x878b6}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 4m23.945562228s ago: executing program 6 (id=4101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) rt_sigaction(0x20, 0x0, &(0x7f0000000380)={&(0x7f0000000140)="f20f8e341b341bf82b710026f3440faedac4e27d1d318f491891c6c4617167302e3e660fe6a30e000000f04383720406426e420f01da", 0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m23.57604883s ago: executing program 6 (id=4103): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x70, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xf90, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4m23.279578139s ago: executing program 6 (id=4104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xcb, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) read(r3, &(0x7f0000000000)=""/70, 0xfffffe1b) 4m21.012780969s ago: executing program 6 (id=4112): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4m5.781905507s ago: executing program 40 (id=4112): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 13.008223731s ago: executing program 4 (id=4940): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)=ANY=[], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x7fff, @private=0xa010101}}, 0x0, 0x1, 0x58890598, 0x8001, 0xe}, &(0x7f0000000140)=0x98) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.448397036s ago: executing program 4 (id=4945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x5, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x5, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 11.358385205s ago: executing program 8 (id=4946): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) 10.432403122s ago: executing program 4 (id=4947): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x351a, 0x100, 0x0, 0x0, 0x0) 9.824762195s ago: executing program 8 (id=4948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ad1c00000022"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='!'], 0x14}}, 0x0) io_uring_enter(r2, 0x80002219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 8.255319272s ago: executing program 8 (id=4953): r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4850) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x800, 0x2, 0x1a0}, &(0x7f0000000340)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x4, 0x0}) io_uring_enter(r4, 0x40f9, 0x34bb, 0xa5, 0x0, 0xfffffffffffffdf8) 7.914974314s ago: executing program 3 (id=4954): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000100)='=', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) 7.766411736s ago: executing program 4 (id=4955): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sync_file_range(r3, 0x3ff, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xd0, 0x0, &(0x7f0000000040)) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 7.495600236s ago: executing program 3 (id=4957): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.557453766s ago: executing program 1 (id=4961): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x1c, 0x3) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x6, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x80000, 0x192) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 5.507620254s ago: executing program 8 (id=4962): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x6, 0x10, 0x5, 0x0, 0x8, @remote, @local, 0x700, 0x80, 0x8, 0x9}}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x8001) 5.140937703s ago: executing program 2 (id=4963): socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 5.028527608s ago: executing program 3 (id=4964): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) dup(r3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 4.951737757s ago: executing program 1 (id=4965): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.951022419s ago: executing program 4 (id=4966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d20", 0x18}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.87595484s ago: executing program 2 (id=4967): creat(0x0, 0xd931d3864d39dcca) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x5a79, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r5 = io_uring_setup(0x67bb, &(0x7f0000000280)) io_uring_enter(r5, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 4.772159692s ago: executing program 4 (id=4968): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) 4.756310445s ago: executing program 1 (id=4969): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 4.443679531s ago: executing program 8 (id=4970): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) 3.946824523s ago: executing program 3 (id=4971): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x4004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) map_shadow_stack(&(0x7f000014f000/0x2000)=nil, 0x2000, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 3.772171639s ago: executing program 2 (id=4972): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) 3.625093705s ago: executing program 1 (id=4973): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008ef0ec47200000000000109022400010000900009040000010300000009210300000122050009058103"], 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1e9, 0x0, 0x0, 0x0, 0x5, 0x54, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.807736404s ago: executing program 3 (id=4974): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.126027152s ago: executing program 8 (id=4975): socket$key(0xf, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) recvmmsg(r4, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000340)=""/105, 0x69}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000002600)=""/194, 0xc2}, {&(0x7f0000002700)=""/48, 0x30}], 0x5}, 0x2}], 0x1, 0x10020, 0x0) 2.036790298s ago: executing program 2 (id=4976): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000340)=0x9dc, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) 1.674968991s ago: executing program 2 (id=4977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40, 0x0, {0x0, r6}}) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 493.792146ms ago: executing program 1 (id=4978): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40046304, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 372.235973ms ago: executing program 3 (id=4979): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3) write(r2, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 270.384519ms ago: executing program 1 (id=4980): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d40)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=4981): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): t create hsr debugfs directory [ 733.668855][ T5839] Bluetooth: hci5: command tx timeout [ 735.761522][ T5839] Bluetooth: hci5: command tx timeout [ 736.444378][T18903] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 736.478969][T10897] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 736.537865][T18779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 736.584173][T18779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 736.612212][T18779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 736.636349][T18779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 736.715670][T10897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.748964][T10897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 736.760516][T10897] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 736.818913][T10897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 736.828036][T10897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.853172][T10897] usb 4-1: Product: syz [ 736.857500][T10897] usb 4-1: Manufacturer: syz [ 736.889167][T10897] usb 4-1: SerialNumber: syz [ 736.933954][T10897] cdc_mbim 4-1:1.0: skipping garbage [ 736.958808][T10897] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 736.965776][T10897] cdc_mbim 4-1:1.0: bind() failure [ 737.565812][T18901] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 737.774824][T17967] usb 4-1: USB disconnect, device number 30 [ 738.255288][T18779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.297402][T18779] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.386407][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.393689][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.602393][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.609569][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.672965][T18955] binder: 18953:18955 unknown command 0 [ 738.678596][T18955] binder: 18953:18955 ioctl c0306201 200000000080 returned -22 [ 738.706694][T18955] binder: BINDER_SET_CONTEXT_MGR already set [ 738.712969][T18955] binder: 18953:18955 ioctl 4018620d 200000000040 returned -16 [ 738.721940][T18955] binder: 18953:18955 ioctl c0306201 2000000003c0 returned -14 [ 739.209497][T18963] syz_tun: entered allmulticast mode [ 739.273531][T18962] syz_tun: left allmulticast mode [ 739.336782][T18779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.876496][T18779] veth0_vlan: entered promiscuous mode [ 739.893229][T18779] veth1_vlan: entered promiscuous mode [ 739.992378][T18779] veth0_macvtap: entered promiscuous mode [ 740.052484][T18779] veth1_macvtap: entered promiscuous mode [ 740.198821][T18779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.410185][ T30] kauditd_printk_skb: 308 callbacks suppressed [ 740.410206][ T30] audit: type=1326 audit(1762350596.841:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18982 comm="syz.3.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646c98f6c9 code=0x7ffc0000 [ 740.417218][T18779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.439200][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.580076][ T30] audit: type=1326 audit(1762350596.841:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18982 comm="syz.3.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646c98f6c9 code=0x7ffc0000 [ 740.656669][T11297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.680982][ T30] audit: type=1326 audit(1762350596.891:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18982 comm="syz.3.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f646c98f6c9 code=0x7ffc0000 [ 740.694277][T11297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.771131][T18991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4221'. [ 740.797901][T11297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.813524][ T30] audit: type=1326 audit(1762350596.891:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18982 comm="syz.3.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646c98f6c9 code=0x7ffc0000 [ 741.048146][ T30] audit: type=1326 audit(1762350596.891:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18982 comm="syz.3.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646c98f6c9 code=0x7ffc0000 [ 741.081643][ T30] audit: type=1326 audit(1762350596.891:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18982 comm="syz.3.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f646c98f6c9 code=0x7ffc0000 [ 741.104015][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.117563][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.154865][ T30] audit: type=1326 audit(1762350596.891:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18982 comm="syz.3.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646c98f6c9 code=0x7ffc0000 [ 741.202748][ T30] audit: type=1326 audit(1762350596.891:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18982 comm="syz.3.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646c98f6c9 code=0x7ffc0000 [ 741.281909][ T30] audit: type=1326 audit(1762350596.891:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18982 comm="syz.3.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f646c98f6c9 code=0x7ffc0000 [ 741.458875][ T30] audit: type=1326 audit(1762350596.901:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18982 comm="syz.3.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646c98f6c9 code=0x7ffc0000 [ 741.923593][T18998] netlink: 'syz.1.4222': attribute type 10 has an invalid length. [ 741.979086][T18998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4222'. [ 742.136591][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'. [ 742.315693][T18998] team0: Port device geneve0 added [ 742.513060][T11297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.589206][T11297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.788361][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.832630][T19009] syzkaller0: entered promiscuous mode [ 742.838214][T19009] syzkaller0: entered allmulticast mode [ 742.870404][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.257116][T19028] binder: 19026:19028 unknown command 0 [ 743.282786][T19028] binder: 19026:19028 ioctl c0306201 200000000080 returned -22 [ 743.662608][T19042] binder: 19038:19042 unknown command 0 [ 743.689545][T19042] binder: 19038:19042 ioctl c0306201 200000000080 returned -22 [ 744.465216][T19057] binder: 19056:19057 ioctl c0306201 200000000080 returned -14 [ 744.736574][T19062] binder: 19058:19062 ioctl c0306201 2000000001c0 returned -14 [ 745.329612][T19073] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 746.189266][T10897] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 746.460876][T10897] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 746.834445][T10897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.898304][T10897] usb 4-1: Product: syz [ 746.928317][T10897] usb 4-1: Manufacturer: syz [ 746.997195][T10897] usb 4-1: SerialNumber: syz [ 747.058986][T10897] usb 4-1: config 0 descriptor?? [ 747.102921][T10897] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 747.354545][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.361062][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.263385][T17967] usb 4-1: USB disconnect, device number 31 [ 749.403535][ T5839] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 750.729210][T17967] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 751.118718][T17967] usb 5-1: Using ep0 maxpacket: 16 [ 751.150467][T17967] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 751.179138][T17967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.198455][T17967] usb 5-1: Product: syz [ 751.236559][T17967] usb 5-1: Manufacturer: syz [ 751.288905][T17967] usb 5-1: SerialNumber: syz [ 751.340886][T17967] usb 5-1: config 0 descriptor?? [ 751.614555][ T5941] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 751.780100][T17967] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 751.788788][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 751.801213][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 751.812839][T17967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 751.827727][ T5941] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 751.839551][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.849892][T17967] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 751.857916][T17967] usb 5-1: media controller created [ 751.875511][ T5941] usb 2-1: config 0 descriptor?? [ 751.951772][T17967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.140066][ T5941] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 752.336980][T10897] usb 2-1: USB disconnect, device number 27 [ 752.343085][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 752.590745][T17967] zl10353_read_register: readreg error (reg=127, ret==0) [ 752.651504][T17967] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 752.678736][T17967] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 752.746962][T19213] syzkaller0: entered promiscuous mode [ 752.749907][T17967] usb 5-1: USB disconnect, device number 48 [ 752.758864][T19213] syzkaller0: entered allmulticast mode [ 752.912518][T17967] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 757.789280][T10897] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 757.910384][T17785] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.942256][T17785] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.036101][T10897] usb 9-1: Using ep0 maxpacket: 16 [ 758.044309][T10897] usb 9-1: config 0 has an invalid interface number: 68 but max is 0 [ 758.058703][T10897] usb 9-1: config 0 has no interface number 0 [ 758.075621][T10897] usb 9-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 758.337367][T10897] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 758.358861][T10897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.381521][T10897] usb 9-1: Product: syz [ 758.409399][T10897] usb 9-1: Manufacturer: syz [ 758.439833][T10897] usb 9-1: SerialNumber: syz [ 758.468124][T10897] usb 9-1: config 0 descriptor?? [ 758.499367][T19302] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 758.583825][T10897] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 758.867359][ T1114] usb 9-1: Failed to submit usb control message: -71 [ 758.898842][ T1114] usb 9-1: unable to send the bmi data to the device: -71 [ 758.909869][T10897] usb 9-1: USB disconnect, device number 33 [ 758.926472][ T1114] usb 9-1: unable to get target info from device [ 758.946756][ T1114] usb 9-1: could not get target info (-71) [ 758.976072][T17785] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.010597][ T1114] usb 9-1: could not probe fw (-71) [ 759.028140][T17785] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.945124][T17785] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.204386][T17785] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.684278][T17785] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.793495][T17785] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.978841][T17423] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 761.140565][T17423] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.150849][T17423] usb 2-1: config 0 interface 0 has no altsetting 0 [ 761.161126][T17423] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 761.170414][T17423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.178446][T17423] usb 2-1: Product: syz [ 761.358719][T17423] usb 2-1: Manufacturer: syz [ 761.363397][T17423] usb 2-1: SerialNumber: syz [ 761.434869][T17423] usb 2-1: config 0 descriptor?? [ 761.490390][T17423] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 761.603007][T17423] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 761.692807][T17423] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 761.732621][T17423] usb 2-1: media controller created [ 761.749538][T19367] vivid-002: disconnect [ 761.956473][T17423] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 762.127948][T19364] vivid-002: reconnect [ 762.442451][T17423] DVB: Unable to find symbol tda10046_attach() [ 762.571059][T17423] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 762.738786][T17423] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 763.012270][T17423] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 763.109384][T17423] usb 2-1: USB disconnect, device number 28 [ 765.139297][T17785] bond2 (unregistering): (slave gretap1): Releasing active interface [ 765.191802][T17785] gretap1 (unregistering): left allmulticast mode [ 766.488466][T17785] bond1 (unregistering): (slave bridge1): Releasing active interface [ 768.250960][T19451] l2tp_ppp: sess 2/0: no socket in recv [ 768.339737][T17785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.370881][T17785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.416795][T17785] bond0 (unregistering): Released all slaves [ 768.430286][T17785] bond1 (unregistering): Released all slaves [ 769.111366][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 769.111387][ T30] audit: type=1326 audit(1762350625.531:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19457 comm="syz.1.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 769.190935][T17785] bond2 (unregistering): Released all slaves [ 769.268790][ T30] audit: type=1326 audit(1762350625.531:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19457 comm="syz.1.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 769.291587][ T30] audit: type=1326 audit(1762350625.581:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19457 comm="syz.1.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 769.314428][ T30] audit: type=1326 audit(1762350625.581:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19457 comm="syz.1.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 769.339435][ T30] audit: type=1326 audit(1762350625.581:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19457 comm="syz.1.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 769.372523][ T30] audit: type=1326 audit(1762350625.591:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19457 comm="syz.1.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 769.460139][ T30] audit: type=1326 audit(1762350625.601:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19457 comm="syz.1.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 769.483545][ T30] audit: type=1326 audit(1762350625.601:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19457 comm="syz.1.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 769.514443][ T30] audit: type=1326 audit(1762350625.601:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19457 comm="syz.1.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 769.537426][ T30] audit: type=1326 audit(1762350625.601:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19457 comm="syz.1.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 771.573086][T17785] hsr_slave_0: left promiscuous mode [ 771.629772][T17785] hsr_slave_1: left promiscuous mode [ 771.663953][T17785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.727929][T17785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.776152][T17785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.218932][T17785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.329134][T17785] veth1_macvtap: left promiscuous mode [ 772.334773][T17785] veth0_macvtap: left promiscuous mode [ 772.359998][T17785] veth1_vlan: left promiscuous mode [ 772.375647][T17785] veth0_vlan: left promiscuous mode [ 776.025742][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 776.025757][ T30] audit: type=1326 audit(1762350632.451:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19568 comm="syz.2.4346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x0 [ 777.618746][T18169] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 777.637121][ T30] audit: type=1326 audit(1762350634.061:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19593 comm="syz.4.4353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2af18f6c9 code=0x0 [ 777.867609][T18169] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 777.876886][T18169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.889032][T18169] usb 3-1: Product: syz [ 777.893246][T18169] usb 3-1: Manufacturer: syz [ 777.898038][T18169] usb 3-1: SerialNumber: syz [ 777.931389][T18169] usb 3-1: config 0 descriptor?? [ 778.073616][T17785] team0 (unregistering): Port device team_slave_1 removed [ 778.312040][T18169] usb 3-1: USB disconnect, device number 22 [ 778.807017][T17785] team0 (unregistering): Port device team_slave_0 removed [ 780.240638][T19616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4359'. [ 782.078831][T17967] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 782.270833][T17967] usb 2-1: Using ep0 maxpacket: 8 [ 782.322552][T17967] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 782.353375][T17967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.378918][T17967] usb 2-1: Product: syz [ 782.397650][T17967] usb 2-1: Manufacturer: syz [ 782.428523][T17967] usb 2-1: SerialNumber: syz [ 782.449007][T19638] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4366'. [ 782.456405][T17967] usb 2-1: config 0 descriptor?? [ 782.760412][T17967] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 783.656191][T17967] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 783.716058][T17967] usb 2-1: USB disconnect, device number 29 [ 783.958578][T17785] IPVS: stop unused estimator thread 0... [ 784.756963][T19682] fuse: Bad value for 'fd' [ 784.775605][T18171] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 785.023734][T18171] usb 4-1: Using ep0 maxpacket: 16 [ 785.035117][T18171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 785.105052][T18171] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 785.349409][T18171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.398311][T18171] usb 4-1: Product: syz [ 785.416489][T18171] usb 4-1: Manufacturer: syz [ 785.450080][T18171] usb 4-1: SerialNumber: syz [ 785.516150][T18171] usb 4-1: config 0 descriptor?? [ 785.539984][T19690] loop2: detected capacity change from 0 to 7 [ 785.561963][T18171] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 785.581066][T19690] loop2: [ 785.589641][T18171] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 785.596022][T19690] loop2: partition table partially beyond EOD, truncated [ 786.188435][T18171] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 786.258436][ T30] audit: type=1326 audit(1762350642.661:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19698 comm="syz.8.4381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb8198f6c9 code=0x0 [ 786.675154][T19722] tipc: Failed to remove unknown binding: 66,1,1/0:3591376223/3591376225 [ 786.718203][T19722] tipc: Failed to remove unknown binding: 66,1,1/0:3591376223/3591376225 [ 787.124925][T18171] em28xx 4-1:0.0: board has no eeprom [ 787.722709][T18171] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 787.730949][T18171] em28xx 4-1:0.0: dvb set to bulk mode. [ 787.736697][T10897] em28xx 4-1:0.0: Binding DVB extension [ 787.773292][T18171] usb 4-1: USB disconnect, device number 32 [ 787.822102][T18171] em28xx 4-1:0.0: Disconnecting em28xx [ 787.983265][T10897] em28xx 4-1:0.0: Registering input extension [ 788.018979][T18171] em28xx 4-1:0.0: Closing input extension [ 788.084814][T18171] em28xx 4-1:0.0: Freeing device [ 788.678764][ T5940] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 789.068721][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 789.076571][ T5940] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 789.094883][ T5940] usb 4-1: config 0 has no interface number 0 [ 789.156251][ T5940] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 789.177770][ T5940] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 789.208377][ T5940] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 789.225929][ T5940] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.431730][ T5940] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 789.451269][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.510204][ T5940] usb 4-1: Product: syz [ 789.518744][ T5940] usb 4-1: Manufacturer: syz [ 789.528262][ T5940] usb 4-1: SerialNumber: syz [ 789.579514][ T5940] usb 4-1: config 0 descriptor?? [ 789.805990][ T5940] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 790.100273][ T5940] usb 4-1: USB disconnect, device number 33 [ 790.390851][T19744] Bluetooth: hci4: command 0x0406 tx timeout [ 791.737647][T19816] netlink: 'syz.3.4407': attribute type 1 has an invalid length. [ 792.005098][T19816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 792.059406][T19825] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 792.082523][T19825] bond2: entered allmulticast mode [ 792.234666][T19816] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 792.311120][T19833] syzkaller0: entered promiscuous mode [ 792.316762][T19833] syzkaller0: entered allmulticast mode [ 793.141946][ T115] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 793.477032][ T115] usb 5-1: Using ep0 maxpacket: 32 [ 793.489381][ T115] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 793.531239][ T115] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 793.542060][T19857] binder: 19856:19857 ioctl c0306201 200000000680 returned -14 [ 793.761287][ T115] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 793.969068][ T115] usb 5-1: Product: syz [ 793.973384][ T115] usb 5-1: Manufacturer: syz [ 794.049276][ T115] usb 5-1: SerialNumber: syz [ 794.061043][ T115] usb 5-1: config 0 descriptor?? [ 794.067569][T19843] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 794.107126][T19869] binder_alloc: 19868: binder_alloc_buf, no vma [ 794.107780][ T115] hub 5-1:0.0: bad descriptor, ignoring hub [ 794.207440][ T115] hub 5-1:0.0: probe with driver hub failed with error -5 [ 794.862723][ T30] audit: type=1326 audit(1762350651.291:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 794.882959][T19887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.971344][ T30] audit: type=1326 audit(1762350651.291:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 795.061348][ T30] audit: type=1326 audit(1762350651.291:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 795.158856][T10897] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 795.207328][ T30] audit: type=1326 audit(1762350651.291:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 795.278244][ T30] audit: type=1326 audit(1762350651.291:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 795.322178][T10897] usb 2-1: device descriptor read/64, error -71 [ 795.369288][ T30] audit: type=1326 audit(1762350651.291:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 795.451953][T19892] binder: BINDER_SET_CONTEXT_MGR already set [ 795.478454][T19892] binder: 19891:19892 ioctl 4018620d 200000000040 returned -16 [ 795.482528][ T30] audit: type=1326 audit(1762350651.291:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 795.579649][T17967] usb 5-1: USB disconnect, device number 49 [ 795.579649][ T30] audit: type=1326 audit(1762350651.291:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 795.579701][ T30] audit: type=1326 audit(1762350651.291:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 795.708755][T10897] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 795.837038][ T30] audit: type=1326 audit(1762350651.291:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 795.888964][T10897] usb 2-1: device descriptor read/64, error -71 [ 796.000552][T10897] usb usb2-port1: attempt power cycle [ 796.478954][T10897] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 796.607183][T10897] usb 2-1: device descriptor read/8, error -71 [ 796.908422][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4430'. [ 796.973710][T10897] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 797.159624][T10897] usb 2-1: device descriptor read/8, error -71 [ 797.282324][T10897] usb usb2-port1: unable to enumerate USB device [ 798.770555][ T50] bridge_slave_1: left allmulticast mode [ 798.787669][ T50] bridge_slave_1: left promiscuous mode [ 798.806565][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.077222][ T50] bridge_slave_0: left allmulticast mode [ 799.189268][ T50] bridge_slave_0: left promiscuous mode [ 799.195432][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.548359][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 801.548380][ T30] audit: type=1326 audit(1762350657.971:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 801.597932][ T30] audit: type=1326 audit(1762350658.021:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 801.622102][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4444'. [ 801.676837][ T30] audit: type=1326 audit(1762350658.051:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f02ba98f787 code=0x7ffc0000 [ 801.709002][ T30] audit: type=1326 audit(1762350658.051:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f02ba946b2d code=0x7ffc0000 [ 801.729913][T19982] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 801.763848][ T30] audit: type=1326 audit(1762350658.051:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f02ba9c3e09 code=0x7ffc0000 [ 801.943445][T19972] picdev_read: 7 callbacks suppressed [ 801.943467][T19972] kvm: pic: non byte read [ 801.960724][ T30] audit: type=1326 audit(1762350658.051:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f02ba946b97 code=0x7ffc0000 [ 801.990674][T19972] pic_ioport_write: 6 callbacks suppressed [ 801.990694][T19972] kvm: pic: level sensitive irq not supported [ 801.997150][T19972] kvm: pic: non byte read [ 802.073043][ T30] audit: type=1326 audit(1762350658.051:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 802.135126][T19972] kvm: pic: level sensitive irq not supported [ 802.135240][T19972] kvm: pic: non byte read [ 802.204119][ T30] audit: type=1326 audit(1762350658.051:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 802.229793][T19972] kvm: pic: level sensitive irq not supported [ 802.229906][T19972] kvm: pic: non byte read [ 802.381636][ T30] audit: type=1326 audit(1762350658.051:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f02ba9462a7 code=0x7ffc0000 [ 802.412992][ T30] audit: type=1326 audit(1762350658.051:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.2.4436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f02ba946306 code=0x7ffc0000 [ 802.428793][T18169] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 802.690527][T18169] usb 4-1: Using ep0 maxpacket: 16 [ 802.699979][T18169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 802.727667][T18169] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 802.738111][T18169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.768166][T18169] usb 4-1: Product: syz [ 802.774170][T18169] usb 4-1: Manufacturer: syz [ 802.789551][T18169] usb 4-1: SerialNumber: syz [ 802.803053][T18169] usb 4-1: config 0 descriptor?? [ 802.820544][T18169] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 802.857045][T18169] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 803.119448][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.135608][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.152335][ T50] bond0 (unregistering): Released all slaves [ 803.498041][T18169] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 803.635585][T19999] syzkaller0: entered promiscuous mode [ 803.648376][T19999] syzkaller0: entered allmulticast mode [ 803.680161][ T50] tipc: Left network mode [ 804.981245][ T50] hsr_slave_0: left promiscuous mode [ 805.104808][ T50] hsr_slave_1: left promiscuous mode [ 805.138405][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.179169][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.273040][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.311782][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.630232][ T50] veth1_macvtap: left promiscuous mode [ 805.660756][ T50] veth0_macvtap: left promiscuous mode [ 805.687554][T18169] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 805.702089][T18169] em28xx 4-1:0.0: board has no eeprom [ 805.713999][ T50] veth1_vlan: left promiscuous mode [ 805.780024][ T50] veth0_vlan: left promiscuous mode [ 805.788865][T18169] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 805.805304][T18169] em28xx 4-1:0.0: dvb set to bulk mode. [ 805.828004][T18171] em28xx 4-1:0.0: Binding DVB extension [ 805.857151][T18169] usb 4-1: USB disconnect, device number 34 [ 805.872600][T18169] em28xx 4-1:0.0: Disconnecting em28xx [ 806.619061][T18171] em28xx 4-1:0.0: Registering input extension [ 806.634523][T18169] em28xx 4-1:0.0: Closing input extension [ 806.874183][T18169] em28xx 4-1:0.0: Freeing device [ 807.288820][T18169] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 807.483562][T20054] netlink: 'syz.2.4460': attribute type 1 has an invalid length. [ 807.498754][T18169] usb 4-1: Using ep0 maxpacket: 32 [ 807.524110][T18169] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 807.542604][T18169] usb 4-1: config 0 has no interface number 0 [ 807.581866][T18169] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 807.610761][T20055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4460'. [ 807.631901][T18169] usb 4-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 807.678845][T18169] usb 4-1: Product: syz [ 807.691673][T18169] usb 4-1: Manufacturer: syz [ 807.698761][T10897] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 807.718322][T18169] usb 4-1: SerialNumber: syz [ 807.749697][T18169] usb 4-1: config 0 descriptor?? [ 807.791167][T18169] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 807.814472][T18169] usb 4-1: selecting invalid altsetting 1 [ 807.832363][T18169] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 807.859531][T18169] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 807.877509][T18169] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 807.887239][T18169] usb 4-1: media controller created [ 807.892743][T10897] usb 9-1: Using ep0 maxpacket: 32 [ 807.900529][T10897] usb 9-1: config 0 has an invalid interface number: 38 but max is 0 [ 807.924074][T10897] usb 9-1: config 0 has no interface number 0 [ 807.936754][T10897] usb 9-1: config 0 interface 38 has no altsetting 0 [ 807.956098][T10897] usb 9-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 807.988953][T10897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.007517][T18169] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.023693][T10897] usb 9-1: Product: syz [ 808.033811][T10897] usb 9-1: Manufacturer: syz [ 808.071188][T10897] usb 9-1: SerialNumber: syz [ 808.095828][T10897] usb 9-1: config 0 descriptor?? [ 808.123366][T10897] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 808.169251][T18169] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 808.176999][T18169] zl10353_read_register: readreg error (reg=127, ret==-71) [ 808.198824][T18169] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 808.296670][T18169] usb 4-1: USB disconnect, device number 35 [ 808.368745][T18171] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 808.531262][ T50] team0 (unregistering): Port device team_slave_1 removed [ 808.567940][T18171] usb 2-1: Using ep0 maxpacket: 8 [ 808.580877][T18171] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 808.606997][T18171] usb 2-1: config 0 has no interface number 0 [ 808.631625][T18171] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 808.641146][T18171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.653006][ T50] team0 (unregistering): Port device team_slave_0 removed [ 808.660996][T18171] usb 2-1: Product: syz [ 808.661981][T10897] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 808.675440][T18171] usb 2-1: Manufacturer: syz [ 808.680240][T18171] usb 2-1: SerialNumber: syz [ 808.685031][T10897] gspca_pac7302 9-1:0.38: probe with driver gspca_pac7302 failed with error -110 [ 808.699487][T18171] usb 2-1: config 0 descriptor?? [ 808.709411][T10897] usb 9-1: USB disconnect, device number 34 [ 808.758455][T18171] redrat3 2-1:0.31: Couldn't find all endpoints [ 808.795947][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.803071][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.168334][T20061] IPVS: rr: FWM 3 0x00000003 - no destination available [ 809.175938][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 809.194217][T17967] IPVS: starting estimator thread 0... [ 809.288939][T20075] IPVS: using max 47 ests per chain, 112800 per kthread [ 810.569695][T20082] program syz.3.4467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 810.634830][T20054] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 811.666154][T18171] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 811.843076][T18171] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 811.933362][T18171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.949427][T18171] usb 4-1: config 0 descriptor?? [ 811.992320][T18171] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 813.677523][T18171] gspca_stv06xx: I2C: Read error writing address: -71 [ 813.692468][T18171] usb 4-1: USB disconnect, device number 36 [ 813.847106][T17967] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 814.020885][T17967] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.048724][T17967] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.067315][T17967] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 814.077415][T17967] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.091377][T17967] usb 9-1: config 0 descriptor?? [ 814.313838][T20100] binder: 20099:20100 ioctl c0306201 200000000680 returned -14 [ 814.844349][T17967] usbhid 9-1:0.0: can't add hid device: -71 [ 814.853868][T17967] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 814.878474][T17967] usb 9-1: USB disconnect, device number 35 [ 815.612477][T20105] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 815.646246][T20105] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 815.679740][T20105] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 816.041860][T20112] kvm: kvm [20111]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 816.766124][T17967] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 816.894089][T18169] usb 2-1: USB disconnect, device number 34 [ 816.994209][T17967] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 817.016153][ T50] IPVS: stop unused estimator thread 0... [ 817.024655][T17967] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 817.085132][T17967] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 817.121313][T17967] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 817.157976][T17967] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 817.192196][T17967] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 817.235623][T17967] usb 9-1: Product: syz [ 817.254620][T17967] usb 9-1: Manufacturer: syz [ 817.491293][T17967] cdc_wdm 9-1:1.0: skipping garbage [ 817.496647][T17967] cdc_wdm 9-1:1.0: skipping garbage [ 817.699499][T17967] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 818.211175][T17967] cdc_wdm 9-1:1.0: Unknown control protocol [ 818.243897][T17967] usb 9-1: USB disconnect, device number 36 [ 820.678751][T17423] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 820.988939][T17423] usb 2-1: config 0 has no interfaces? [ 821.012456][T17423] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 821.135907][T17423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.206888][T17423] usb 2-1: Product: syz [ 821.236772][T17423] usb 2-1: Manufacturer: syz [ 821.257069][T17423] usb 2-1: SerialNumber: syz [ 821.313362][T17423] usb 2-1: config 0 descriptor?? [ 821.715966][T20180] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 821.892459][T20162] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.041727][T10895] usb 2-1: USB disconnect, device number 35 [ 823.172576][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 823.172598][ T30] audit: type=1326 audit(1762350679.591:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20200 comm="syz.8.4498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb8198f6c9 code=0x0 [ 823.209233][T17423] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 823.231472][T18168] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 823.419110][T18168] usb 5-1: Using ep0 maxpacket: 32 [ 823.466724][T18168] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 823.480320][T17423] usb 2-1: Using ep0 maxpacket: 32 [ 823.487109][T18168] usb 5-1: config 0 has no interface number 0 [ 823.496335][T17423] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 823.513689][T17423] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 823.527934][T17423] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 823.546126][T18168] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 823.580743][T18168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.606219][T17423] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 823.625112][T18168] usb 5-1: Product: syz [ 823.648238][T18168] usb 5-1: Manufacturer: syz [ 823.654846][T18168] usb 5-1: SerialNumber: syz [ 823.669328][T17423] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 823.680537][T17423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.701716][T18168] usb 5-1: config 0 descriptor?? [ 823.709458][T17423] usb 2-1: Product: syz [ 823.718292][T17423] usb 2-1: Manufacturer: syz [ 823.729343][T18168] smsc95xx v2.0.0 [ 823.748819][T17423] usb 2-1: SerialNumber: syz [ 823.820657][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 823.882156][T17423] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input56 [ 824.016245][T17423] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 824.053439][T17423] (id 0x00) [ 824.137555][T18168] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 824.180145][T18168] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 824.245325][T17423] rc_core: IR keymap rc-imon-pad not found [ 824.261655][T17423] Registered IR keymap rc-empty [ 824.283065][T17423] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 824.356248][T17423] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 824.459916][T17423] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 824.504431][T17423] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input57 [ 824.613247][T17423] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:36> initialized [ 825.453210][T20227] binder: BINDER_SET_CONTEXT_MGR already set [ 825.487758][T20227] binder: 20225:20227 ioctl 4018620d 200000000040 returned -16 [ 825.807950][ T30] audit: type=1800 audit(1762350682.231:1615): pid=20241 uid=0 auid=0 ses=1 subj=unconfined op=collect_data cause=failed comm="syz.8.4506" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 825.836958][T18168] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 825.876522][T18168] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 825.918386][T18168] usb 5-1: USB disconnect, device number 50 [ 826.040372][T20236] imon:send_packet: packet tx failed (-71) [ 826.042171][T17423] usb 2-1: USB disconnect, device number 36 [ 826.058968][T20236] imon:vfd_write: send packet #4 failed [ 829.188995][ T5885] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 829.256000][T20305] input: syz0 as /devices/virtual/input/input58 [ 829.336557][T20307] binder: 20306:20307 ioctl c018620c 200000000240 returned -22 [ 829.422875][ T5885] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 829.548956][ T5885] usb 9-1: config 0 has no interface number 0 [ 829.562416][ T5885] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 829.573898][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.623544][ T5885] usb 9-1: Product: syz [ 829.634441][ T5885] usb 9-1: Manufacturer: syz [ 829.644585][T20311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.659786][ T5885] usb 9-1: SerialNumber: syz [ 829.696075][ T5885] usb 9-1: config 0 descriptor?? [ 830.133668][ T5885] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 830.257771][ T5885] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 830.379379][ T5885] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 830.427445][ T5885] usb 9-1: media controller created [ 830.488056][T20303] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4516'. [ 830.788175][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 831.157245][ T5885] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 831.418008][ T5885] usb 9-1: USB disconnect, device number 37 [ 835.008904][T20352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.083019][T20352] batadv_slave_0: entered promiscuous mode [ 836.110657][ T984] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 836.310805][ T984] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.334366][ T984] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 836.369946][ T984] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 836.397094][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 836.432304][ T984] usb 3-1: SerialNumber: syz [ 836.782735][T20370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4531'. [ 836.891214][ T984] usb 3-1: 0:2 : does not exist [ 836.993927][T20373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4531'. [ 837.002846][ T984] usb 3-1: USB disconnect, device number 23 [ 837.114305][ T7887] udevd[7887]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.476211][T20377] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 837.908723][T19744] Bluetooth: hci5: command 0x0405 tx timeout [ 838.959791][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4537'. [ 838.998798][ T30] audit: type=1326 audit(1762350695.411:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.3.4536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f646c98f6c9 code=0x0 [ 840.155869][ T115] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 840.650465][ T115] usb 9-1: Using ep0 maxpacket: 8 [ 840.669283][ T115] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.695367][ T115] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 840.722505][ T115] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 840.788523][ T115] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.813707][ T115] usb 9-1: config 0 descriptor?? [ 841.551596][T20440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.611898][T20440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.880929][T20443] input: syz0 as /devices/virtual/input/input59 [ 842.511317][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4544'. [ 842.857396][T18169] usb 9-1: USB disconnect, device number 38 [ 843.079476][T20457] syzkaller1: entered promiscuous mode [ 843.161446][T20457] syzkaller1: entered allmulticast mode [ 843.941607][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4552'. [ 843.961385][T17967] IPVS: starting estimator thread 0... [ 844.078801][T20486] IPVS: using max 26 ests per chain, 62400 per kthread [ 844.707637][T20498] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 844.722182][T20498] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 844.739400][T20498] kvm: requested 116495 ns i8254 timer period limited to 200000 ns [ 844.769462][T20498] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 844.790239][T20498] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 844.839734][T20498] kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 844.858913][T20498] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 844.891855][T20498] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 848.724259][T18168] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 848.879732][T18168] usb 3-1: Using ep0 maxpacket: 32 [ 849.104812][T18168] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 849.181615][T18168] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 849.235343][T18168] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 849.303784][T18168] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 849.374078][T18168] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 849.408668][T18168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.467926][T18168] usb 3-1: Product: syz [ 849.485843][T18168] usb 3-1: Manufacturer: syz [ 849.498664][T18168] usb 3-1: SerialNumber: syz [ 849.551501][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 849.579118][T18168] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input60 [ 849.779986][T18168] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 849.809145][T18168] (id 0x00) [ 849.939466][T18169] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 850.038820][T18168] rc_core: IR keymap rc-imon-pad not found [ 850.049980][T18168] Registered IR keymap rc-empty [ 850.054976][T18168] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 850.097640][T18168] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 850.130428][T18168] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 850.161473][T18169] usb 5-1: Using ep0 maxpacket: 32 [ 850.192260][T18169] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 850.221807][T18168] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input61 [ 850.249191][T18169] usb 5-1: config 0 has no interface number 0 [ 850.282898][T18169] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 850.311013][ T5940] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 850.325714][T18168] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:24> initialized [ 850.339467][T18169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.348823][T18169] usb 5-1: Product: syz [ 850.361302][T18169] usb 5-1: Manufacturer: syz [ 850.379323][T18169] usb 5-1: SerialNumber: syz [ 850.403172][T18169] usb 5-1: config 0 descriptor?? [ 850.490886][T18169] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 850.494486][ T5940] usb 9-1: Using ep0 maxpacket: 16 [ 850.523082][ T5940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 850.642490][ T5940] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 850.663070][T18169] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 850.681484][ T5940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.760018][ T5940] usb 9-1: Product: syz [ 850.767901][T18169] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 850.811104][ T5940] usb 9-1: Manufacturer: syz [ 850.868854][ T5940] usb 9-1: SerialNumber: syz [ 850.945904][ T5940] usb 9-1: config 0 descriptor?? [ 850.986621][ T5940] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 851.080351][ T5940] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 851.097596][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 851.107808][ T984] usb 5-1: USB disconnect, device number 51 [ 851.148024][ T984] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 851.190274][ T984] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 851.225019][ T984] quatech2 5-1:0.51: device disconnected [ 851.481370][T20590] imon:send_packet: packet tx failed (-71) [ 851.489619][T10889] usb 3-1: USB disconnect, device number 24 [ 851.518738][T20590] imon:vfd_write: send packet #3 failed [ 851.606662][ T5940] em28xx 9-1:0.0: chip ID is em2765 [ 851.767416][T20595] syzkaller1: entered promiscuous mode [ 851.778714][T20595] syzkaller1: entered allmulticast mode [ 851.854853][T19744] Bluetooth: hci5: command 0x0405 tx timeout [ 852.423121][ T5940] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 852.450375][ T5940] em28xx 9-1:0.0: board has no eeprom [ 853.110256][ T30] audit: type=1326 audit(1762350709.541:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20618 comm="syz.1.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 853.186990][ T30] audit: type=1326 audit(1762350709.571:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20618 comm="syz.1.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 853.258520][ T30] audit: type=1326 audit(1762350709.571:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20618 comm="syz.1.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 853.297511][ T30] audit: type=1326 audit(1762350709.571:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20618 comm="syz.1.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 853.325537][ T30] audit: type=1326 audit(1762350709.581:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20618 comm="syz.1.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5f5878f6c9 code=0x7ffc0000 [ 853.349595][ T30] audit: type=1326 audit(1762350709.581:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20618 comm="syz.1.4579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=72 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 853.528895][T18168] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 853.528993][ T30] audit: type=1326 audit(1762350709.951:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20606 comm="syz.2.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7fc00000 [ 853.611952][T20571] em28xx 9-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 853.672351][ T5940] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 853.721389][ T5940] em28xx 9-1:0.0: dvb set to bulk mode. [ 853.737046][ T5941] em28xx 9-1:0.0: Binding DVB extension [ 853.750923][T18168] usb 4-1: Using ep0 maxpacket: 32 [ 853.765535][ T5940] usb 9-1: USB disconnect, device number 39 [ 853.792024][T18168] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 853.797821][ T5940] em28xx 9-1:0.0: Disconnecting em28xx [ 853.814126][T18168] usb 4-1: config 0 has no interface number 0 [ 853.931761][ T5941] em28xx 9-1:0.0: Registering input extension [ 853.942400][ T5940] em28xx 9-1:0.0: Closing input extension [ 853.942956][T18168] usb 4-1: config 0 interface 89 has no altsetting 0 [ 853.980508][ T5940] em28xx 9-1:0.0: Freeing device [ 854.071285][T18168] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 854.081216][T18168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.098686][T18168] usb 4-1: Product: syz [ 854.114662][T18168] usb 4-1: Manufacturer: syz [ 854.127995][T18168] usb 4-1: SerialNumber: syz [ 854.135134][T18168] usb 4-1: config 0 descriptor?? [ 854.146059][T18168] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 854.156520][T18168] em28xx 4-1:0.89: Video interface 89 found: bulk [ 854.923249][T18168] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 855.858714][T18168] em28xx 4-1:0.89: write to i2c device at 0xa0 failed with unknown error (status=1) [ 855.870973][T18168] em28xx 4-1:0.89: failed to read eeprom (err=-5) [ 855.909032][T18168] em28xx 4-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 856.107969][T18168] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 856.142358][T18168] em28xx 4-1:0.89: analog set to bulk mode. [ 856.199180][T18169] em28xx 4-1:0.89: Registering V4L2 extension [ 856.220101][T18168] usb 4-1: USB disconnect, device number 37 [ 856.254643][T18168] em28xx 4-1:0.89: Disconnecting em28xx [ 856.594048][T18169] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 856.607812][T18169] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 856.626425][T18169] em28xx 4-1:0.89: No AC97 audio processor [ 856.693322][T18169] usb 4-1: Decoder not found [ 856.698113][T18169] em28xx 4-1:0.89: failed to create media graph [ 856.741747][T18169] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 856.785319][T18169] em28xx 4-1:0.89: Registering snapshot button... [ 856.811074][T18169] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input63 [ 856.869998][T18169] em28xx 4-1:0.89: Remote control support is not available for this card. [ 856.898720][T18168] em28xx 4-1:0.89: Closing input extension [ 856.908966][T18168] em28xx 4-1:0.89: Deregistering snapshot button [ 857.153957][T20684] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4591'. [ 857.165017][T18168] em28xx 4-1:0.89: Freeing device [ 858.387269][T20697] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.394649][T20697] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.131938][T20697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.220410][T20697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.947258][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.965763][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.010343][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.061106][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.248648][ T30] audit: type=1326 audit(1762350716.671:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20730 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 860.321978][ T30] audit: type=1326 audit(1762350716.671:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20730 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 860.412188][ T30] audit: type=1326 audit(1762350716.671:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20730 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 860.435548][T18169] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 860.445228][ T30] audit: type=1326 audit(1762350716.671:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20730 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 860.653836][ T30] audit: type=1326 audit(1762350716.671:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20730 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 860.685657][T18169] usb 4-1: Using ep0 maxpacket: 8 [ 860.714396][ T30] audit: type=1326 audit(1762350716.671:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20730 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 860.715952][T18169] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 860.737766][ T30] audit: type=1326 audit(1762350716.681:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20730 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 860.808517][ T30] audit: type=1326 audit(1762350716.681:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20730 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 860.838995][ T30] audit: type=1326 audit(1762350716.681:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20730 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 861.069621][ T30] audit: type=1326 audit(1762350716.681:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20730 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 861.070353][T18169] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 861.105369][T18169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.114058][T18169] usb 4-1: Product: syz [ 861.121903][T18169] usb 4-1: Manufacturer: syz [ 861.126639][T18169] usb 4-1: SerialNumber: syz [ 861.153046][T18169] usb 4-1: config 0 descriptor?? [ 861.292813][T18169] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 861.308256][T18169] usb 4-1: setting power ON [ 861.314982][T18169] dvb-usb: bulk message failed: -22 (2/0) [ 861.491354][T18169] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 861.554162][T18169] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 861.569661][T18169] usb 4-1: media controller created [ 861.642437][T18169] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 861.773017][T18169] usb 4-1: selecting invalid altsetting 6 [ 861.808381][T18169] usb 4-1: digital interface selection failed (-22) [ 861.824013][T18169] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 861.840072][T18169] usb 4-1: setting power OFF [ 861.854148][T18169] dvb-usb: bulk message failed: -22 (2/0) [ 861.868662][T18169] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 861.899812][T18169] (NULL device *): no alternate interface [ 862.041001][T18169] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 862.208353][T18169] usb 4-1: USB disconnect, device number 38 [ 863.172871][T20775] syzkaller0: entered promiscuous mode [ 863.268758][T20775] syzkaller0: entered allmulticast mode [ 863.641870][ T5885] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 863.843030][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 863.864890][ T5885] usb 4-1: not running at top speed; connect to a high speed hub [ 863.879996][ T5885] usb 4-1: config 15 has an invalid interface number: 122 but max is 0 [ 863.888976][ T5885] usb 4-1: config 15 has no interface number 0 [ 863.897674][ T5885] usb 4-1: config 15 interface 122 has no altsetting 0 [ 863.929398][ T5885] usb 4-1: string descriptor 0 read error: -22 [ 863.936451][ T5885] usb 4-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=56.96 [ 863.988287][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.026920][ T5885] belkin_sa 4-1:15.122: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 864.132584][ T5885] usb 4-1: bcdDevice: 5696, bfc: 0 [ 864.202639][ T5885] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 864.483257][ T5839] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 864.492365][ T5885] usb 4-1: USB disconnect, device number 39 [ 864.500911][ T5885] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 864.513909][ T5885] belkin_sa 4-1:15.122: device disconnected [ 865.555504][T20827] netlink: 'syz.3.4622': attribute type 4 has an invalid length. [ 866.212444][T20827] netlink: 'syz.3.4622': attribute type 4 has an invalid length. [ 869.738851][ T5941] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 869.958729][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 869.966489][ T5941] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 870.068776][ T5941] usb 3-1: config 0 has no interface number 0 [ 870.115522][ T5941] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 870.198824][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.206929][ T5941] usb 3-1: Product: syz [ 870.239342][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.246030][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.268813][ T5941] usb 3-1: Manufacturer: syz [ 870.279071][ T5941] usb 3-1: SerialNumber: syz [ 870.280563][T20886] binder: 20883:20886 ioctl c0306201 200000004a40 returned -22 [ 870.309057][ T5941] usb 3-1: config 0 descriptor?? [ 870.339865][ T5941] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 870.628955][ T115] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 871.008756][ T5941] gspca_sn9c2028: read1 error -110 [ 871.028283][ T5941] gspca_sn9c2028: read1 error -32 [ 871.062703][ T5941] gspca_sn9c2028: read1 error -32 [ 871.068290][ T5941] sn9c2028 3-1:0.119: probe with driver sn9c2028 failed with error -32 [ 871.079415][ T115] usb 5-1: not running at top speed; connect to a high speed hub [ 871.093583][ T115] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 871.149042][ T115] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 871.192183][ T115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.217071][ T115] usb 5-1: Product: 䒔伺⬼巺ç¿æ†•æƒ´ì³¯î…¾åž’ꦇƗ⹹ꨟ嘈씆뢚誹Ᲊ熛蹬첩㬶ꦦâｃåµï«„䃜ࣿ⑆㘗툒ã¼æ¨·æ¡‡êŸ”ḅ괶⫅蒃њ㖖༞慺鵔㜎ᯑ첷è—艗îˆä·´è¶£çŽ™è¸°ã¨‘ãž›ï„⎼죪ʗãƒî§¹ç¦›â¯¢ï…‘ã²ì–˜ãµì°¦á½ Ý¸í‡—틻Ȭ粓ê¨Ó·ë»ƒå—­à¼…ގ [ 871.295527][ T115] usb 5-1: Manufacturer: Ð [ 871.305649][ T115] usb 5-1: SerialNumber: á [ 871.816632][ T115] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 871.835325][ T115] usb 5-1: unit 91 not found! [ 871.863706][ T115] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 871.900965][ T115] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 872.115508][ T115] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 872.188199][ T115] usb 5-1: USB disconnect, device number 52 [ 872.500410][T18171] usb 3-1: USB disconnect, device number 25 [ 872.791582][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 872.791596][ T30] audit: type=1800 audit(1762350729.221:1651): pid=20920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4638" name="file1" dev="tmpfs" ino=379 res=0 errno=0 [ 875.682897][T20950] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 875.892781][T20955] vlan2: entered promiscuous mode [ 875.898139][T20955] vlan2: entered allmulticast mode [ 875.989143][T20955] hsr_slave_1: entered allmulticast mode [ 876.278910][T10897] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 876.489053][T10897] usb 3-1: Using ep0 maxpacket: 8 [ 876.505177][T10897] usb 3-1: config 162 has an invalid interface number: 197 but max is 0 [ 876.518048][T10897] usb 3-1: config 162 has no interface number 0 [ 876.532021][T10897] usb 3-1: config 162 interface 197 has no altsetting 0 [ 876.563281][T10897] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 876.594266][T10897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.038688][T10897] usb 3-1: Product: syz [ 877.043138][T10897] usb 3-1: Manufacturer: syz [ 877.047873][T10897] usb 3-1: SerialNumber: syz [ 877.552912][T20964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.569312][T20964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.618503][T10897] usb 3-1: USB disconnect, device number 26 [ 877.847079][T20979] binder: 20978:20979 ioctl c0306201 200000000680 returned -14 [ 878.618729][T10897] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 878.771789][T10897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.806492][T10897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.836359][T10897] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 878.845776][T10897] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 878.859603][T10897] usb 3-1: Manufacturer: syz [ 878.875279][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4664'. [ 878.885242][T10897] usb 3-1: config 0 descriptor?? [ 879.036982][T20996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4664'. [ 879.040485][T20941] syz.4.4644: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 879.083368][T20941] CPU: 1 UID: 0 PID: 20941 Comm: syz.4.4644 Not tainted syzkaller #0 PREEMPT(full) [ 879.083404][T20941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 879.083417][T20941] Call Trace: [ 879.083427][T20941] [ 879.083437][T20941] dump_stack_lvl+0x189/0x250 [ 879.083477][T20941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 879.083506][T20941] ? __pfx__printk+0x10/0x10 [ 879.083529][T20941] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 879.083558][T20941] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 879.083588][T20941] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 879.083619][T20941] warn_alloc+0x214/0x310 [ 879.083658][T20941] ? __pfx_warn_alloc+0x10/0x10 [ 879.083699][T20941] ? __get_vm_area_node+0x28f/0x300 [ 879.083728][T20941] ? vb2_vmalloc_alloc+0xef/0x340 [ 879.083757][T20941] __vmalloc_node_range_noprof+0x690/0x12d0 [ 879.083821][T20941] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 879.083856][T20941] ? __kasan_kmalloc+0x93/0xb0 [ 879.083909][T20941] vmalloc_user_noprof+0xad/0xf0 [ 879.083938][T20941] ? vb2_vmalloc_alloc+0xef/0x340 [ 879.083963][T20941] vb2_vmalloc_alloc+0xef/0x340 [ 879.083986][T20941] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 879.084011][T20941] __vb2_queue_alloc+0x9c2/0x15a0 [ 879.084065][T20941] vb2_core_reqbufs+0xc31/0x1420 [ 879.084110][T20941] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 879.084129][T20941] ? vb2_verify_memory_type+0x1fc/0x570 [ 879.084152][T20941] ? vb2_reqbufs+0x3a9/0x630 [ 879.084181][T20941] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 879.084212][T20941] __video_do_ioctl+0xa59/0xc10 [ 879.084248][T20941] ? __pfx___video_do_ioctl+0x10/0x10 [ 879.084290][T20941] video_usercopy+0x82d/0x1450 [ 879.084325][T20941] ? __pfx___video_do_ioctl+0x10/0x10 [ 879.084349][T20941] ? __pfx_video_usercopy+0x10/0x10 [ 879.084394][T20941] ? __fget_files+0x3a0/0x420 [ 879.084420][T20941] v4l2_ioctl+0x18d/0x1e0 [ 879.084444][T20941] ? __pfx_v4l2_ioctl+0x10/0x10 [ 879.084466][T20941] __se_sys_ioctl+0xfc/0x170 [ 879.084496][T20941] do_syscall_64+0xfa/0xfa0 [ 879.084527][T20941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.084546][T20941] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 879.084565][T20941] ? clear_bhb_loop+0x60/0xb0 [ 879.084607][T20941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.084627][T20941] RIP: 0033:0x7fb2af18f6c9 [ 879.084646][T20941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.084666][T20941] RSP: 002b:00007fb2b00e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.084690][T20941] RAX: ffffffffffffffda RBX: 00007fb2af3e5fa0 RCX: 00007fb2af18f6c9 [ 879.084707][T20941] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000003 [ 879.084721][T20941] RBP: 00007fb2af211f91 R08: 0000000000000000 R09: 0000000000000000 [ 879.084734][T20941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.084747][T20941] R13: 00007fb2af3e6038 R14: 00007fb2af3e5fa0 R15: 00007fb2af50fa28 [ 879.084785][T20941] [ 879.084939][T20941] Mem-Info: [ 879.402283][T20941] active_anon:12008 inactive_anon:0 isolated_anon:0 [ 879.402283][T20941] active_file:12463 inactive_file:3767 isolated_file:0 [ 879.402283][T20941] unevictable:768 dirty:288 writeback:0 [ 879.402283][T20941] slab_reclaimable:8120 slab_unreclaimable:104761 [ 879.402283][T20941] mapped:30453 shmem:3427 pagetables:1991 [ 879.402283][T20941] sec_pagetables:0 bounce:0 [ 879.402283][T20941] kernel_misc_reclaimable:0 [ 879.402283][T20941] free:1336846 free_pcp:13520 free_cma:0 [ 879.450888][T20941] Node 0 active_anon:48032kB inactive_anon:0kB active_file:49844kB inactive_file:14940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121804kB dirty:1152kB writeback:0kB shmem:12172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13552kB pagetables:7820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 879.518731][T20941] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 879.551017][T20941] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 879.604103][T20941] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 879.617430][T20941] Node 0 DMA32 free:1443792kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44032kB inactive_anon:0kB active_file:49844kB inactive_file:14940kB unevictable:1536kB writepending:1152kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:32512kB local_pcp:18796kB free_cma:0kB [ 879.672916][T20941] lowmem_reserve[]: 0 0 0 0 0 [ 879.677903][T20941] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 879.716646][T20941] lowmem_reserve[]: 0 0 0 0 0 [ 879.762529][T20941] Node 1 Normal free:3887976kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25832kB local_pcp:5604kB free_cma:0kB [ 879.805028][T20941] lowmem_reserve[]: 0 0 0 0 0 [ 879.812114][T20941] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 879.825942][T20941] Node 0 DMA32: 2321*4kB (UME) 2217*8kB (UME) 1049*16kB (UME) 901*32kB (UME) 488*64kB (UME) 288*128kB (UME) 124*256kB (UME) 107*512kB (UME) 79*1024kB (UME) 6*2048kB (UE) 274*4096kB (UM) = 1442748kB [ 879.879023][T20941] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 879.891420][T20941] Node 1 Normal: 200*4kB (UME) 39*8kB (UE) 33*16kB (UME) 140*32kB (UME) 44*64kB (UME) 9*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (UM) = 3887976kB [ 879.928978][T10897] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input64 [ 879.977353][T20941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 879.984616][T10897] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input65 [ 879.987497][T20941] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 880.013071][T20941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 880.034807][T10897] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input66 [ 880.059524][T20941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 880.083077][T10897] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input67 [ 880.096922][T20941] 19653 total pagecache pages [ 880.109052][T20941] 0 pages in swap cache [ 880.113284][T20941] Free swap = 124996kB [ 880.117474][T20941] Total swap = 124996kB [ 880.139562][T20941] 2097051 pages RAM [ 880.144662][T20941] 0 pages HighMem/MovableOnly [ 880.159253][T10897] uclogic 0003:256C:006D.0036: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 880.209003][T20941] 424117 pages reserved [ 880.236311][T20941] 0 pages cma reserved [ 880.677053][T21013] syzkaller0: entered promiscuous mode [ 880.685096][T21013] syzkaller0: entered allmulticast mode [ 880.831638][ T115] usb 3-1: USB disconnect, device number 27 [ 881.351050][ T30] audit: type=1326 audit(1762350737.781:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.2.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 881.472129][ T30] audit: type=1326 audit(1762350737.781:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.2.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 881.592403][ T30] audit: type=1326 audit(1762350737.781:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.2.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 881.769559][ T30] audit: type=1326 audit(1762350737.781:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.2.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 881.916236][ T30] audit: type=1326 audit(1762350737.781:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.2.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 881.978744][ T30] audit: type=1326 audit(1762350737.781:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.2.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 882.002705][ T30] audit: type=1326 audit(1762350737.781:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.2.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 882.035849][ T30] audit: type=1326 audit(1762350737.781:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.2.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 882.059296][ T30] audit: type=1326 audit(1762350737.781:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.2.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 882.180034][ T30] audit: type=1326 audit(1762350737.781:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.2.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ba98f6c9 code=0x7ffc0000 [ 882.808931][ T5940] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 883.008750][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 883.016209][ T5940] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 883.055499][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.088335][ T5940] pvrusb2: Hardware description: Terratec Grabster AV400 [ 883.125576][ T5940] pvrusb2: ********** [ 883.138360][ T5940] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 883.160810][T21059] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4685'. [ 883.176746][ T5940] pvrusb2: Important functionality might not be entirely working. [ 883.231297][ T5940] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 883.262012][ T5940] pvrusb2: ********** [ 883.304524][ T2347] pvrusb2: Invalid write control endpoint [ 883.535020][T10897] usb 3-1: USB disconnect, device number 28 [ 883.580992][ T2347] pvrusb2: Invalid write control endpoint [ 883.587011][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 883.623526][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 883.632644][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 883.643228][ T2347] pvrusb2: Device being rendered inoperable [ 883.649490][ T2347] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 883.656910][ T2347] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 883.665429][ T2347] pvrusb2: Attached sub-driver cx25840 [ 883.689930][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 883.728837][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 885.669716][T19744] Bluetooth: hci5: command 0x0405 tx timeout [ 886.148905][ T5941] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 886.317431][ T5941] usb 2-1: config index 0 descriptor too short (expected 55488, got 27) [ 886.330268][ T5941] usb 2-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 886.381060][ T5941] usb 2-1: config 0 has no interfaces? [ 886.395315][ T5941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 886.432018][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.470737][ T5941] usb 2-1: Product: syz [ 886.490888][ T5941] usb 2-1: Manufacturer: syz [ 886.508700][ T5941] usb 2-1: SerialNumber: syz [ 886.535836][ T5941] usb 2-1: config 0 descriptor?? [ 886.712651][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 886.731178][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 886.759051][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 886.768265][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 886.776853][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 886.917938][ T5941] usb 2-1: USB disconnect, device number 37 [ 887.071640][T21098] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 887.468114][T21111] chnl_net:caif_netlink_parms(): no params data found [ 887.603484][T21111] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.610922][T21111] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.618455][T21111] bridge_slave_0: entered allmulticast mode [ 887.627731][T21111] bridge_slave_0: entered promiscuous mode [ 887.638503][T21111] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.647423][T21111] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.655040][T21111] bridge_slave_1: entered allmulticast mode [ 887.663544][T21111] bridge_slave_1: entered promiscuous mode [ 887.708087][T21111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.720254][T21111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.758671][ T24] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 887.831840][T21111] team0: Port device team_slave_0 added [ 887.851700][T21111] team0: Port device team_slave_1 added [ 888.014745][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 888.024667][ T24] usb 9-1: config 135 has an invalid interface number: 230 but max is 0 [ 888.030976][T21111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.033639][ T24] usb 9-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 888.057346][T21111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.089398][ T24] usb 9-1: config 135 has no interface number 0 [ 888.098310][ T24] usb 9-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 888.114382][ T24] usb 9-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 888.123715][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.131903][ T24] usb 9-1: Product: syz [ 888.138475][ T24] usb 9-1: Manufacturer: syz [ 888.142807][T21111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.154407][ T24] usb 9-1: SerialNumber: syz [ 888.165420][ T24] uvcvideo 9-1:135.230: Found Unit with invalid ID 0 [ 888.168814][T21111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.174246][ T24] uvcvideo 9-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 888.180657][T21111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.192027][ T24] uvcvideo 9-1:135.230: No valid video chain found. [ 888.213939][T21111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.868841][T19744] Bluetooth: hci0: command tx timeout [ 889.400195][ T24] usb 9-1: USB disconnect, device number 40 [ 889.433200][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 889.433220][ T30] audit: type=1326 audit(1762350745.861:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 889.500403][ T30] audit: type=1326 audit(1762350745.911:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 889.524292][ T30] audit: type=1326 audit(1762350745.911:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 889.547280][ T30] audit: type=1326 audit(1762350745.911:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 889.571203][ T30] audit: type=1326 audit(1762350745.921:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 889.596915][ T30] audit: type=1326 audit(1762350745.921:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 889.622957][ T30] audit: type=1326 audit(1762350745.921:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 889.650511][ T30] audit: type=1326 audit(1762350745.921:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 889.674959][ T30] audit: type=1326 audit(1762350745.921:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 889.682566][T21111] hsr_slave_0: entered promiscuous mode [ 889.698448][ T30] audit: type=1326 audit(1762350745.921:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 889.870652][T21111] hsr_slave_1: entered promiscuous mode [ 889.909485][T21111] debugfs: 'hsr0' already exists in 'hsr' [ 889.924461][T21111] Cannot create hsr debugfs directory [ 890.950102][T19744] Bluetooth: hci0: command tx timeout [ 891.553246][T21111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.812927][T21111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.878918][ T5940] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 892.223224][ T5940] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 892.238362][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.246817][ T5940] usb 5-1: Product: syz [ 892.257532][ T5940] usb 5-1: Manufacturer: syz [ 892.274741][ T5940] usb 5-1: SerialNumber: syz [ 892.363936][T21111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.483613][T21111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.731970][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 892.814753][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 893.029344][T19744] Bluetooth: hci0: command tx timeout [ 893.560221][T21111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 893.794726][T21111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 893.907052][T21111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 894.282526][T21111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 894.405297][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 894.421088][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 894.468396][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 894.515025][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 894.553286][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 894.602584][ T5940] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 894.626884][ T5940] usb 5-1: USB disconnect, device number 53 [ 895.008489][T21111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.109086][T19744] Bluetooth: hci0: command tx timeout [ 895.138380][T21111] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.193249][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.200440][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.300373][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.307772][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.863697][T21111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.981329][T21111] veth0_vlan: entered promiscuous mode [ 896.030442][T21111] veth1_vlan: entered promiscuous mode [ 897.146693][T21111] veth0_macvtap: entered promiscuous mode [ 897.194671][T21111] veth1_macvtap: entered promiscuous mode [ 897.243366][T21111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.335114][T21111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.375009][T17785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.428891][ T5885] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 897.452580][T17785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.483003][T17785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.588715][ T5885] usb 9-1: Using ep0 maxpacket: 32 [ 897.590644][T17785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.610509][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.620776][ T5885] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 897.634026][ T5885] usb 9-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 897.656775][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.728639][ T5885] usb 9-1: config 0 descriptor?? [ 897.990942][T20019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.006670][T21222] fuse: Bad value for 'fd' [ 898.014717][T20019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.230176][ T5885] usbhid 9-1:0.0: can't add hid device: -71 [ 898.238896][ T5885] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 898.248869][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.266546][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.312609][ T5885] usb 9-1: USB disconnect, device number 41 [ 900.019801][T21248] binder: BINDER_SET_CONTEXT_MGR already set [ 900.025883][T21248] binder: 21247:21248 ioctl 4018620d 200000000040 returned -16 [ 900.588740][ T984] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 901.358830][ T984] usb 5-1: Using ep0 maxpacket: 16 [ 901.390385][ T984] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 901.407495][ T984] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 901.536034][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.564293][ T984] usb 5-1: config 0 descriptor?? [ 901.585691][ T984] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input68 [ 901.778023][T21251] input: syz0 as /devices/virtual/input/input69 [ 902.631639][T21282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4751'. [ 902.999455][ T5940] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 903.068068][T21291] input: syz1 as /devices/virtual/input/input70 [ 903.158811][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 903.166441][ T5940] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 903.175114][ T5940] usb 4-1: config 0 has no interface number 0 [ 903.183396][ T5940] usb 4-1: config 0 interface 12 has no altsetting 0 [ 903.208306][ T5940] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 903.218719][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.226809][ T5940] usb 4-1: Product: syz [ 903.231332][ T5940] usb 4-1: Manufacturer: syz [ 903.236065][ T5940] usb 4-1: SerialNumber: syz [ 903.311114][ T5185] bcm5974 5-1:0.0: could not read from device [ 903.376776][ T5185] bcm5974 5-1:0.0: could not read from device [ 903.414183][ T5185] bcm5974 5-1:0.0: could not read from device [ 903.433175][ T5940] usb 4-1: config 0 descriptor?? [ 903.436064][ T5185] bcm5974 5-1:0.0: could not read from device [ 903.438968][ T984] usb 5-1: USB disconnect, device number 54 [ 903.950179][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 903.950201][ T30] audit: type=1326 audit(1762350760.381:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 904.007789][ T30] audit: type=1326 audit(1762350760.411:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 904.127371][ T30] audit: type=1326 audit(1762350760.461:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 904.238940][ T30] audit: type=1326 audit(1762350760.461:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 904.385749][ T30] audit: type=1326 audit(1762350760.461:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 904.479877][ T984] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 904.492649][ T30] audit: type=1326 audit(1762350760.461:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 904.568681][ T30] audit: type=1326 audit(1762350760.461:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 904.668895][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 904.678811][ T984] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 904.688760][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.696996][ T984] usb 5-1: Product: syz [ 904.702191][ T984] usb 5-1: Manufacturer: syz [ 904.707124][ T984] usb 5-1: SerialNumber: syz [ 904.727752][ T984] usb 5-1: config 0 descriptor?? [ 904.747421][ T984] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 904.764464][ T30] audit: type=1326 audit(1762350760.461:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 904.840493][ T30] audit: type=1326 audit(1762350760.481:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 904.939309][ T30] audit: type=1326 audit(1762350760.481:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2af18f6c9 code=0x7ffc0000 [ 905.626012][ T5940] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 905.634518][ T5940] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 905.645003][ T5940] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 905.664766][ T5940] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 905.719052][ T5940] usb 4-1: USB disconnect, device number 40 [ 907.368719][ T984] gspca_sonixj: reg_w1 err -71 [ 907.429231][ T984] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 907.458745][ T984] usb 5-1: USB disconnect, device number 55 [ 907.577088][T21331] binder: 21330:21331 ioctl c0306201 200000004a40 returned -22 [ 908.243112][T21342] binder_alloc: binder_alloc_mmap_handler: 21338 200000ffc000-200001000000 already mapped failed -16 [ 910.261608][T21359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4775'. [ 913.009984][T21384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.887776][T21395] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 915.054958][T21407] netlink: 'syz.4.4790': attribute type 10 has an invalid length. [ 915.096495][T21407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4790'. [ 915.142536][T21407] team0: Port device geneve0 added [ 926.884833][T21530] fuse: Bad value for 'fd' [ 929.086875][T21547] binder: 21546:21547 ioctl c0306201 200000000440 returned -14 [ 929.432453][T21556] netlink: 'syz.1.4835': attribute type 10 has an invalid length. [ 929.459020][T21556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4835'. [ 929.536270][T21556] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 929.552645][T21556] bond1 (unregistering): Released all slaves [ 929.815680][T19744] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 930.089183][T10897] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 930.279013][T10897] usb 4-1: Using ep0 maxpacket: 16 [ 930.292480][T10897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 930.299518][T10897] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 930.310231][T10897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.344222][T10897] usb 4-1: config 0 descriptor?? [ 930.777115][T10897] hid (null): global environment stack underflow [ 930.786667][T10897] hid (null): unknown global tag 0xd [ 930.793785][T10897] hid (null): unknown global tag 0xc [ 930.909881][T10897] hid (null): unknown global tag 0x22 [ 930.916670][T10897] hid (null): report_id 1619789852 is invalid [ 930.925425][T10897] hid (null): unknown global tag 0xc [ 931.080211][T10897] hid (null): unknown global tag 0xd [ 931.103720][T10897] hid (null): global environment stack underflow [ 931.132005][T10897] hid (null): unknown global tag 0xc [ 931.138160][T10897] hid (null): nested delimiters [ 931.195306][T10897] hid (null): unknown global tag 0xc [ 931.327594][T10897] hid (null): unknown global tag 0xd [ 931.352935][T10897] hid (null): unknown global tag 0xe [ 931.427279][T10897] usb 4-1: USB disconnect, device number 41 [ 931.745283][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.754212][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.015395][T21597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4849'. [ 932.121669][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4849'. [ 932.539006][ T5940] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 932.709077][ T5940] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 932.740567][ T5940] usb 4-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 932.767949][ T5940] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 932.804721][ T5940] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 932.857515][ T5940] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8784, setting to 1024 [ 932.919943][ T5940] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 932.969249][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 933.000617][ T5940] usb 4-1: Product: syz [ 933.004947][ T5940] usb 4-1: Manufacturer: syz [ 933.074058][ T5940] cdc_wdm 4-1:1.0: skipping garbage [ 933.088545][ T5940] cdc_wdm 4-1:1.0: skipping garbage [ 933.129331][ T5940] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 933.135410][ T5940] cdc_wdm 4-1:1.0: Unknown control protocol [ 933.349095][T21608] input: syz1 as /devices/virtual/input/input71 [ 933.438776][ T5941] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 933.563433][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 933.570310][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 933.577294][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 933.584502][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 933.591136][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 933.598964][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 933.605604][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 933.619578][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 933.626322][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 933.633857][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 933.640491][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 933.648308][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 933.655122][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 933.661807][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 933.668447][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 933.675089][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 933.681710][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 933.688715][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 933.695338][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 933.702263][ T5940] usb 4-1: USB disconnect, device number 42 [ 933.708696][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 933.715423][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 933.722242][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 933.748706][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 933.757182][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.777616][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.798376][ T5941] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 933.819553][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.863017][ T5941] usb 3-1: config 0 descriptor?? [ 934.283837][ T5941] usbhid 3-1:0.0: can't add hid device: -71 [ 934.310474][ T5941] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 934.361234][ T5941] usb 3-1: USB disconnect, device number 29 [ 934.419245][ T5940] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 934.618668][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 934.632390][ T5940] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 934.648637][ T5940] usb 2-1: config 0 has no interface number 0 [ 934.665479][ T5940] usb 2-1: config 0 interface 12 has no altsetting 0 [ 934.682447][ T5940] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 934.698608][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.718934][ T5940] usb 2-1: Product: syz [ 934.723164][ T5940] usb 2-1: Manufacturer: syz [ 934.748631][ T5940] usb 2-1: SerialNumber: syz [ 934.760606][ T5940] usb 2-1: config 0 descriptor?? [ 935.876587][T21640] syzkaller0: entered promiscuous mode [ 935.892568][T21640] syzkaller0: entered allmulticast mode [ 936.850160][T21653] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 936.858042][T21653] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 936.901080][T21656] loop5: detected capacity change from 0 to 7 [ 936.914136][T21653] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 936.920850][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 936.930158][ C1] buffer_io_error: 27 callbacks suppressed [ 936.930171][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 936.950840][T21653] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 936.958959][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 936.968273][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 936.976964][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 936.986292][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 936.999703][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.009000][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.022033][T21653] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 937.023069][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.038464][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.047055][T21656] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.057119][T21656] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.067860][T21653] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 937.080817][T21653] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 937.090310][T21653] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 937.101084][T21656] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.111161][T21656] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.124472][T21656] ldm_validate_partition_table(): Disk read failed. [ 937.134614][T21656] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.145817][T21656] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.146738][T21653] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 937.162270][T21656] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.163762][T21653] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 937.180731][T21656] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.194151][T21656] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.205163][T21656] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.214506][T21656] Dev loop5: unable to read RDB block 0 [ 937.222587][T21656] loop5: unable to read partition table [ 937.228242][ T5940] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 937.237292][ T5940] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 937.247885][T21656] loop5: partition table beyond EOD, truncated [ 937.261292][T21656] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 937.262063][ T5940] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 937.297312][ T5940] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 937.330673][ T5940] usb 2-1: USB disconnect, device number 38 [ 937.514458][T21660] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4872'. [ 937.691716][T21665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 939.298725][T10897] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 939.386809][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 939.386832][ T30] audit: type=1800 audit(1762350795.811:1714): pid=21699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4884" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 939.460745][T10897] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 939.473547][T10897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.515293][T10897] usb 4-1: config 0 descriptor?? [ 939.571478][T10897] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 941.115246][T21721] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 941.977214][T10897] usb 4-1: USB disconnect, device number 43 [ 944.768732][ T5941] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 945.018745][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 945.057271][ T5941] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 945.108535][ T5941] usb 2-1: config 0 has no interface number 0 [ 945.125732][ T30] audit: type=1326 audit(1762350801.551:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.8.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8198f6c9 code=0x7ffc0000 [ 945.132178][ T30] audit: type=1326 audit(1762350801.551:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.8.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8198f6c9 code=0x7ffc0000 [ 945.188424][ T30] audit: type=1326 audit(1762350801.611:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.8.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbb8198f6c9 code=0x7ffc0000 [ 945.260708][ T30] audit: type=1326 audit(1762350801.611:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.8.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8198f6c9 code=0x7ffc0000 [ 945.335285][ T30] audit: type=1326 audit(1762350801.611:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.8.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8198f6c9 code=0x7ffc0000 [ 945.368808][ T30] audit: type=1326 audit(1762350801.611:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.8.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fbb8198f6c9 code=0x7ffc0000 [ 945.395911][ T5941] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.438878][ T5941] usb 2-1: config 0 interface 85 has no altsetting 0 [ 945.486264][ T5941] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 945.505558][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.524848][ T30] audit: type=1326 audit(1762350801.611:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.8.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8198f6c9 code=0x7ffc0000 [ 945.546633][ T5941] usb 2-1: Product: syz [ 945.574524][ T5941] usb 2-1: Manufacturer: syz [ 945.604142][ T5941] usb 2-1: SerialNumber: syz [ 945.617840][ T30] audit: type=1326 audit(1762350801.611:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.8.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8198f6c9 code=0x7ffc0000 [ 945.650266][ T5941] usb 2-1: config 0 descriptor?? [ 945.713820][ T30] audit: type=1326 audit(1762350801.611:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.8.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb8198f6c9 code=0x7ffc0000 [ 945.737209][ T30] audit: type=1326 audit(1762350801.611:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21749 comm="syz.8.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8198f6c9 code=0x7ffc0000 [ 945.789570][ T5940] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 945.974428][ T5940] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 946.033480][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.093656][ T5940] usb 5-1: Product: syz [ 946.115547][ T5940] usb 5-1: Manufacturer: syz [ 946.149574][ T5940] usb 5-1: SerialNumber: syz [ 946.239220][T18171] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 946.410221][T18171] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 946.423261][T18171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.442181][T18171] usb 4-1: Product: syz [ 946.449394][T18171] usb 4-1: Manufacturer: syz [ 946.458923][T18171] usb 4-1: SerialNumber: syz [ 946.472863][T18171] usb 4-1: config 0 descriptor?? [ 946.687825][ T5941] appletouch 2-1:0.85: Geyser mode initialized. [ 946.705371][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 946.722503][T18171] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 946.731327][ T5941] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input72 [ 946.737894][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 947.568789][ T984] usb 2-1: USB disconnect, device number 39 [ 947.613032][ T984] appletouch 2-1:0.85: input: appletouch disconnected [ 948.053075][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 948.066665][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 948.294205][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 948.329361][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 948.360248][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 948.384453][ T5940] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 948.433771][ T5940] usb 5-1: USB disconnect, device number 56 [ 948.741903][T18171] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 948.770731][T18171] usb 4-1: USB disconnect, device number 44 [ 949.879220][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 950.308733][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 950.316051][ T24] usb 4-1: config 2 has an invalid interface number: 4 but max is 0 [ 950.328422][ T24] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 950.438678][ T24] usb 4-1: config 2 has no interface number 0 [ 950.464086][ T24] usb 4-1: config 2 interface 4 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 950.484328][ T24] usb 4-1: config 2 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 950.543424][ T24] usb 4-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 950.552850][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.565844][ T24] usb 4-1: Product: syz [ 950.608710][ T24] usb 4-1: Manufacturer: syz [ 950.621212][ T24] usb 4-1: SerialNumber: syz [ 950.712250][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 950.812515][ T24] snd-usb-audio 4-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 950.922757][ T7887] udevd[7887]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.039700][ T24] usb 4-1: USB disconnect, device number 45 [ 951.143481][T21810] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4919'. [ 951.589596][T21817] binder: BINDER_SET_CONTEXT_MGR already set [ 951.600561][T21817] binder: 21816:21817 ioctl 4018620d 2000000002c0 returned -16 [ 952.946406][T21832] input: syz1 as /devices/virtual/input/input73 [ 955.248242][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4933'. [ 955.260964][T21831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4926'. [ 955.464707][T21859] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 955.479750][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4933'. [ 955.571061][T17785] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 955.628708][T17785] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 955.698991][T21861] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 955.775978][T21861] bond1 (unregistering): Released all slaves [ 955.953174][T17785] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 956.663890][T17785] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 957.188779][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 957.188801][ T30] audit: type=1800 audit(1762350813.611:1739): pid=21863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4934" name="bus" dev="ramfs" ino=115676 res=0 errno=0 [ 959.168684][T18171] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 959.383105][T18171] usb 4-1: Using ep0 maxpacket: 32 [ 959.391588][T18171] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 959.404073][T18171] usb 4-1: config 0 has no interface number 0 [ 959.421031][T18171] usb 4-1: config 0 interface 12 has no altsetting 0 [ 959.503424][T18171] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 959.546702][T18171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.584394][T18171] usb 4-1: Product: syz [ 959.598103][T18171] usb 4-1: Manufacturer: syz [ 959.620748][T18171] usb 4-1: SerialNumber: syz [ 959.655578][T18171] usb 4-1: config 0 descriptor?? [ 959.688524][T18171] f81534 4-1:0.12: required endpoints missing [ 960.646557][T18171] usb 4-1: USB disconnect, device number 46 [ 964.873542][T21955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4960'. [ 964.937750][T21955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4960'. [ 965.627855][T21962] xt_TCPMSS: Only works on TCP SYN packets [ 965.671252][T21962] hub 1-0:1.0: USB hub found [ 965.696900][T21962] hub 1-0:1.0: 1 port detected [ 968.508670][ T984] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 968.672414][ T984] usb 2-1: Using ep0 maxpacket: 8 [ 968.694184][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.718892][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.745500][ T984] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 968.790363][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.819082][ T984] usb 2-1: config 0 descriptor?? [ 969.321239][ T984] hid-multitouch 0003:0EEF:72C4.0038: unknown main item tag 0x0 [ 969.349665][ T984] hid-multitouch 0003:0EEF:72C4.0038: unknown main item tag 0x0 [ 969.368157][ T984] hid-multitouch 0003:0EEF:72C4.0038: unknown main item tag 0x0 [ 969.381285][ T984] hid-multitouch 0003:0EEF:72C4.0038: unknown main item tag 0x0 [ 969.393204][ T984] hid-multitouch 0003:0EEF:72C4.0038: unknown main item tag 0x0 [ 969.409691][ T984] hid-multitouch 0003:0EEF:72C4.0038: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 969.769354][ T984] usb 2-1: USB disconnect, device number 40 [ 969.917290][T22015] fido_id[22015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 970.587312][T22019] binder: BINDER_SET_CONTEXT_MGR already set [ 970.593517][T22019] binder: 22018:22019 ioctl 4018620d 200000004a80 returned -16 [ 970.602692][T22019] binder: 22018:22019 unknown command 0 [ 970.608324][T22019] binder: 22018:22019 ioctl c0306201 200000004a40 returned -22 [ 970.744219][T22023] binder_alloc: 22022: binder_alloc_buf size 1024 failed, no address space [ 970.779114][T22023] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 970.906238][T22024] [ 970.908616][T22024] ===================================================== [ 970.915898][T22024] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 970.923529][T22024] syzkaller #0 Not tainted [ 970.928034][T22024] ----------------------------------------------------- [ 970.934966][T22024] syz.3.4979/22024 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 970.942684][T22024] ffff8880784828a0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 970.951499][T22024] [ 970.951499][T22024] and this task is already holding: [ 970.958878][T22024] ffff88807a416468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 970.967591][T22024] which would create a new lock dependency: [ 970.973503][T22024] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 970.981239][T22024] [ 970.981239][T22024] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 970.990869][T22024] (kbd_event_lock){..-.}-{3:3} [ 970.990906][T22024] [ 970.990906][T22024] ... which became SOFTIRQ-irq-safe at: [ 971.003744][T22024] lock_acquire+0x120/0x360 [ 971.008337][T22024] _raw_spin_lock+0x2e/0x40 [ 971.012920][T22024] kbd_event+0xd2/0x3f70 [ 971.017342][T22024] input_handle_events_default+0xd4/0x1a0 [ 971.023264][T22024] input_pass_values+0x288/0x890 [ 971.028373][T22024] input_event_dispose+0x3e5/0x6b0 [ 971.033790][T22024] input_event+0x89/0xe0 [ 971.038150][T22024] hidinput_hid_event+0x145e/0x1dd0 [ 971.043475][T22024] hid_process_event+0x4be/0x620 [ 971.048559][T22024] hid_report_raw_event+0xe91/0x16d0 [ 971.053960][T22024] hid_input_report+0x43e/0x520 [ 971.058915][T22024] hid_irq_in+0x47e/0x6d0 [ 971.063331][T22024] __usb_hcd_giveback_urb+0x376/0x540 [ 971.068797][T22024] dummy_timer+0x85f/0x44c0 [ 971.073398][T22024] __hrtimer_run_queues+0x52c/0xc60 [ 971.078775][T22024] hrtimer_run_softirq+0x187/0x2b0 [ 971.083990][T22024] handle_softirqs+0x286/0x870 [ 971.088856][T22024] __irq_exit_rcu+0xca/0x1f0 [ 971.093545][T22024] irq_exit_rcu+0x9/0x30 [ 971.097886][T22024] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 971.103639][T22024] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 971.109722][T22024] deref_stack_reg+0x1b3/0x230 [ 971.114669][T22024] unwind_next_frame+0x17c4/0x2390 [ 971.119870][T22024] arch_stack_walk+0x11c/0x150 [ 971.124757][T22024] stack_trace_save+0x9c/0xe0 [ 971.129528][T22024] kasan_save_track+0x3e/0x80 [ 971.134342][T22024] __kasan_save_free_info+0x46/0x50 [ 971.139711][T22024] __kasan_slab_free+0x5c/0x80 [ 971.144607][T22024] kfree+0x19a/0x6d0 [ 971.148605][T22024] skb_release_data+0x62d/0x7c0 [ 971.153581][T22024] consume_skb+0x9e/0xf0 [ 971.157914][T22024] nsim_dev_trap_report_work+0x7cf/0xb80 [ 971.163638][T22024] process_scheduled_works+0xae1/0x17b0 [ 971.169279][T22024] worker_thread+0x8a0/0xda0 [ 971.174132][T22024] kthread+0x711/0x8a0 [ 971.178381][T22024] ret_from_fork+0x4bc/0x870 [ 971.183081][T22024] ret_from_fork_asm+0x1a/0x30 [ 971.187943][T22024] [ 971.187943][T22024] to a SOFTIRQ-irq-unsafe lock: [ 971.195181][T22024] (tasklist_lock){.+.+}-{3:3} [ 971.195210][T22024] [ 971.195210][T22024] ... which became SOFTIRQ-irq-unsafe at: [ 971.208281][T22024] ... [ 971.208290][T22024] lock_acquire+0x120/0x360 [ 971.215464][T22024] _raw_read_lock+0x36/0x50 [ 971.220144][T22024] __do_wait+0xde/0x740 [ 971.224491][T22024] do_wait+0x1f8/0x510 [ 971.228741][T22024] kernel_wait+0xab/0x170 [ 971.233174][T22024] call_usermodehelper_exec_work+0xbe/0x230 [ 971.239159][T22024] process_scheduled_works+0xae1/0x17b0 [ 971.244799][T22024] worker_thread+0x8a0/0xda0 [ 971.249476][T22024] kthread+0x711/0x8a0 [ 971.253681][T22024] ret_from_fork+0x4bc/0x870 [ 971.258361][T22024] ret_from_fork_asm+0x1a/0x30 [ 971.263212][T22024] [ 971.263212][T22024] other info that might help us debug this: [ 971.263212][T22024] [ 971.273628][T22024] Chain exists of: [ 971.273628][T22024] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 971.273628][T22024] [ 971.286514][T22024] Possible interrupt unsafe locking scenario: [ 971.286514][T22024] [ 971.294865][T22024] CPU0 CPU1 [ 971.300675][T22024] ---- ---- [ 971.306485][T22024] lock(tasklist_lock); [ 971.310821][T22024] local_irq_disable(); [ 971.318028][T22024] lock(kbd_event_lock); [ 971.326020][T22024] lock(&tty->flow.lock); [ 971.333229][T22024] [ 971.336682][T22024] lock(kbd_event_lock); [ 971.341191][T22024] [ 971.341191][T22024] *** DEADLOCK *** [ 971.341191][T22024] [ 971.349339][T22024] 6 locks held by syz.3.4979/22024: [ 971.354577][T22024] #0: ffff88807a4160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 971.364340][T22024] #1: ffff88807a4162e8 (&tty->termios_rwsem/1){++++}-{4:4}, at: tty_set_termios+0x138/0x17e0 [ 971.374820][T22024] #2: ffff88807a4160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 971.384228][T22024] #3: ffff88807a416468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 971.393285][T22024] #4: ffff88807a4160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 971.402606][T22024] #5: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 971.411674][T22024] [ 971.411674][T22024] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 971.422161][T22024] -> (kbd_event_lock){..-.}-{3:3} { [ 971.427475][T22024] IN-SOFTIRQ-W at: [ 971.431544][T22024] lock_acquire+0x120/0x360 [ 971.437874][T22024] _raw_spin_lock+0x2e/0x40 [ 971.444218][T22024] kbd_event+0xd2/0x3f70 [ 971.450291][T22024] input_handle_events_default+0xd4/0x1a0 [ 971.457878][T22024] input_pass_values+0x288/0x890 [ 971.464660][T22024] input_event_dispose+0x3e5/0x6b0 [ 971.471703][T22024] input_event+0x89/0xe0 [ 971.477865][T22024] hidinput_hid_event+0x145e/0x1dd0 [ 971.484898][T22024] hid_process_event+0x4be/0x620 [ 971.491664][T22024] hid_report_raw_event+0xe91/0x16d0 [ 971.498801][T22024] hid_input_report+0x43e/0x520 [ 971.505593][T22024] hid_irq_in+0x47e/0x6d0 [ 971.511748][T22024] __usb_hcd_giveback_urb+0x376/0x540 [ 971.518946][T22024] dummy_timer+0x85f/0x44c0 [ 971.525292][T22024] __hrtimer_run_queues+0x52c/0xc60 [ 971.532345][T22024] hrtimer_run_softirq+0x187/0x2b0 [ 971.539369][T22024] handle_softirqs+0x286/0x870 [ 971.546308][T22024] __irq_exit_rcu+0xca/0x1f0 [ 971.552722][T22024] irq_exit_rcu+0x9/0x30 [ 971.558799][T22024] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 971.566315][T22024] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 971.574512][T22024] deref_stack_reg+0x1b3/0x230 [ 971.581116][T22024] unwind_next_frame+0x17c4/0x2390 [ 971.588068][T22024] arch_stack_walk+0x11c/0x150 [ 971.594754][T22024] stack_trace_save+0x9c/0xe0 [ 971.601357][T22024] kasan_save_track+0x3e/0x80 [ 971.607957][T22024] __kasan_save_free_info+0x46/0x50 [ 971.615000][T22024] __kasan_slab_free+0x5c/0x80 [ 971.621624][T22024] kfree+0x19a/0x6d0 [ 971.627391][T22024] skb_release_data+0x62d/0x7c0 [ 971.634079][T22024] consume_skb+0x9e/0xf0 [ 971.640149][T22024] nsim_dev_trap_report_work+0x7cf/0xb80 [ 971.647709][T22024] process_scheduled_works+0xae1/0x17b0 [ 971.655115][T22024] worker_thread+0x8a0/0xda0 [ 971.661533][T22024] kthread+0x711/0x8a0 [ 971.667437][T22024] ret_from_fork+0x4bc/0x870 [ 971.673876][T22024] ret_from_fork_asm+0x1a/0x30 [ 971.680552][T22024] INITIAL USE at: [ 971.684728][T22024] lock_acquire+0x120/0x360 [ 971.691055][T22024] _raw_spin_lock_irqsave+0xa7/0xf0 [ 971.697995][T22024] vt_reset_unicode+0x2b/0x160 [ 971.704605][T22024] reset_vc+0x68/0x1b0 [ 971.710512][T22024] vc_init+0x70/0x4a0 [ 971.716329][T22024] con_init+0x385/0x9c0 [ 971.722313][T22024] console_init+0x10e/0x430 [ 971.728650][T22024] start_kernel+0x254/0x410 [ 971.735206][T22024] x86_64_start_reservations+0x24/0x30 [ 971.742585][T22024] x86_64_start_kernel+0x143/0x1c0 [ 971.749610][T22024] common_startup_64+0x13e/0x147 [ 971.756299][T22024] } [ 971.758901][T22024] ... key at: [] kbd_event_lock+0x18/0xa0 [ 971.766795][T22024] -> (&tty->flow.lock){....}-{3:3} { [ 971.772102][T22024] INITIAL USE at: [ 971.776034][T22024] lock_acquire+0x120/0x360 [ 971.782186][T22024] _raw_spin_lock_irqsave+0xa7/0xf0 [ 971.789057][T22024] start_tty+0x20/0x70 [ 971.794703][T22024] n_tty_set_termios+0xa7c/0x1090 [ 971.801393][T22024] tty_set_termios+0xda4/0x17e0 [ 971.807823][T22024] set_termios+0x516/0x6c0 [ 971.813901][T22024] tty_mode_ioctl+0x47e/0x740 [ 971.820144][T22024] tty_ioctl+0x9c6/0xde0 [ 971.826268][T22024] __se_sys_ioctl+0xfc/0x170 [ 971.832427][T22024] do_syscall_64+0xfa/0xfa0 [ 971.838587][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.846062][T22024] } [ 971.848561][T22024] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 971.857344][T22024] ... acquired at: [ 971.861149][T22024] lock_acquire+0x120/0x360 [ 971.865886][T22024] _raw_spin_lock_irqsave+0xa7/0xf0 [ 971.871385][T22024] stop_tty+0x2f/0x150 [ 971.875695][T22024] kbd_event+0x2b72/0x3f70 [ 971.880303][T22024] input_handle_events_default+0xd4/0x1a0 [ 971.886203][T22024] input_pass_values+0x288/0x890 [ 971.891340][T22024] input_event_dispose+0x330/0x6b0 [ 971.896855][T22024] input_inject_event+0x1dd/0x340 [ 971.902177][T22024] evdev_write+0x2fc/0x480 [ 971.906864][T22024] vfs_write+0x27e/0xb30 [ 971.911289][T22024] ksys_write+0x145/0x250 [ 971.915802][T22024] do_syscall_64+0xfa/0xfa0 [ 971.920487][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.926552][T22024] [ 971.928873][T22024] [ 971.928873][T22024] the dependencies between the lock to be acquired [ 971.928883][T22024] and SOFTIRQ-irq-unsafe lock: [ 971.942489][T22024] -> (tasklist_lock){.+.+}-{3:3} { [ 971.947797][T22024] HARDIRQ-ON-R at: [ 971.951962][T22024] lock_acquire+0x120/0x360 [ 971.958465][T22024] _raw_read_lock+0x36/0x50 [ 971.964973][T22024] __do_wait+0xde/0x740 [ 971.971309][T22024] do_wait+0x1f8/0x510 [ 971.977400][T22024] kernel_wait+0xab/0x170 [ 971.983782][T22024] call_usermodehelper_exec_work+0xbe/0x230 [ 971.992095][T22024] process_scheduled_works+0xae1/0x17b0 [ 971.999663][T22024] worker_thread+0x8a0/0xda0 [ 972.006381][T22024] kthread+0x711/0x8a0 [ 972.012455][T22024] ret_from_fork+0x4bc/0x870 [ 972.019054][T22024] ret_from_fork_asm+0x1a/0x30 [ 972.025836][T22024] SOFTIRQ-ON-R at: [ 972.029998][T22024] lock_acquire+0x120/0x360 [ 972.036592][T22024] _raw_read_lock+0x36/0x50 [ 972.043187][T22024] __do_wait+0xde/0x740 [ 972.049344][T22024] do_wait+0x1f8/0x510 [ 972.055743][T22024] kernel_wait+0xab/0x170 [ 972.062730][T22024] call_usermodehelper_exec_work+0xbe/0x230 [ 972.070987][T22024] process_scheduled_works+0xae1/0x17b0 [ 972.078728][T22024] worker_thread+0x8a0/0xda0 [ 972.085512][T22024] kthread+0x711/0x8a0 [ 972.091774][T22024] ret_from_fork+0x4bc/0x870 [ 972.098475][T22024] ret_from_fork_asm+0x1a/0x30 [ 972.105507][T22024] INITIAL USE at: [ 972.109681][T22024] lock_acquire+0x120/0x360 [ 972.116195][T22024] _raw_write_lock_irq+0xa2/0xf0 [ 972.123049][T22024] copy_process+0x224f/0x3c00 [ 972.129922][T22024] kernel_clone+0x21e/0x840 [ 972.136393][T22024] user_mode_thread+0xdd/0x140 [ 972.143157][T22024] rest_init+0x23/0x300 [ 972.149572][T22024] start_kernel+0x3ae/0x410 [ 972.156029][T22024] x86_64_start_reservations+0x24/0x30 [ 972.163405][T22024] x86_64_start_kernel+0x143/0x1c0 [ 972.170434][T22024] common_startup_64+0x13e/0x147 [ 972.177810][T22024] INITIAL READ USE at: [ 972.182317][T22024] lock_acquire+0x120/0x360 [ 972.189170][T22024] _raw_read_lock+0x36/0x50 [ 972.196023][T22024] __do_wait+0xde/0x740 [ 972.202649][T22024] do_wait+0x1f8/0x510 [ 972.209163][T22024] kernel_wait+0xab/0x170 [ 972.215849][T22024] call_usermodehelper_exec_work+0xbe/0x230 [ 972.224096][T22024] process_scheduled_works+0xae1/0x17b0 [ 972.231987][T22024] worker_thread+0x8a0/0xda0 [ 972.239023][T22024] kthread+0x711/0x8a0 [ 972.245458][T22024] ret_from_fork+0x4bc/0x870 [ 972.252394][T22024] ret_from_fork_asm+0x1a/0x30 [ 972.259657][T22024] } [ 972.262343][T22024] ... key at: [] tasklist_lock+0x18/0x40 [ 972.270415][T22024] ... acquired at: [ 972.274390][T22024] lock_acquire+0x120/0x360 [ 972.279068][T22024] _raw_read_lock+0x36/0x50 [ 972.283756][T22024] send_sigurg+0x12b/0x420 [ 972.288443][T22024] sk_send_sigurg+0x6c/0x2e0 [ 972.293482][T22024] queue_oob+0x420/0x4f0 [ 972.298082][T22024] unix_stream_sendmsg+0xc3f/0xdf0 [ 972.303457][T22024] __sock_sendmsg+0x21c/0x270 [ 972.308328][T22024] ____sys_sendmsg+0x52d/0x830 [ 972.313271][T22024] ___sys_sendmsg+0x21f/0x2a0 [ 972.318127][T22024] __sys_sendmmsg+0x227/0x430 [ 972.322983][T22024] __x64_sys_sendmmsg+0xa0/0xc0 [ 972.328067][T22024] do_syscall_64+0xfa/0xfa0 [ 972.332773][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.338931][T22024] [ 972.341256][T22024] -> (&f_owner->lock){....}-{3:3} { [ 972.346592][T22024] INITIAL USE at: [ 972.350573][T22024] lock_acquire+0x120/0x360 [ 972.356913][T22024] _raw_write_lock_irq+0xa2/0xf0 [ 972.363680][T22024] __f_setown+0x67/0x370 [ 972.369683][T22024] generic_setlease+0xd60/0x1240 [ 972.376362][T22024] fcntl_setlease+0x3a2/0x4c0 [ 972.383038][T22024] do_fcntl+0x6a9/0x1910 [ 972.389107][T22024] __se_sys_fcntl+0xc8/0x150 [ 972.395542][T22024] do_syscall_64+0xfa/0xfa0 [ 972.401885][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.409611][T22024] INITIAL READ USE at: [ 972.414203][T22024] lock_acquire+0x120/0x360 [ 972.420986][T22024] _raw_read_lock_irqsave+0xaf/0x100 [ 972.428494][T22024] send_sigurg+0x55/0x420 [ 972.435014][T22024] sk_send_sigurg+0x6c/0x2e0 [ 972.441820][T22024] queue_oob+0x420/0x4f0 [ 972.448352][T22024] unix_stream_sendmsg+0xc3f/0xdf0 [ 972.455652][T22024] __sock_sendmsg+0x21c/0x270 [ 972.462541][T22024] ____sys_sendmsg+0x52d/0x830 [ 972.469479][T22024] ___sys_sendmsg+0x21f/0x2a0 [ 972.476414][T22024] __sys_sendmmsg+0x227/0x430 [ 972.483437][T22024] __x64_sys_sendmmsg+0xa0/0xc0 [ 972.490477][T22024] do_syscall_64+0xfa/0xfa0 [ 972.497360][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.505440][T22024] } [ 972.508029][T22024] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 972.516977][T22024] ... acquired at: [ 972.520867][T22024] lock_acquire+0x120/0x360 [ 972.525670][T22024] _raw_read_lock_irqsave+0xaf/0x100 [ 972.531797][T22024] send_sigio+0x38/0x370 [ 972.536597][T22024] kill_fasync+0x24d/0x4d0 [ 972.541194][T22024] sock_wake_async+0x137/0x160 [ 972.546138][T22024] sk_send_sigurg+0x1f1/0x2e0 [ 972.550996][T22024] queue_oob+0x420/0x4f0 [ 972.555419][T22024] unix_stream_sendmsg+0xc3f/0xdf0 [ 972.560707][T22024] __sock_sendmsg+0x21c/0x270 [ 972.565563][T22024] ____sys_sendmsg+0x52d/0x830 [ 972.571371][T22024] ___sys_sendmsg+0x21f/0x2a0 [ 972.576318][T22024] __sys_sendmmsg+0x227/0x430 [ 972.581168][T22024] __x64_sys_sendmmsg+0xa0/0xc0 [ 972.586192][T22024] do_syscall_64+0xfa/0xfa0 [ 972.590966][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.597035][T22024] [ 972.599367][T22024] -> (&new->fa_lock){....}-{3:3} { [ 972.604503][T22024] INITIAL USE at: [ 972.608399][T22024] lock_acquire+0x120/0x360 [ 972.614489][T22024] _raw_write_lock_irq+0xa2/0xf0 [ 972.621086][T22024] fasync_remove_entry+0xf1/0x1c0 [ 972.627680][T22024] sock_fasync+0x85/0xf0 [ 972.633665][T22024] __fput+0x8a2/0xa70 [ 972.639225][T22024] task_work_run+0x1d4/0x260 [ 972.645384][T22024] exit_to_user_mode_loop+0xe9/0x130 [ 972.652233][T22024] do_syscall_64+0x2bd/0xfa0 [ 972.658400][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.665956][T22024] INITIAL READ USE at: [ 972.670462][T22024] lock_acquire+0x120/0x360 [ 972.677337][T22024] _raw_read_lock_irqsave+0xaf/0x100 [ 972.684974][T22024] kill_fasync+0x199/0x4d0 [ 972.691581][T22024] sock_wake_async+0x137/0x160 [ 972.698445][T22024] af_alg_wmem_wakeup+0x3c0/0x440 [ 972.705558][T22024] aead_recvmsg+0x1340/0x13b0 [ 972.712329][T22024] sock_recvmsg+0x22c/0x270 [ 972.718844][T22024] ____sys_recvmsg+0x1c9/0x460 [ 972.725640][T22024] ___sys_recvmsg+0x1b5/0x510 [ 972.732319][T22024] do_recvmmsg+0x307/0x770 [ 972.738736][T22024] __x64_sys_recvmmsg+0x190/0x240 [ 972.745765][T22024] do_syscall_64+0xfa/0xfa0 [ 972.752281][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.760187][T22024] } [ 972.762711][T22024] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 972.771496][T22024] ... acquired at: [ 972.775305][T22024] lock_acquire+0x120/0x360 [ 972.779989][T22024] _raw_read_lock_irqsave+0xaf/0x100 [ 972.785458][T22024] kill_fasync+0x199/0x4d0 [ 972.790059][T22024] __start_tty+0x18c/0x220 [ 972.794825][T22024] start_tty+0x2b/0x70 [ 972.799074][T22024] n_tty_set_termios+0xa7c/0x1090 [ 972.804278][T22024] tty_set_termios+0xda4/0x17e0 [ 972.809331][T22024] set_termios+0x516/0x6c0 [ 972.813950][T22024] tty_mode_ioctl+0x47e/0x740 [ 972.818808][T22024] tty_ioctl+0x9c6/0xde0 [ 972.823233][T22024] __se_sys_ioctl+0xfc/0x170 [ 972.828007][T22024] do_syscall_64+0xfa/0xfa0 [ 972.832696][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.838780][T22024] [ 972.841123][T22024] [ 972.841123][T22024] stack backtrace: [ 972.847033][T22024] CPU: 0 UID: 0 PID: 22024 Comm: syz.3.4979 Not tainted syzkaller #0 PREEMPT(full) [ 972.847058][T22024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 972.847069][T22024] Call Trace: [ 972.847079][T22024] [ 972.847086][T22024] dump_stack_lvl+0x189/0x250 [ 972.847113][T22024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 972.847133][T22024] ? __pfx__printk+0x10/0x10 [ 972.847152][T22024] validate_chain+0x1f05/0x2140 [ 972.847177][T22024] __lock_acquire+0xab9/0xd20 [ 972.847193][T22024] ? kill_fasync+0x199/0x4d0 [ 972.847211][T22024] lock_acquire+0x120/0x360 [ 972.847224][T22024] ? kill_fasync+0x199/0x4d0 [ 972.847245][T22024] _raw_read_lock_irqsave+0xaf/0x100 [ 972.847265][T22024] ? kill_fasync+0x199/0x4d0 [ 972.847282][T22024] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 972.847302][T22024] kill_fasync+0x199/0x4d0 [ 972.847319][T22024] ? kill_fasync+0x53/0x4d0 [ 972.847335][T22024] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 972.847352][T22024] __start_tty+0x18c/0x220 [ 972.847372][T22024] start_tty+0x2b/0x70 [ 972.847389][T22024] n_tty_set_termios+0xa7c/0x1090 [ 972.847408][T22024] ? __pfx_n_tty_set_termios+0x10/0x10 [ 972.847423][T22024] tty_set_termios+0xda4/0x17e0 [ 972.847443][T22024] ? __pfx_tty_set_termios+0x10/0x10 [ 972.847465][T22024] set_termios+0x516/0x6c0 [ 972.847483][T22024] ? __pfx_set_termios+0x10/0x10 [ 972.847502][T22024] ? tty_ldisc_ref_wait+0x25/0x70 [ 972.847526][T22024] tty_mode_ioctl+0x47e/0x740 [ 972.847546][T22024] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 972.847563][T22024] ? tty_ldisc_ref_wait+0x25/0x70 [ 972.847581][T22024] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 972.847603][T22024] ? n_tty_ioctl_helper+0x8e/0x340 [ 972.847621][T22024] ? __pfx_n_tty_ioctl+0x10/0x10 [ 972.847636][T22024] tty_ioctl+0x9c6/0xde0 [ 972.847655][T22024] ? __pfx_tty_ioctl+0x10/0x10 [ 972.847674][T22024] __se_sys_ioctl+0xfc/0x170 [ 972.847693][T22024] do_syscall_64+0xfa/0xfa0 [ 972.847713][T22024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.847728][T22024] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 972.847745][T22024] ? clear_bhb_loop+0x60/0xb0 [ 972.847761][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.847776][T22024] RIP: 0033:0x7f646c98f6c9 [ 972.847792][T22024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.847805][T22024] RSP: 002b:00007f646d74d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.847824][T22024] RAX: ffffffffffffffda RBX: 00007f646cbe6090 RCX: 00007f646c98f6c9 [ 972.847836][T22024] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000004 [ 972.847847][T22024] RBP: 00007f646ca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 972.847856][T22024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.847866][T22024] R13: 00007f646cbe6128 R14: 00007f646cbe6090 R15: 00007f646cd0fa28 [ 972.847882][T22024]