last executing test programs: 15m12.135756082s ago: executing program 32 (id=1166): renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14m56.089314798s ago: executing program 33 (id=1253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8781, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@udp={0xc, 0x6, "a231a8", 0x67, 0x11, 0x0, @private0, @mcast2, {[@routing={0x2a, 0x0, 0x0, 0x9, 0xb00}, @srh={0x3a, 0x8, 0x4, 0x4, 0x6, 0x50, 0x8000, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @remote]}], {0x4e21, 0x4e24, 0x17, 0x0, @gue={{0x2, 0x1, 0x3, 0xd9, 0x0, @val=0x80}, "b4e70db49c7900"}}}}}}, 0x9d) 12m18.67799685s ago: executing program 34 (id=2767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(0x3) 7m25.391163427s ago: executing program 35 (id=5672): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 6m57.582606099s ago: executing program 36 (id=5859): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xa, 0xfd, 0x80, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x102e6000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0xf, 0x0, 0xf, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000, 0x1ff}, {0x1, 0xfffe}, 0x10033, 0x0, 0xfec41000, 0x10, 0x1, 0x8000, 0x900, [0x0, 0x0, 0x10000, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 6m38.793521505s ago: executing program 37 (id=6009): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000300)=0xffd9) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xa00, 0x10}, &(0x7f0000000240)=0x18) 2m42.193383534s ago: executing program 38 (id=7888): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x800fbb36}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1m40.217663313s ago: executing program 9 (id=8314): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002180)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0x1, 0x89, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r4, {0x403, 0x4, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004340)="265ed300624cee917954148609d0f2ac52561da46fe5c8ce8b3d649d8b59dfb0c633a2151990de893de399d507986121aa114fd87163065d2988807d3e0953e6b084d8b607280f9207193bb76a79bb6d4f638d070435bddb76667d5dee6329e71b2c9befbb22bbde0c1b6da63b845f2c28d2c5f4deb07b4ae015fc576702112f75a755e76b6dc450719f63cd1939961e4c895f9054760c61f933bf74d185520f9aebaf3ab397a2089640ec41ab5cfe6c828b53c4cc544f9812034c719e712532763eff6e69ad7cc4d2f29f97ccce18f298ce417251430929d422e21cac05093609d97896d0beb7d4cce9f1975f01e7dd29ea061a868bb6607b7cf88a2e33dd5c5db31cbead98e06c2c7add9012b0483fe662532c81ab1a1ca8f20f1cd9020e06c2bdade3f311d08b47503b5b63b279a9be019006e6929670f53d5688c194e9f046d2322d71bc26245e698cd44d655c59b2e0ff43771a386abc38cd6e493e0a475ef525fa78671fd9954e7df71a3b7c7ed90379dffa4fd76f0367eca11c1d8de813979951eccc8c93b4f9fdb4785c0a9d207e65742bdd358e9dfbf29203c36b91fdd78db55b53ad1e713e32fc1f47bf3390f3db8dfbd514b4b31095c818e18b63ebad5cc3b406557f3a9380c5065ab11c64522b1752b2296bb00b7750ab82704ba197f26ab76e35da02ae87d25669d54d212aa680b579773c889902782d1c8067b16ff957bfa70cd8af4c366c1629e871cfb033d46c0d308c3ff5072fd8e23ee02986a128051b8e6dbaa2bc46bdc8772d923f2906eef68015bdb4cd66a2525269a91cbd7336c930c08190a8606d762c768d164d05eea38d63e99e1fab83ce2683b885e1619065acb1bed0bfd63e3cea5c9d7c9994df4036aa17f9eb0850f9eb42b17b19926fd9d814529c3cf4397e3f38f9626f0bb4f229b51c35773cbecc42ba22f8346c9c3a6f3ca7d8b25d0bbf30baf48bde92ea192e2484ef9b2160492edb5f2ce296b0b6b420d020b7d14d780db436b1a23b733051369536eae7c7148927c3ba3a968516039b0b14d9918a41a1bdd5002847e1c3d02f0dc2235857a9797038d164591757820e7d74dbadd42b8903f20434c6ac0f401fdbfcbed5dd3c5b5fb0ce1f9c81e8d1037fde8dd3fef1d5d7af6af8f36c0f4462909dbf694cc6fe80070bd5fac5a5ca4dffae4b2c67892f7c53af3644ffec29ab3d791bd7934ad38929a9d5fb9ecf10b9dec62e315ccb0e0de60bb1620daa8154a4cdec98d94d42ac1a4b5f8da6afcb7dfb53544fbbcaa3aa444182ff25064ace51a825fe89236e850a2c90e1c7db17871ea809c4a11a26f49b213cab87d4a42b747546fb9b15068faf1a8556f909f2c47202e7b65cddc708ded90bdde68725b787bdc2d4eeda60204bd0028f07ffc3052f93eb6343d1b2a9a5292e6574baa4a096fda6dd54f6d39e9462b6839b8ee2426e3fbf42a016dc0963145e602f2b0c351f123df48f608f74b04fc7e9cd018e7ab25bc1c12f8f58c0b2dce5714faa54820ef72f38566e3d776ea2d5b061a2e94710176f15d2221420abad8b8b733de253e602277848e7f1e0eb4d07f5eb0cc4d9f874e632007cbca23a5d7e4109cf5c4fafe5f607149bac37938734b77d9b183cf76014aa61507bd4eb44524e8326c58932c8b9f6a10e334cc602b5b8c956c7cb5ffa099274b599fc9c58327f85553e00263e548c93c89edf7a7c83cc10348662fc344c85378572a40b49ae65972fb40abd5e0a38af48207983f86c7bb6bf9b7853c4b1fb522d135a83bbdbb78130b4df3aa7cfa930868cd5a2d995ca9fe4f64c79485ab19d85b0c82a72f4a09ccab267320a61208ccef13c3546ab0f16e34cdc56d6e48a6d9c14c626528a3b191e3723b19d4388d5b9b61c7aec726b8752455f96e888ba7af82c127796e9b67432d1f60a3470c7bf4b924cf10f06a3e3f64c60c7c2b0fba4d1ebe4e52014b4052c2ba0d5b649c46e5cdc6c7159faff2adad2db2d3db9f4f9e9735ba28b7aa1c6c2fea9dab6c9617160d182dfc13e18f44e73c4377df42080d08a87fcfd46b4a4f30205457ad19ddd473fc3a67153d04e960f1dc7556fb158a1d584eb2bde917792892a30e9cd25d37a318cf06bd6541463adaf5d12adc50252f364ba05f89182018ded2179c23a1fc0b31d87139da39298b8d387446c70c4577a27f6df841d9f43106bc1bf44f5c7a41460e2afc9eea98f8e256919c0befd53d7d015412391963c9ad39a19aad265cdbd609628e1913adc2467b69c00865a88635c46a851e7252cf3dc5c3cc5dcb04e97c0742d1a844556744036c97710dd9b55f661506f36cfef2c6b7305b63f5c33469b33ad09e1b593a7ddfc97777954c71c8e4857ca49aa7e5de0d25d760f633660e1fd783cdc43b00a0ec149cc9c8385807c2f6b4cb255d6a15ac75ef63d0871b176d503f332c069ccfa7a2bacd11999ea792024b35c9faae5bf02bd5c844d04d9680c1fe35c2d90ce808b45932e754e4e1dd142ba5a7bd9ecdf7717094ed4359eba666fbdc1e849ccede72b0b37f0b8bc4f76b99222f8d199de11dbd0ff396236f4a37aab955126a60c9f0d457c7a394920aa9014611e5d994c8373516f061dcc5ac881bdda5132b5ee984b15fd007828401c72df63c2efbc5f0e8545310ce65d0635dc73f0cb1c796c24b7ee62616116c13369ceb74ff8bda64a98e903dfcfd88b3c0c5f86191bcc8342578f23dc70fa6ceebde822ffedb7587a3f204d330be4977bbbc2529cf0ddf4c85b17f1088f48d878e72fb00e15a6144231108be816d2718c360e2fa8a236691c775a9a0ef3559696f5b8f85eec0aa2b1c4f01a2df6065bd31b23dd37718613fcbbb1566dc0607bf487c1a91f2b39a83755a6048e46d02ede0f5aaea8ee9e245d6c37891f5ebc9bb7ad2462b4ea4f1167b8c8e97e2f7b62c1c98ae0b808ee6033818d28a00ee72120820b2227da50d7f66d3318f6acc6398c81e529c5cb0df75e303954c2fa828760c1133fdbdf1fd7675b8634bdb496b054b91672fc7ac344a37bf60988870d54e5baf91334db883b2c69acb50676c2f871fd577747dd1d26c00a56e757b6a0edcd609ef5c3b3ef669ced2af5f19ad19194d04f23ff23546df47bc67ad596672a40cca2e87f8fcc3a318e37c73f9f50bd06926c74078356ddddba42ee273e0c33c2fc6cdd1fd50daa6ed3b7b6ce558f89449fca6d8b05c90639283d44e14a854eb29d65ce5b9552597072cb148ccea15ef430630559293afaf204f22a890fc3009a2bc1b0844a49668354a940fbd0d5919faadfe5cb80e4c93d138ae28269a99c877426298b9ec7f01e9005da2d7977f34103de38b2f65bdc1c899ba96745ca977c46db6003b1ab840e677f0d8960b4e9f71e82fb89a8cc0702739276ec7a040c69e6dc0e439658d420737a2f6cbe7cb1ce904f4a39dbe8284971e527ef50976c89855f75d5e129a09a117a5c042411696f8a3bf02879a287b2b1ea2a6e1adaed0374341113bb8363f33aacd361339c9c06b4bd6e04f8fbf1f120f1992856608426d44abb6cc429a075c7bd22bdffc9493f218286f8eb585001fdf79327c8c17d462cc2ca5b435d444659767150c6e1000a74f001be398a1bb48863d3a4d4a71a4623e1721b003d7d2c038fdb405b814f37a95a6a53bbb365dddeefb83451676c7b57a23dd1d523958e2e2eb8d889c47cb7aa515e9b11b2c3accfe6739a8ef56b7a02adfd63ec9f9232c38e2aef3773a9a7d6f4844ea1d609f146f19e6c46fb6b961b8037e5d9ba34c0ca5c10a668ddc5d6f4c7951732f68c56ad9c1b3e53e09d33d9b377258ab2de957c8adcd4b68923ed6eaf2441e2d888d1d4653c5686ab712a82ca16cf475009e238e5a8df04ca2fa719e6308bd60026deea44355a6e878157ffc7f14a8d34275a9ed5f810ea4ed1827e4c91998aebe9aacbae14d95eed96a9de17463ae852f53d2bf3e92df959564e9550c1eeb0b052c00cd44c07b7f021cdad5c70908a74bca9ec4fa372f491aeadb297e8f571de1b376ef1b7194d8e434ba3867940606521399595be0ec4daab0b45c42e439adc5cbecc7310025ed8761a1d78adf3ee6b223577e473423cece99cde0807269de6929624ed1739b2380ed4688779ce9808595e9b87ed6f42d89b1676014cb8c9a3f7484aacdf794f056439fd1e5233de23141d5b87ca95b54721a01212666e8067cf683025f1219f4d0569c8cfb2d6ed67e7f051e2ef9d0b70a390ac7d53bf9c4e537c74afd223e311341583282ac6e4ab209a591ab0f4d7205512a74a01cd33b57d993fc5c548a757d757e1f32272c22b86fb2428b338eac75c21e4ce3fbfdc6f04a62856610308e65dca82a7637d7113a48c6ce0357fa454f6d58a1b61698c7b65dc9b8678f9d279b883f76e04ad1f1154e2f490afb7e397ce65ce297f6599b0671f3129bc87cf4221d8ce101f71a1df23b6343dc3d6e35ee2eb0a1e37e67e091fab994b8948e956320d7e512308641a129526ff2e73ba026fb72fd3da3482fde5374d54bc3ed6ae53f2b9b4d222db5f3126760285683ecbbd0f8b5bb964e5a1cfe404ce21588a21c2244e0f76520e139992f65a15299548f4dc5e4d1e54acf7592ee1f04e36987606bf10e4632c79d00e1ed985553b00a8e828dd193f5cbd7101cd36745804d474532fc51e708c7f124bf9231b9a7bd1ca4446060535054b4bfd5a61607f3ae45cf1deebfb9d8710e5523c8cd03565cd378e77b1b3323a7d97f28fd1a13aa40626abf69d7b66ee9db3d604b293966347a4fb36d089078f9808bc209109690ea47941ad7c141767b78eee93131a57b5e12690b7288ffecf22f39f308a80457ac6052b8f477bafc15a3ab30cfa3cbd7dda9803e5a5664694e77f528087de197c02fd4d133ea9133b9aa4377bcc0b62801982b999b6e7f76dff371dfd998704e340b4e5da88384fa8cf08d747c977105e4574bda02c56361338a0a9bd800e94c861a31d5d64d71cb65c0655f5b5cf5f900e348d7cc05d9c2dcf711859cbb8ffa54065e2e5462f4c1d80d28e5d5400090d4bf61565422b8df0f34f7a7c1e153d39c9d7340d15b8db226d323b4e3c50fd8aaa87ec9e5c3fbb3ad66462c6ec5ff31877024d119fdb7a16e69d324ca9819512c45c3852409f4899a41a4d16ca77dc3dba1ffbdc2af2fccaba1f04e048444154d5019a267bbcd440d7bb3516e9741e5f9c3ef1135e8c0d70e3c7800c10c000e9cfbddbb5aba9e43b3dc0164f92733590f6921bfb53aa1466a53b6146113795fc13d1621b3cbe0eadec02c469a4899232c23a5a88a9d659984c22ee523b5c5de84223a0f0f9bf1fcdb1efb4709252c0fab477823bf2505f9a2e4a36d0bdae824ecad15a4c313f0c9eb4423ea249710e353e61264630927f778c01978f5b50213d71fd746e40009432bf50b7932b7659942f0d1b6375b87d9b038ce271d7333ed282beb3925a330d881ac7611d3e8b869601b146fd82c06b340ae4823c4c429af4c15f2a2a2bdf383788e86b68c001866a86188cfd71b02bc8abef13703264f3ad08ff6602e15ff84715b7796541c87e26b0c6e086211943e52629f8c1e71fdaec972ab5a2c690c78b08d65651ae4b64070f7bb37931119881ef14c4c8e228d67d34f1c9eb855b39ad6e615bf24f7b453a76547edf2fa025c53bda95d783fb3f735852f28318a8a67c8ceb5279d380d724ee6eb2e76ba8807a0865fcafac50d09a92b85d27a238e4461a80cbbeaed62a844c17e498f6457aa642ebbd0aaeabf127b8f8fbdc2e28ff7fafaafe3016603461f256d7fca690a8643b9697800b3cd59e09ecae48baabccb63cad4a627f6bfba0759f1c186977e9698e6fbc16ec9d1c95ca8e2e075a1eed3ba6223e4df44be7da59a444715a78fdb90a1645c069ca0fd1609b7dce29ffa11f17266c32856f9ebc853c0c7cbbbd82667a5106b5b63f5328ae9d653dc5dd53194988f0e421db3851eee53c557e40a7ad293a22ffd3445d296347cef4187aab3c9c3c2a8e40be66919c30cef3de8125f3cc7342a43791cf1b3b117af99b04e0fd8170f17f4ba25bdcb24965501025188a430df86239d369a6e2c9245e914fe4be3a1eb48e22e2e1c72caeb4b0d1b69e8a817cc7ddf644d33e56ae32215604f267a80754619440ddb3621280a4b388c14ca19dfd398d744977849247d0bbc55d5a54ef062ad3cb3689168b28a0981946fa01737e081101b9c571d0ec4e5775159daccc110588fbd35bf6f0d55f99da967a3d3db1999e158958d7ce128571efaabc09c1aa7137c35f3edf7cfff386a79ba5acfa974366c442207a39ce67afc8469c2ddc6f45413dd654d9f59ae7fd31115dfeccc43c27bbcffab119106735b7782f9694a3e30159aee341f04540a54443562cafad5cf3336c6e900332b053d7c93bab45d8846cb5b880e11b979c13dfea06267932d89e258ef30768ec2ce1d7b020609a5ea6ad9eda78219542567029d1d4d2ffe797b7f95f16b8f599390b0b630decdc6e17593b7e4992d48e62c27cca2e423eded85cd4b436065496984d59044d38f317d0ba649837e5377ab3793c3f66c0509eb37ba365c94273b3cad97c5f607bcd312cdf3c8605dd5569e293d21c588969d7bfb17a228b53f2cd0387995945253c6ec8fad3777cafafcbb9151a54e653a142b5ad0c62682b8ec4b99f525dd853f75c17ae6264b7bf975138de9932d40be9f35ce25dd2a1e307fcf506eb6db8803c19b9880f96299ef58a6bdf32708346db540dae112b0f7ebfbe6f3f46635b7d98e232cc91eff2aa9c7fed6dd53d448db2fb8fc4c0dd661d47585c7966f9338f165e53b3d7777dd844be6a6c8885d95b839a32ea0bc83ec0ef8a5bd11b666d11fd8e27561d8afc4686e978ba31ff2f812f81a6a82956b95a0cce2966a37a4b9e33bd297ab8b1667f6ca5a6be65e4485a305651a4230b7a010a960b035dfb7a8474dec1965c6a9177f62484817807e0dc43ab2770b27adcb40f76c0e78639c55fdecb6c008f2e859ed496818b48e5fbe32376fb3c434afc0ff780867e7374a8d659cc1580e49678f4542e5cd3e54d5f4bd1ff6d186827d588ace5a8adf437dea11def7b57b6b8c992b86695d09c65aaf532d6b8cf12686df8b07bfb5a8aef7944f04c8bd00d500b8b7eb24516dbec0f5514dc48f70eb26a2b78042fb6b4726a20fcf73ccc9a14b75bb82e558e8bc4f7ff5453850f83d12896e9abf322e5b81b6efe679c8c98ee092e06302f9f1472931dbe5a815ac38b1bff79363c4f846caa755ab3ed5b60a938d5f1a9e10950aaa0c5d10c5c4f09abb8ce6b98867e6f8644e3b9d603f07f9c2d1044600635d432ce796b0b96baf572238711302f8fe486f3bd4b5a0463eefb0cb04271393cb1b47b033db62840b4c535da356de3db90961deefbf43060d57b303489aaf9c3bed935f8750d47b8e6aed8eba71f08d93246c92c7cfddea99f6e052bf18e787aca4cc04779dda1f67a420cbb5fbcee2f2ae28be664fad18b478e171dc3699116ae71421b86a5fa9732767c994f38519874b33f07b12b8baa5bc672017cb1e2c8e8897e541358da9a9e3bf8bf57ad3541fb434534190ddb95a5ad701e20548b269268fef7c20c15adb8a86dc8ed756f760370ef2bfff1261349b535b77f67a4118dc8f95c70e977ae39c7c77f2d4e2248028439b72325c033c68684fc8dd6050f0449e2c87debc00fb8bd5d1d9b9f31219b4243cb089362b345f2b9aa7089eb618e1407223ef1022dbaa856197f6cd8dcb7fc53afc16731e0f21b45a17fdc2c49bfd9f14e454c98536c507c3aca95ad57be395ea9d737a4a3237825cf102ca080e013230cd7a46e91237b2214a2b175ffb390ac9f12e5dd3124ffe1e152e148371425c6ae5c603715d5439e0f9e49e8048b56489ce79c26df2dab6ad0c8ac0b37e5d4fe10061f44f3d2314e1ee6245ed600c62a9c448faf905267cdb125ed7dd2a7a539770bd1ddeefd13a521991cae16160cadef434edc23fec333ec7b328c4a6213c5040848e835c6b3e0aebcae1d5884f7e8f654adb512c2f0227fae83ddae0dfa848e0ba9344404ef1d6da880f8eac71fb7e02f197859fdc1ec634dca3f46932e5f022689ed253e60f232e1acd96fce398961d62c4d63d7f37d48c26175298658c224bc1db73b8baaeab139065a9bd004bcaa24493c17f09961c09bd0cb828a8cb3cab56df2991646ff370040bc8507d3d16e66dc075c8d302c6586dbee27b32f93ea563a2692f65ada174e35bcd8cd3214c1a38cc00c90067828b9980da7dec04fbeaa2e550c8d06358ab446853e7daf007b0de5c9e361d75c40ad5f9f2923c10ea479e5852ad35f232d6d141ca7b4328c9d72dc5c247d1431688b2a325d88582733953ee50f997a5d8324cdcb01fda11a773093f344fb38b55c5f9e7706e1024cfb4f2e47544ebbaf792de3c4d8f1522e9d9ce73fdaf1740d3dc134a78b53c6167aec45c730016b8ad9d9bc4042b6835a5ff34c9d36da7418719a86be6637c896fa4a4eda862a9e73ab97e5a977aebf0fe64a7d507dc210a677873e155fe4b2cc3a96e558f4d54db6fc5fcdf166c4cd58bb5d1721378ccff170c0eba14b990ef610606909c205e34aabd15eb7a60406df5451871b18ae3cfb5af37b7f7bb2be80590d3be02c5d0c4143be66efcbe13c6927f54ed27884b3d6a73e90516552a0bbd81f7c76ed5f84ecfef2225e52b9cf6021895716aa29b540750eb64b31cd7be1e9fdaaf132681b23cfb2742fbeb4d1f40fd0bb1d13ba044b252f2f04b0d5fcb121977486c5754a569b81be7577cc0c9e918affbf9abc1b6dd567aab66b7e2aca396e79d53ced9695a65a704bbd9700b55ac8c968c5f43557060c6507a3557c8762a7dc8263eaba22d51fb7df435e20beeaa700609d774d1e212e7493b672324e1a907fc1546cdf7d4ff88029dd7e9c92fc530e3f55b6c1b103c69f14859524d07e454a3c5f987e01d21d9a5a6f842370cc3dadcde1b5822b0d0c47883dfee62b9b7209c3a7c399ed34604e164f806e68a5a24a53d0c5beccdc1389e87a5894061f95e7e8e8bf84ead6e7fb155938230f22b426d9041e8bea72dae14911824db9b65bb0ea0d0404cc8fabcb8f1863e13c8475beb68138e043dd67bf1b0d7e038f9f3d25c8ab1a52173af6b46d8260d677bf066058e89dd18b03fa20e79938dab01876102992f9df49dbe983526b9e0bc83c15cb9d52511eff20d18dcdd316bf334b98aed9024051b87bd3d767054470f4b7f59a207e9b9f17827497bec146aa1b0d18ef54ae5927c64b05f34c8508a0cfea02cf59b3c97a1d3e83a00b7ca495167f411b3f41c1409a8ac007e1cb08ef83c4cbe38117d4b1ef9b58dc0092371b1dbb1a1834f780282dc2f3b6bf36fd0dcc7619c28785b76910757376adfb014ca9ff8bfa3e291e7cba2caa05efad48b1506337b61f74b7b0f4abc18846af682f34708bbee9dee76837bcd192876d1861a20b3e77c9984aff5ebf0a2a4741d6e43b4ac056ea138e79230144578bfd4ae82b84ed109e4d5ff0f955ca481ac0231cae963b7d4db76d89d07e265973a16899fb3a6f8dba53473954589134b520e680f4c5e707fd056e75edb194004b81a40bce0407b6c294078b77e8abd8873c01f6918b2c7c6095c9f23b9841e90e8acde53ba60cd78911cac6fc2ef6bb5fcbb0d3da3e63d70b47495f2177afce5da37c59efde49aae133761847a6f0c8aa374790522ba04d466bd1f7860f53371f5eb2f506c5bc7bb6ab449e4a5c37866c31684b285cf5da17f36434b809f69c542c989449fd0eca50f5eacf8080cbbe8b84d1183095ae7416b8f2b98311451cf7cad2d8fb721e589f9e611376430359cf855444fd1415011e8c313834bf0e217ac7b03f8add941427b0d15b56378b2cd1e3925008c16cd5f95dd149c7e050e0a153e4333e63bd14816b4357fbaa5f706af6ee225057eb599bbe5714c9ff23204d1902230569839d8836e6b2525570b00eca8534aa0c29cf62dce61ec66d9c195be81279b698ec8565fd6754f636b9288247657efdb2b6356a82f014a1e6b24926fdd67810ef0a01295c664980f2057ca17362b0a5888c23ac21842f931a7d57cdeea73c4848c6c1cce20be979faa611f86509ce031fb4102a0fd30bea4f4f840c75d238362a2c4f8de16e81733ca90119f8c1ae148b184d0b113685594088ad8a947455dcfb782f8beb69e255dbed46ae2ee6f094168a52501fc68ed669fac390cd9320ba16d69c86d6f642aea836bb1d7c14593f15d8d33d452d8c87003d7ada1995e2b43f788b4ab00ec6f58869968f098218a3ca21a6f369d47a14cd3de7de8357902e8ecfb5f2e6beb5d3d32a6a6224fe3d6dc5c06eb117af0ab396acfcae58b2b1b9981cc71cc1cde07491b6b6d97e04c10ff216393dd28737d31c8f2cc9ebe161b96d407088b2bc456c331b676a0d7dca3df7f7080697d154fa14f351fd467e30b4ac3f4eb7b4adfb173ff20594cfe539c775c4275795d54782bae4b59cc64a45740ff73d21f5d6cf39e10bae4fbc48ac7799023796d7408ff9220a07a49552b18c5e35f98082297d2b4a0932e4d224c6807d49bf9b5de2eff1a8130da56124ecb5509241fe95be11eb0df066f5f819bc7db0f1ee90ea0aaf4ca4458ae7b5105d574de028c82714ad0d53bfc8ffab31c57762b38e433d6991d83ba5616162e27e8ac122c145547c4abe18260c6d32c755a44390ed41241ef375e1f5a4311263881a02dae71f837206413fc37ddf40a9bb72256d1625ee0b94c1c5715809bdb24224cd0698a5802a83e2328dfa22b80e31b9a5c7dc2fe0c68545905368806c308334c194803eed4a24a96bc5021b837a293dde7ba22b9ed27369b3584deda6489bd1b3fa2925beeacb7d3be367fd014547f82b4561c0120978b6ec2b32ac2634589b819a2c94fd20c081fe9eac7b0745f73a1981e21b05b1bd97a9a1d7218c0e6d0e473e15a1a7465cea98ba0c72af2f270b6a61bc51d1a0a9603b91fcdcc7314fe7aa007ecffe6c7eebf5a65e82a96325e86f9aec39feac6eee9501495c74000ec1f0923e79ad1fbf6dc581539047537794151473e00be353b3b8dbb6da0053826c7bdf16c43867cc9cab9d1220466ca29ef2d6172c4c0ff9067eba9d9775225efaeab1b8c634b4001d2a5c01628bd5550c4573fa017afa3f501f1a6b7d7a483dc0885ab9c2ee959a596ffbb68c7ea99e48f4304697edf7fdba5567735ace3433c15aa59863f87e4605206a31ccf268588de7ed37fcacf6bde80c68ad53de63feb4399cce137c5776abd15395402af07250938aa1c466511bd5754f9cf2f938faa37a683996c801c8fc8aae36a706c5d6e2d36e96ab77eec817ce4d56d2bcf5a43702a883b127a1da8b6ceae1b82573a9e9e9e297560f8d65a1f5fd4bf3d45af0841e691b6e637bd8b9f7c8e51b813b818b0baf2d9c5c9d116781d327b4b43309c7265612089f1dce60a41fd0aff4bcd1335d696f01cee7b371e13584c731a3c3ef7e1b9f3f41f91c4dc647b948c93a99c1ae79f5f530c68c3cc28bbd", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0xfffffffffffffffe, 0x7, {0x8, 0x2, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x802, 0x0, 0x800, 0x0, 0x0, 0x2000, 0xbca4, r3, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x20000) 1m40.022593117s ago: executing program 9 (id=8316): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, &(0x7f0000000140)=0x8008, 0x9, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 1m39.780625399s ago: executing program 9 (id=8319): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f000000a280)={0x2020}, 0x2020) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1m38.610942975s ago: executing program 9 (id=8324): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 1m37.537320977s ago: executing program 9 (id=8335): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m36.991618328s ago: executing program 9 (id=8338): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x5, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0xae, 0x34325241, 0x2, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) 1m36.459895689s ago: executing program 39 (id=8338): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x5, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0xae, 0x34325241, 0x2, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) 1m12.951358757s ago: executing program 1 (id=8448): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 1m12.734865559s ago: executing program 1 (id=8450): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1f3, 0x4) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x47f6, 0x0, 0x700000000000000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 1m12.068812542s ago: executing program 1 (id=8455): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0xffffffff, 0xaaa, &(0x7f0000000440)="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", 0x0, 0xbb2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="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", 0x0, 0xdb1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m11.441814913s ago: executing program 1 (id=8461): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 1m11.222502295s ago: executing program 1 (id=8462): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x20000, {r1}}, 0x20) 1m10.529304222s ago: executing program 1 (id=8470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 1m10.062601658s ago: executing program 40 (id=8470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 1m7.326940723s ago: executing program 5 (id=8488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m4.955757978s ago: executing program 5 (id=8498): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) 1m2.999892529s ago: executing program 5 (id=8504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0xd0) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc045700f"], 0xfce) 1m1.992174663s ago: executing program 5 (id=8508): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 1m1.781026499s ago: executing program 5 (id=8510): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc491, 0x10100, 0x0, 0x396, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef8e, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000140)={[0x5]}, 0x8) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) 1m1.38818543s ago: executing program 5 (id=8514): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xffffffffffffffb8, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 1m0.711749216s ago: executing program 41 (id=8514): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xffffffffffffffb8, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 48.800551894s ago: executing program 6 (id=8569): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xab, 0xfffffffffffffd8a, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 48.593754813s ago: executing program 6 (id=8570): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) 48.287687347s ago: executing program 6 (id=8574): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r3}}, 0x30) 47.826916893s ago: executing program 6 (id=8576): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 46.898847048s ago: executing program 6 (id=8583): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) 45.969617748s ago: executing program 42 (id=8584): mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x257}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) 39.217508038s ago: executing program 2 (id=8615): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f00000020c0)=""/4082, 0xff2}], 0x1) 36.333977026s ago: executing program 2 (id=8633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x30, 0x2c, 0xd2b, 0x80000000, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0xfff0}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008080}, 0x24040084) 36.064650332s ago: executing program 2 (id=8635): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2e02, 0x0, 0x3}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x6c6882, 0x1bd) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 35.859869889s ago: executing program 2 (id=8637): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 34.807464895s ago: executing program 2 (id=8639): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x800, @empty, 0x800}}, 0xfffffc, 0x31, 0x0, 0x5, 0x8c, 0x0, 0x6}, 0x9c) 34.497580135s ago: executing program 2 (id=8640): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_io_uring_setup(0x1f91, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0x263}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 33.917976596s ago: executing program 43 (id=8640): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_io_uring_setup(0x1f91, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0x263}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 5.223220857s ago: executing program 4 (id=8823): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x11, 0x2, "d648"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.043047214s ago: executing program 7 (id=8825): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd67, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x10000, 0x10000000, 0x101000, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x54}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040011}, 0x4850) 4.799462887s ago: executing program 7 (id=8828): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x61) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x64480000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x272, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="c1fd43b601662701272af37a7deda072caa09faa11b0a4ef2825e87f09fb6bc3dfd84ddd853b18203bbf08b1af6066c78b4714a789a8f3605f5920e7afc5b0a04271cebce72a797abd5b9e4a44fdcc150e6ef0e8c3d4360e74275818df26243f28cac3d84e264fd0c77d4bccbc466e7244b247d9dcee026df89aefc958d84a55d4d6922d96ce0349fe28efd6b83d15b7b08143a721c4a677b72362a49eeb15ec5b5f8569bad585e30a62ab149e7e4c7f49af9560fd52ea5730135dc3ea3f6a9a3ae6286e99e1520a43b8813ca6aad1adbb30b2459f90699e2ba3a6335ddcace3737ed8f5f21e027ac2b224389bf0c8c005ac8d8c3ae188679d34da0a2c20a910487d3c91b18770fa5ee483a3f09b882960f12e7d2eb9015895ce80b37f74a305a50deb146b1c3430f31d28e6f827b9c7070bc880d251ddb09e0e70a0512ed2600256332c43a5deaecb01f089333fc3b6721f6ed5b41f9971b7c63f57b5afa8042f5beb1ac1274676dc5406b5828247123bb7be795baee59d779bbde227c90d0a5d863936d434f2ce7a45f9b650600f32827b92e2d828915f0411f765ed82dd012561ed29b09950b96f8e490f1448dbd5e45bdc92a2a36aa67e5e9396b6376f82aa6915eac4144a102de786563e4482f0917698bc70776f8c7aad3346e18ee295af54f3c1658f9b124116a2fdac79353b095cf667dd941c3cba141b3ac8982eed42e7db649c9d49a59378216bf4323ff4c2f2992994d4144b74866a2426e19a2dc8dbf4643f97a214fc9c448512316d76c4116c3ae600dfb98cf85472da661745b638438dbf15d8dd87a8ba35205a000000009cf941454f8c788dc2eeccea412add734798c82e9c86122a91dff778edcd309c05fdca66176e9bc4d410b0ee4627eb889443b574ce205c7f4d6d428e909952712ec3dfc89552279b2da87b010051a451377a0c51a34ebba25c3b62ba98eb6f1549b0fee6a7c5e0c7a72835388803a0a8342bb9f2733224c92a50dd25a9b335f243f2d8c68142aa1db1de2f899a56c623a32f8a74c16db56983eb83f6469316f2fc14860c075236a3ba40e8c265909b8fc6b03c6378269f6629bab81418789cd748d8b786f47ab8f13b0caa5ecd79dbea61330be6de5804f5c211cef78f555e7b2093f4a836cdb8a2cfa261be14e0f59d075f58a16cb130f062a2261df244c57d6f477d761262b2e755c96bad3898890e80b23fae71fc31b2895513a11b0cf07551ca87325592dd10549b7d92da1cb07119fe970b8cc3aacc386ab64d32b308679593256d2fcd1f9e9b15ee93ef859e7268be776053182460e83fb873711226ec9aa5c35b15fbfa12ea0abfc7465b300bd8445c831ae77d2aab7d4bc3ba5f218fda9e90eacde1ac5119eb30073a6f291727cb94fc87a3d3013f3ebb1cd259067c571bd3c57eacce716e61f86bf4041bacadd6c676e17fb3cf89c4984aec78216854a60af68533fcdff12897c3e1b2c10cec019722623f477a512c4e5eef74a6d1ab7a735905373ca3a0b18c3eaa523c86238fba77e45aa07c1b96fa1e3ceb04e5f4742536b687ebf989918f6805cda9611ab9ed10ee33cda71a95be2da0d2c21d2295fdb334dc2057942382dc7d0f70300df3df84cf9a18f042c11243a347569771f9b82404e13684324fb06d867641c87d6d70ad15e90240f901d04a8b8c7fdfb8b84aefee1606f14a2a6995e6b8aaee1b372cd586a6daf28ad7d8ef644c58fa72f0b2f847eef72e18f1a4374c4fa3d604a9bfec6a1a4fefdfaa848279693208dfbc1dbb97b44c4f034090606e0ad312cdfb6a8f68dae7312b064c68813eb41992559ca63d88a8e90711c838f220a4da5bc7d82ec0af83da059bdccdb524a59ad26e43413f131e7703eb82158293a331456ce728c28923bf9ae644a331a667c2932ae1f11a9f9b893f802796ad029c40496c9bc49cdf41a40da1092b404da660e80f33a6012a407805e70f9a180105cd0401ed01a9f6edef4e2479e1579ea365d843c197279e3c79ae56a107dfaba6af80ed9a24d535d19827596ca2b14bf4b110fae4820fc8d0570a64ae08e315da0091f766bceb1fc990465ecb84a2d72efcb9a269816863b72f8d0869b20c14bd72f909fc3ebbf2ba2f98ce3fd7eb54b738692916eeb98ab9ea04ce3e740817dc9ac6561c71d3bc15358ebbb3027294f66eb890577f8a63ecd23beacd93c3b1498d5eefd8b68ebab3536653d5839713b07f79ebb2a6106c009cc535a2173cde3ccc65676bcae513145db5bf08546e8810fb4d193266d491fb9121935138a74c52149959a0c270cd6e244dd7cb140fcf6bf0e7536220f798bf32cda564ebde025a92617f3195e549a491a45446ff0ebfd3b047775af339e59a8da0db6223339325c6f493baa5f2c71b5710a975def3e3919a24a52351acc12e5a2ab6c171705bad0e6afd0ad2b6dd6feaedc9924fdba533fc958fab9a980b775eb4c93a499413073cf09826381b8054f9f09f4a0dfa63ac2f6cb22d001ff277ec7f493bc54d2d1d34a6dad62cd7bccab2ecd419c90087f6945311460b87daad605ff8519aba1d8311a5e565dd26655577aa13da31e01cacbb7e10e720a486e9cc450b8a21d23aeab42838d81dc05f5be0474ab81b806fe71b888323037f3262179e451f765e419bddf7b7a99b40bcc226986efbd3765b66e56a3500de4b18b676361510bd35b3a9c6b8c08222cf7a73c4cda972190f839c2d01a4c171a803c0a77d2769c892b2f0191d2fa01d7d5ca53573e47e93ca9b56b8f0d684d5458d505ad8383f22e19024da06bf6abf30ed663cfb33e202be17bb951e9ea30cfcf65675d2fc64aa51e07237fe8391549185fac5822daa92e73778e080b1304dd757f9035092a729b9a0122d1c07d60336f18a9e46ebeced1041de2e2e8a5de6f4a814d5179bddfcdeda88888cb9ce322a516af3be2b7cf371e9193cb40e66cd41dd94e37f14c6e6469e8fa6c57a4fa3125fb6819b84e276768a7354dd3e2692a77a4a60af85bec0325d0aae72a5f4f7bf9468f1d35147910a55af546e4e3634fe2d8efe116606bf84c0e9c4d442ec8f99fe6c1cc90b99a8d1e53322b26b66928fd01738fa70c0aff84b4f02946c6fa684bd617667857cd751a3ad3d324f9574af78eec6c8c51c25e01cb0ef129199f5a3b3b29e32a34c4ef14c810c2e69e06158f02033e15f1ec00419a91c1450338956a188fac918fb73692491baaf5976ca392c139ba0e551de260dfd6c733b572215f2af0aacc5709b0d4a3b36d23f5882c5644bb455075c5c48bd50492b395d14c36393019fa9eab8a211d71d173754663ea2af1ebdf9751006792609d4db47824d95d68583c922c04af3cdfb58f37b6f958a4b35cbd74a30a393be192fb46bfe4e722c3634c94fbf4829f25dc0b8b07cd16cf4c7e924eb02ae8d675539d32b5d9a54a43811eb98e2db317c67d5bc62901582cbb128542d6be3bc9a5b5b8a8827f2eab15e82b28b411edf67d786b76feed9e7d5ffbc86fbdb19ed80a4f5dcebd631719f8734c398938047011a251370e40d5929e9b4426081029b1339ccb08bb0dbcbb4eedd53792e43a046abc1d5c1dc8c1749052233e18e25593daee94f77f327de61867f1e791b797cc5ee43f8109cb0654d8742ece8512c322442f63dff88702ba047e8370a1b7304536ee7cf465a0a19d965fd03543b991449d6a1a98be5ec3867314c688c5c487e59a6bb05291fda479827172bf3db615c20ea022ff7b16020299220b7c45a7181c1eda48c9a5fa7624843d112c52d99d0b27e168eeadbcd3c60b3f366175decc8c91c64a0a16d3a2e38244dd8d2de806ad741e2256075efcb0466360acaa3f65611789a821c30a13d4b60e44173be9e288dda7d7aae2f8341d9a85104170631c942eef22c10e903bf70b0ed36831d536a0cd65c11a209e37a76f3f54deb326735bec5a532431a81f303af5e9d03717a93a3da18317c459aee8db08b9f0b3331d29770fe7fc4266c15a4294c9c435a38296cd880dcedb34f63037f2a8e3ada9ead3e52abd69e5779905f82a607f70e351d2167bf1b599cfb9314a37df876bd5f2acff82f1773c512ffd308179e47b26946ebcce112273e12895145ec88c701269c93f32a5ab2bc16acd57e997d140d18c2cbed2601a05ec33a63e7edbcca673f71eecab66af5287d7d5a1dad68771ed612d29ef8ab23ef0211b4bbed6f981cd24d652f355d94f6003b01cf3d803a6e36b470402c05816aa2cd747f293300bbe891854d932df7809c7809c2cc3d06c693981e7bc21e89aa3ea8f8829c85185e4ecfd2e293bfa2b88cae2c9e4722b9cfee01911a502d59360532528661eadf2150e26a2992871f562d6fed4a36867b2521b1778c4ce955f5980b9dd9ede42fc4a1394491ebf1c1fb0d794cb8c28b103d76b2e70b0337877a222d7f3cd61f353baf7bc9e23d80f8e5b4459937d75f869c179dd9b948a70b9ba37386532790bac12f2f342fc4f2afd8a45f109331d5daf3344ade893029e322e8b7f3bdb5a49987116b31b2bd6d5bab789ca061ea42f7647c88488f734150e161e5aea78639c5bf9c2fb88da321cbfd379b38cbe6e14af979f238685e2c0ff51629cd228602dbaceff8a214cdc66528cdea114691ef619a8c9a0f9cdb7e08c5bcfc2bfd29e39af38f5db4821c648cc3d976cc455a6e6498c92511b407f3349284901562a912c5af25ff792b9c6c5dfb73519336c7d4a87e49debce7a441b7a29706173e4e4e8dacee63a06ab85dd359b508bc8a0f7002832fae10a0a38efaa475846c4205aebe777334788c3e4652086e26dcdddad991b0ce5256e113bac692d442f524d7e292b86eaf0dd8380ccd78b1489dd2ef6beaf2eb9b08b50bb2a5ff3ba8df3b226baf79a0739d8a60cf815cb347399ac4adb2cea533d3f0ce160a563f8d401e5a6100578e4c8178a7e70663e135edc645cdec2f0588fc99a0cb60dd8788e02554ade370960ce562c210e826a1eba767a09b10f46ebbe6c9166e24286331d2ff025c57a10c7b64c506d0a68642171ad965a001700561fcac2e3f548fd58d32bab5f38b36e62f5546129cea35ce856052e3e480fc639640a5301dd700c8e8d0bd6ac790910fcf2b4f159cc1531aa1c9e37b541520450dde638942081201ae8a580f28cf50530190a45f45468753a122b364be7dad79044ec8b9977d583bc0ac3ec7b9fae192397ce8693310f301c18c2cab5208b369e63c5ac18d0266834e218b0400308c2c2f2df4a6ccadb3788860a2c733a9252b877ea1c1e849a38a328310bafae9614a6e161170c6fcbe9bd8c4177de1fd18f56805c91fb382aad767891556ff8e1b5f3ab8c18b4fa3053c981c12fa2ea017bb7596158ca533d0dd95a95d0b392222609f6ea336711a9dc50393bc41fac0d429540ad70757f2086bf1bea0132a609ea0bdeea0cef93d8b2a0d59189bffec05281e97b4722291005e9ca7e755be9070f405ab0d6c9546a5ebda2e62adcc621c2b1f6b07cd1e617d50469ef2c71647a47ef98ffbc71505e188cef3e5c774c0987664b6989794d7ca186804ccc6296da3adf22feb351792f1a9cff77413703744bf4f21212920d6a8fa1800da7a38fef7160a50f5b895e7b76f3fd830fcb9a25f3b3ccfd082a1712237e4ca665085aa1c5aa413bce813f1b7ca66105de94babb7b4a05029cc3759d00191fd9bfa0f996cc703403dd6ed2b33f2743a788041f279b767efc373314edfae1bd33f7eaaa7418a59fff7e40d02e618172f6e0abe08c855348f3cba40c8592a0521ed1e41524f20abccb2bf0ebb933e59b7036eff5a66279d578e6b2fd6c4140b33adc67f7083110d815ac55b4833ec0504488265b3ff2bdacec17c91bea9d6bdd931bf056d6e9790e472d874a5a3946b200493c9874d057aa6be3a1ca4da6fbb88a9d853aaa7c8ccabc83582caa65078bbe7b04625d139ed9860080d185bd9798d613ca3014713eb9e36bdeb73f14ac3fc7b2f8f594404f56dd937c0a7e865fa98e858cb0af661cbe12f15c928c4c45a982e24db18e7fc413591c8656b2c7876a5d717e42d3df13189b95ddc2b5a928dbda9ee02c30352045d02cbd854af821300f198b1ce1ea8e45c969020e5c7670fbd9b7227cfd3c809fac1df2eb18c199b27e969f32052376b450003b7ff6332ee1d9fce1b5947b72575ec6541b992fbc76f0e03fc1bb9a0df5ee3de0f34125c311d2ddb67962cf9a8230efff82c25c896621082a587139e997e0532962e84ad697a1a2b80d997c2a268ecca8b7d1095530b332ef368270bf31a75b777a7cfe8c8d324a8c558d3c65f801deac6822842f85f10a641b71ad7e5fb05f64eb3033507dc3a2e9ec02d667ef36c551f69c438e8b6c3927733d83e94f035ef3da230b759df5f5d1964815b176478c4ed94402dc8265e589171df165094a2e4e75614fc6febb8484f28ec8c1252b2d933852573926837e1edf9da0da3f91697b290c3ee5a44fcab3b10095b78b5df3701431cab31750e211d442a77dbc5e2d4d0e67bf329f9103414abd4f3879511375c8800f52f8a17ae6887214bf8634bd99075ab073540f04ff675d32190a3d1152ceee32e30719cd883a82185f89f071c02df443cf7046dce8a6ddc472ed63945faef588acf57985c7ecffa438f5427fb851ebc6a4c577a33895a8fc4628286a48d3bbcda1b769aa3194869e148ba457932fa6f2e4640e2755940e2f5a6a67796b5f88ac10f389b409c0c57bd4bf0cbe0fac2fd2f58ec498d19c43952e4522b51931712eb4002b7b208c02c4e06df99fa8e93e4b9e8b0d7a57e63aacdafb19db0fd422f8e89d1275b49963bd82b490f9e4d24cfe9700e98c73b31fdcf7b7d30d73e9bf6bd86439dc8b63171d53ca7caa860c60777436099db544164d4e4a81a483ffd5ef2980110f461529c057c40f2ee63b71a8eb2d87919726bda25a8fa2f242d3ff7bf0726d8a11d141eb87d2733f1faf456f2eccbe4c3a856702a80ba7e36cd8ef8e064e16e61eedda4478d2edaf0445e2247a76e25b4b5c68720b87bba69b4171983d95a5a764f42fa6f23466096d9a097edf84952023a4541110456b93ea558c2059156c287fc6cde7c74abd90ec539a5f43c2a641b1a34cffa2538ba565d0b57513b8c1b3df541d02d6d5a0aa2f96200dbbf64ab7c0adb868cce23ca607db6d6dd18f956185c983a90c8b4a7ec630178376ac400c61c77fcbacb979e2e07115db8a034a00ffb136f91c0b16c6d796f524f9ce6a0b72c378c8939b56bb83ca0f3d09da2b82b4d3457b568878d019f54f9cddd514a601d4edfae582f1a2674892bacf6eaba66124c797e1ebf91e1b5f12e520404d213b12770966d5c5f3435169f8867faed0107d2cd4cf0638e4f1c488122da7516820cc3d12cdc9f663778455352d2be1d8d3cd611808304554bde601e4ec4c9aa50ec22648b12f45c8d84bdcfc85f95ba0afe254df5d8b40d53adf1d4fe1dc3744bd486e3eb14775f4f4c333f751975a4a8b5bfa497850633aff3ff98deb53d1b515a08c4c474bcce46149dfd5bece51d1dfb6eaf593f8ee037404a5ce5edc2887006059cd3743448ab977899f10540b5a5eac1b9d4346654e4eb0200858b5b92525399a87859859269d3b0fa4c2159dc807548368ff701076606378b44cee2839f05ad94f659270af868cd674b44729bbb8eb2f697101bf4fb4f96d07dabaeb5b6a1cc884423fcac3d3805bffb3c8de3e801d641436ca6b1f50aabce4c7b3b1a24eb6977d5a8c84d6cce8ec9ee93d3062a4bd78ff916fbba7ab228838bd61f25759c6ac8650adbe2b346e65681dbafbb934358ca2b1b854bf42f42404a15caf99b785f132b9a20413b2d9d353220656ae271883ca9733430db09b5e8578e9d4fff032b0ee792f429791089d93876a30100a35c420a0686c125005242551df27673e0826a1c38bc028c104e0f958ae1ffb2d5221fd1a36e598065eed6a449567b41c027b6faa461d3aeee8dfb6285661af7fdcfa484fee654b633342eb122fe72d5d68ea4cfc988cabb0df39b8cbd064d489fcbc90bf313f3a29797d479a8fc12cf5b9ead0907a2dca568bc0f40d0fa4a9c3758f9bfd1ac3662a9f04260ef0d2b86a02d23759b210f38830c4a224649186b6e4b87c6b457217c86f502521940caf1e5b2eadb72951a790c94dd74b929232947b01cefd5a1483e127b1b6d216317b581455f9cf96876af837e5f88cc38a46eb2fb6cd7fcc6fce1a264167b86723829ffffc413bb0000000000000032dd6219a95418314b1e071dd59d0e96083e02cb8778069ed54137ce98bd702dead8fc74992d7743d1450faf7de44c2d59ff2dd339b80d3449e9bda5b3a564f01aeefe300165bf3b00d811c7ae866cb1a0a1b87400c2941841cd2d6953308f1a963f1c6d4486e7e45daabf0b066ad8884f4577534d3c9f3d3f3bbe8a1a3088d9b95da1fc901573e26f5b86c7a868429b9b634c9e35dfd0534563160912a43c64bacc8ea1ced7bc1b77a28716700e501905c9e81e190241e0edbf4f894aee4047c5b5fb58a3db4afaf76790690fdc1289236fbfc5f6cff540eb82de8044d17658fb054b198cc288cc43aa5d805a51cadac3e75c8fd82ad015a04932cb6f6b53aa4e8d9d84018ff8db0f756d6b5db4e06a689b52fe8471b9230c2dd14d042c1fea45c3d2452351a4222421366610d80785f7e47474d4ad58116313813d4db3176d93c4e29e5c7562806879ddc75b9cfcf38d6aed015c0f4d52302a51215187bfe254d6065bd142cc9b9e03f32ebc9686ad0d0cb3fcf0afa320a15f37cf591600636a4ef84c756c0d42ab98bc2479f0d5d230359f622447101844430a7555a4cbc702b55a4a6ed964cf399a1a493e40555f622da1643073a786a3425d95090b9b0e20521187e9e20d35f4e061e6201e67e844d88457f751e5519dd30df9251f1ce2836e0bf61eef8fc6ed22e4887186316566278bec46af3823ed53e3e18ca5741124dc53cadb5ff0846cc1c6b9c072be6dea187e8336eb6b6b7029ef79ff3b2999938cc59aafa1618fc4556ce3c81f99414d5d79538a83ee9d8a9ad0b9e57060d4be9c53266f418455d760f423a1642e9edfccede29d21891d7421ad0f1cefe472d0ef84965575419871374727bf5f1dc72057a18ed4d7e0a2ddd6d105eb2cc3718609814c2968f27465b00fb4b4a64359629722320583a05644693e6fcadde0efc12e66a0c8e48311f0550ab8fbc1556b69bb2a5a0c03f1a59d67046d7acd5beb9f7f9ae6eb18580431624d63ffe294ea5497a65ec3891f4c70b26b7b17a9f82145e5d5156d6b3355ad249bb66168bbb745d00c40d6ef42d52a032cf62caeeaec31f4c85ac403cbb0c6756953f0ddbf79da0cfa6ccc1c40de43bc4a10a700b98322e671225e80e663d30192ff5611c44c095351bb69a4e14c11a3d5b0b53e78954699760516134f3148e71a2b0bb04b24bb1a2c2b503f56249e0a2c638ff40e7c2c7d50ef7196fc9893e18c0ac3fc5a4c0d23ee08080f984dc643854b54df4a638af29dc5df79f905c4133ce263f3b2bb55fa7d56fa82795687e6ee5c68cc13d71e44367ea8670409cf2231990cc6d06e5aae2fc340bba3aa417016fb9dd89f90a89196c104017a68f7527b8b958e38f9646832a7790045fe394ce41bcbd1cbcbe52cd7e56cec7b2856e448fa5d7e837798b899f05a2c2fbe6d9f1a7b193bbf7c70444d6a37810d4d19d359f9cd6b8a6ef2230b735f8bebe0ccec94e44ed95234bfa4a36a2f0ee9fd5ca73d697344d28436e0fab81e73f447bb144a70aaf96acf6ff52c4737e7a4debcd285bdb54e363d842bc9a7d180c16f010fe4078b41c4c3e565c3edd64e61f995ab0086dbdc026dc1825b8c45ed96edd8d2bd9daa699e5da333274d6bee2097c004462848cd16849f95cd2252c4c87058a821ed977ed751b77b0a8fc0966bf3a30c26d49f3185782a7d314e89f039a15ede458538f1ada8eb836a36bb5d82c402e3feebd37e7b7c667a1c82edc8720072789fa5f388039daa731ce74dbd5aa8965b7ee99f6c271035239ca1c34cdc3c57bd8510dee08f74cda37095b1b098997998fa267e0be15de474b2c737936cacccb4ba44112570bbd13f870b55f3763f77724b586d6e26c3e72b20bb13272f2ee331bcabd4a79980a8d2965c20da2a3918c855215fecce95d29bec58f522d3d6d2852c4ac080fffcb3ee7fb98591f99b7cfb7bb124cc20078030756aee8fd284df06cd5f07c13fd56e5381b19e0a3a9f412a8d27428cb6af0078e4dc8ce4836630360a5c3b98ff5e6cbac1d9d29de9838a84d4722ceea3765be3df9984cf139770f3fb986b9cc9185ab787f54be33d46c54de74d94d13f74ec70cfbe1605c00db79fa8de64cd834090a35c80759f83c8fbefcf9a276dde8a8498d084b4619578eccdda2651a475f73367bda96894bb36eb868035251694cbb745feb150555ada09909497ff1d9c8aee7a35b7c8b2fc64ff483f4fd3491ed52304e6010b9bf2af8c5b8e162a383a0bf0bf108ca78f5086132b2b1a29581f323841c2f189509898d932436e5c1e693ed91f0524da026fecaa2b7efab54aeef120be61de457171c58811e0ca8a7600e0ac249aa579d78d2e2b1d6f41a3da4676b6690ca0249251f5b48b9a3820ac5b25a52cc01bc331c24039b6f4bfab72d5838a35629259930dea936f8c60b4f1b189db1fd1b5e7e6c8a842707ad6756d098a9ab543cde3e1d1161983ea91b7322ee2a713be3bad369d8112fdc7f1ac7b5122d55dc5ae443e10db711ddd6619ffbf96068e28911b1f54388413a17958d61ca07465b54699a1351915300cb826d3bf7f4f217bba0ed3195cbd077b67167b9a03040afc237f3bb36edd9fed33d7d6e7c9493fec34be6543880b0b442d8351496f2e8d60d4d984cca743983c0afab9cdedd5a9d774a121e91230d359c27a3d7b4db38ce73db747af3ca06470901f2605c031a7c9b7d1bbb1e838d36a4d39b039e80bcddfaecca906705fe8c844e93d5aee494dc62c7b4fcb6abe09acf925ef422dc09185b53e960795c56500b43faa6e89720aeee724532f89e60e20b12cd4f832b95189bf45b96aa7af10cf8298b44278de1c67e2d71d811240a7aa2d1d6de22e5b8cef4a1f309de3b81c5a028aabdabddc9637974c2dc19b60458f0954bc751b7ae628ac602eb7c52c7fac0c1621ee7757fc5b002ad7e8fb66fc7da0896547abf01ee091c0cfe1d0fc66e6e03599bb2aa7608a72c30203af5eac3915a0b6616b6119c4a09654de2f56e53296d1f8487cd7ec36c86894bab72ec3ce61208f848432d45a27cafcfbf2a2c56b58e017c76ac7e943aff0b4acaf84dfb343d93efb29c518a9d552c36a3e44c6ea948673bc2aa71c5a873d1d301a9c8b02f19c086f922f0b3e4f7d14e8a59c017809188e2e1b4dc6b55fb8ad82b1c04460b5ff2e9b8f47d3e833599519b79ac6d9ab282db4a55654f60396d2e72bf8e2ebbc8c742913359edadfcbda00", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x90, 0x0, 0x80000001, {0x3, 0x0, 0x2a, 0x9, 0x203fc, 0x6, {0x200000000002, 0xffffffffffffff28, 0x1000000000d, 0xa0d, 0x80000000000, 0x3ff, 0x2, 0x4, 0x3, 0x1000, 0x7, r2, 0x0, 0x5, 0xe0000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.501357269s ago: executing program 7 (id=8831): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x3, 0x169}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) close(0x3) 4.430485039s ago: executing program 3 (id=8832): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) r1 = syz_io_uring_setup(0x8d6, &(0x7f00000002c0)={0x0, 0xb6c5, 0x400, 0x2, 0x37c}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 4.083065201s ago: executing program 7 (id=8834): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) 3.910502534s ago: executing program 0 (id=8836): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 3.77486588s ago: executing program 3 (id=8837): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0xff41, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0xffffffffffffff41, 0x5, 0xe42ef}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5c, 0x3, 0xfffffffc}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 3.774457096s ago: executing program 7 (id=8838): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\b\x00', 0x16, 0x11, 0x80, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x51}, "000000008817"}}}}}}}, 0x0) 3.466166147s ago: executing program 0 (id=8839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.995909753s ago: executing program 3 (id=8840): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.896735433s ago: executing program 0 (id=8842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a6e2976b", 0x4, 0x20044811, 0x0, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001700)=""/4107, 0x100b}], 0x1}, 0x10142) 2.749652209s ago: executing program 7 (id=8843): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 2.338328774s ago: executing program 44 (id=8843): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 2.294821656s ago: executing program 0 (id=8845): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="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", 0x741}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 2.203604382s ago: executing program 0 (id=8846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x1, 0xdddd1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x2, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 2.107868658s ago: executing program 4 (id=8847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) r4 = eventfd2(0x7fff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r4, 0x7, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x7, 0x2, r2}) 1.906358744s ago: executing program 3 (id=8848): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) r1 = syz_io_uring_setup(0x890, &(0x7f0000000440)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)="0084ce", 0x3}, {&(0x7f0000004000)="0424344dd3", 0x5}], 0x2, 0x7fff, 0x1) 1.905555275s ago: executing program 8 (id=8849): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 1.60689977s ago: executing program 0 (id=8850): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x2) lseek(r2, 0x0, 0x0) 1.604454372s ago: executing program 4 (id=8851): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc00}, 0x0) r0 = syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x7a25, 0x10000, 0x3, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) 1.544086937s ago: executing program 8 (id=8852): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6004}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x4, 0xe, 0x3}, 0x1}}]}, {0x3f}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.289826619s ago: executing program 4 (id=8853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x6, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x9, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)={0x1, 0x0, [{0xb, 0x61, 0xf, 0x8, 0x4, 0x10001, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.288758691s ago: executing program 3 (id=8854): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 915.419112ms ago: executing program 8 (id=8855): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 914.971373ms ago: executing program 3 (id=8856): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0)={0xfff8, 0xffeb, 0xa0, 0xfffb}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0xc, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x16, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0003fd000000ec03"]}, 0x0) 697.076473ms ago: executing program 8 (id=8857): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0xfffc, 0x200, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000240)={0x6, 0xffffffffffffffff, 0x1}) 695.005263ms ago: executing program 4 (id=8866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xff}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 452.899757ms ago: executing program 8 (id=8858): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x800000a}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x8001, 0x0, 0x0) 356.056739ms ago: executing program 4 (id=8859): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000780)={0x0, 0x18, 0xfffffdb2}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 0s ago: executing program 8 (id=8860): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000080)="c7", 0x1, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) kernel console output (not intermixed with test programs): ode [ 984.617997][T26763] veth1_macvtap: entered promiscuous mode [ 984.678799][T26763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.736013][T26763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.778117][ T3496] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.796221][ T3496] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.818586][ T3496] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.844788][ T3496] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.897937][ T892] usb 7-1: USB disconnect, device number 93 [ 984.956130][ T7223] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 985.044328][T19754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.069533][T19754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.133934][ T7223] usb 10-1: Using ep0 maxpacket: 32 [ 985.144387][ T7223] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 985.157613][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.166347][ T7223] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.186663][ T7223] usb 10-1: config 0 descriptor?? [ 985.202017][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.413040][ T7223] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 985.447130][ T7223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 985.489473][ T7223] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 985.520879][ T7223] usb 10-1: media controller created [ 985.562586][ T7223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 986.443907][ T7223] stb0899_attach: Driver disabled by Kconfig [ 986.453798][ T7223] az6027: no front-end attached [ 986.453798][ T7223] [ 986.505649][ T7223] az6027: usb out operation failed. (-71) [ 986.524512][ T7223] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 986.540953][ T7223] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input176 [ 986.589388][ T7223] dvb-usb: schedule remote query interval to 400 msecs. [ 986.597125][ T7223] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 986.618644][ T7223] usb 10-1: USB disconnect, device number 29 [ 986.663509][ T892] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 986.833453][ T892] usb 5-1: Using ep0 maxpacket: 8 [ 986.845158][ T892] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 986.891512][ T892] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 986.925020][ T7223] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 986.936653][ T892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 986.977668][ T892] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 987.001161][ T892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 987.044163][ T892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 987.094290][ T892] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 987.120273][ T892] usb 5-1: config 168 interface 0 has no altsetting 0 [ 987.144613][ T892] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 987.152090][ T892] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 987.169761][T27046] binder: 27045:27046 ioctl c0306201 80000180 returned -14 [ 987.201512][ T892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 987.249165][ T892] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 987.262679][T27054] syzkaller1: entered promiscuous mode [ 987.271770][T27054] syzkaller1: entered allmulticast mode [ 987.279731][ T892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 987.320900][ T892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 987.332666][ T892] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 987.346478][ T892] usb 5-1: config 168 interface 0 has no altsetting 0 [ 987.406177][ T892] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 987.419397][ T892] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 987.472557][ T892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 987.514862][ T892] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 987.530370][T27063] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7965'. [ 987.563539][ T892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 987.601658][ T892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 987.679553][ T892] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 987.721778][ T892] usb 5-1: config 168 interface 0 has no altsetting 0 [ 987.744805][ T892] usb 5-1: string descriptor 0 read error: -22 [ 987.751169][ T892] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 987.803333][ T892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.859242][ T892] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 988.220757][T27082] netlink: 220 bytes leftover after parsing attributes in process `syz.9.7971'. [ 988.254401][ T5926] usb 5-1: USB disconnect, device number 31 [ 988.492525][T27089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7973'. [ 988.553499][T27089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7973'. [ 988.572228][T27089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7973'. [ 988.585032][T27089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7973'. [ 988.916395][T27107] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1860063116 (14880504928 ns) > initial count (12053764592 ns). Using initial count to start timer. [ 988.973142][T27113] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7979'. [ 990.234704][T27141] netlink: 'syz.7.7987': attribute type 4 has an invalid length. [ 990.315976][T27141] netlink: 'syz.7.7987': attribute type 4 has an invalid length. [ 990.979603][T27165] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.7994'. [ 993.209952][T27250] netlink: 7 bytes leftover after parsing attributes in process `syz.9.8014'. [ 993.335714][ T5926] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 993.495722][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 993.532455][ T5926] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 993.560691][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.585643][ T5926] usb 5-1: config 0 descriptor?? [ 993.610296][T27244] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 993.660040][T27269] netlink: 'syz.6.8019': attribute type 4 has an invalid length. [ 993.687443][T27269] netlink: 'syz.6.8019': attribute type 4 has an invalid length. [ 994.061437][ T5926] elan 0003:04F3:0755.0097: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 994.338602][T27287] syzkaller0: entered promiscuous mode [ 994.682840][T27295] netlink: 'syz.6.8026': attribute type 4 has an invalid length. [ 994.683713][ T7223] usb 5-1: USB disconnect, device number 32 [ 994.735923][T27298] netlink: 'syz.6.8026': attribute type 4 has an invalid length. [ 995.234607][T27308] delete_channel: no stack [ 997.306486][T27355] geneve3: entered promiscuous mode [ 997.311808][T27355] geneve3: entered allmulticast mode [ 997.805697][T27369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8046'. [ 998.227995][T27383] input: syz0 as /devices/virtual/input/input177 [ 998.249228][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.256429][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.824948][T27401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8054'. [ 999.307359][ T892] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 999.483318][ T892] usb 5-1: Using ep0 maxpacket: 8 [ 999.499667][ T892] usb 5-1: config 7 has an invalid interface number: 140 but max is 0 [ 999.532327][ T892] usb 5-1: config 7 has no interface number 0 [ 999.563487][ T892] usb 5-1: config 7 interface 140 has no altsetting 0 [ 999.587020][ T892] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=a1.aa [ 999.613745][ T892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.621818][ T892] usb 5-1: Product: syz [ 999.656544][ T892] usb 5-1: Manufacturer: syz [ 999.661222][ T892] usb 5-1: SerialNumber: syz [ 999.930216][ T892] ldusb 5-1:7.140: Interrupt in endpoint not found [ 999.966772][ T892] usb 5-1: USB disconnect, device number 33 [ 1000.193034][T27437] fuse: root generation should be zero [ 1001.253400][ T892] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1001.326992][T27473] loop4: detected capacity change from 0 to 7 [ 1001.346234][T27473] Dev loop4: unable to read RDB block 7 [ 1001.357623][T27473] loop4: unable to read partition table [ 1001.371571][T27473] loop4: partition table beyond EOD, truncated [ 1001.383835][T27452] netlink: 'syz.7.8065': attribute type 1 has an invalid length. [ 1001.392031][T27473] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1001.423433][ T892] usb 5-1: Using ep0 maxpacket: 8 [ 1001.436791][ T892] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1001.470921][ T892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.505237][ T892] usb 5-1: Product: syz [ 1001.529673][ T892] usb 5-1: Manufacturer: syz [ 1001.541624][ T892] usb 5-1: SerialNumber: syz [ 1001.577362][ T892] usb 5-1: config 0 descriptor?? [ 1001.717952][ T30] audit: type=1326 audit(1768102295.701:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27478 comm="syz.6.8072" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 1001.821749][ T892] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1001.914816][T27483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8073'. [ 1002.347705][T27500] netlink: 2016 bytes leftover after parsing attributes in process `syz.9.8077'. [ 1002.357364][T27500] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8077'. [ 1002.719548][T27514] syzkaller1: entered promiscuous mode [ 1002.725386][T27514] syzkaller1: entered allmulticast mode [ 1003.483349][ T5926] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1003.523885][ T5943] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1003.638810][ T892] usb write operation failed. (-71) [ 1003.674629][ T892] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1003.705149][ T5943] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.705637][ T892] dvbdev: DVB: registering new adapter (Terratec H7) [ 1003.723950][ T5898] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1003.732465][ T5926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1003.745291][ T5943] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.757404][ T892] usb 5-1: media controller created [ 1003.757403][ T5926] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1003.774557][ T5943] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1003.784196][ T5926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.789425][ T892] usb read operation failed. (-71) [ 1003.792496][ T5943] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.808802][ T5943] usb 8-1: config 0 descriptor?? [ 1003.820675][ T892] usb write operation failed. (-71) [ 1003.828897][ T5926] usb 10-1: config 0 descriptor?? [ 1003.847872][ T892] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1003.858433][T27536] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1003.885951][ T892] usb 5-1: USB disconnect, device number 34 [ 1003.905632][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.929584][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1003.968142][ T5898] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1003.989342][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1004.022915][ T5898] usb 2-1: SerialNumber: syz [ 1004.252148][T27546] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.8094'. [ 1004.262015][T27546] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8094'. [ 1004.281545][ T5943] cp2112 0003:10C4:EA90.0098: unknown main item tag 0x0 [ 1004.303431][ T5943] cp2112 0003:10C4:EA90.0098: unknown main item tag 0x0 [ 1004.312132][ T5898] usb 2-1: 0:2 : does not exist [ 1004.327633][ T5926] elan 0003:04F3:0755.0099: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 1004.341499][ T5898] usb 2-1: unit 5: unexpected type 0x0a [ 1004.348121][ T5943] cp2112 0003:10C4:EA90.0098: unknown main item tag 0x0 [ 1004.359669][ T5943] cp2112 0003:10C4:EA90.0098: unknown main item tag 0x0 [ 1004.380785][ T5943] cp2112 0003:10C4:EA90.0098: unknown main item tag 0x0 [ 1004.394046][ T5898] usb 2-1: USB disconnect, device number 121 [ 1004.404789][ T5943] cp2112 0003:10C4:EA90.0098: unknown main item tag 0x0 [ 1004.420202][ T5943] cp2112 0003:10C4:EA90.0098: unknown main item tag 0x0 [ 1004.462418][ T5943] cp2112 0003:10C4:EA90.0098: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1004.491113][T13125] udevd[13125]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.545111][ T5943] cp2112 0003:10C4:EA90.0098: Part Number: 0x82 Device Version: 0xFE [ 1004.746105][ T5943] cp2112 0003:10C4:EA90.0098: error requesting SMBus config [ 1004.765769][ T5943] cp2112 0003:10C4:EA90.0098: probe with driver cp2112 failed with error -32 [ 1004.814273][ T24] usb 10-1: USB disconnect, device number 30 [ 1005.100412][ T24] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 1005.139598][ T24] hid-generic 0000:0000:0000.009A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1006.321658][ T24] usb 8-1: USB disconnect, device number 77 [ 1007.205475][ T24] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1007.373387][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1007.424550][ T24] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1007.455838][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.471967][T27633] netlink: 11562 bytes leftover after parsing attributes in process `syz.9.8127'. [ 1007.483369][ T24] usb 8-1: Product: syz [ 1007.493740][ T24] usb 8-1: Manufacturer: syz [ 1007.508827][ T24] usb 8-1: SerialNumber: syz [ 1007.531788][ T24] usb 8-1: config 0 descriptor?? [ 1007.561692][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1007.603733][ T5898] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1007.785793][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1007.813163][ T5898] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1007.853466][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.885470][ T5898] usb 2-1: config 0 descriptor?? [ 1007.891369][T27629] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1008.386676][ T5898] elan 0003:04F3:0755.009B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1008.953647][ T5898] usb 2-1: USB disconnect, device number 122 [ 1009.163440][ T6440] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1009.237405][ T24] gspca_ov534_9: reg_r err -71 [ 1009.337778][ T6440] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1009.351866][ T6440] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.471226][ T6440] usb 10-1: Product: syz [ 1009.493357][ T6440] usb 10-1: Manufacturer: syz [ 1009.498126][ T6440] usb 10-1: SerialNumber: syz [ 1009.516666][ T6440] usb 10-1: config 0 descriptor?? [ 1009.530847][ T6440] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 031 [ 1009.583682][ T24] gspca_ov534_9: Unknown sensor 0000 [ 1009.583806][ T24] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 1009.606617][ T24] usb 8-1: USB disconnect, device number 78 [ 1009.929266][ T6440] (null): failure reading functionality [ 1009.969808][ T6440] i2c i2c-3: failure reading functionality [ 1010.007083][ T6440] i2c i2c-3: connected i2c-tiny-usb device [ 1010.847547][T27708] input: syz1 as /devices/virtual/input/input178 [ 1011.345737][T27715] kvm: pic: single mode not supported [ 1011.345974][T27715] kvm: pic: level sensitive irq not supported [ 1011.372762][T27715] kvm: pic: non byte read [ 1011.394033][T27715] kvm: pic: non byte read [ 1011.409273][T27715] kvm: pic: non byte read [ 1011.431457][T27715] kvm: pic: single mode not supported [ 1011.431541][T27715] kvm: pic: non byte read [ 1011.462552][T27715] kvm: pic: non byte read [ 1011.495516][T27715] kvm: pic: single mode not supported [ 1011.495542][T27715] kvm: pic: level sensitive irq not supported [ 1011.501335][T27715] kvm: pic: non byte read [ 1011.536036][T27715] kvm: pic: single mode not supported [ 1011.536128][T27715] kvm: pic: non byte read [ 1011.569567][T27715] kvm: pic: non byte read [ 1011.583719][T27715] kvm: pic: single mode not supported [ 1011.583745][T27715] kvm: pic: level sensitive irq not supported [ 1011.593532][T27715] kvm: pic: non byte read [ 1011.958000][ T6440] usb 10-1: USB disconnect, device number 31 [ 1012.348671][T27740] vivid-003: ================= START STATUS ================= [ 1012.441497][T27740] vivid-003: Radio HW Seek Mode: Bounded [ 1012.460499][T27740] vivid-003: Radio Programmable HW Seek: false [ 1012.483465][T27740] vivid-003: RDS Rx I/O Mode: Block I/O [ 1012.501385][T27740] vivid-003: Generate RBDS Instead of RDS: false [ 1012.539583][T27740] vivid-003: RDS Reception: true [ 1012.571593][T27740] vivid-003: RDS Program Type: 0 inactive [ 1012.597079][T27740] vivid-003: RDS PS Name: inactive [ 1012.616112][T27740] vivid-003: RDS Radio Text: inactive [ 1012.634069][T27740] vivid-003: RDS Traffic Announcement: false inactive [ 1012.658665][T27751] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8155'. [ 1012.668133][T27740] vivid-003: RDS Traffic Program: false inactive [ 1012.678803][T27740] vivid-003: RDS Music: false inactive [ 1012.697052][T27740] vivid-003: ================== END STATUS ================== [ 1013.767347][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.914648][T27779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8163'. [ 1014.037316][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.132589][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.209996][T27779] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8163'. [ 1014.308105][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.668985][ T61] bridge_slave_1: left allmulticast mode [ 1015.713396][ T61] bridge_slave_1: left promiscuous mode [ 1015.747392][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.992647][ T61] bridge_slave_0: left allmulticast mode [ 1016.030081][ T61] bridge_slave_0: left promiscuous mode [ 1016.063902][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.813692][ T5926] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1017.049573][ T5926] usb 10-1: Using ep0 maxpacket: 32 [ 1017.063438][ T5926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.096113][ T5926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.106748][ T5926] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1017.116717][ T5926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.168362][ T5926] usb 10-1: config 0 descriptor?? [ 1017.217372][ T5926] hub 10-1:0.0: USB hub found [ 1017.397933][ T5926] hub 10-1:0.0: 1 port detected [ 1017.424135][ T61] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1017.544431][ T6440] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1017.723690][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.740547][ T6440] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.754017][ T6440] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1017.772173][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.785459][ T6440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1017.820274][ T6440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1017.820366][ T61] bond0 (unregistering): Released all slaves [ 1017.849722][ T6440] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1017.869048][ T6440] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1017.881334][ T6440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1017.889728][ T6440] usb 2-1: Product: syz [ 1017.894201][ T6440] usb 2-1: Manufacturer: syz [ 1017.898931][ T6440] usb 2-1: SerialNumber: syz [ 1017.913169][ T6440] usb 2-1: config 0 descriptor?? [ 1017.930942][ T61] bond1 (unregistering): (slave lo): Releasing backup interface [ 1017.939819][ T61] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1017.961007][ T61] bond1 (unregistering): Released all slaves [ 1018.125108][ T61] IPVS: stopping master sync thread 9266 ... [ 1018.164970][ T6440] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1018.186316][ T6440] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1018.366086][ T6440] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 1018.401358][ T6440] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1018.437945][ T6440] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1018.569609][ T6440] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 1018.641670][T27869] syzkaller1: entered promiscuous mode [ 1018.649645][ T5926] hub 10-1:0.0: hub_hub_status failed (err = -32) [ 1018.658903][T27869] syzkaller1: entered allmulticast mode [ 1018.667974][ T5926] hub 10-1:0.0: config failed, can't get hub status (err -32) [ 1018.702801][ T5926] usbhid 10-1:0.0: can't add hid device: -32 [ 1018.711277][ T61] hsr_slave_0: left promiscuous mode [ 1018.721714][ T5926] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 1018.733680][ T61] hsr_slave_1: left promiscuous mode [ 1018.746321][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.761297][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.774275][ T5926] usb 10-1: USB disconnect, device number 32 [ 1019.447068][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1019.556477][T27882] netlink: 188 bytes leftover after parsing attributes in process `syz.7.8188'. [ 1019.566827][T27882] netlink: 188 bytes leftover after parsing attributes in process `syz.7.8188'. [ 1019.580068][ T6440] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1019.600738][ T6440] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 1019.641173][ T6440] usb 2-1: USB disconnect, device number 123 [ 1019.718981][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1019.918716][T27893] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8191'. [ 1020.725860][T27911] binder: 27910:27911 ioctl c0306201 80000640 returned -22 [ 1022.164326][ T5926] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1022.353570][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 1022.385572][ T5926] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1022.386565][T27938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8209'. [ 1022.412600][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.493326][ T5926] usb 2-1: Product: syz [ 1022.515131][ T5926] usb 2-1: Manufacturer: syz [ 1022.538493][ T5926] usb 2-1: SerialNumber: syz [ 1022.553466][ T5926] usb 2-1: config 0 descriptor?? [ 1022.797138][ T5926] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1022.911137][T27950] sctp: [Deprecated]: syz.9.8212 (pid 27950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1022.911137][T27950] Use struct sctp_sack_info instead [ 1022.977658][T27952] sctp: [Deprecated]: syz.9.8212 (pid 27952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1022.977658][T27952] Use struct sctp_sack_info instead [ 1023.464004][T27963] sit1: entered promiscuous mode [ 1024.035706][ T5926] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1024.081378][ T5926] usb 2-1: USB disconnect, device number 124 [ 1024.786944][T27996] netlink: 'syz.1.8224': attribute type 1 has an invalid length. [ 1025.004901][T27996] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1025.278233][T28001] bond10: (slave veth9): Enslaving as an active interface with a down link [ 1025.338989][T28004] bond0: (slave dummy0): Releasing backup interface [ 1025.375817][T28017] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8229'. [ 1025.421821][T28004] bond10: (slave dummy0): making interface the new active one [ 1025.475770][T28004] dummy0: entered promiscuous mode [ 1025.483875][T28004] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 1025.575817][T28021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1025.856255][T28036] syzkaller1: entered promiscuous mode [ 1025.861815][T28036] syzkaller1: entered allmulticast mode [ 1025.990256][T28043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8234'. [ 1026.349920][ T5926] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1026.503491][ T5926] usb 7-1: Using ep0 maxpacket: 16 [ 1026.510868][ T5926] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1026.514741][ T6440] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1026.533322][ T5926] usb 7-1: config 1 has no interface number 1 [ 1026.539500][ T5926] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1026.557338][ T5926] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1026.571598][ T5926] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1026.586596][ T5926] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1026.596253][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.604523][ T5926] usb 7-1: Product: syz [ 1026.634398][ T5926] usb 7-1: Manufacturer: syz [ 1026.639082][ T5926] usb 7-1: SerialNumber: syz [ 1026.699347][ T6440] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1026.717896][ T6440] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.744458][ T6440] usb 8-1: config 0 descriptor?? [ 1026.776050][ T6440] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1027.098485][ T5926] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 1027.818651][T28108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8255'. [ 1027.860175][T28110] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8256'. [ 1027.988460][ T6440] gspca_stv06xx: I2C: Read error writing address: -71 [ 1028.024738][ T6440] usb 8-1: USB disconnect, device number 79 [ 1028.516661][ T5926] usb 7-1: USB disconnect, device number 94 [ 1028.750174][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1028.823600][T28126] syzkaller0: entered promiscuous mode [ 1028.829154][T28126] syzkaller0: entered allmulticast mode [ 1029.308853][T28148] netlink: 'syz.4.8268': attribute type 1 has an invalid length. [ 1029.470360][T28161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8270'. [ 1029.484268][T28148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1029.706861][T28153] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1029.768860][T28157] bond1: (slave dummy0): making interface the new active one [ 1029.829709][T28157] dummy0: entered promiscuous mode [ 1029.867438][T28157] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1031.334398][ T24] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1031.515881][ T24] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1031.525875][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.539146][ T24] usb 2-1: config 0 descriptor?? [ 1032.603408][ T5898] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1032.755310][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.766822][ T5898] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1032.776668][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.789156][ T5898] usb 7-1: config 0 descriptor?? [ 1033.043698][ T5898] usbhid 7-1:0.0: can't add hid device: -71 [ 1033.055164][ T5898] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1033.068910][ T5898] usb 7-1: USB disconnect, device number 95 [ 1033.186801][ T24] pegasus 2-1:0.0: can't reset MAC [ 1033.192691][ T24] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 1033.206437][ T24] usb 2-1: USB disconnect, device number 125 [ 1033.514242][T27854] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1033.673549][T27854] usb 7-1: Using ep0 maxpacket: 32 [ 1033.680378][T27854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.694328][T27854] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1033.703481][T27854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.715736][T27854] usb 7-1: config 0 descriptor?? [ 1033.739721][T27854] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1033.766602][T27854] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1033.786592][ T5898] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1033.943468][ T5898] usb 8-1: Using ep0 maxpacket: 16 [ 1033.950749][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.962308][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.972428][ T5898] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1033.981842][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.993908][ T5898] usb 8-1: config 0 descriptor?? [ 1034.140957][T28234] ldusb 7-1:0.0: Read buffer overflow, 316 bytes dropped [ 1034.151173][ T5926] usb 7-1: USB disconnect, device number 96 [ 1034.166793][ T5926] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1034.550343][ T30] audit: type=1804 audit(1768102328.531:488): pid=28260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8305" name="file0" dev="ramfs" ino=140902 res=1 errno=0 [ 1034.812687][ T5898] letsketch 0003:6161:4D15.009C: Device info: â·· [ 1035.080907][ T5898] letsketch 0003:6161:4D15.009C: Device info: ᣠ[ 1035.295003][ T5898] letsketch 0003:6161:4D15.009C: Device info: à° [ 1035.663812][ T5926] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1035.734228][ T5898] usb 8-1: Max retries (5) exceeded reading string descriptor 2 [ 1035.748858][ T5898] letsketch 0003:6161:4D15.009C: probe with driver letsketch failed with error -71 [ 1035.783681][ T5898] usb 8-1: USB disconnect, device number 80 [ 1035.847225][ T5926] usb 7-1: Using ep0 maxpacket: 32 [ 1035.862172][ T5926] usb 7-1: config 0 has an invalid interface number: 247 but max is 0 [ 1035.872474][ T5926] usb 7-1: config 0 has no interface number 0 [ 1035.883730][ T5926] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1035.893132][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1035.902617][ T5926] usb 7-1: Product: syz [ 1035.907462][ T5926] usb 7-1: Manufacturer: syz [ 1035.916670][ T5926] usb 7-1: config 0 descriptor?? [ 1036.004199][ T5943] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1036.163372][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 1036.172326][ T5943] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1036.185597][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1036.201555][ T5943] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1036.219577][T27854] usb 7-1: USB disconnect, device number 97 [ 1036.229468][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.240062][ T5943] usb 5-1: Product: syz [ 1036.244690][ T5943] usb 5-1: Manufacturer: syz [ 1036.249668][ T5943] usb 5-1: SerialNumber: syz [ 1036.474562][ T5943] usb 5-1: 0:2 : does not exist [ 1036.508064][ T5943] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1036.548377][ T5943] usb 5-1: USB disconnect, device number 35 [ 1036.590473][T13125] udevd[13125]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.754331][ T34] dummy0: left promiscuous mode [ 1036.997278][T28318] kvm: pic: single mode not supported [ 1036.997302][T28318] kvm: pic: level sensitive irq not supported [ 1038.420925][ T3496] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.682307][ T3496] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.038828][ T3496] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.246795][T28372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8345'. [ 1039.282228][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1039.294353][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1039.305360][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1039.315793][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1039.325859][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1039.377608][ T3496] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.866006][ T8856] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 1040.885587][ T8856] hid-generic 0000:0000:0000.009D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1041.169305][T28409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8352'. [ 1041.394125][ T5845] Bluetooth: hci2: command tx timeout [ 1041.546000][ T3496] bond2 (unregistering): (slave bridge0): Releasing backup interface [ 1041.561879][ T3496] bridge0 (unregistering): left promiscuous mode [ 1041.797387][ T3496] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1041.810367][ T3496] bond0 (unregistering): Released all slaves [ 1041.824907][ T3496] bond1 (unregistering): Released all slaves [ 1042.010186][ T3496] bond2 (unregistering): Released all slaves [ 1042.291991][T28422] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8356'. [ 1042.535826][T28429] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8356'. [ 1042.609847][T28377] chnl_net:caif_netlink_parms(): no params data found [ 1042.689362][ T30] audit: type=1326 audit(1768102336.671:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28437 comm="syz.4.8358" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f27539 code=0x0 [ 1042.734115][T28435] syzkaller0: entered promiscuous mode [ 1042.739848][T28435] syzkaller0: entered allmulticast mode [ 1043.443367][ T5845] Bluetooth: hci2: command tx timeout [ 1043.987000][T28472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8367'. [ 1044.122163][T28475] tipc: Failed to remove unknown binding: 66,1,1/2886997162:4222348293/4222348295 [ 1044.157391][T28475] tipc: Failed to remove unknown binding: 66,1,1/2886997162:4222348293/4222348295 [ 1045.530993][ T5845] Bluetooth: hci2: command tx timeout [ 1045.895831][ T3496] hsr_slave_0: left promiscuous mode [ 1045.938320][ T3496] hsr_slave_1: left promiscuous mode [ 1046.014927][ T3496] veth1_macvtap: left promiscuous mode [ 1046.020558][ T3496] veth0_macvtap: left promiscuous mode [ 1046.064534][ T3496] veth1_vlan: left promiscuous mode [ 1046.069945][ T3496] veth0_vlan: left promiscuous mode [ 1047.603379][ T5845] Bluetooth: hci2: command tx timeout [ 1047.783534][ T9] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1047.944240][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1047.962714][ T9] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 1047.985966][ T9] usb 8-1: config 0 has no interface number 0 [ 1047.992150][ T9] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1048.004695][ T9] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1048.014780][ T9] usb 8-1: config 0 interface 41 has no altsetting 0 [ 1048.034382][ T9] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1048.043667][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.051703][ T9] usb 8-1: Product: syz [ 1048.057108][ T9] usb 8-1: Manufacturer: syz [ 1048.061773][ T9] usb 8-1: SerialNumber: syz [ 1048.069379][ T9] usb 8-1: config 0 descriptor?? [ 1048.080697][T28537] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1048.088230][T28537] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1048.304069][T28537] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1048.311783][T28537] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1048.678090][ T40] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1048.843516][T28511] syzkaller0: entered promiscuous mode [ 1048.844170][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 1048.849796][T28511] syzkaller0: entered allmulticast mode [ 1048.867618][ T40] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1048.880429][ T40] usb 2-1: config 0 has no interface number 0 [ 1048.888481][ T40] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1048.911679][ T40] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1048.924443][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.928324][ T9] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1048.932781][ T40] usb 2-1: Product: syz [ 1048.950424][ T40] usb 2-1: Manufacturer: syz [ 1048.955198][ T40] usb 2-1: SerialNumber: syz [ 1048.962964][ T40] usb 2-1: config 0 descriptor?? [ 1048.971269][T28541] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1049.182625][ T9] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1049.194001][ T9] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1049.211830][T28541] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1049.224347][ T9] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 1049.237193][ T9] usb 8-1: USB disconnect, device number 81 [ 1049.636953][ T40] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1049.655947][ T40] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1050.195201][T28562] loop6: detected capacity change from 0 to 2640 [ 1050.241265][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1050.250615][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1050.258922][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1050.267205][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1050.275487][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1050.284720][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1050.293008][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1050.302646][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1050.311110][T13125] ldm_validate_partition_table(): Disk read failed. [ 1050.318341][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1050.323526][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1050.327595][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1050.350536][T13125] Dev loop6: unable to read RDB block 0 [ 1050.379725][T13125] loop6: unable to read partition table [ 1050.386932][T28562] ldm_validate_partition_table(): Disk read failed. [ 1050.410875][T28562] Dev loop6: unable to read RDB block 0 [ 1050.417299][T28562] loop6: unable to read partition table [ 1050.447552][T28562] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1050.510327][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1050.519126][ T9] usb 5-1: config 0 has no interfaces? [ 1050.527812][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1050.537703][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.546100][ T9] usb 5-1: Product: syz [ 1050.550309][ T9] usb 5-1: Manufacturer: syz [ 1050.555368][ T9] usb 5-1: SerialNumber: syz [ 1050.569210][ T9] usb 5-1: config 0 descriptor?? [ 1050.787976][T28568] loop5: detected capacity change from 0 to 7 [ 1050.796698][T13125] loop5: [ 1050.799734][T13125] loop5: partition table partially beyond EOD, truncated [ 1050.825964][T28568] loop5: [ 1050.829011][T28568] loop5: partition table partially beyond EOD, truncated [ 1051.187222][T28573] kvm: apic: phys broadcast and lowest prio [ 1051.193302][T28573] kvm: Disabled LAPIC found during irq injection [ 1051.475236][ T40] usb 2-1: USB disconnect, device number 126 [ 1051.612158][T28580] loop6: detected capacity change from 0 to 7 [ 1051.622527][T13125] loop6: [ 1051.628261][T13125] loop6: partition table partially beyond EOD, truncated [ 1051.641077][T28580] loop6: [ 1051.654490][T28580] loop6: partition table partially beyond EOD, truncated [ 1051.947721][T28582] VFS: Lookup of 'devices.allow' in fuse fuse would have caused loop [ 1052.057238][T28585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8403'. [ 1053.003974][T28377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.011333][T28377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.043712][T28377] bridge_slave_0: entered allmulticast mode [ 1053.051551][ T24] usb 5-1: USB disconnect, device number 36 [ 1053.069841][T28377] bridge_slave_0: entered promiscuous mode [ 1053.099936][T28577] syzkaller1: entered promiscuous mode [ 1053.114376][T28577] syzkaller1: entered allmulticast mode [ 1053.325919][T18058] dummy0: left promiscuous mode [ 1053.333495][T28377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.363470][T28377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.370951][T28377] bridge_slave_1: entered allmulticast mode [ 1053.400200][T28377] bridge_slave_1: entered promiscuous mode [ 1053.612843][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8407'. [ 1053.647298][ T24] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1053.709900][T28605] kvm: pic: single mode not supported [ 1053.709926][T28605] kvm: pic: level sensitive irq not supported [ 1053.835024][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1053.857274][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.878558][ T24] usb 2-1: config 0 has no interfaces? [ 1053.903563][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1053.922889][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.935399][ T24] usb 2-1: config 0 descriptor?? [ 1054.070046][T28621] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8410'. [ 1054.155557][T28377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.170103][T28377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.359073][ T3496] IPVS: stop unused estimator thread 0... [ 1054.409844][T28377] team0: Port device team_slave_0 added [ 1054.478655][T28377] team0: Port device team_slave_1 added [ 1054.523514][ T24] usb 2-1: USB disconnect, device number 127 [ 1054.597549][T28377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.613786][T28377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.692126][T28377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.731628][T28377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.743312][T28377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.783331][T28377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.031518][T28377] hsr_slave_0: entered promiscuous mode [ 1055.048196][T28377] hsr_slave_1: entered promiscuous mode [ 1055.065296][T28377] debugfs: 'hsr0' already exists in 'hsr' [ 1055.095981][T28377] Cannot create hsr debugfs directory [ 1055.193589][T28639] netlink: 'syz.1.8415': attribute type 9 has an invalid length. [ 1055.232011][T28639] netlink: 'syz.1.8415': attribute type 11 has an invalid length. [ 1055.273522][T28639] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.8415'. [ 1055.339140][T28639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8415'. [ 1056.990251][T28676] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8424'. [ 1057.395619][T28684] netlink: 'syz.7.8426': attribute type 9 has an invalid length. [ 1057.403574][T28684] netlink: 'syz.7.8426': attribute type 11 has an invalid length. [ 1057.429455][T28683] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1057.453709][T28684] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.8426'. [ 1057.483458][T28684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8426'. [ 1058.160254][T28377] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1058.218416][ T6440] hid-generic 0003:0003:0000.009E: unknown main item tag 0x0 [ 1058.238276][T28377] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1058.253567][ T6440] hid-generic 0003:0003:0000.009E: unknown main item tag 0x0 [ 1058.280271][ T6440] hid-generic 0003:0003:0000.009E: unknown main item tag 0x0 [ 1058.308208][ T6440] hid-generic 0003:0003:0000.009E: unknown main item tag 0x0 [ 1058.368206][ T6440] hid-generic 0003:0003:0000.009E: unknown main item tag 0x0 [ 1058.381450][T28377] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1058.388547][ T6440] hid-generic 0003:0003:0000.009E: unknown main item tag 0x0 [ 1058.431783][ T6440] hid-generic 0003:0003:0000.009E: unknown main item tag 0x0 [ 1058.458565][ T6440] hid-generic 0003:0003:0000.009E: unknown main item tag 0x0 [ 1058.470887][T28377] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1058.494562][ T6440] hid-generic 0003:0003:0000.009E: unknown main item tag 0x0 [ 1058.527535][ T6440] hid-generic 0003:0003:0000.009E: unknown main item tag 0x0 [ 1058.557582][ T6440] hid-generic 0003:0003:0000.009E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1058.851443][T28713] fido_id[28713]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1059.109096][T28377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.200383][T28377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.421860][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.429110][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.486166][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.493431][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.689362][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.706032][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.759821][T28377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.854880][T28377] veth0_vlan: entered promiscuous mode [ 1059.872631][T28377] veth1_vlan: entered promiscuous mode [ 1059.984856][T28377] veth0_macvtap: entered promiscuous mode [ 1060.026237][T28377] veth1_macvtap: entered promiscuous mode [ 1060.098401][T28377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.122763][T28377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.406283][ T2128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.426942][ T2128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.482191][ T2128] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.505444][ T2128] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.593633][ T9] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1060.756868][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.777487][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1060.796670][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1060.807346][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.815919][ T9] usb 7-1: Product: syz [ 1060.820295][ T9] usb 7-1: Manufacturer: syz [ 1060.825592][ T9] usb 7-1: SerialNumber: syz [ 1060.843034][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.875294][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.942063][T19755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.964186][T19755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.064751][T28739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.101548][T28739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.150628][ T9] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1061.187542][ T9] usb 7-1: USB disconnect, device number 98 [ 1061.635108][ T9] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1061.814154][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1061.825194][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 72) [ 1061.873923][ T9] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.923612][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1061.936250][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1061.946718][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1061.957513][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 1061.969389][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33552, setting to 1024 [ 1062.015468][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1062.063141][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1062.114253][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.372415][ T9] usb 7-1: usb_control_msg returned -32 [ 1062.383463][ T9] usbtmc 7-1:16.0: can't read capabilities [ 1062.405487][ C0] usbtmc 7-1:16.0: overflow with length 1024, actual length is 1024 [ 1062.708482][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1062.764597][ T5926] usb 7-1: USB disconnect, device number 99 [ 1062.913545][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1062.946836][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.981935][ T10] usb 5-1: config 0 has no interfaces? [ 1063.003508][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1063.059090][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.095268][ T10] usb 5-1: config 0 descriptor?? [ 1063.601770][ T6440] usb 5-1: USB disconnect, device number 37 [ 1064.704306][T28858] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8468'. [ 1065.287163][ T5845] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1065.301816][ T5845] Bluetooth: hci2: Injecting HCI hardware error event [ 1065.311920][ T5153] Bluetooth: hci2: hardware error 0x00 [ 1065.493320][ T40] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1065.597180][T28884] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1065.638894][T28888] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1065.651702][T28888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1065.661513][T28888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1065.670925][T28888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1065.682223][T28888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1065.698008][ T40] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1065.715663][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.748567][ T40] usb 8-1: Product: syz [ 1065.758967][ T40] usb 8-1: Manufacturer: syz [ 1065.774737][ T40] usb 8-1: SerialNumber: syz [ 1066.041213][ T30] audit: type=1800 audit(1768102360.021:490): pid=28877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8474" name="file1" dev="tmpfs" ino=5960 res=0 errno=0 [ 1066.138186][T28904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8479'. [ 1066.167766][T28904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8479'. [ 1066.268907][ T40] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1066.297311][ T40] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1066.334988][ T40] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1066.380218][ T40] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1066.421080][ T40] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1066.455020][ T40] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1066.539765][T28890] chnl_net:caif_netlink_parms(): no params data found [ 1066.554179][ T40] usb 8-1: USB disconnect, device number 82 [ 1066.603351][T27854] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1066.793824][T27854] usb 5-1: Using ep0 maxpacket: 32 [ 1066.823976][T27854] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1066.864009][T27854] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1066.921525][T27854] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1066.966541][T27854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1067.000536][T27854] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1067.011307][T27854] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1067.058299][T27854] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1067.082819][T28890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.137085][T27854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.154909][T28890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.162232][T28890] bridge_slave_0: entered allmulticast mode [ 1067.186813][T27854] usb 5-1: config 0 descriptor?? [ 1067.221611][T28890] bridge_slave_0: entered promiscuous mode [ 1067.253261][T28890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.336110][T28890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.343738][T28890] bridge_slave_1: entered allmulticast mode [ 1067.351921][T28890] bridge_slave_1: entered promiscuous mode [ 1067.363573][ T5153] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1067.417430][T27854] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1067.476951][T27854] usb 5-1: USB disconnect, device number 38 [ 1067.503163][T27854] usblp0: removed [ 1067.507885][T28890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.537032][T28890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.654348][T28890] team0: Port device team_slave_0 added [ 1067.678834][T28890] team0: Port device team_slave_1 added [ 1067.763656][ T5153] Bluetooth: hci4: command tx timeout [ 1067.831199][T28890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.843857][T28890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.913950][T28890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.943710][T27854] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1067.976461][T28890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.999522][T28890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.047807][T28890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.123951][T27854] usb 5-1: Using ep0 maxpacket: 32 [ 1068.134188][T27854] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1068.145592][T27854] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1068.155580][T27854] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1068.183382][T27854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1068.248259][T27854] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1068.284398][T27854] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1068.392954][T27854] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1068.421921][T27854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.451581][T28890] hsr_slave_0: entered promiscuous mode [ 1068.480759][T28890] hsr_slave_1: entered promiscuous mode [ 1068.504826][T28890] debugfs: 'hsr0' already exists in 'hsr' [ 1068.517448][T28890] Cannot create hsr debugfs directory [ 1068.536530][T27854] usb 5-1: config 0 descriptor?? [ 1068.755071][T27854] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1068.958384][T27854] usb 5-1: USB disconnect, device number 39 [ 1068.981974][T27854] usblp0: removed [ 1069.853733][ T5153] Bluetooth: hci4: command tx timeout [ 1069.899447][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1070.083117][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1070.116913][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1070.145804][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.175640][ T9] usb 5-1: Product: syz [ 1070.180155][ T9] usb 5-1: Manufacturer: syz [ 1070.198121][ T9] usb 5-1: SerialNumber: syz [ 1070.244764][ T9] usb 5-1: config 0 descriptor?? [ 1070.272647][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1070.414733][T28890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1070.490689][T28890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1070.537560][T28890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1070.594063][T28890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1070.763349][ T6440] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1070.880547][ T9] gspca_sonixj: reg_w1 err -71 [ 1070.908466][ T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1070.926941][ T9] usb 5-1: USB disconnect, device number 40 [ 1070.938384][T28890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.954688][ T6440] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1070.983677][ T6440] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1071.009346][T28890] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.023308][ T6440] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1071.040638][ T6440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.055790][T19060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.063020][T19060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.083816][T28999] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1071.097358][ T6440] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1071.108635][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.115906][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.360609][T28890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.380452][ T5926] usb 6-1: USB disconnect, device number 31 [ 1071.512886][T28890] veth0_vlan: entered promiscuous mode [ 1071.586757][T28890] veth1_vlan: entered promiscuous mode [ 1071.659758][T28890] veth0_macvtap: entered promiscuous mode [ 1071.677133][T29021] loop6: detected capacity change from 0 to 7 [ 1071.688779][T29021] loop6: [ 1071.691811][T29021] loop6: partition table partially beyond EOD, truncated [ 1071.704390][T28890] veth1_macvtap: entered promiscuous mode [ 1071.799993][T28890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.848460][T28890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.923687][ T5153] Bluetooth: hci4: command tx timeout [ 1071.930572][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.945402][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.997785][ T1151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.020033][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.313355][ T7223] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1072.393391][T18058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.432617][T18058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.507413][T29034] syzkaller1: entered promiscuous mode [ 1072.549926][ T7223] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.567529][T29034] syzkaller1: entered allmulticast mode [ 1072.583472][ T7223] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1072.623831][T29040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8504'. [ 1072.638218][ T7223] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1072.657862][ T7223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1072.673417][ T7223] usb 5-1: SerialNumber: syz [ 1072.845115][ T5943] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1072.878535][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.921455][ T7223] usb 5-1: 0:2 : does not exist [ 1072.934736][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.017774][ T7223] usb 5-1: USB disconnect, device number 41 [ 1073.055986][ T5943] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1073.092303][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.120002][T13125] udevd[13125]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.162020][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.214490][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1073.267012][ T5943] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1073.318502][ T5943] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1073.339194][ T5943] usb 7-1: Manufacturer: syz [ 1073.366324][ T5943] usb 7-1: config 0 descriptor?? [ 1073.701380][T29065] loop6: detected capacity change from 0 to 7 [ 1073.715914][T29065] loop6: [ 1073.724028][T29065] loop6: partition table partially beyond EOD, truncated [ 1073.819964][ T5943] hid_parser_main: 8 callbacks suppressed [ 1073.819987][ T5943] appleir 0003:05AC:8243.009F: unknown main item tag 0x0 [ 1073.859353][ T5943] appleir 0003:05AC:8243.009F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1074.013313][ T5153] Bluetooth: hci4: command tx timeout [ 1074.030154][T19060] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.247986][T19060] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.406626][T19060] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.438620][ T7223] usb 7-1: USB disconnect, device number 100 [ 1074.628491][T19060] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.836909][T28888] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1074.858956][T28888] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1074.874628][T28888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1074.886352][T28888] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1074.894387][T28888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1075.115096][T19060] bridge_slave_1: left allmulticast mode [ 1075.120830][T19060] bridge_slave_1: left promiscuous mode [ 1075.168380][T19060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.201838][T19060] bridge_slave_0: left allmulticast mode [ 1075.216888][T19060] bridge_slave_0: left promiscuous mode [ 1075.227000][T19060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.547848][T19060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.573751][T19060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.585089][T19060] bond0 (unregistering): Released all slaves [ 1076.599618][T29099] syzkaller1: entered promiscuous mode [ 1076.605409][T29099] syzkaller1: entered allmulticast mode [ 1076.964410][ T5153] Bluetooth: hci2: command tx timeout [ 1077.069253][ T5943] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1077.245023][ T5943] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.289232][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1077.308534][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1077.353263][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1077.385541][T19060] hsr_slave_0: left promiscuous mode [ 1077.433358][ T5943] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1077.471937][T19060] hsr_slave_1: left promiscuous mode [ 1077.477627][ T5943] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1077.479867][T19060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1077.493355][T19060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.507557][T19060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1077.522996][T19060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.524646][ T5943] usb 3-1: Manufacturer: syz [ 1077.561774][ T5943] usb 3-1: config 0 descriptor?? [ 1077.645569][T19060] veth1_macvtap: left promiscuous mode [ 1077.662090][T19060] veth0_macvtap: left promiscuous mode [ 1077.681977][T19060] veth1_vlan: left promiscuous mode [ 1077.702134][T19060] veth0_vlan: left promiscuous mode [ 1077.943563][ T5943] rc_core: IR keymap rc-hauppauge not found [ 1077.950521][ T5943] Registered IR keymap rc-empty [ 1077.952321][T29161] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8532'. [ 1077.974522][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.016485][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.054919][ T5943] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1078.102413][ T5943] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input179 [ 1078.206764][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.253601][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.281892][T29172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8533'. [ 1078.292868][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.329485][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.375832][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.413417][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.444395][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.496813][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.546516][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.579001][ T5943] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1078.640729][ T5943] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1078.661077][ T5943] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1078.716704][ T5943] usb 3-1: USB disconnect, device number 95 [ 1078.809228][T29182] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1079.043700][ T5153] Bluetooth: hci2: command tx timeout [ 1079.093344][T28748] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1079.258579][T28748] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.273444][T28748] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1079.313413][T28748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.365866][T28748] usb 7-1: config 0 descriptor?? [ 1079.398686][T28748] pwc: Askey VC010 type 2 USB webcam detected. [ 1079.621731][T29201] loop6: detected capacity change from 0 to 3664 [ 1079.640217][T13125] buffer_io_error: 27 callbacks suppressed [ 1079.640235][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.655509][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.663639][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.671807][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.680175][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.688562][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.720659][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.749626][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.768119][T13125] ldm_validate_partition_table(): Disk read failed. [ 1079.783289][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.794009][T13125] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.799883][T28748] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1079.822311][T28748] pwc: recv_control_msg error -32 req 02 val 2700 [ 1079.841140][T28748] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1079.844053][T13125] Dev loop6: unable to read RDB block 0 [ 1079.870514][T13125] loop6: unable to read partition table [ 1079.889307][T28748] pwc: recv_control_msg error -32 req 04 val 1000 [ 1079.897378][T29201] ldm_validate_partition_table(): Disk read failed. [ 1079.915295][T28748] pwc: recv_control_msg error -32 req 04 val 1300 [ 1079.930021][T29201] Dev loop6: unable to read RDB block 0 [ 1079.953565][T29201] loop6: unable to read partition table [ 1079.993889][T29201] loop_reread_partitions: partition scan of loop6 (3„ ¾‚”˜) failed (rc=-5) [ 1080.125988][T28748] pwc: recv_control_msg error -71 req 02 val 2000 [ 1080.133028][T28748] pwc: recv_control_msg error -71 req 02 val 2100 [ 1080.152066][T28748] pwc: recv_control_msg error -71 req 04 val 1500 [ 1080.161041][T28748] pwc: recv_control_msg error -71 req 02 val 2500 [ 1080.168348][T28748] pwc: recv_control_msg error -71 req 02 val 2400 [ 1080.202745][T28748] pwc: recv_control_msg error -71 req 02 val 2600 [ 1080.223811][T28748] pwc: recv_control_msg error -71 req 02 val 2900 [ 1080.260722][T28748] pwc: recv_control_msg error -71 req 02 val 2800 [ 1080.291488][T28748] pwc: recv_control_msg error -71 req 04 val 1100 [ 1080.313739][T28748] pwc: recv_control_msg error -71 req 04 val 1200 [ 1080.349149][T28748] pwc: Registered as video103. [ 1080.372024][T28748] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input180 [ 1080.448057][T28748] usb 7-1: USB disconnect, device number 101 [ 1080.590661][ T5937] udevd[5937]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1080.764324][T19060] team0 (unregistering): Port device team_slave_1 removed [ 1080.980396][T19060] team0 (unregistering): Port device team_slave_0 removed [ 1081.123571][ T5153] Bluetooth: hci2: command tx timeout [ 1081.684066][ T5943] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1081.873479][ T5943] usb 8-1: Using ep0 maxpacket: 32 [ 1081.880399][ T5943] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1081.889872][ T5943] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.919210][ T5943] usb 8-1: config 0 descriptor?? [ 1081.938893][ T5943] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1082.497808][T29096] chnl_net:caif_netlink_parms(): no params data found [ 1083.042323][T29096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.073564][T29096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.187584][T29096] bridge_slave_0: entered allmulticast mode [ 1083.196188][T29096] bridge_slave_0: entered promiscuous mode [ 1083.204035][ T5153] Bluetooth: hci2: command tx timeout [ 1083.214839][T29096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.222180][T29096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.230066][T29096] bridge_slave_1: entered allmulticast mode [ 1083.238550][T29096] bridge_slave_1: entered promiscuous mode [ 1083.354727][T29096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.391082][T29096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.567483][T29273] syzkaller1: entered promiscuous mode [ 1083.579188][T29273] syzkaller1: entered allmulticast mode [ 1083.595181][T29096] team0: Port device team_slave_0 added [ 1083.618776][T29096] team0: Port device team_slave_1 added [ 1083.658436][ T5943] gspca_sunplus: reg_w_riv err -71 [ 1083.664075][ T5943] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 1083.704626][ T5943] usb 8-1: USB disconnect, device number 83 [ 1083.875636][T29096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.893687][T29096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.943398][T29096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.979325][T29096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.007467][T29096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.077719][T29096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.263740][T29287] loop6: detected capacity change from 0 to 2640 [ 1084.281237][T29287] ldm_validate_partition_table(): Disk read failed. [ 1084.304144][T29096] hsr_slave_0: entered promiscuous mode [ 1084.310990][T29287] Dev loop6: unable to read RDB block 0 [ 1084.317577][T29096] hsr_slave_1: entered promiscuous mode [ 1084.343529][T29287] loop6: unable to read partition table [ 1084.349522][T29287] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1084.359446][T29096] debugfs: 'hsr0' already exists in 'hsr' [ 1084.382084][T29096] Cannot create hsr debugfs directory [ 1084.645072][T29291] buffer_io_error: 1071 callbacks suppressed [ 1084.645095][T29291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.677541][T29291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.691442][T29291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.714231][T29291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.732088][T29291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.770814][T29291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.798024][T29291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.820367][T29291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.846040][T29291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1084.871187][T29291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.325313][T29309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8562'. [ 1085.574803][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f9ce400: rx timeout, send abort [ 1086.558623][T29336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1086.742230][T29096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1086.895150][T29096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1086.963900][T29096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1087.036099][T29096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1087.128594][T29350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8573'. [ 1087.527070][T29096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.597455][T29096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.631383][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.638659][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.692835][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.700116][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.979073][T29096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.124585][T29096] veth0_vlan: entered promiscuous mode [ 1088.148125][T29096] veth1_vlan: entered promiscuous mode [ 1088.199506][T29096] veth0_macvtap: entered promiscuous mode [ 1088.216317][T29096] veth1_macvtap: entered promiscuous mode [ 1088.271002][T29096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.293861][ T5943] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1088.336973][T29096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.380667][ T3496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.411343][ T3496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.446792][ T3496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.475789][ T3496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.494601][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 1088.530683][ T5943] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1088.559625][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.615728][ T5943] usb 5-1: Product: syz [ 1088.634151][ T7223] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1088.635586][ T5943] usb 5-1: Manufacturer: syz [ 1088.663568][ T5943] usb 5-1: SerialNumber: syz [ 1088.679122][ T5943] usb 5-1: config 0 descriptor?? [ 1088.697235][ T5943] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1088.781443][T19758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.814396][T19758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.837812][ T7223] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.877671][ T7223] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1088.906098][ T7223] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1088.933611][ T7223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.941696][ T7223] usb 3-1: Product: syz [ 1088.953447][ T7223] usb 3-1: Manufacturer: syz [ 1088.958109][ T7223] usb 3-1: SerialNumber: syz [ 1088.968492][T28214] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1089.003132][ T7223] cdc_mbim 3-1:1.0: skipping garbage [ 1089.024928][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.032826][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.125595][T28214] usb 8-1: Using ep0 maxpacket: 16 [ 1089.142961][T28214] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1089.163347][T28214] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1089.215041][T28214] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.227295][T29396] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1089.253305][T28214] usb 8-1: Product: syz [ 1089.257582][T28214] usb 8-1: Manufacturer: syz [ 1089.288070][T28214] usb 8-1: SerialNumber: syz [ 1089.336792][T28214] usb 8-1: config 0 descriptor?? [ 1089.379311][T28214] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1089.403328][T28214] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1089.630895][T28888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1089.644994][T28888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1089.654397][T28888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1089.662639][T28888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1089.672375][T28888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1089.904533][T29396] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1089.912507][ T7223] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 1089.928530][ T7223] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 1089.963714][ T5926] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1089.978562][T28214] em28xx 8-1:0.0: chip ID is em2874 [ 1089.984132][ T7223] wwan wwan0: port wwan0mbim0 attached [ 1090.151425][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 1090.184418][ T5926] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1090.194721][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.202856][ T5926] usb 1-1: Product: syz [ 1090.233687][ T5926] usb 1-1: Manufacturer: syz [ 1090.238437][ T5926] usb 1-1: SerialNumber: syz [ 1090.260937][ T75] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1090.271183][ T5926] usb 1-1: config 0 descriptor?? [ 1090.322788][ T5943] gspca_ov534_9: reg_r err -71 [ 1090.412394][ T75] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1090.443017][ T75] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1090.506606][ T5926] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1090.613566][ T5943] gspca_ov534_9: Unknown sensor 0000 [ 1090.613671][ T5943] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1090.630708][ T5943] usb 5-1: USB disconnect, device number 42 [ 1090.922575][ T5926] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1090.935124][ T75] bond0 (unregistering): Released all slaves [ 1090.952206][ T5926] usb 1-1: USB disconnect, device number 94 [ 1091.019379][T28214] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1091.054954][T28214] em28xx 8-1:0.0: board has no eeprom [ 1091.196890][T28214] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1091.207244][T28214] em28xx 8-1:0.0: dvb set to bulk mode. [ 1091.212928][ T5943] em28xx 8-1:0.0: Binding DVB extension [ 1091.230787][T28214] usb 8-1: USB disconnect, device number 84 [ 1091.264816][T28214] em28xx 8-1:0.0: Disconnecting em28xx [ 1091.373858][ T5943] em28xx 8-1:0.0: Registering input extension [ 1091.663327][ T5943] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1091.669933][ T5943] Registered IR keymap rc-empty [ 1091.711761][ T5943] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1091.741472][ T5943] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input181 [ 1091.764417][T28888] Bluetooth: hci1: command tx timeout [ 1091.801858][ T5943] em28xx 8-1:0.0: Input extension successfully initialized [ 1091.839022][T28214] em28xx 8-1:0.0: Closing input extension [ 1091.989342][T28214] em28xx 8-1:0.0: Freeing device [ 1092.053057][ T75] bond1 (unregistering): Released all slaves [ 1092.319969][ T75] bond2 (unregistering): Released all slaves [ 1092.323312][ C0] hrtimer: interrupt took 217824 ns [ 1092.522762][ T75] bond3 (unregistering): Released all slaves [ 1092.538528][ T75] bond4 (unregistering): (slave lo): Releasing backup interface [ 1092.546823][ T75] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1092.559664][ T75] bond4 (unregistering): Released all slaves [ 1092.615833][ T75] bond5 (unregistering): Released all slaves [ 1092.806627][ T75] bond6 (unregistering): Released all slaves [ 1092.820890][ T75] bond7 (unregistering): Released all slaves [ 1092.850502][ T7223] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 16:1a:f4:d4:58:ae [ 1092.908714][ T7223] usb 3-1: USB disconnect, device number 96 [ 1092.932117][ T7223] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 1093.095761][ T7223] wwan wwan0: port wwan0mbim0 disconnected [ 1093.339880][T29466] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.8598'. [ 1093.385416][T29466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8598'. [ 1093.749198][ T75] hsr_slave_0: left promiscuous mode [ 1093.776314][ T75] hsr_slave_1: left promiscuous mode [ 1093.844436][T28888] Bluetooth: hci1: command tx timeout [ 1095.798108][T29413] chnl_net:caif_netlink_parms(): no params data found [ 1095.923408][T28888] Bluetooth: hci1: command tx timeout [ 1096.184219][T29413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.191649][T29413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.199097][T29413] bridge_slave_0: entered allmulticast mode [ 1096.230873][T29413] bridge_slave_0: entered promiscuous mode [ 1096.242833][T29413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.251409][T29413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.258785][T29413] bridge_slave_1: entered allmulticast mode [ 1096.268125][T29413] bridge_slave_1: entered promiscuous mode [ 1096.345370][T29413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.356552][ T5926] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1096.370010][T29413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.467939][T29413] team0: Port device team_slave_0 added [ 1096.483084][T29413] team0: Port device team_slave_1 added [ 1096.523295][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 1096.534713][ T5926] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1096.548417][ T5926] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1096.565487][T29413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.569267][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1096.582813][T29413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.609236][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1096.609271][ T5926] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1096.609305][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1096.609354][ T5926] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1096.609379][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.669081][ T5926] usb 3-1: config 0 descriptor?? [ 1096.689413][T29413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.705113][T29413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.712218][T29413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.739507][T29413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.901488][ T5926] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 97 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1096.937755][ T5926] usb 3-1: USB disconnect, device number 97 [ 1096.945148][T29413] hsr_slave_0: entered promiscuous mode [ 1096.964046][ T5926] usblp0: removed [ 1096.970198][T29413] hsr_slave_1: entered promiscuous mode [ 1096.993998][T29413] debugfs: 'hsr0' already exists in 'hsr' [ 1097.009939][T29413] Cannot create hsr debugfs directory [ 1097.434438][ T5926] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1097.603933][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 1097.612583][T28888] Bluetooth: hci0: command 0x0406 tx timeout [ 1097.633418][ T5926] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1097.651538][ T5926] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1097.677762][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1097.721769][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1097.743315][ T5926] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1097.765743][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1097.779096][ T5926] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1097.813735][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.847899][ T5926] usb 3-1: config 0 descriptor?? [ 1098.003389][ T5153] Bluetooth: hci1: command tx timeout [ 1098.096858][ T5926] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 98 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1098.213468][T28748] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1098.255391][T29607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8628'. [ 1098.285382][ T5926] usb 3-1: USB disconnect, device number 98 [ 1098.321597][ T5926] usblp0: removed [ 1098.375443][T29610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8629'. [ 1098.402379][T28748] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1098.424348][T28748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.451230][T28748] usb 1-1: Product: syz [ 1098.465883][T28748] usb 1-1: Manufacturer: syz [ 1098.478388][T28748] usb 1-1: SerialNumber: syz [ 1098.615490][T29413] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1098.629880][T29413] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1098.670356][T29413] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1098.716992][T29413] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1098.954416][T28748] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1098.990528][T29413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.006390][T28748] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1099.078828][T29413] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.106358][ T2128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.113675][ T2128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.164420][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.171626][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.334489][T29413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.476193][T29413] veth0_vlan: entered promiscuous mode [ 1099.506239][T29413] veth1_vlan: entered promiscuous mode [ 1099.558517][T29413] veth0_macvtap: entered promiscuous mode [ 1099.579709][T29413] veth1_macvtap: entered promiscuous mode [ 1099.619208][T29413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.642375][T29413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.678175][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.692915][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.704748][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.721314][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.873141][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.901284][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.945190][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.957139][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.055674][T28748] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1100.104267][T28748] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1100.144769][T28748] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1100.181434][T28748] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1100.202983][T28748] usb 1-1: USB disconnect, device number 95 [ 1100.851863][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.025864][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.189375][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.460652][T29668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8642'. [ 1101.480707][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.594813][T28888] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1101.609000][T28888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1101.618584][T28888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1101.627459][T28888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1101.649727][T28888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1102.058816][ T61] bridge_slave_1: left allmulticast mode [ 1102.066022][ T61] bridge_slave_1: left promiscuous mode [ 1102.071964][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.084709][ T61] bridge_slave_0: left allmulticast mode [ 1102.090556][ T61] bridge_slave_0: left promiscuous mode [ 1102.097044][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.886706][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.899091][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.915439][ T61] bond0 (unregistering): Released all slaves [ 1103.561911][T29670] chnl_net:caif_netlink_parms(): no params data found [ 1103.687213][ T61] hsr_slave_0: left promiscuous mode [ 1103.754793][ T61] hsr_slave_1: left promiscuous mode [ 1103.761777][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.773869][ T5153] Bluetooth: hci4: command tx timeout [ 1103.813469][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.838454][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.876407][T29696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8653'. [ 1103.932761][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.051811][T29699] loop6: detected capacity change from 0 to 2640 [ 1104.107977][ T61] veth1_macvtap: left promiscuous mode [ 1104.127018][ T61] veth0_macvtap: left promiscuous mode [ 1104.132883][T29699] buffer_io_error: 974 callbacks suppressed [ 1104.132901][T29699] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.162827][ T61] veth1_vlan: left promiscuous mode [ 1104.185872][ T61] veth0_vlan: left promiscuous mode [ 1104.197156][T29703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.237706][T29699] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.261609][T29705] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.279287][T29703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.288005][T29699] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.303775][T29705] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.328453][T29703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.352460][T29699] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.376999][T29703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.408078][T29699] ldm_validate_partition_table(): Disk read failed. [ 1104.425329][T29699] Dev loop6: unable to read RDB block 0 [ 1104.468900][T29699] loop6: unable to read partition table [ 1104.514598][T29699] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1105.017317][ T5203] ldm_validate_partition_table(): Disk read failed. [ 1105.063893][ T5203] Dev loop6: unable to read RDB block 0 [ 1105.069869][ T5203] loop6: unable to read partition table [ 1105.843929][ T5153] Bluetooth: hci4: command tx timeout [ 1105.984865][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1106.185852][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1107.353842][ T5926] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1107.419875][T29670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.443416][T29670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.452836][T29670] bridge_slave_0: entered allmulticast mode [ 1107.472992][T29670] bridge_slave_0: entered promiscuous mode [ 1107.489347][T29670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.508496][T29670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.524207][T29670] bridge_slave_1: entered allmulticast mode [ 1107.543091][T29670] bridge_slave_1: entered promiscuous mode [ 1107.573373][ T5926] usb 9-1: Using ep0 maxpacket: 16 [ 1107.588244][ T5926] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.630186][ T5926] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1107.643911][ T5926] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1107.659301][ T5926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.693889][ T5926] usb 9-1: config 0 descriptor?? [ 1107.723111][T29670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.738121][T29670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.918619][T29670] team0: Port device team_slave_0 added [ 1107.924913][ T5153] Bluetooth: hci4: command tx timeout [ 1107.939929][T29670] team0: Port device team_slave_1 added [ 1108.028551][T29670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.036062][T29670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.084351][T29670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.114522][T29670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.132147][T29670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.163812][ T5926] nzxt-smart2 0003:1E71:2009.00A0: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 1108.213416][T29670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.450616][T29670] hsr_slave_0: entered promiscuous mode [ 1108.458218][T29670] hsr_slave_1: entered promiscuous mode [ 1108.474475][T29670] debugfs: 'hsr0' already exists in 'hsr' [ 1108.480321][T29670] Cannot create hsr debugfs directory [ 1108.585998][ T5926] usb 9-1: USB disconnect, device number 6 [ 1109.554810][T29777] syzkaller1: entered promiscuous mode [ 1109.560371][T29777] syzkaller1: entered allmulticast mode [ 1109.586863][T29777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8676'. [ 1109.620561][T29670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1109.669673][T29670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1109.710339][T29670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1109.824134][T29670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1110.003897][ T5153] Bluetooth: hci4: command tx timeout [ 1110.058542][T29670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.097652][T29670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.118277][T19060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.125568][T19060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.201511][T19060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.208819][T19060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.402482][T29808] input: syz1 as /devices/virtual/input/input182 [ 1110.466165][T29670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.671122][T29670] veth0_vlan: entered promiscuous mode [ 1110.711449][T29670] veth1_vlan: entered promiscuous mode [ 1110.838690][T29670] veth0_macvtap: entered promiscuous mode [ 1110.875735][T29670] veth1_macvtap: entered promiscuous mode [ 1110.920115][T29670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.938027][T29670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.000639][T19754] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.024286][T19754] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.054356][T19754] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.104891][T19754] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.209961][T29824] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8689'. [ 1111.387918][T19754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.414245][T19754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.500069][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.542697][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.754972][T29845] loop9: detected capacity change from 0 to 7 [ 1111.763121][T29845] Dev loop9: unable to read RDB block 7 [ 1111.774264][T29845] loop9: unable to read partition table [ 1111.780396][T29845] loop9: partition table beyond EOD, truncated [ 1111.802624][T29842] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1111.831939][T29845] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1112.150110][T29857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8695'. [ 1112.320058][T29863] syzkaller1: entered promiscuous mode [ 1112.330842][T29863] syzkaller1: entered allmulticast mode [ 1112.863692][T28748] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1113.039436][T28748] usb 5-1: Using ep0 maxpacket: 32 [ 1113.090000][T28748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.144356][T28748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.189225][T28748] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1113.228980][T28748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.257181][T28748] usb 5-1: config 0 descriptor?? [ 1113.273307][ T5943] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1113.290546][T28748] hub 5-1:0.0: USB hub found [ 1113.341302][T29895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1113.463336][ T5943] usb 9-1: Using ep0 maxpacket: 32 [ 1113.481630][ T5943] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1113.497669][T28748] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1113.510949][ T5943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.529731][ T5943] usb 9-1: Product: syz [ 1113.538323][ T5943] usb 9-1: Manufacturer: syz [ 1113.548398][ T5943] usb 9-1: SerialNumber: syz [ 1113.561319][ T5943] usb 9-1: config 0 descriptor?? [ 1113.578606][ T5943] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1113.909088][T28748] hid-generic 0003:046D:C31C.00A1: unknown main item tag 0x0 [ 1113.961362][T28748] hid-generic 0003:046D:C31C.00A1: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 1114.919306][T29874] usb 5-1: reset high-speed USB device number 43 using dummy_hcd [ 1114.960076][T29951] input: syz0 as /devices/virtual/input/input183 [ 1115.025987][ T5943] gspca_ov534_9: sccb_write failed [ 1115.031837][T29953] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1115.038421][T29953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1115.057403][T29953] vhci_hcd vhci_hcd.0: Device attached [ 1115.231858][ T5943] gspca_ov534_9: reg_w failed -71 [ 1115.293350][ T40] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1115.343554][T28214] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1115.372920][T28748] usb 5-1: USB disconnect, device number 43 [ 1115.382432][T29874] usbhid 5-1:0.0: reset_resume error -19 [ 1115.483293][ T5943] gspca_ov534_9: Unknown sensor 0000 [ 1115.483395][ T5943] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1115.513402][T28214] usb 8-1: Using ep0 maxpacket: 16 [ 1115.531512][T28214] usb 8-1: too many configurations: 60, using maximum allowed: 8 [ 1115.561682][ T5943] usb 9-1: USB disconnect, device number 7 [ 1115.581970][T28214] usb 8-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1115.612270][T28214] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1115.629617][T28214] usb 8-1: Product: syz [ 1115.666076][T28214] usb 8-1: Manufacturer: syz [ 1115.670753][T28214] usb 8-1: SerialNumber: syz [ 1115.699050][T28214] usb 8-1: config 0 descriptor?? [ 1115.728447][T28214] pwc: Philips SPC 880NC USB webcam detected. [ 1115.941608][T29953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.982789][T29953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.043445][T29954] vhci_hcd: connection closed [ 1116.043771][ T6712] vhci_hcd vhci_hcd.7: stop threads [ 1116.044316][T28214] pwc: Warning: more than 1 configuration available. [ 1116.064521][ T6712] vhci_hcd vhci_hcd.7: release socket [ 1116.086213][ T6712] vhci_hcd vhci_hcd.7: disconnect device [ 1116.093147][T28214] pwc: Failed to set LED on/off time (-71) [ 1116.106408][T28214] pwc: send_video_command error -71 [ 1116.129047][T28214] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1116.155704][T28214] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1116.195847][T29988] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8727'. [ 1116.213679][T28214] usb 8-1: USB disconnect, device number 85 [ 1116.793172][T30005] loop4: detected capacity change from 0 to 7 [ 1116.818623][T13125] Dev loop4: unable to read RDB block 7 [ 1116.835169][T13125] loop4: unable to read partition table [ 1116.847948][T13125] loop4: partition table beyond EOD, truncated [ 1116.875617][T30005] Dev loop4: unable to read RDB block 7 [ 1116.935294][T30005] loop4: unable to read partition table [ 1116.954162][T30005] loop4: partition table beyond EOD, truncated [ 1117.003993][T30005] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1117.828769][T30035] kvm: Disabled LAPIC found during irq injection [ 1118.618820][T30057] syzkaller0: entered promiscuous mode [ 1119.095850][T30069] loop6: detected capacity change from 0 to 7 [ 1119.102790][T30069] Dev loop6: unable to read RDB block 7 [ 1119.108598][T30069] loop6: AHDI p1 p2 p4 [ 1119.112782][T30069] loop6: partition table partially beyond EOD, truncated [ 1119.176374][T30069] loop6: p1 start 926365495 is beyond EOD, truncated [ 1119.436629][T13125] udevd[13125]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1119.635548][T30083] kernel read not supported for file /file1 (pid: 30083 comm: syz.8.8750) [ 1119.669111][ T30] audit: type=1800 audit(1768102413.651:491): pid=30083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8750" name="file1" dev="mqueue" ino=154279 res=0 errno=0 [ 1120.257578][T30095] VFS: Lookup of 'binder0' in fuse fuse would have caused loop [ 1120.418200][ T5926] hid-generic 0000:0000:0003.00A2: unknown main item tag 0x0 [ 1120.453843][ T5926] hid-generic 0000:0000:0003.00A2: unknown main item tag 0x0 [ 1120.481748][ T5926] hid-generic 0000:0000:0003.00A2: unknown main item tag 0x0 [ 1120.520690][ T5926] hid-generic 0000:0000:0003.00A2: unknown main item tag 0x0 [ 1120.547552][ T5926] hid-generic 0000:0000:0003.00A2: unknown main item tag 0x0 [ 1120.578433][ T5926] hid-generic 0000:0000:0003.00A2: unknown main item tag 0x0 [ 1120.606998][ T5926] hid-generic 0000:0000:0003.00A2: unknown main item tag 0x0 [ 1120.631512][ T5926] hid-generic 0000:0000:0003.00A2: unknown main item tag 0x0 [ 1120.658740][ T5926] hid-generic 0000:0000:0003.00A2: unknown main item tag 0x0 [ 1120.682825][ T5926] hid-generic 0000:0000:0003.00A2: unknown main item tag 0x0 [ 1120.703553][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1120.734176][ T5926] hid-generic 0000:0000:0003.00A2: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1120.895696][ T9] usb 4-1: config 0 has no interfaces? [ 1120.911447][ T9] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1120.955585][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.024265][ T9] usb 4-1: config 0 descriptor?? [ 1121.128762][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.135778][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.417126][T28748] usb 4-1: USB disconnect, device number 43 [ 1121.940119][T30131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8761'. [ 1122.877850][T30161] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.8770'. [ 1122.917831][T30161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8770'. [ 1123.204235][ T5926] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1123.383326][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 1123.405611][ T5926] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1123.439818][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1123.464542][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1123.480065][ T5926] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1123.495032][ T5926] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1123.505827][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.707937][ T7223] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1123.730718][ T5926] usb 5-1: GET_CAPABILITIES returned 0 [ 1123.744469][ T5926] usbtmc 5-1:16.0: can't read capabilities [ 1123.779266][T30196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8779'. [ 1123.886368][ T7223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.907876][ T7223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.927508][ T7223] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1123.943800][ T7223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.944368][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1123.962924][T30163] usbtmc 5-1:16.0: Unable to send data, error -71 [ 1123.987286][ T7223] usb 1-1: config 0 descriptor?? [ 1124.039380][ T40] usb 5-1: USB disconnect, device number 44 [ 1124.172204][T30205] netlink: 'syz.3.8780': attribute type 10 has an invalid length. [ 1124.244661][T30205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.269082][T30205] team0: Port device bond0 added [ 1124.321516][T30210] team0: Port device bond0 removed [ 1124.376820][T30210] bridge_slave_0: left allmulticast mode [ 1124.399022][T30210] bridge_slave_0: left promiscuous mode [ 1124.421834][ T7223] cp2112 0003:10C4:EA90.00A3: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1124.433931][T30210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.472082][T30210] bridge_slave_1: left allmulticast mode [ 1124.483952][T30210] bridge_slave_1: left promiscuous mode [ 1124.501886][T30210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.536658][T30210] bond0: (slave bond_slave_0): Releasing backup interface [ 1124.600634][T30210] bond0: (slave bond_slave_1): Releasing backup interface [ 1124.609152][ T7223] cp2112 0003:10C4:EA90.00A3: Part Number: 0x82 Device Version: 0xFE [ 1124.710057][T30210] team0: Port device team_slave_0 removed [ 1124.762063][T30210] team0: Port device team_slave_1 removed [ 1124.769366][T30210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.797377][T30210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.836531][T30210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.863526][T30210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.926967][T30210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1125.225153][ T7223] cp2112 0003:10C4:EA90.00A3: error reading lock byte: -71 [ 1125.273162][ T7223] usb 1-1: USB disconnect, device number 96 [ 1125.627849][T30242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8788'. [ 1126.093528][ T7223] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1126.248394][ T5943] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1126.273706][ T7223] usb 4-1: Using ep0 maxpacket: 32 [ 1126.282867][ T7223] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1126.296557][ T7223] usb 4-1: config 0 has no interface number 0 [ 1126.309135][ T7223] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1126.336145][ T7223] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1126.354812][ T7223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.399187][ T7223] usb 4-1: Product: syz [ 1126.411135][ T7223] usb 4-1: Manufacturer: syz [ 1126.413796][ T5943] usb 9-1: Using ep0 maxpacket: 32 [ 1126.429115][ T7223] usb 4-1: SerialNumber: syz [ 1126.440556][ T5943] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1126.455277][ T7223] usb 4-1: config 0 descriptor?? [ 1126.466590][ T5943] usb 9-1: config 0 has no interface number 0 [ 1126.484764][T30254] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1126.496225][ T5943] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1126.520175][ T5943] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1126.543138][ T5943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.572050][ T5943] usb 9-1: Product: syz [ 1126.582591][ T5943] usb 9-1: Manufacturer: syz [ 1126.597808][ T5943] usb 9-1: SerialNumber: syz [ 1126.617075][ T5943] usb 9-1: config 0 descriptor?? [ 1126.639205][ T5943] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1126.656480][ T5943] em28xx 9-1:0.89: Video interface 89 found: bulk [ 1126.725247][T30254] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1127.253986][ T5943] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 1127.489153][T30294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8800'. [ 1127.919097][T30309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8802'. [ 1128.077717][ T5943] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1128.119089][ T5943] em28xx 9-1:0.89: board has no eeprom [ 1128.159589][ T7223] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1128.197188][ T5943] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 1128.204932][ T7223] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1128.226559][ T5943] em28xx 9-1:0.89: analog set to bulk mode. [ 1128.236898][ T7223] usb 4-1: USB disconnect, device number 44 [ 1128.258094][ T10] em28xx 9-1:0.89: Registering V4L2 extension [ 1128.297616][ T5943] usb 9-1: USB disconnect, device number 8 [ 1128.338438][ T5943] em28xx 9-1:0.89: Disconnecting em28xx [ 1128.448878][ T10] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 1128.476160][ T10] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 1128.513893][ T10] em28xx 9-1:0.89: No AC97 audio processor [ 1128.625593][ T10] usb 9-1: Decoder not found [ 1128.639631][ T10] em28xx 9-1:0.89: failed to create media graph [ 1128.686655][ T10] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 1128.712404][ T10] em28xx 9-1:0.89: Registering snapshot button... [ 1128.736552][T30328] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8807'. [ 1128.763737][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input184 [ 1128.816751][ T10] em28xx 9-1:0.89: Remote control support is not available for this card. [ 1128.861437][ T5943] em28xx 9-1:0.89: Closing input extension [ 1128.876720][ T5943] em28xx 9-1:0.89: Deregistering snapshot button [ 1128.962814][ T5943] em28xx 9-1:0.89: Freeing device [ 1129.424411][T30346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8812'. [ 1129.489987][T30346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8812'. [ 1130.483775][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1130.677631][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1130.698044][ T24] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1130.714769][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.742504][ T24] usb 5-1: Product: syz [ 1130.759344][ T24] usb 5-1: Manufacturer: syz [ 1130.773353][ T24] usb 5-1: SerialNumber: syz [ 1130.802952][ T24] usb 5-1: config 0 descriptor?? [ 1130.845347][ T24] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1131.762351][T30429] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8837'. [ 1131.789488][T30429] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8837'. [ 1132.005315][T30432] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1132.264821][ T24] gspca_topro: Sensor cx0342 [ 1132.382242][ T30] audit: type=1326 audit(1768102426.361:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30440 comm="syz.8.8841" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x0 [ 1132.467324][T30449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8840'. [ 1132.480241][T30449] netlink: 'syz.3.8840': attribute type 11 has an invalid length. [ 1132.508836][ T24] usb 5-1: USB disconnect, device number 45 [ 1132.515974][T30449] netlink: 'syz.3.8840': attribute type 13 has an invalid length. [ 1133.065764][T28888] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1133.077168][T28888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1133.088750][T28888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1133.100319][T28888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1133.108453][T28888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1133.685171][T30467] chnl_net:caif_netlink_parms(): no params data found [ 1133.855569][T30492] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8852'. [ 1133.880003][T30492] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8852'. [ 1134.396728][T30467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.419573][T30467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.435284][T30467] bridge_slave_0: entered allmulticast mode [ 1134.495155][T30467] bridge_slave_0: entered promiscuous mode [ 1134.525332][T30467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.543568][T30467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.550958][T30467] bridge_slave_1: entered allmulticast mode [ 1134.582797][T30467] bridge_slave_1: entered promiscuous mode [ 1134.690519][T30467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.722258][T30467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.918760][T30467] team0: Port device team_slave_0 added [ 1134.948994][T30467] team0: Port device team_slave_1 added [ 1135.009926][T30467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.018390][T30467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.055352][T30467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.069866][T30467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.094752][T30467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.139776][T30467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.150556][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1135.173329][T16529] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1135.203587][ T5153] Bluetooth: hci3: command tx timeout [ 1135.231582][T30467] hsr_slave_0: entered promiscuous mode [ 1135.255843][T30467] hsr_slave_1: entered promiscuous mode [ 1135.265998][T30467] debugfs: 'hsr0' already exists in 'hsr' [ 1135.271882][T30467] Cannot create hsr debugfs directory [ 1135.297209][T30534] [ 1135.299626][T30534] ===================================================== [ 1135.306589][T30534] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1135.314131][T30534] syzkaller #0 Tainted: G L [ 1135.320157][T30534] ----------------------------------------------------- [ 1135.327125][T30534] syz.8.8860/30534 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1135.334881][T30534] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1135.343659][T30534] [ 1135.343659][T30534] and this task is already holding: [ 1135.351065][T30534] ffff888078e27320 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1135.359845][T30534] which would create a new lock dependency: [ 1135.365778][T30534] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1135.373415][T30534] [ 1135.373415][T30534] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1135.382920][T30534] (&dev->event_lock#2){..-.}-{3:3} [ 1135.382969][T30534] [ 1135.382969][T30534] ... which became SOFTIRQ-irq-safe at: [ 1135.395961][T30534] lock_acquire+0x107/0x340 [ 1135.400601][T30534] _raw_spin_lock_irqsave+0x40/0x60 [ 1135.405963][T30534] input_event+0x76/0xe0 [ 1135.410517][T30534] hidinput_report_event+0xa1/0x100 [ 1135.415864][T30534] hid_report_raw_event+0x148b/0x1720 [ 1135.421369][T30534] hid_input_report+0x44b/0x580 [ 1135.426357][T30534] hid_irq_in+0x47e/0x6d0 [ 1135.430817][T30534] __usb_hcd_giveback_urb+0x376/0x540 [ 1135.436328][T30534] dummy_timer+0x85f/0x45b0 [ 1135.440971][T30534] __hrtimer_run_queues+0x51c/0xc30 [ 1135.446307][T30534] hrtimer_run_softirq+0x187/0x2b0 [ 1135.451644][T30534] handle_softirqs+0x22b/0x7c0 [ 1135.456544][T30534] __irq_exit_rcu+0x60/0x150 [ 1135.461361][T30534] irq_exit_rcu+0x9/0x30 [ 1135.465830][T30534] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1135.471602][T30534] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1135.477712][T30534] bus_notify+0xa9/0x180 [ 1135.482099][T30534] driver_bound+0x210/0x2e0 [ 1135.486740][T30534] really_probe+0x745/0xad0 [ 1135.491405][T30534] __driver_probe_device+0x18c/0x320 [ 1135.497347][T30534] driver_probe_device+0x4f/0x240 [ 1135.502508][T30534] __device_attach_driver+0x279/0x430 [ 1135.508013][T30534] bus_for_each_drv+0x251/0x2e0 [ 1135.513009][T30534] __device_attach+0x2b8/0x430 [ 1135.518086][T30534] device_initial_probe+0xa1/0xd0 [ 1135.523255][T30534] bus_probe_device+0x12a/0x220 [ 1135.528246][T30534] device_add+0x7b6/0xb80 [ 1135.532709][T30534] hid_add_device+0x272/0x3e0 [ 1135.537692][T30534] usbhid_probe+0xe13/0x12c0 [ 1135.542416][T30534] usb_probe_interface+0x668/0xc90 [ 1135.547662][T30534] really_probe+0x26d/0xad0 [ 1135.552299][T30534] __driver_probe_device+0x18c/0x320 [ 1135.557713][T30534] driver_probe_device+0x4f/0x240 [ 1135.562866][T30534] __device_attach_driver+0x279/0x430 [ 1135.568380][T30534] bus_for_each_drv+0x251/0x2e0 [ 1135.573373][T30534] __device_attach+0x2b8/0x430 [ 1135.578272][T30534] device_initial_probe+0xa1/0xd0 [ 1135.583442][T30534] bus_probe_device+0x12a/0x220 [ 1135.588429][T30534] device_add+0x7b6/0xb80 [ 1135.592880][T30534] usb_set_configuration+0x1a87/0x2110 [ 1135.598502][T30534] usb_generic_driver_probe+0x8d/0x150 [ 1135.604157][T30534] usb_probe_device+0x1c4/0x3c0 [ 1135.609143][T30534] really_probe+0x26d/0xad0 [ 1135.613778][T30534] __driver_probe_device+0x18c/0x320 [ 1135.619184][T30534] driver_probe_device+0x4f/0x240 [ 1135.624325][T30534] __device_attach_driver+0x279/0x430 [ 1135.629831][T30534] bus_for_each_drv+0x251/0x2e0 [ 1135.634845][T30534] __device_attach+0x2b8/0x430 [ 1135.639732][T30534] device_initial_probe+0xa1/0xd0 [ 1135.644894][T30534] bus_probe_device+0x12a/0x220 [ 1135.649863][T30534] device_add+0x7b6/0xb80 [ 1135.654324][T30534] usb_new_device+0xa39/0x1720 [ 1135.659193][T30534] hub_event+0x29b1/0x4ef0 [ 1135.663723][T30534] process_scheduled_works+0xad1/0x1770 [ 1135.669387][T30534] worker_thread+0x8a0/0xda0 [ 1135.674183][T30534] kthread+0x711/0x8a0 [ 1135.678365][T30534] ret_from_fork+0x510/0xa50 [ 1135.683101][T30534] ret_from_fork_asm+0x1a/0x30 [ 1135.688011][T30534] [ 1135.688011][T30534] to a SOFTIRQ-irq-unsafe lock: [ 1135.695061][T30534] (tasklist_lock){.+.+}-{3:3} [ 1135.695089][T30534] [ 1135.695089][T30534] ... which became SOFTIRQ-irq-unsafe at: [ 1135.707773][T30534] ... [ 1135.707788][T30534] lock_acquire+0x107/0x340 [ 1135.715024][T30534] _raw_read_lock+0x36/0x50 [ 1135.719639][T30534] __do_wait+0xde/0x740 [ 1135.723913][T30534] do_wait+0x1e8/0x4f0 [ 1135.728131][T30534] kernel_wait+0xab/0x170 [ 1135.732605][T30534] call_usermodehelper_exec_work+0xbe/0x230 [ 1135.738610][T30534] process_scheduled_works+0xad1/0x1770 [ 1135.744263][T30534] worker_thread+0x8a0/0xda0 [ 1135.748953][T30534] kthread+0x711/0x8a0 [ 1135.753147][T30534] ret_from_fork+0x510/0xa50 [ 1135.757895][T30534] ret_from_fork_asm+0x1a/0x30 [ 1135.762924][T30534] [ 1135.762924][T30534] other info that might help us debug this: [ 1135.762924][T30534] [ 1135.773206][T30534] Chain exists of: [ 1135.773206][T30534] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1135.773206][T30534] [ 1135.786302][T30534] Possible interrupt unsafe locking scenario: [ 1135.786302][T30534] [ 1135.794661][T30534] CPU0 CPU1 [ 1135.800129][T30534] ---- ---- [ 1135.805525][T30534] lock(tasklist_lock); [ 1135.809784][T30534] local_irq_disable(); [ 1135.816561][T30534] lock(&dev->event_lock#2); [ 1135.823775][T30534] lock(&f_owner->lock); [ 1135.830636][T30534] [ 1135.834108][T30534] lock(&dev->event_lock#2); [ 1135.839046][T30534] [ 1135.839046][T30534] *** DEADLOCK *** [ 1135.839046][T30534] [ 1135.847301][T30534] 2 locks held by syz.8.8860/30534: [ 1135.852504][T30534] #0: ffff88804f8b5ba0 (sk_lock-AF_INET){+.+.}-{0:0}, at: do_tcp_setsockopt+0x85e/0x1f40 [ 1135.862469][T30534] #1: ffff888078e27320 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1135.871656][T30534] [ 1135.871656][T30534] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1135.882108][T30534] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1135.887970][T30534] IN-SOFTIRQ-W at: [ 1135.892160][T30534] lock_acquire+0x107/0x340 [ 1135.898712][T30534] _raw_spin_lock_irqsave+0x40/0x60 [ 1135.905939][T30534] input_event+0x76/0xe0 [ 1135.912212][T30534] hidinput_report_event+0xa1/0x100 [ 1135.919487][T30534] hid_report_raw_event+0x148b/0x1720 [ 1135.926888][T30534] hid_input_report+0x44b/0x580 [ 1135.933775][T30534] hid_irq_in+0x47e/0x6d0 [ 1135.940157][T30534] __usb_hcd_giveback_urb+0x376/0x540 [ 1135.947561][T30534] dummy_timer+0x85f/0x45b0 [ 1135.954108][T30534] __hrtimer_run_queues+0x51c/0xc30 [ 1135.961335][T30534] hrtimer_run_softirq+0x187/0x2b0 [ 1135.968464][T30534] handle_softirqs+0x22b/0x7c0 [ 1135.975344][T30534] __irq_exit_rcu+0x60/0x150 [ 1135.981961][T30534] irq_exit_rcu+0x9/0x30 [ 1135.988211][T30534] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1135.995916][T30534] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1136.003928][T30534] bus_notify+0xa9/0x180 [ 1136.010230][T30534] driver_bound+0x210/0x2e0 [ 1136.016818][T30534] really_probe+0x745/0xad0 [ 1136.023515][T30534] __driver_probe_device+0x18c/0x320 [ 1136.030837][T30534] driver_probe_device+0x4f/0x240 [ 1136.037897][T30534] __device_attach_driver+0x279/0x430 [ 1136.045284][T30534] bus_for_each_drv+0x251/0x2e0 [ 1136.052162][T30534] __device_attach+0x2b8/0x430 [ 1136.058971][T30534] device_initial_probe+0xa1/0xd0 [ 1136.066035][T30534] bus_probe_device+0x12a/0x220 [ 1136.072912][T30534] device_add+0x7b6/0xb80 [ 1136.079282][T30534] hid_add_device+0x272/0x3e0 [ 1136.086030][T30534] usbhid_probe+0xe13/0x12c0 [ 1136.092706][T30534] usb_probe_interface+0x668/0xc90 [ 1136.099838][T30534] really_probe+0x26d/0xad0 [ 1136.106371][T30534] __driver_probe_device+0x18c/0x320 [ 1136.113721][T30534] driver_probe_device+0x4f/0x240 [ 1136.120788][T30534] __device_attach_driver+0x279/0x430 [ 1136.128192][T30534] bus_for_each_drv+0x251/0x2e0 [ 1136.135099][T30534] __device_attach+0x2b8/0x430 [ 1136.141904][T30534] device_initial_probe+0xa1/0xd0 [ 1136.148977][T30534] bus_probe_device+0x12a/0x220 [ 1136.155882][T30534] device_add+0x7b6/0xb80 [ 1136.162252][T30534] usb_set_configuration+0x1a87/0x2110 [ 1136.169759][T30534] usb_generic_driver_probe+0x8d/0x150 [ 1136.177253][T30534] usb_probe_device+0x1c4/0x3c0 [ 1136.184127][T30534] really_probe+0x26d/0xad0 [ 1136.190650][T30534] __driver_probe_device+0x18c/0x320 [ 1136.197953][T30534] driver_probe_device+0x4f/0x240 [ 1136.205000][T30534] __device_attach_driver+0x279/0x430 [ 1136.212409][T30534] bus_for_each_drv+0x251/0x2e0 [ 1136.219298][T30534] __device_attach+0x2b8/0x430 [ 1136.226114][T30534] device_initial_probe+0xa1/0xd0 [ 1136.233171][T30534] bus_probe_device+0x12a/0x220 [ 1136.240070][T30534] device_add+0x7b6/0xb80 [ 1136.246432][T30534] usb_new_device+0xa39/0x1720 [ 1136.253248][T30534] hub_event+0x29b1/0x4ef0 [ 1136.259865][T30534] process_scheduled_works+0xad1/0x1770 [ 1136.267438][T30534] worker_thread+0x8a0/0xda0 [ 1136.274051][T30534] kthread+0x711/0x8a0 [ 1136.280163][T30534] ret_from_fork+0x510/0xa50 [ 1136.286810][T30534] ret_from_fork_asm+0x1a/0x30 [ 1136.293676][T30534] INITIAL USE at: [ 1136.297759][T30534] lock_acquire+0x107/0x340 [ 1136.304200][T30534] _raw_spin_lock_irqsave+0x40/0x60 [ 1136.311361][T30534] input_inject_event+0xa5/0x340 [ 1136.318229][T30534] kbd_led_trigger_activate+0xbc/0x100 [ 1136.325626][T30534] led_trigger_set+0x52d/0x950 [ 1136.332318][T30534] led_trigger_set_default+0x260/0x2a0 [ 1136.339823][T30534] led_classdev_register_ext+0x73d/0x960 [ 1136.347377][T30534] input_leds_connect+0x517/0x790 [ 1136.354332][T30534] input_register_device+0xd00/0x1170 [ 1136.361650][T30534] atkbd_connect+0x73b/0xa50 [ 1136.368252][T30534] serio_driver_probe+0x82/0xd0 [ 1136.375023][T30534] really_probe+0x26d/0xad0 [ 1136.381446][T30534] __driver_probe_device+0x18c/0x320 [ 1136.388751][T30534] driver_probe_device+0x4f/0x240 [ 1136.395759][T30534] __driver_attach+0x349/0x650 [ 1136.402444][T30534] bus_for_each_dev+0x233/0x2b0 [ 1136.409237][T30534] serio_handle_event+0x1f9/0x8d0 [ 1136.416221][T30534] process_scheduled_works+0xad1/0x1770 [ 1136.423722][T30534] worker_thread+0x8a0/0xda0 [ 1136.430233][T30534] kthread+0x711/0x8a0 [ 1136.436233][T30534] ret_from_fork+0x510/0xa50 [ 1136.442832][T30534] ret_from_fork_asm+0x1a/0x30 [ 1136.449543][T30534] } [ 1136.452261][T30534] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 1136.461496][T30534] -> (&new->fa_lock){...-}-{3:3} { [ 1136.466724][T30534] IN-SOFTIRQ-R at: [ 1136.470813][T30534] lock_acquire+0x107/0x340 [ 1136.477150][T30534] _raw_read_lock_irqsave+0x48/0x60 [ 1136.484203][T30534] kill_fasync+0x199/0x4d0 [ 1136.490583][T30534] sock_wake_async+0x137/0x160 [ 1136.497251][T30534] sock_def_readable+0x3c1/0x530 [ 1136.504068][T30534] tcp_data_queue+0x1e14/0x5e30 [ 1136.510762][T30534] tcp_rcv_established+0xf57/0x2580 [ 1136.517796][T30534] tcp_v4_do_rcv+0xa90/0x1430 [ 1136.524409][T30534] tcp_v4_rcv+0x2675/0x2f20 [ 1136.530751][T30534] ip_protocol_deliver_rcu+0x221/0x440 [ 1136.538058][T30534] ip_local_deliver_finish+0x3bb/0x6f0 [ 1136.545443][T30534] NF_HOOK+0x30c/0x3a0 [ 1136.551355][T30534] NF_HOOK+0x30c/0x3a0 [ 1136.557267][T30534] __netif_receive_skb+0x143/0x380 [ 1136.564218][T30534] process_backlog+0x54f/0x1340 [ 1136.570998][T30534] __napi_poll+0xae/0x320 [ 1136.577200][T30534] net_rx_action+0x64a/0xe00 [ 1136.583635][T30534] handle_softirqs+0x22b/0x7c0 [ 1136.590233][T30534] do_softirq+0x76/0xd0 [ 1136.596271][T30534] __local_bh_enable_ip+0xf8/0x130 [ 1136.603237][T30534] sk_stream_wait_memory+0x71f/0xf70 [ 1136.610388][T30534] tcp_sendmsg_locked+0x1dfb/0x5520 [ 1136.617428][T30534] tcp_sendmsg+0x2f/0x50 [ 1136.623515][T30534] __sock_sendmsg+0x19c/0x270 [ 1136.630047][T30534] __sys_sendto+0x3bd/0x520 [ 1136.636438][T30534] __ia32_sys_sendto+0xdd/0x100 [ 1136.643147][T30534] __do_fast_syscall_32+0x1dc/0x570 [ 1136.650221][T30534] do_fast_syscall_32+0x34/0x80 [ 1136.656916][T30534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1136.665087][T30534] INITIAL USE at: [ 1136.669076][T30534] lock_acquire+0x107/0x340 [ 1136.675333][T30534] _raw_write_lock_irq+0x3d/0x50 [ 1136.682019][T30534] fasync_remove_entry+0xf1/0x1c0 [ 1136.688818][T30534] tty_fasync+0x13c/0x350 [ 1136.694901][T30534] __fput+0x8a2/0xa70 [ 1136.700640][T30534] task_work_run+0x1d4/0x260 [ 1136.706991][T30534] exit_to_user_mode_loop+0xef/0x4e0 [ 1136.714036][T30534] __do_fast_syscall_32+0x398/0x570 [ 1136.721014][T30534] do_fast_syscall_32+0x34/0x80 [ 1136.727640][T30534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1136.735742][T30534] INITIAL READ USE at: [ 1136.740169][T30534] lock_acquire+0x107/0x340 [ 1136.746859][T30534] _raw_read_lock_irqsave+0x48/0x60 [ 1136.754258][T30534] kill_fasync+0x199/0x4d0 [ 1136.760866][T30534] sock_wake_async+0x137/0x160 [ 1136.767809][T30534] sk_wake_async+0x184/0x280 [ 1136.774628][T30534] unix_shutdown+0x2f5/0x3f0 [ 1136.781476][T30534] __ia32_sys_shutdown+0x13f/0x1a0 [ 1136.788895][T30534] __do_fast_syscall_32+0x1dc/0x570 [ 1136.796284][T30534] do_fast_syscall_32+0x34/0x80 [ 1136.803327][T30534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1136.811850][T30534] } [ 1136.814474][T30534] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1136.823285][T30534] ... acquired at: [ 1136.827213][T30534] _raw_read_lock_irqsave+0x48/0x60 [ 1136.832623][T30534] kill_fasync+0x199/0x4d0 [ 1136.837262][T30534] mousedev_notify_readers+0x6f1/0xc00 [ 1136.842924][T30534] mousedev_event+0x602/0x1320 [ 1136.847885][T30534] input_handle_events_default+0xd4/0x1a0 [ 1136.853815][T30534] input_pass_values+0x288/0x890 [ 1136.858949][T30534] input_event_dispose+0x330/0x6b0 [ 1136.864274][T30534] input_inject_event+0x1dd/0x340 [ 1136.869500][T30534] evdev_write+0x2fc/0x480 [ 1136.874110][T30534] vfs_write+0x27e/0xb30 [ 1136.878540][T30534] ksys_write+0x145/0x250 [ 1136.883058][T30534] __do_fast_syscall_32+0x1dc/0x570 [ 1136.888453][T30534] do_fast_syscall_32+0x34/0x80 [ 1136.893499][T30534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1136.900024][T30534] [ 1136.902358][T30534] -> (&f_owner->lock){....}-{3:3} { [ 1136.907594][T30534] INITIAL USE at: [ 1136.911589][T30534] lock_acquire+0x107/0x340 [ 1136.917674][T30534] _raw_write_lock_irq+0x3d/0x50 [ 1136.924223][T30534] __f_setown+0x67/0x370 [ 1136.930050][T30534] fcntl_dirnotify+0x3fa/0x6a0 [ 1136.936397][T30534] do_fcntl+0x745/0x1a50 [ 1136.942249][T30534] do_compat_fcntl64+0x477/0x720 [ 1136.948780][T30534] __do_fast_syscall_32+0x1dc/0x570 [ 1136.955584][T30534] do_fast_syscall_32+0x34/0x80 [ 1136.962033][T30534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1136.969959][T30534] INITIAL READ USE at: [ 1136.974314][T30534] lock_acquire+0x107/0x340 [ 1136.980835][T30534] _raw_read_lock_irqsave+0x48/0x60 [ 1136.988049][T30534] send_sigio+0x38/0x370 [ 1136.994324][T30534] dnotify_handle_event+0x169/0x440 [ 1137.001536][T30534] fsnotify+0x180b/0x1ab0 [ 1137.007887][T30534] path_openat+0x1aa1/0x3dd0 [ 1137.014499][T30534] do_filp_open+0x1fa/0x410 [ 1137.021024][T30534] do_sys_openat2+0x121/0x200 [ 1137.027725][T30534] __ia32_compat_sys_openat+0x131/0x160 [ 1137.035308][T30534] __do_fast_syscall_32+0x1dc/0x570 [ 1137.042524][T30534] do_fast_syscall_32+0x34/0x80 [ 1137.049399][T30534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1137.057754][T30534] } [ 1137.060269][T30534] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1137.069136][T30534] ... acquired at: [ 1137.072951][T30534] _raw_read_lock_irqsave+0x48/0x60 [ 1137.078344][T30534] send_sigio+0x38/0x370 [ 1137.082785][T30534] kill_fasync+0x24d/0x4d0 [ 1137.087400][T30534] lease_break_callback+0x26/0x30 [ 1137.092619][T30534] __break_lease+0x6e3/0x1490 [ 1137.097487][T30534] do_dentry_open+0x73a/0x1420 [ 1137.102442][T30534] vfs_open+0x3b/0x340 [ 1137.106791][T30534] path_openat+0x340e/0x3dd0 [ 1137.111573][T30534] do_filp_open+0x1fa/0x410 [ 1137.116698][T30534] do_sys_openat2+0x121/0x200 [ 1137.121565][T30534] __ia32_compat_sys_openat+0x131/0x160 [ 1137.127311][T30534] __do_fast_syscall_32+0x1dc/0x570 [ 1137.132710][T30534] do_fast_syscall_32+0x34/0x80 [ 1137.137757][T30534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1137.144290][T30534] [ 1137.146628][T30534] [ 1137.146628][T30534] the dependencies between the lock to be acquired [ 1137.146639][T30534] and SOFTIRQ-irq-unsafe lock: [ 1137.160178][T30534] -> (tasklist_lock){.+.+}-{3:3} { [ 1137.165326][T30534] HARDIRQ-ON-R at: [ 1137.169320][T30534] lock_acquire+0x107/0x340 [ 1137.175495][T30534] _raw_read_lock+0x36/0x50 [ 1137.181669][T30534] __do_wait+0xde/0x740 [ 1137.187502][T30534] do_wait+0x1e8/0x4f0 [ 1137.193254][T30534] kernel_wait+0xab/0x170 [ 1137.199267][T30534] call_usermodehelper_exec_work+0xbe/0x230 [ 1137.206826][T30534] process_scheduled_works+0xad1/0x1770 [ 1137.214051][T30534] worker_thread+0x8a0/0xda0 [ 1137.220308][T30534] kthread+0x711/0x8a0 [ 1137.226050][T30534] ret_from_fork+0x510/0xa50 [ 1137.232336][T30534] ret_from_fork_asm+0x1a/0x30 [ 1137.238786][T30534] SOFTIRQ-ON-R at: [ 1137.242794][T30534] lock_acquire+0x107/0x340 [ 1137.249353][T30534] _raw_read_lock+0x36/0x50 [ 1137.255522][T30534] __do_wait+0xde/0x740 [ 1137.261359][T30534] do_wait+0x1e8/0x4f0 [ 1137.267113][T30534] kernel_wait+0xab/0x170 [ 1137.273127][T30534] call_usermodehelper_exec_work+0xbe/0x230 [ 1137.280697][T30534] process_scheduled_works+0xad1/0x1770 [ 1137.287916][T30534] worker_thread+0x8a0/0xda0 [ 1137.294180][T30534] kthread+0x711/0x8a0 [ 1137.299928][T30534] ret_from_fork+0x510/0xa50 [ 1137.306215][T30534] ret_from_fork_asm+0x1a/0x30 [ 1137.312657][T30534] INITIAL USE at: [ 1137.316572][T30534] lock_acquire+0x107/0x340 [ 1137.322657][T30534] _raw_write_lock_irq+0x3d/0x50 [ 1137.329179][T30534] copy_process+0x2185/0x3950 [ 1137.335442][T30534] kernel_clone+0x21e/0x820 [ 1137.341529][T30534] user_mode_thread+0xdd/0x140 [ 1137.347894][T30534] rest_init+0x23/0x300 [ 1137.353643][T30534] start_kernel+0x381/0x3d0 [ 1137.359827][T30534] x86_64_start_reservations+0x24/0x30 [ 1137.366886][T30534] x86_64_start_kernel+0x143/0x1c0 [ 1137.373588][T30534] common_startup_64+0x13e/0x147 [ 1137.380113][T30534] INITIAL READ USE at: [ 1137.384491][T30534] lock_acquire+0x107/0x340 [ 1137.391015][T30534] _raw_read_lock+0x36/0x50 [ 1137.397535][T30534] __do_wait+0xde/0x740 [ 1137.403717][T30534] do_wait+0x1e8/0x4f0 [ 1137.409918][T30534] kernel_wait+0xab/0x170 [ 1137.416703][T30534] call_usermodehelper_exec_work+0xbe/0x230 [ 1137.424825][T30534] process_scheduled_works+0xad1/0x1770 [ 1137.432390][T30534] worker_thread+0x8a0/0xda0 [ 1137.439001][T30534] kthread+0x711/0x8a0 [ 1137.445092][T30534] ret_from_fork+0x510/0xa50 [ 1137.451703][T30534] ret_from_fork_asm+0x1a/0x30 [ 1137.458496][T30534] } [ 1137.461018][T30534] ... key at: [] tasklist_lock+0x18/0x40 [ 1137.468766][T30534] ... acquired at: [ 1137.472582][T30534] _raw_read_lock+0x36/0x50 [ 1137.477307][T30534] send_sigurg+0x12b/0x420 [ 1137.481927][T30534] sk_send_sigurg+0x6c/0x2e0 [ 1137.486720][T30534] tcp_check_urg+0x200/0x760 [ 1137.491511][T30534] tcp_urg+0x164/0x3f0 [ 1137.495777][T30534] tcp_rcv_established+0xf4c/0x2580 [ 1137.501173][T30534] tcp_v4_do_rcv+0xa90/0x1430 [ 1137.506063][T30534] __release_sock+0x265/0x3a0 [ 1137.510942][T30534] release_sock+0x5f/0x1f0 [ 1137.515553][T30534] do_tcp_setsockopt+0x330/0x1f40 [ 1137.520778][T30534] do_sock_setsockopt+0x17c/0x1b0 [ 1137.526220][T30534] __ia32_sys_setsockopt+0x13f/0x1b0 [ 1137.531918][T30534] __do_fast_syscall_32+0x1dc/0x570 [ 1137.537339][T30534] do_fast_syscall_32+0x34/0x80 [ 1137.542400][T30534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1137.548942][T30534] [ 1137.551299][T30534] [ 1137.551299][T30534] stack backtrace: [ 1137.557232][T30534] CPU: 0 UID: 0 PID: 30534 Comm: syz.8.8860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.557264][T30534] Tainted: [L]=SOFTLOCKUP [ 1137.557271][T30534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1137.557282][T30534] Call Trace: [ 1137.557291][T30534] [ 1137.557298][T30534] dump_stack_lvl+0xe8/0x150 [ 1137.557327][T30534] __lock_acquire+0x2a95/0x2cf0 [ 1137.557361][T30534] ? send_sigurg+0x12b/0x420 [ 1137.557386][T30534] lock_acquire+0x107/0x340 [ 1137.557402][T30534] ? send_sigurg+0x12b/0x420 [ 1137.557431][T30534] _raw_read_lock+0x36/0x50 [ 1137.557447][T30534] ? send_sigurg+0x12b/0x420 [ 1137.557471][T30534] send_sigurg+0x12b/0x420 [ 1137.557498][T30534] sk_send_sigurg+0x6c/0x2e0 [ 1137.557525][T30534] tcp_check_urg+0x200/0x760 [ 1137.557556][T30534] tcp_urg+0x164/0x3f0 [ 1137.557579][T30534] ? __pfx_tcp_urg+0x10/0x10 [ 1137.557601][T30534] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1137.557626][T30534] tcp_rcv_established+0xf4c/0x2580 [ 1137.557653][T30534] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1137.557675][T30534] ? do_raw_spin_lock+0x121/0x290 [ 1137.557702][T30534] tcp_v4_do_rcv+0xa90/0x1430 [ 1137.557732][T30534] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 1137.557757][T30534] __release_sock+0x265/0x3a0 [ 1137.557783][T30534] release_sock+0x5f/0x1f0 [ 1137.557801][T30534] do_tcp_setsockopt+0x330/0x1f40 [ 1137.557835][T30534] ? aa_sk_perm+0x15f/0x920 [ 1137.557857][T30534] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1137.557885][T30534] ? __pfx_aa_sk_perm+0x10/0x10 [ 1137.557905][T30534] ? __fget_files+0x2a/0x420 [ 1137.557926][T30534] ? aa_sock_opt_perm+0xff/0x1a0 [ 1137.557949][T30534] ? sock_common_setsockopt+0x36/0xc0 [ 1137.557964][T30534] ? tcp_setsockopt+0x3d/0xe0 [ 1137.557978][T30534] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1137.558003][T30534] do_sock_setsockopt+0x17c/0x1b0 [ 1137.558025][T30534] __ia32_sys_setsockopt+0x13f/0x1b0 [ 1137.558048][T30534] __do_fast_syscall_32+0x1dc/0x570 [ 1137.558070][T30534] ? lockdep_hardirqs_on+0x7b/0x110 [ 1137.558088][T30534] ? do_fast_syscall_32+0x34/0x80 [ 1137.558107][T30534] ? irqentry_exit+0x10f/0x670 [ 1137.558127][T30534] do_fast_syscall_32+0x34/0x80 [ 1137.558146][T30534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1137.558186][T30534] RIP: 0023:0xf708d539 [ 1137.558202][T30534] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1137.558218][T30534] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1137.558237][T30534] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 1137.558249][T30534] RDX: 0000000000000013 RSI: 0000000080000000 RDI: 0000000000000004 [ 1137.558261][T30534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1137.558271][T30534] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1137.558281][T30534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1137.558298][T30534] [ 1137.571501][ T5153] Bluetooth: hci3: command tx timeout [ 1137.643341][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1137.865379][T16529] usb 5-1: Using ep0 maxpacket: 8 [ 1137.953597][T16529] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1137.987880][T16529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.001727][T16529] usb 5-1: config 0 descriptor?? [ 1138.013723][T16529] usb 5-1: can't set config #0, error -71 [ 1138.024906][T16529] usb 5-1: USB disconnect, device number 46 [ 1138.044470][ T10] usb 4-1: device descriptor read/all, error -71 [ 1138.310861][T30467] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1138.321981][T30467] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1138.332371][T30467] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1138.342994][T30467] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1138.424312][T30467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.447804][T30467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.460257][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.467491][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.493223][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.500394][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.581054][T30467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.626827][T30467] veth0_vlan: entered promiscuous mode [ 1138.641515][T30467] veth1_vlan: entered promiscuous mode [ 1138.673762][T30467] veth0_macvtap: entered promiscuous mode [ 1138.684029][T30467] veth1_macvtap: entered promiscuous mode [ 1138.706126][T30467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.721508][T30467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.737379][T30379] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.748491][T30379] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.764192][T30379] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.773063][T30379] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.816494][T30467] ieee80211 phy59: Selected rate control algorithm 'minstrel_ht' [ 1138.847328][ T6712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.851760][T30467] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 1138.867463][ T6712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.905045][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.915096][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.683971][ T5153] Bluetooth: hci3: command tx timeout [ 1141.763291][ T5153] Bluetooth: hci3: command tx timeout