last executing test programs: 5m58.038423341s ago: executing program 32 (id=1326): capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000009004"]) 5m24.90280301s ago: executing program 33 (id=1616): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x2ffb, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "781f43d01f00"}) 5m8.557867474s ago: executing program 34 (id=1768): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x122) 5m1.906223051s ago: executing program 35 (id=1814): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xfa09c4119783e9d) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0xa, 0x10, "93c32a9ac9758ba5825c27dd7cd1698a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000080)=""/222) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 4m29.319134719s ago: executing program 36 (id=2020): socket$inet_sctp(0x2, 0x1, 0x84) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) r1 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0xd615, 0x10100, 0xffffffff, 0x100000, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) exit(0x0) syz_io_uring_setup(0x7109, 0x0, 0x0, 0x0) 3m58.311909863s ago: executing program 37 (id=2221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xde, 0xe1, 0x4, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x3, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m3.511106996s ago: executing program 6 (id=2585): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xb000000d}) dup3(r1, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x5, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m3.237860542s ago: executing program 6 (id=2587): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x43c, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xd39, 0x8000, 0x4, 0x1, 0x7fffffff, 0x6, 0x6, 0x7, 0xffff, 0x3896330b, 0x0, 0x10000, 0x2, 0x8, 0xf, 0x2, 0x2, 0x0, 0x9, 0x7, 0x10001, 0x5, 0xc3, 0x0, 0xe, 0x3, 0x5, 0xf, 0x800, 0xbac, 0x200, 0x5, 0x10, 0x0, 0x9fe, 0x2, 0xfffffffc, 0x0, 0xffffffc0, 0x7, 0x10000, 0x2, 0x7, 0x0, 0x5, 0x100, 0x0, 0x6, 0x3, 0x7ff, 0x4, 0x1000, 0x3, 0x7ff, 0x2, 0x8, 0x1ee, 0x200, 0x2, 0x3ff, 0x102000, 0xffffffdc, 0x0, 0x0, 0xfff, 0xfffffffa, 0x200, 0x9, 0x8, 0xfffffbff, 0x1, 0x19, 0x7, 0x0, 0x8, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0x1000, 0x8, 0x2, 0xfffffffe, 0x0, 0x7fffffff, 0x8, 0x5, 0xe, 0x8, 0x3f, 0x81, 0x1, 0x1000, 0x0, 0x3, 0x7, 0x3, 0xcb, 0x5, 0x101, 0x400, 0x3ff, 0x0, 0x8d13, 0xff, 0x5, 0x4, 0x21ad, 0x2, 0x1, 0x8, 0x8001, 0x1, 0x80000001, 0x1ff, 0x10000, 0x5, 0x101, 0xb4b4, 0x3, 0x1, 0xc, 0x8, 0x2, 0x80000000, 0x8000, 0x8, 0x1, 0x9, 0x4, 0x7, 0x6, 0xc2c9, 0x7, 0x1e9, 0x4, 0x0, 0x4, 0xfffffffa, 0x80000001, 0xff, 0xfffffffb, 0x400, 0xb0d, 0x7, 0xffffb6f2, 0xe, 0x4, 0xe, 0x5, 0x80000000, 0x8a3, 0x2d8, 0x1, 0x6299, 0x7439, 0x1, 0x5, 0x6, 0x400, 0x0, 0x5, 0x9, 0x10000, 0xfffffff6, 0xf, 0xfffffffc, 0x38, 0x5, 0x0, 0x3, 0x5, 0xe, 0x0, 0x252d, 0xfffffffe, 0xfffffffd, 0x3, 0x200, 0x0, 0x4000000, 0x9, 0xfffffff7, 0x0, 0x2, 0xf, 0x5, 0x8, 0x3, 0x6, 0x1, 0x8, 0x4, 0x200000, 0xfffffff7, 0x0, 0x7, 0x431e, 0x0, 0x8000000, 0x2, 0x831, 0x180000, 0x1, 0x8a1, 0x5, 0x5, 0x8, 0xffff8000, 0xffffc917, 0x9, 0x4, 0x4085, 0x40, 0x80000000, 0xdc42, 0x0, 0x7, 0xffffff7d, 0xf805, 0x6, 0x45, 0x2, 0x0, 0x8, 0x200, 0x0, 0xfffff8fe, 0x1, 0x5, 0x2, 0xffffffff, 0x4, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xfff, 0x8, 0x81d, 0x45a, 0x3, 0x2, 0x7fdde78e, 0x7f, 0x80, 0x5, 0x3, 0x7, 0x80, 0x7993]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/233, 0xe9}, {&(0x7f00000004c0)=""/74, 0x4a}], 0x2}, 0x20) 3m2.860118432s ago: executing program 6 (id=2591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x890, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x860, 0x2, [@TCA_BASIC_POLICE={0x85c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x87a4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x3b5e, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0xffffffc0, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7ff, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x2, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x4, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0xffff, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x1, 0x6, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0x9, 0x8, 0x5, 0x4, 0x9, 0xffff, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x890}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m2.39598633s ago: executing program 6 (id=2595): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 3m2.227822495s ago: executing program 6 (id=2596): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000240)="f8", 0x1}]) sendmmsg$alg(r1, &(0x7f000000bf80)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="cd", 0x1}], 0x1, 0x0, 0x0, 0x4008804}], 0x1, 0x81) 3m1.792456388s ago: executing program 6 (id=2599): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf2ffffff) 3m0.927707926s ago: executing program 38 (id=2599): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf2ffffff) 1m44.241794052s ago: executing program 4 (id=3103): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x8000, 0x10}, 0xc) 1m43.722913464s ago: executing program 4 (id=3105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0xfff}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd05005600080054"], 0xfdef) 1m43.339441155s ago: executing program 4 (id=3108): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) r2 = io_uring_setup(0x2f82, &(0x7f0000000200)={0x0, 0x446c5, 0x0, 0xfffffffc}) close(r2) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) 1m42.425489937s ago: executing program 4 (id=3113): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m41.948893009s ago: executing program 4 (id=3117): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m41.135407966s ago: executing program 4 (id=3124): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x4cfb, 0x80, 0x3, 0x135}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m40.510538956s ago: executing program 39 (id=3124): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x4cfb, 0x80, 0x3, 0x135}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m6.729155974s ago: executing program 5 (id=3350): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m5.848663143s ago: executing program 5 (id=3355): bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31", 0x3c, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000182"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1m5.530687476s ago: executing program 5 (id=3356): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = fanotify_init(0x200, 0x2) r3 = eventfd(0x40b0) r4 = fcntl$dupfd(r2, 0x0, r0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r3, 0xffffffff, 0x2, r4}) 1m5.300324246s ago: executing program 5 (id=3358): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 1m4.366390253s ago: executing program 5 (id=3363): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000080)=0x8) 1m4.096441719s ago: executing program 5 (id=3365): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000001340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r1, 0x7, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/205, 0xcd}, {0x0}], 0x2}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m3.752025167s ago: executing program 40 (id=3365): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000001340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r1, 0x7, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/205, 0xcd}, {0x0}], 0x2}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 51.767292337s ago: executing program 2 (id=3429): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2050) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9c33cbf2f2cca353}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x2, 0xfffffffb}}, 0x30) 50.828772855s ago: executing program 2 (id=3434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x4e20, 0x20, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x5, 0x0, 0xffffffff}, {0x0, 0x0, 0x1, 0x40}, 0x0, 0x4}, {{@in=@empty, 0xffffffff, 0x62}, 0xa, @in6=@mcast1, 0x3507, 0x2, 0x3, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) 50.412195368s ago: executing program 2 (id=3438): r0 = fsopen(&(0x7f0000000900)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x87) fchdir(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x0, 0xfc) getdents(r2, &(0x7f0000001600)=""/34, 0x22) getdents(r2, 0xfffffffffffffffd, 0xbb) 50.130991537s ago: executing program 2 (id=3441): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 49.065786692s ago: executing program 2 (id=3449): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r3, 0x0, 0x0, 0x1, &(0x7f0000000040)='?', 0x5}) 48.416291652s ago: executing program 2 (id=3456): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1010}, 0x4) 47.519870671s ago: executing program 41 (id=3456): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1010}, 0x4) 35.259657181s ago: executing program 1 (id=3494): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x6) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 35.091939164s ago: executing program 1 (id=3495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x3, 0x0, 0x1000, &(0x7f00002f5000/0x1000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000169000/0x400000)=nil) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 34.370560283s ago: executing program 1 (id=3499): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 32.932480344s ago: executing program 1 (id=3502): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 31.875840478s ago: executing program 1 (id=3507): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000030000000100000000000000010000000800000fff000000000f0000340000000300000001000000000000000000000002"], 0x60) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 29.621123208s ago: executing program 1 (id=3521): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(0x3) 29.033072279s ago: executing program 42 (id=3521): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(0x3) 8.583740824s ago: executing program 0 (id=3616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 7.799904046s ago: executing program 0 (id=3620): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ptrace$getregset(0x4205, 0x0, 0x201, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000000100)={0x100087, 0x0, 0x0, {r1}}, 0x20) fsopen(&(0x7f0000000000)='devpts\x00', 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a31d34"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 7.289027343s ago: executing program 7 (id=3622): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r3, 0x4, 0x42000) read$FUSE(r3, &(0x7f0000001440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60, 0x0, r4, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) 6.297696088s ago: executing program 9 (id=3629): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x80000007}}, 0x1fff8) 6.215497298s ago: executing program 7 (id=3630): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.008923053s ago: executing program 9 (id=3632): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c) 5.610845549s ago: executing program 9 (id=3635): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x1000000000000000) 5.590503371s ago: executing program 7 (id=3636): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3808}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "3c62b8c283856312", "5ed8002558e2bb7174371336dad9ecbd", "868e5b1b", "4c5293d719408a98"}, 0x28) 5.496471743s ago: executing program 3 (id=3638): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f0000000280)=[{r1, 0x10110}, {r3, 0x2000}], 0x2, 0xfffffffe) close_range(r0, 0xffffffffffffffff, 0x0) 5.183428021s ago: executing program 8 (id=3639): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x3, 0x8000, 0x10003, 0x41, 0x400200cc0, 0xffd, 0xcf1e, 0x6, 0x7, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.999669508s ago: executing program 9 (id=3640): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) close_range(r0, 0xffffffffffffffff, 0x0) 4.724407854s ago: executing program 8 (id=3641): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000080)={{0xd4, 0x8}, 'port1\x00', 0x81, 0x60000, 0x400, 0x7, 0x1, 0x0, 0x5, 0x0, 0x4, 0x3}) io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f8, 0xd88b, 0x1, 0x0, 0x0) 4.644957859s ago: executing program 0 (id=3642): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd806, 0x3010}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4.518093426s ago: executing program 9 (id=3643): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x4b07, 0x1, 0x7ffe, 0x40024c}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 4.444796687s ago: executing program 3 (id=3644): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x16) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) 4.289672043s ago: executing program 7 (id=3645): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 4.238577122s ago: executing program 8 (id=3646): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380), 0x34000, 0x0) 3.848892323s ago: executing program 3 (id=3647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 3.164350745s ago: executing program 3 (id=3648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000006c0)={{r2}, "43e2b7d22100730c31ea137a7aa7f01c058926771706f8fa255b4e3b783b6b5c2909f8b0721425a9f488ef34440555dde1244114a1c7078205705ffc6fb3bf10386aaf906f3318c533f20ee90aea803edf88d87d713813d35d039a15e9d5a905b9708d6aaef4ddf0f84219b1fc18b98d67debb6a83f6f31b7f15c799d260afdd63bc586c30b03fb7acb3fa5030d236151b2bdfebaee7bf21ba7a686524496f954a8e4e7af6fb559297d72c3805ddd737fa98015c9323de855aa7f47ce7552d66e69f1325d5bcf4c3901971d8c124a7b9da3433ae3f1cacd249a571ce60256dda0429ad63afeeba8513c63fcae7560866eee2b639de380d8c5dca46f1721a67476d07f144a3e621e460fef67018854be37fcaa3c9eed821cba2b0af7c0f77b54b743e0126654d70ffea6a240843414bcade324b18062c856c260e9c482487d8214dc2a6e0578704464d0468cf98cc15d43974f099ef48222624ada27de95a8f772ac4d1fdd4d97f83054c2bce95dc2eb2fa96a394c711121757ef612da97157daed86522f56becf18addb00367a061a4a824b83de3ad626f2975190415ac0485b8a8d68d8bac2dab17577c749c6b1a175f56d6db90bb7c54002e69d797242e9e59495a41cb73673272bb9f52d821d6c68999acb9775cda279cdd240808b8edf104fc79156fb28f042cadc7d785e15788cc056a97cfb48b74c55bcaccf3f5ae3eafffd4f90a6c3c60709f8372b50fec791e447b8ba2eb39da5a7ab9cf7fb151855cdaa09502b854c9f87262b05f637878435e36cc3bc31995199815c3a2b9f0b247be12cf0a1fea82277533aa9bbc3597939521222fbc0dff23407622594b37b58b7f147129a6355531038281c24d9769401513be803ccd4a4df5487a30a003857bbf34716a8ecba07a04723a532fe4f39fe2f9af4f65e41d5880dd770e93a1753b531dbf212539c5ae5a63a9a2bdaff27e4620ada11cd9537b4108db11f6fb75ae582d81bade9a7be821b9799922bcf50c350ff2813aa52f33df353c78e31fbcf25f207fc47b5844e2cc7227053c1a3fb3c2eb3403dba4aabbc3341a2c1ceabc31a0ed0a07850db4f2381f4b1ad1792de830159e2b3854920aefe741e817e64ae30f86d8e7723772ebe19835e1ba3cff2890059486dd7589644f8f48b2b64118baee2471bb176b6ad17d94c43913305fa07321b0b28af8b05ecbd44acc3230bc6812a96b6091da440f02b787babdf97fa225bba35eabc2ff704c0b43893da24ead30377a13674ccbf0e035ccbe555cb1689070c4d422e58e1153d90482d0b209cfca40ff17cfba48edaf1dc703cff0e50c7a6cbcb3b3479c008872323f4bb512aecb560deb390519a84dfdf228d4d22b2f188179f2cc001ffade449410be906bdd6167f56e7e2c200cf3e2acdcea87c7d1ba8d141d26da81ca0bd097d319c1d2d89a4076e02186bbf23847c08546243a03187c8dc573d91dd35c0fb66f496fd2673271d101927ad75d9a32bf63bede6fe48fc8fe35c199c4500ff9a0fecfbb41eba1b5654705d1a2273c27052a0a3f0d2e1575e426369c20c69c3a98c9e751e05f757c2c1ceeeb695fe24e995ab8bb4ef0e3ae5c56aa6c24cec8c237391c33464a52babe6bb375cb61e2fc6ab6f1a5e5ace40c633d3cfc566406b3e876af17a46f8b6f7ad4cea50d03450e64c0b868559ee0fc60ab15bedd9963d167024b758c6420eb8652f90888af930a448fd6b50537b289e63ab873530ee0b83e923c5a5dda5389ebf8ce7c7a147d08a7c3f5a2204ec710b76b428b84b0da7ae1308e5fb32aff69be3956fc78dc2da58355730c30190937e183b974f20cfb0359b780bbd282309a375c5fffc14f9cd5a8d92c3e6c076724f30ba6b1bea682d6bb92837bd0cf14ff8d698e067c90c2370edd090f7f04d6e5b940eba09d656b46532214b670be0b1f7d6933eb8e68e5d7556a33153a106513a7646170e649373426a13103ae5e87cc95ce8e2d5816570ea3f1760b6be65fe7418bd13cea1af12bbf10f80a50d3c165b78aa8a7ddd3f8cafcfbb6feb817913c1205cd7f03d8d79fdaa6f164d068485c5d028569cdd040eb9c150bcb27a21fd44a3225e888c4bae68372221552456f2c9d4d7774643344bd6683eeedc2fe5b185e0eee5c9dddfd719b78760f61fa8fb63877158b7923ce917eb131736c2d87bc1d6180e2fcf15e5fe4cf1a95bb0b7f07232a98d32d3ffafd3c3e99abdaeb13aa9d036c7fea9f8430e65779881bdd7f6c836137d6beb2892fb3962a5b4d8b4c291cb4340fd078616a0a189eebe809554dc5eac7a7a2c5bd2bdb99564ec9892a98e4f14251ceda789c469eca057c6c92462539df38ce808bf6a7e57fa0f82e1775f25758527d580ff7fd73acb7f71d9bc53e476d736416320655c94005287659b59bfe16d96e6a0e8184d45da75e3d83bd48f0e136def61760fa83624065c406a4b2f76eba2896a27824a85852058a6cde3ffdb7e14a6bc1159d852817c24641c269ca49ddd87af72d34059b835d5e5dc5fd1cb3eb5fe2dc524243d0cb9e52e6f0615e35e314dcf535a3ca36bdd78d191e0f167a0992900b92dfcb842fcd6d855541db9debd21df8398f7898f7863e64ffa36b7fe69467a82bf4ebf9a9c6e2ee26c7c5fcbc87992d7a6031e5dd764cf4fa6263a0bcebfe2de4bf8d24def4e14136c18f6fc9a4add916e35c4528c0fa2361f534e113916ba0117572dd361ce3819541cbeb9def515737992b6150600d2da4ef806dd4e34f9f1ed506732bcccdf3551629f7fae8cf6c85286a8fc0b33385c72edfe99532444163ebc7e987c7c3412b11ba71d780162a4e022b87009efd809c633114c6d08f9546699ab3c4386571ae6a112a91fc4b977026958f88eb93bc094d026217a1d145e428eb0453aaee8a7fcbca9bc7c42772a70943b8a133e6af33f2f6b7f3c365c8814abf856e6ff761534024fef2de4d769f1501d0d6652c9a2292c950022f26cb5ecd7e665bf5d156c30e81b81db481d933a47aeb6b9456a9169ded5175e0463aac3ba1a5420afdf9026bf356adbe4a4e12b3ca12dfea63f864515a528d09af9b05458d082013d4a4b06551b4dba3259c9668eefaf9139c40150689a2aa4068810acdb386bedbbc363a6923903e5d54a9992773e25b25120bc93fedd19ab0a5fb382e7eb94949ddcc6ac87121b86faae09802b5dd65e46a096664f0f340680c0cc23381dc7f2eb66382f3cb93921ed08782ba1652aae1c42aaff5d7949eb83e41fd39769ab7ff3549480753dbd081b052dab8769252813eabd360bcf17abddb987d3a6b842e654a8b623b61a0d08a65edfd39a3119ae8ccc5a140f816495e9f5314144d19a32cb6fef3fcec97387d1643ff646901b3aa53a743efc27d17f090d42b87754689ce7b470a64c3d07642d58bee66725f7cdf141c0818d5fce93db9ed2dde37f9e03d6fc93a4fff3624aaf1d91a7dee748e5e78d4482be53849335b5191726288c1dbf1b307db03362a336de2f13cb390fcfbc0a6a8ae19d08c2c7b4969165c42e73c7658dd489fa7764899bcee9463a77a436d4fb1afb984c3141fbc560aeffbea4975ff4b32508ed2a1cf43a5fd94d24c8c5c6b5303519076d1bdef5c892d422f68d52940d9edc27d5e14c36a67c9374dfb850c7827f0f91e14d3244e92a20e6a15d269cd8de2947180d8199a98c16c231bf5e6fe93502871501fbc5797ed7749f05a7b2fb27b9a0284f61f79a9a3c5f536d8c03c066ef44909c2fa7cea68bcaca234c3731e7b8a313f7347ed6f40268a607daf4a012cc793dc1b66d69dfbd0bf7430775c3d17c8cb26b449022fbf1e5f0cd7926bf3a001654b66509688d43a7a6fa53be2d9d3f2fccb1c8ef61c6dde1d28751850e53c7916706e1a1e92e1f59bfaf4d3029bf4c78ed67a9e0d33392c2d5b34eaba279b2cb115d39f026b9c83bb5ee82da513549537f8b0b6253505d90f76898b05c4d4facf4b22ca01597443bdf8b296c476a38feddb8b4716c07b88773174ae592eab888323495ce1e91102812bc7efd4e959a958b8f56b27047017e2c41f48cebe8132fc8d9daa4d1c75409ae98f78daba26e24751e7a2667dea98591e2afa60f7470a4230c6e358e0346bb53a7020c79fe23f86095c9db2f38cbb4deb5e0824300ff6381cc7e08248e36e9bc4fbdfeaabb1fd5209ca08a079af86b98c39d1c8444351276a89c86d4f39524b15fbcb9f489ad88e7b9f65b50f9a97e4ce06f91ba556fbe39daf38167b62e79c887f8f8d24c5a2cbfbfc4c8080e26ed4b006fcfbe898ee0548b3986c452d19699d146f2ab96dcfc7a2fefe1ce0e02ae2343320498a4badc8835a422897bdd7a501399166090b0f3e3d2e1406c4fa713f8e9f5b34ee573fbc6914e46d631352c4ed9a41e6f8c611c11ce037f145909b55ee6b799f8e7e2ccd78754b7606f06a5158b36a8b1f4d53d4bbc13397d1feb1ccf744d28c3c5aadc3f541343b93b01a013e376bd45ec9c46866f4314b122782573a36f858b888f054592d9b306501e6d110451b9616c481871026628943b5167a81bbea733ad4335d71b611a09df0f98713f7699443ee55d62d79f36211053e8923e637c1fe4ce3d241761c501dbc374a19818a07973f983b66d58ca75691ed481a37b980a9ec598ed762d2ea7c51a1d30537633a13a16414b981b5c82b638c26313f7062cabac31b3e039586f12b5a8a8770160a2d7d4868e512406e8675daf01a299a869272218fac473ca6f8ca966c2461a1f739a5d60627071227969f40adf9c8447982157737a4bbe2938dd94bea3e1c109cf413a6157e2eaa807bd00fe0eae3b93f601a1c9ef785d29d0c15acaa8f8e19493fbc48795f3c6804a71c274b75dc908a7fe75ce7b1c3d61a5c14a8ae1f2a0be1a261e1a959c444afa07ce4aaf06913ca1749b11f14ba738efe845ff00a0a86a4aa2d1b9545142c8f9b264a17b20e6860eb4e20869d00d2e3a67cca690954adc7a43dc2ed2eef291fdcd90a229811b5ba179d67a5035767d59ac53db243ea126532a74e6348e0134c9a031b2e1ce6ffb77d64d8ce9e81ff04f18daea2120ccec90da3394eba93b8951189001881808bcb512960d6082d28cbc17e12636f99a6bf4c453e2d7be8c7cd99579f5673216d9a8017ab2eb9cf736744a008edc268f2fdd741dd2a2692c8d383a8bb801d6e659ad891ec396fb057323e4375011a8c49c24a6f4849bd1b8c97977d553b49eab307906f78b19e43a9db2809e104e5c7b3895081b879c7e9b52bbae76a971998c99a5fcf2f5a2ea53a4b901ade4d6e5ae423177b2e7cd05842557db0514744dc86b2ff47e100e6894fc03fa527784f1de2c73aafb6978ace5be50b28c404a001ad6650a4821c0aca1f9e11b3ba2a67a3b7cc7ea91487db65d0ab9aa14fcf6e2e5d5d397604b0195a80a14d938a2f25768b3395c33af64891e4001a3006d28859debd05e1758ab4d6e3d65158d3199a1b9822fae954d7ab94c48f6daeb62cab192a50aba5c405804ed3442f3b2aa48dd65b714be42c64b07f879ecad0c64a1d42cbcda8aa6d0b2dbc19ca0ede2342f033689318110ad14bb02eedb819339f2ab502dc346beee490f9c285522de9899cfbd1fcad76659fb8a06b407a78a7dadd2a31459ed7c95d25ba7d42f506d1a8a32a25cdae05e49d88c925b62baffbc921279a444d240a15f2a2f55e7b2a5ae0c56e25b67f47c1304d4e8df6ec66f09d54efa852ae8797685b50e8b809b3c6d33eabe34fc8324debd04"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.004208569s ago: executing program 3 (id=3649): openat$sequencer(0xffffffffffffff9c, 0x0, 0x62043, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xab, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.394258534s ago: executing program 9 (id=3650): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003, 0x0, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) 1.264480682s ago: executing program 7 (id=3651): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1.242130508s ago: executing program 0 (id=3652): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.203479521s ago: executing program 3 (id=3653): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 926.780171ms ago: executing program 8 (id=3654): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x6845a088, 0x1, 0x3, 0x1, 0xffffffff, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x8e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x7, r2, r3, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x2000420) syz_fuse_handle_req(r1, &(0x7f0000004080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4edc3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484622eeb169760e9ec50e14c014a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2b7e40b837a15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e72d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d802303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f58264c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e0f595347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6870ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab9f304ba11910a0790685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e61094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aae2e74e24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e07c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c79887b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d003e6bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x2, {0x10000000004, 0xffff, 0x0, {0x10000046, 0x69ec2deb, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x9, 0xe000, 0x4000, 0xcd35, r2, r3, 0xb, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 475.569189ms ago: executing program 7 (id=3655): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002700)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 452.588113ms ago: executing program 0 (id=3656): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x1, 0x9, 0x5, 0x401, 0x200, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x0, 0x78, 0xb, 0x5, 0x6, 0x8, 0x9, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x0, 0xfffffff4, 0x15a0, 0xffffff7f, 0x8, 0x5d, 0x800, 0xf94, 0xff, 0x1ff, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0x1, 0x3, 0x5, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x3, 0x5, 0x400, 0x5, 0x9, 0x1, 0xd0d, 0x2, 0x1000, 0x9, 0x3, 0x6d, 0xfffffffc, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x8, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x80000001, 0xe5f9, 0x0, 0x4, 0xd4, 0xffffffff, 0x200000, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x4, 0x1, 0x80000000, 0x3ff, 0x81, 0x100, 0x8, 0xfffffffb, 0x4, 0xfffffffc, 0x1, 0x7, 0x3, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x1, 0x3, 0x800, 0x5, 0x0, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x8, 0xb5, 0x8, 0x401, 0xfff, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x898, 0x7, 0x81, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x5, 0x4251, 0x6, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe03, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fcb, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd52, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0x10001, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x668, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x49, 0x2, 0x5f4, 0x3fd, 0xfffffffe, 0x4, 0x6, 0x9, 0x0, 0x5, 0x4, 0x6, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x0, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24f7, 0x5, 0x9, 0xd8c, 0x7ffffffd, 0xe, 0xfffff6d2, 0x0, 0x0, 0x3, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x4, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x3, 0x4, 0xa, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0x9, 0x80, 0x6, 0xfffffffd, 0x63, 0xd, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa21, 0x2, 0x9, 0x7, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0x1, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x5, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x9, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x80000001, 0x1, 0xfff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x0, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xfffffff9, 0x7fffffff, 0x4, 0x3, 0xb, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0x5, 0x0, 0x5, 0x6, 0x2, 0x6, 0x0, 0x51, 0x5, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x200, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x401, 0x5, 0x4, 0x4, 0xd3f6, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x8002, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x1, 0x9, 0x100, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10002, 0x9, 0xffffff81, 0x6, 0x400, 0x227, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x7, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x0, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x9, 0x7, 0x5, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x3, 0x8, 0x3, 0x4, 0x9, 0x101, 0x1, 0x8, 0x1, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0x2005, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x0, 0x7, 0xfffffffe, 0x81, 0xad3, 0x4, 0x80000001, 0x7, 0x8, 0x80, 0x8, 0x3ff, 0x6, 0xce1, 0x8, 0x80000001, 0xe, 0x1, 0x400002, 0x8000, 0x4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0xfffffffb, 0x2, 0xd, 0x401, 0xffffff46, 0x7, 0x8000, 0x5d, 0x70d, 0x7fff, 0x3, 0x4, 0x6, 0x7, 0xa6a0, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x5, 0xfffffff9, 0xbffeffff, 0x10, 0xfffffff7, 0x1ff, 0x8, 0x7ffc, 0x9, 0x3, 0xfffffff8, 0x1, 0x434, 0x8, 0x3ab, 0x8, 0x6, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x400, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xc, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0x1000, 0x8, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x7, 0x0, 0x40000fff, 0xf9, 0xc8, 0x2400, 0x1, 0x400, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0xfffffffb, 0x6b59b47c, 0x2, 0x4, 0xd64, 0x8, 0xc, 0x0, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x1, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x2, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a4, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xee18, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0xffff, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0xed, 0x3, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x7, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdc000000, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x9015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x0, 0x5, 0xff, 0xc, 0x8, 0x2, 0x2, 0x7, 0x8, 0x10, 0xb46, 0x8, 0x1, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0xbd, 0x4, 0x6, 0x5, 0x4, 0x9, 0xffffffff, 0xda, 0xe, 0x8001000, 0x7b, 0x2, 0x10001, 0x6, 0x136, 0x36, 0x3a12, 0x9, 0x8, 0x4, 0x8], 0x1, 0x400, 0x3ff}) close_range(r0, 0xffffffffffffffff, 0x0) 359.363569ms ago: executing program 8 (id=3657): sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r0 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r3, 0x0, 0x0, r3}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x4000000000002, r0, 0x35, {0xd464, 0x7}, 0x2}, 0x1) 55.006442ms ago: executing program 8 (id=3658): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x68000) fcntl$setstatus(r0, 0x4, 0x2000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x427c2, 0x19e) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x8, {0x80c, 0x1}, {0x45, 0x400}, @rumble={0xdc, 0x8}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 0 (id=3659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): d [ 436.687824][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 436.714317][T13917] loop3: [POWERTEC] p1 p2 p3 p4 [ 436.726193][T13917] loop3: p1 size 16 extends beyond EOD, truncated [ 436.737323][T13917] loop3: p2 start 915031469 is beyond EOD, truncated [ 436.746323][T13917] loop3: p3 start 2932641740 is beyond EOD, truncated [ 436.753757][T13917] loop3: p4 start 3710920044 is beyond EOD, truncated [ 436.853874][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 436.858112][ T5976] udevd[5976]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 436.861865][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 436.892291][ T5976] udevd[5976]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 436.902529][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.924231][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.939996][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.960786][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.998621][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 437.028573][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.312983][ T24] usb 4-1: usb_control_msg returned -32 [ 437.327297][ T24] usbtmc 4-1:16.0: can't read capabilities [ 437.642412][T13940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.603749][T13964] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 438.748408][ T5973] usb 4-1: USB disconnect, device number 35 [ 439.554319][T13984] netlink: 'syz.7.2718': attribute type 17 has an invalid length. [ 439.589758][T13984] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2718'. [ 440.170408][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.177085][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.927687][T14021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2732'. [ 441.533136][ T5973] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 441.583075][ T2154] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 441.655033][ T5922] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 441.702783][ T5973] usb 3-1: Using ep0 maxpacket: 8 [ 441.711645][ T5973] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.729648][T14041] binder: 14040:14041 ioctl c0306201 2000000000c0 returned -14 [ 441.732287][ T5973] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.763165][ T5973] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 441.808519][ T2154] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.825773][ T5922] usb 4-1: config 0 has no interfaces? [ 441.831321][ T5922] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.842853][ T2154] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.871714][ T2154] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 441.887422][ T2154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 441.895915][ T5973] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 441.911829][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.915544][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.933946][ T2154] usb 5-1: SerialNumber: syz [ 441.948929][ T5973] usb 3-1: Product: syz [ 441.963963][ T5922] usb 4-1: config 0 descriptor?? [ 441.974441][ T5973] usb 3-1: Manufacturer: syz [ 441.979121][ T5973] usb 3-1: SerialNumber: syz [ 442.241062][ T5922] usb 4-1: USB disconnect, device number 36 [ 442.293064][ T5862] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 442.452992][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 442.460362][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.471629][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.482620][ T5862] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 442.491817][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.503101][ T5862] usb 2-1: config 0 descriptor?? [ 443.061314][T14061] loop2: detected capacity change from 0 to 7 [ 443.082297][T14061] loop2: [ 443.094073][T14061] loop2: partition table partially beyond EOD, truncated [ 443.790058][ T5862] letsketch 0003:6161:4D15.0020: Device info: à° [ 444.036128][ T5862] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 444.044541][ T5862] letsketch 0003:6161:4D15.0020: probe with driver letsketch failed with error -71 [ 444.059032][ T5862] usb 2-1: USB disconnect, device number 22 [ 444.365296][ T5973] usb 3-1: 0:2 : does not exist [ 444.432115][ T2154] usb 5-1: 0:2 : does not exist [ 444.438540][ T5973] usb 3-1: USB disconnect, device number 38 [ 444.473466][ T2154] usb 5-1: USB disconnect, device number 24 [ 444.488910][T14086] loop9: detected capacity change from 0 to 7 [ 444.550426][T14086] Dev loop9: unable to read RDB block 7 [ 444.584008][T14086] loop9: unable to read partition table [ 444.590013][T14086] loop9: partition table beyond EOD, truncated [ 444.600728][T14086] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 444.841541][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 444.846300][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.026676][T14092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.566309][ T5949] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 445.583221][ T5922] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 445.747477][ T5949] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 445.772562][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 445.778903][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.788303][ T5949] usb 4-1: Product: syz [ 445.794053][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.805406][ T5949] usb 4-1: Manufacturer: syz [ 445.810160][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.822641][ T5949] usb 4-1: SerialNumber: syz [ 445.837357][ T5922] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.849379][ T5949] usb 4-1: config 0 descriptor?? [ 445.854590][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.868802][ T5949] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 445.875331][ T5922] usb 3-1: Product: syz [ 445.880228][ T5922] usb 3-1: Manufacturer: syz [ 445.889041][ T5922] usb 3-1: SerialNumber: syz [ 446.121239][ T5922] usb 3-1: 0:2 : does not exist [ 446.133897][ T5922] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 446.206992][ T5922] usb 3-1: USB disconnect, device number 39 [ 446.275148][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.281803][ T5949] gspca_sunplus: reg_w_riv err -71 [ 447.287237][ T5949] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 447.336661][ T5949] usb 4-1: USB disconnect, device number 37 [ 449.090659][T14195] usb usb8: usbfs: process 14195 (syz.3.2784) did not claim interface 0 before use [ 450.226789][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2790'. [ 450.789745][ T5862] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 450.964250][ T5862] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 450.976432][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.989652][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.001145][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.009861][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.019537][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.039236][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.050238][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.104892][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.132834][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.169880][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.198614][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.222465][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.231829][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.246400][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.294593][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.313077][ T5921] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 451.320999][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.338161][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.370456][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.407631][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.423019][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.451813][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.467362][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.499690][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 451.503061][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.542901][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.570688][ T5862] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 451.592232][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 451.600595][ T5862] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 451.655153][ T5862] usb 5-1: Product: syz [ 451.669594][ T5862] usb 5-1: Manufacturer: syz [ 451.692398][ T5921] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 451.692749][ T5862] usb 5-1: SerialNumber: syz [ 451.716019][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.740952][ T5921] usb 2-1: Product: syz [ 451.748139][ T5862] usb 5-1: config 0 descriptor?? [ 451.753169][ T5921] usb 2-1: Manufacturer: syz [ 451.753192][ T5921] usb 2-1: SerialNumber: syz [ 451.771134][ T5921] usb 2-1: config 0 descriptor?? [ 451.801623][ T5921] hub 2-1:0.0: bad descriptor, ignoring hub [ 451.809602][ T5862] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 451.826079][ T5921] hub 2-1:0.0: probe with driver hub failed with error -5 [ 451.851454][ T5921] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 452.258548][T14279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2806'. [ 453.555383][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 453.732538][ T5987] usb 5-1: USB disconnect, device number 25 [ 453.763771][ T5987] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 454.128085][ T5987] usb 2-1: USB disconnect, device number 23 [ 454.726734][T14319] netlink: 'syz.1.2818': attribute type 5 has an invalid length. [ 455.228098][ T51] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 456.212860][T14360] kvm: kvm [14350]: vcpu0, guest rIP: 0x1a Unhandled WRMSR(0xc2) = 0x8000 [ 456.711221][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 456.720636][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 456.728643][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 456.736733][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 456.744869][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 456.753241][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 456.761374][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 456.769240][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 456.778600][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 456.786956][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 457.372991][T14396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2847'. [ 457.448242][T14399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2849'. [ 457.819355][T14409] syzkaller1: entered promiscuous mode [ 457.826722][T14409] syzkaller1: entered allmulticast mode [ 459.195560][T14423] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2858'. [ 459.483420][T14434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2862'. [ 459.887768][T14437] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2865'. [ 460.051125][T14440] kvm: kvm [14438]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0xc1) = 0x60000000000 [ 460.086107][T14440] kvm: kvm [14438]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0xc2) = 0x60000000000 [ 460.183216][T14440] kvm: kvm [14438]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0x11e) = 0x60000000000 [ 460.207987][T14440] kvm: kvm [14438]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0x186) = 0x60000000000 [ 460.248679][T14440] kvm: kvm [14438]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0x187) = 0x60000000000 [ 460.985820][ T5922] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 461.098687][T14467] loop6: detected capacity change from 0 to 7 [ 461.146385][T14467] loop6: [POWERTEC] p1 p2 p3 [ 461.151336][T14467] loop6: p1 start 469762048 is beyond EOD, truncated [ 461.185250][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 461.208485][T14467] loop6: p2 size 1986356271 extends beyond EOD, truncated [ 461.220307][ T5922] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 461.231177][ T5922] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 461.244775][ T5922] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 461.254541][T14467] loop6: p3 start 134976 is beyond EOD, truncated [ 461.281422][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 461.302093][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 461.328984][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 461.346665][ T5976] udevd[5976]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 461.359116][ T5922] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 461.370706][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.392308][ T5922] usb 2-1: config 0 descriptor?? [ 461.644295][ T5922] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 461.723247][ T5922] usb 2-1: USB disconnect, device number 24 [ 461.757544][ T5922] usblp0: removed [ 462.036185][ T30] audit: type=1800 audit(1757365478.563:106): pid=14471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2877" name="file0" dev="fuse" ino=2 res=0 errno=0 [ 462.278961][ T5922] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 462.472808][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 462.479949][ T5922] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 462.496459][ T5922] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 462.522665][ T5922] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 462.596095][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 462.622248][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 462.662811][ T5921] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 462.674820][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 462.742261][ T5922] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 462.811957][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.840685][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 462.856276][ T5921] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 462.872794][ T5921] usb 4-1: config 0 has no interface number 0 [ 462.896523][ T5922] usb 2-1: config 0 descriptor?? [ 462.901748][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 462.940811][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 462.982879][ T5921] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 462.999871][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 463.014023][ T5921] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 463.023661][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.041178][ T5921] usb 4-1: config 0 descriptor?? [ 463.059186][ T5921] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 463.209860][ T5922] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 463.564570][ T2154] usb 2-1: USB disconnect, device number 25 [ 463.568114][ T5922] usb 4-1: USB disconnect, device number 38 [ 463.600986][ T2154] usblp1: removed [ 463.612093][ T5922] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 464.144470][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2903'. [ 464.274043][T14539] netlink: 648 bytes leftover after parsing attributes in process `syz.3.2903'. [ 466.930796][T14603] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 467.972069][ T30] audit: type=1326 audit(1757365484.503:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06852adb9 code=0x7ffc0000 [ 468.247459][ T30] audit: type=1326 audit(1757365484.503:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06852adb9 code=0x7ffc0000 [ 468.269767][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.555793][ T30] audit: type=1326 audit(1757365484.503:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06852adb9 code=0x7ffc0000 [ 468.678622][ T30] audit: type=1326 audit(1757365484.503:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06852adb9 code=0x7ffc0000 [ 468.700975][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.829220][ T30] audit: type=1326 audit(1757365484.503:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06852adb9 code=0x7ffc0000 [ 468.853818][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.944924][ T30] audit: type=1326 audit(1757365484.503:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06852adb9 code=0x7ffc0000 [ 468.967489][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.025630][ T30] audit: type=1326 audit(1757365484.503:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06852adb9 code=0x7ffc0000 [ 469.052831][ T30] audit: type=1326 audit(1757365484.503:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06852adb9 code=0x7ffc0000 [ 469.082853][ T30] audit: type=1326 audit(1757365484.503:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06852adb9 code=0x7ffc0000 [ 469.105138][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.287982][ T30] audit: type=1326 audit(1757365484.503:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06852adb9 code=0x7ffc0000 [ 469.342500][T14629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.010490][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'. [ 470.063888][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'. [ 476.029758][ T2154] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 476.254071][ T2154] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.271402][ T2154] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.307805][ T2154] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.319767][ T2154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.599672][ T2154] usb 2-1: usb_control_msg returned -32 [ 476.610188][ T2154] usbtmc 2-1:16.0: can't read capabilities [ 476.918011][T14791] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.961906][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2992'. [ 477.085877][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2993'. [ 477.203346][T14803] loop2: detected capacity change from 0 to 7 [ 477.218276][T14803] loop2: [ 477.221580][T14803] loop2: partition table partially beyond EOD, truncated [ 477.542986][ T980] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 477.705146][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.720433][ T980] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 477.741474][T14819] net_ratelimit: 22 callbacks suppressed [ 477.741493][T14819] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 477.742842][ T980] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.763893][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.772060][ T980] usb 5-1: Product: syz [ 477.779263][ T980] usb 5-1: Manufacturer: syz [ 477.787194][ T980] usb 5-1: SerialNumber: syz [ 478.018475][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.038552][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.058842][ T980] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 478.093198][ T980] usb 5-1: USB disconnect, device number 26 [ 478.288476][T14832] loop2: detected capacity change from 0 to 7 [ 478.304126][T14832] loop2: [ 478.307270][T14832] loop2: partition table partially beyond EOD, truncated [ 478.593400][ T980] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 478.757446][ T2154] usb 2-1: USB disconnect, device number 26 [ 478.773135][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 478.790498][ T980] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 478.809641][ T980] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 478.824118][ T980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.839754][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.851873][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 478.865263][ T980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.877207][ T980] usb 5-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.894652][ T980] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.907149][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.137473][ T980] usb 5-1: usb_control_msg returned -32 [ 479.145988][ T980] usbtmc 5-1:16.0: can't read capabilities [ 479.154231][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.160601][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.167209][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.173290][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.179434][ C1] usbtmc 5-1:16.0: invalid notification: 11 [ 479.185707][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.191954][ C1] usbtmc 5-1:16.0: invalid notification: 2 [ 479.198046][ C1] usbtmc 5-1:16.0: invalid notification: 5 [ 479.204278][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.210334][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.216420][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.222459][ C1] usbtmc 5-1:16.0: invalid notification: 40 [ 479.232894][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.239058][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.245159][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.251218][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.257435][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.267726][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.274210][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.280281][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.286370][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.292420][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.298999][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.305158][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.311226][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.317485][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.323666][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.329738][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.335816][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.341891][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.347982][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.354208][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.360292][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.367487][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.373844][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.379908][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.386869][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.393380][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.399585][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.405845][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.411907][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.417936][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.424028][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.430084][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.436317][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.442367][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.448428][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.456780][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.462902][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.469527][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.475572][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.481604][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.487706][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.493869][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.499925][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.505990][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.512082][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.518168][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.524248][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.530316][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.536367][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.542459][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.548643][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.554702][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.561128][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.568254][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.574574][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.580628][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.586721][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.592921][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.599025][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.605151][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.611325][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.617368][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.618279][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3012'. [ 479.623597][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.623803][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.624002][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.624204][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.656774][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.663036][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.669291][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.675642][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.681703][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.687822][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.694082][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.700193][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.706330][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.712403][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.718526][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.724715][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.730902][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.736976][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.743229][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.749302][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.755504][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.761566][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.767712][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.773943][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.780088][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.786201][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.792264][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.798407][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.804588][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.810685][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.816849][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.822928][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.828975][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.835385][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.841957][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.848047][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.854293][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.860344][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.866426][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.872515][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.879113][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.885832][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.892341][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.898469][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.904590][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.910628][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.916737][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.922829][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.928927][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.935141][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.941368][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.947438][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.953517][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.959570][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.965668][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.971762][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.978195][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.984521][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 479.992552][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.000026][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.006167][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.012238][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.018479][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.024760][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.030846][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.036916][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.043147][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.049274][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.055493][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.061759][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.067919][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.074295][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.080654][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.086834][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.092924][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.098976][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.105104][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.111332][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.117378][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.123448][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.129508][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.135557][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.141707][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.147972][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.154268][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.160330][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.166446][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.172502][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.178684][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.185047][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.191856][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.198228][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.204422][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.210489][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.216562][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.222742][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.228917][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.239660][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.245924][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.252034][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.258094][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.264193][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.270235][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.276404][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.282633][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.288706][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.294945][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.301043][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.307122][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.313235][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.319302][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.325404][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.331475][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.337563][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.343646][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.349729][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.355824][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.361901][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.368149][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.374238][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.380331][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 480.841920][ T2154] usb 5-1: USB disconnect, device number 27 [ 481.231127][T14871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3018'. [ 482.675076][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 482.675096][ T30] audit: type=1326 audit(1757365499.213:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06858ebe9 code=0x7ffc0000 [ 482.703713][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.741104][ T30] audit: type=1326 audit(1757365499.243:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff06858ebe9 code=0x7ffc0000 [ 482.769604][ T30] audit: type=1326 audit(1757365499.263:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff06858ebe9 code=0x7ffc0000 [ 482.791984][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.837933][ T30] audit: type=1326 audit(1757365499.263:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff06858ebe9 code=0x7ffc0000 [ 482.926632][ T30] audit: type=1326 audit(1757365499.263:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff06858ebe9 code=0x7ffc0000 [ 483.002463][ T30] audit: type=1326 audit(1757365499.303:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff06858ebe9 code=0x7ffc0000 [ 483.034143][ T30] audit: type=1326 audit(1757365499.333:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff06858ebe9 code=0x7ffc0000 [ 483.057775][ T30] audit: type=1326 audit(1757365499.343:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff06858ebe9 code=0x7ffc0000 [ 483.193200][ T5864] Bluetooth: hci0: command 0x0406 tx timeout [ 483.212155][ T30] audit: type=1326 audit(1757365499.343:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff06858ebe9 code=0x7ffc0000 [ 483.371017][ T30] audit: type=1326 audit(1757365499.343:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff06858ebe9 code=0x7ffc0000 [ 486.515081][T14958] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3050'. [ 486.536324][T14958] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3050'. [ 487.236214][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.244103][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.754776][T14976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.826134][T14976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.293031][ T9047] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.340166][ T9047] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.365470][ T9047] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.376006][ T9047] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.435685][T15008] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 488.499148][ T9047] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.538353][ T9047] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.559913][ T9047] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.577079][ T9047] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.133366][T15057] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 491.133366][T15057] The task syz.4.3085 (15057) triggered the difference, watch for misbehavior. [ 492.189817][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3091'. [ 493.102810][ T5868] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 493.265083][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.299693][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.323426][ T5868] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 493.350598][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.370327][ T5868] usb 4-1: config 0 descriptor?? [ 493.523362][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3104'. [ 493.960480][ T5868] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 493.967673][ T5868] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 493.974801][ T5868] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 493.981801][ T5868] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 493.989450][ T5868] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 493.997521][ T5868] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 494.005609][ T5868] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 494.018027][ T5868] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 494.108473][ T5868] cp2112 0003:10C4:EA90.0021: Part Number: 0x00 Device Version: 0x00 [ 494.493006][T15002] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 494.687920][T15002] usb 3-1: Using ep0 maxpacket: 8 [ 494.706797][T15002] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 494.715721][ T5868] cp2112 0003:10C4:EA90.0021: error reading lock byte: -71 [ 494.730761][T15002] usb 3-1: config 179 has no interface number 0 [ 494.752237][T15002] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 494.765897][ T5868] usb 4-1: USB disconnect, device number 39 [ 494.776163][T15002] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 494.807451][T15002] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.829256][T15002] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 494.845105][T15002] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 494.868263][T15123] syzkaller1: entered promiscuous mode [ 494.875676][T15123] syzkaller1: entered allmulticast mode [ 494.878367][T15002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.894956][T15116] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 495.048721][T15125] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3111'. [ 495.235367][ T5973] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input49 [ 495.521862][ T5949] usb 3-1: USB disconnect, device number 40 [ 495.521896][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 495.536770][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 495.903082][ T5973] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 496.101744][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.142410][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.187907][ T5973] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 496.229612][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.282328][ T5973] usb 2-1: config 0 descriptor?? [ 496.737054][ T5973] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 496.783687][ T5973] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 496.936050][ T5973] cp2112 0003:10C4:EA90.0022: Part Number: 0x82 Device Version: 0xFE [ 497.221057][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 497.567737][ T5973] cp2112 0003:10C4:EA90.0022: error reading lock byte: -71 [ 497.592949][ T5921] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 497.608368][ T5973] usb 2-1: USB disconnect, device number 27 [ 497.773117][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 497.800955][ T5921] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 497.829981][ T5921] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.863100][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.890181][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.890251][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 497.902335][ T5921] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.925313][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 497.936782][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 497.949706][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 497.963095][ T5921] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 497.974568][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 497.982001][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.231354][ T5921] usb 4-1: GET_CAPABILITIES returned 0 [ 498.245915][ T5921] usbtmc 4-1:16.0: can't read capabilities [ 498.558419][ T5973] usb 4-1: USB disconnect, device number 40 [ 498.576509][T15164] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 498.860298][T15175] chnl_net:caif_netlink_parms(): no params data found [ 499.190977][T15175] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.239522][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.249272][T15175] bridge_slave_0: entered allmulticast mode [ 499.257602][T15175] bridge_slave_0: entered promiscuous mode [ 499.284185][T15175] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.302872][T15175] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.310174][T15175] bridge_slave_1: entered allmulticast mode [ 499.344172][T15175] bridge_slave_1: entered promiscuous mode [ 499.511179][T15175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.573625][T15175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.735762][T15226] netlink: 'syz.2.3150': attribute type 4 has an invalid length. [ 499.740293][T15175] team0: Port device team_slave_0 added [ 499.754785][T15175] team0: Port device team_slave_1 added [ 499.792155][T15230] netlink: 'syz.2.3150': attribute type 4 has an invalid length. [ 499.842859][ T5868] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 499.870842][T15175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.877990][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.907281][T15175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.925120][T15175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.933508][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.960604][T15175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.003008][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 500.014793][ T5868] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 500.040380][ T5868] usb 4-1: config 0 has no interface number 0 [ 500.063441][ T5868] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 500.073074][ T51] Bluetooth: hci0: command tx timeout [ 500.093353][ T5868] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 17056, setting to 1024 [ 500.128914][ T5868] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 500.165099][T15175] hsr_slave_0: entered promiscuous mode [ 500.172380][T15175] hsr_slave_1: entered promiscuous mode [ 500.178628][ T5868] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 500.181200][T15175] debugfs: 'hsr0' already exists in 'hsr' [ 500.195686][T15175] Cannot create hsr debugfs directory [ 500.218998][ T5868] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 8568, setting to 1024 [ 500.256130][ T5868] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 500.300864][ T5868] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 500.328874][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.375388][ T5868] usb 4-1: config 0 descriptor?? [ 500.400719][ T5868] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 500.592831][ T5973] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 500.756919][ T5973] usb 3-1: config 1 interface 0 has no altsetting 0 [ 500.770277][ T5973] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 500.793112][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.833038][ T5973] usb 3-1: Product: syz [ 500.837368][ T5973] usb 3-1: Manufacturer: syz [ 500.842204][ T5973] usb 3-1: SerialNumber: syz [ 501.250256][ T5921] usb 4-1: USB disconnect, device number 41 [ 501.304353][ T5921] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 501.439060][T15175] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 501.452138][T15175] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 501.465667][T15175] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 501.489810][T15175] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 501.547961][ T5973] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 501.601798][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.608409][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.683072][T15175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.734684][T15175] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.762539][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.769774][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.793909][T12981] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.801104][T12981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.969728][T15175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.128451][T15175] veth0_vlan: entered promiscuous mode [ 502.153958][ T51] Bluetooth: hci0: command tx timeout [ 502.173741][T15175] veth1_vlan: entered promiscuous mode [ 502.310697][T15175] veth0_macvtap: entered promiscuous mode [ 502.345195][T15175] veth1_macvtap: entered promiscuous mode [ 502.429452][T15175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.476624][T15175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.509342][ T9050] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.530999][ T9050] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.579926][ T9050] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.603111][ T9050] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.769771][T12981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.795302][T12981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.812789][ T5921] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 502.900604][T12981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.915981][T12981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.006166][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 503.042229][ T5921] usb 2-1: config 1 has no interface number 0 [ 503.067349][ T5921] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.118138][ T5921] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 503.148356][ T5921] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 503.177579][ T5921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.206194][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.224602][ T5921] usb 2-1: Product: syz [ 503.234367][ T5921] usb 2-1: Manufacturer: syz [ 503.243974][ T5921] usb 2-1: SerialNumber: syz [ 503.424088][ T5948] usb 3-1: USB disconnect, device number 41 [ 503.468901][ T5948] usblp0: removed [ 503.765122][T15301] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 504.167343][ T5921] cdc_ncm 2-1:1.1: bind() failure [ 504.232898][ T51] Bluetooth: hci0: command tx timeout [ 504.475183][ T2154] usb 2-1: USB disconnect, device number 28 [ 504.871161][T15322] syz.3.3169 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 506.193071][T15364] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.3180'. [ 506.212369][T15364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3180'. [ 506.312828][ T51] Bluetooth: hci0: command tx timeout [ 507.533049][ T5950] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 507.709592][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 507.762109][ T5950] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.808828][ T5950] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 507.835401][ T5950] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 507.888462][ T5950] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 507.975727][ T5950] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 508.012735][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.042487][ T5950] hub 3-1:1.0: bad descriptor, ignoring hub [ 508.067771][ T5950] hub 3-1:1.0: probe with driver hub failed with error -5 [ 508.125761][ T5950] cdc_wdm 3-1:1.0: skipping garbage [ 508.175971][ T5950] cdc_wdm 3-1:1.0: skipping garbage [ 508.213990][ T5950] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 508.219951][ T5950] cdc_wdm 3-1:1.0: Unknown control protocol [ 508.753035][T15392] usb 3-1: reset high-speed USB device number 42 using dummy_hcd [ 509.240560][ T5868] usb 3-1: USB disconnect, device number 42 [ 509.243290][T15392] cdc_wdm 3-1:1.0: Error autopm - -16 [ 509.720724][T15445] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 509.812812][ T5921] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 509.918652][T15454] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 509.999590][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.015673][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.032747][ T5921] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 510.103169][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.151280][ T5921] usb 6-1: config 0 descriptor?? [ 510.564269][T15468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'. [ 510.574461][ T5921] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 510.626138][T15471] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²ADvcŽ“ØÖ Å6Òxãc: (pid: 15471 comm: syz.7.3207) [ 510.670782][ T5921] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0023/input/input50 [ 510.720425][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 510.720444][ T30] audit: type=1800 audit(1757365527.253:306): pid=15471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3207" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B2414476638E93D8D6A0C536D278E3633A dev="mqueue" ino=67203 res=0 errno=0 [ 510.971877][ T5921] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 511.103799][ T5921] usb 6-1: USB disconnect, device number 4 [ 511.291587][T15487] fido_id[15487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 511.295522][T15492] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3212'. [ 511.317056][T15492] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3212'. [ 511.628142][T15502] gtp0: entered promiscuous mode [ 513.572885][ T5868] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 513.743467][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 513.791218][ T5868] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 513.842271][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 513.964045][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 514.021089][ T5868] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.081013][T15564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.087270][ T5868] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.127606][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.350130][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3231'. [ 514.422557][ C0] vxcan1: j1939_session_tx_dat: 0xffff888028b78000: queue data error: -100 [ 514.431482][ T5868] usb 2-1: GET_CAPABILITIES returned 0 [ 514.477276][ T5868] usbtmc 2-1:16.0: can't read capabilities [ 514.912861][ T5950] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 515.092948][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 515.143303][ T5950] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 515.218711][ T5950] usb 3-1: config 0 has no interface number 0 [ 515.259823][ T5950] usb 3-1: config 0 interface 89 has no altsetting 0 [ 515.320964][ T5950] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 515.376604][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.409663][ T2154] usb 2-1: USB disconnect, device number 29 [ 515.430262][ T5950] usb 3-1: Product: syz [ 515.436063][ T5950] usb 3-1: Manufacturer: syz [ 515.440793][ T5950] usb 3-1: SerialNumber: syz [ 515.450075][ T5950] usb 3-1: config 0 descriptor?? [ 515.461243][ T5950] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 515.491697][ T5950] em28xx 3-1:0.89: Video interface 89 found: bulk [ 516.091252][ T5950] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 516.518820][T15600] loop6: detected capacity change from 0 to 7 [ 516.549194][T15600] Dev loop6: unable to read RDB block 7 [ 516.573537][T15600] loop6: unable to read partition table [ 516.584066][T15600] loop6: partition table beyond EOD, truncated [ 516.603245][T15600] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 516.981109][ T5950] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 517.029460][ T5950] em28xx 3-1:0.89: board has no eeprom [ 517.133017][ T5950] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 517.140466][ T5950] em28xx 3-1:0.89: analog set to bulk mode. [ 517.164631][ T5949] em28xx 3-1:0.89: Registering V4L2 extension [ 517.232171][ T5950] usb 3-1: USB disconnect, device number 43 [ 517.274583][ T5950] em28xx 3-1:0.89: Disconnecting em28xx [ 517.496818][ T5949] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 517.542292][ T5949] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 517.595894][ T5949] em28xx 3-1:0.89: No AC97 audio processor [ 517.645404][ T5949] usb 3-1: Decoder not found [ 517.670597][ T5949] em28xx 3-1:0.89: failed to create media graph [ 517.707125][ T5949] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 517.734670][ T5949] em28xx 3-1:0.89: Registering snapshot button... [ 517.763076][ T5949] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input51 [ 517.841778][ T5949] em28xx 3-1:0.89: Remote control support is not available for this card. [ 517.895098][ T5950] em28xx 3-1:0.89: Closing input extension [ 517.925862][ T5950] em28xx 3-1:0.89: Deregistering snapshot button [ 518.074489][ T5950] em28xx 3-1:0.89: Freeing device [ 519.612000][T15678] netlink: 'syz.7.3265': attribute type 3 has an invalid length. [ 519.637174][T15678] netlink: 240 bytes leftover after parsing attributes in process `syz.7.3265'. [ 520.403475][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3272'. [ 520.666236][T15709] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3274'. [ 521.399763][T15735] VFS: Lookup of 'syz1' in fuse fuse would have caused loop [ 521.603956][ T5950] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 521.784350][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 521.826165][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 521.842925][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 521.854090][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.893288][ T5950] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.949420][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.998824][ T5950] usb 4-1: config 0 descriptor?? [ 522.477811][ T5950] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 523.247941][T15776] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 523.410438][ T5948] usb 4-1: USB disconnect, device number 42 [ 523.423309][ T5949] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 523.613520][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 523.632577][ T5949] usb 2-1: unable to get BOS descriptor or descriptor too short [ 523.650864][ T5949] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.672603][ T5949] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 523.694161][ T5949] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.709240][ T5949] usb 2-1: config 1 interface 0 has no altsetting 0 [ 523.730462][ T5949] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 523.751458][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.771352][ T5949] usb 2-1: Product: syz [ 523.782509][ T5949] usb 2-1: Manufacturer: syz [ 523.792601][ T5949] usb 2-1: SerialNumber: syz [ 523.815038][T15774] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 524.050820][ T5949] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input53 [ 524.352262][T15796] bond1: entered promiscuous mode [ 524.360267][T15796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.647898][ T5219] bcm5974 2-1:1.0: could not read from device [ 524.719399][ T5949] bcm5974 2-1:1.0: could not read from device [ 524.875092][ T5219] bcm5974 2-1:1.0: could not read from device [ 525.001322][ T5949] input: failed to attach handler mousedev to device input53, error: -5 [ 525.035486][ T5219] bcm5974 2-1:1.0: could not read from device [ 525.057182][ T5949] usb 2-1: USB disconnect, device number 30 [ 525.076118][ T5219] bcm5974 2-1:1.0: could not read from device [ 525.263080][ T5948] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 525.307263][T15829] binder: 15828:15829 ioctl c0306201 200000000640 returned -22 [ 525.433475][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 525.466683][ T5948] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 525.490725][ T5948] usb 3-1: config 179 has no interface number 0 [ 525.516402][ T5948] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 525.555024][ T5948] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 525.597357][ T5948] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 525.646132][ T5948] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 525.698390][ T5948] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 525.729116][ T5948] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 525.790354][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.846482][T15824] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 526.082900][ T5949] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 526.119026][ T5948] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input54 [ 526.264979][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.276762][ T5949] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 526.286449][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.357931][ T5949] usb 6-1: config 0 descriptor?? [ 526.389542][ T980] usb 3-1: USB disconnect, device number 44 [ 526.389577][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 526.403917][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 526.610812][T15845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.628438][T15845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.875477][ T5949] usbhid 6-1:0.0: can't add hid device: -71 [ 526.891851][ T5949] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 526.928651][ T5949] usb 6-1: USB disconnect, device number 5 [ 527.481357][ T5949] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 527.656658][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.692744][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.708569][ T5949] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 527.732751][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.754091][ T5949] usb 2-1: config 0 descriptor?? [ 527.892912][ T5948] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 528.083243][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 528.090498][ T5948] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 528.100298][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.120810][ T5948] usb 3-1: config 0 descriptor?? [ 528.132100][ T5948] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 528.179854][ T5949] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 528.187487][ T5949] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 528.198802][ T5949] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0025/input/input55 [ 528.224931][ T5949] cm6533_jd 0003:0D8C:0022.0025: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 528.393664][ T5949] usb 2-1: USB disconnect, device number 31 [ 528.844043][T15899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3330'. [ 528.870359][T15899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3330'. [ 528.881594][T15899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3330'. [ 528.899946][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3331'. [ 528.911543][T15902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3330'. [ 528.931202][T15902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3330'. [ 528.961714][T15902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3330'. [ 528.980169][T15899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3330'. [ 529.013640][T15901] netlink: 'syz.5.3331': attribute type 1 has an invalid length. [ 529.041431][T15899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3330'. [ 529.052294][T15899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3330'. [ 529.510256][ T5868] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 529.663427][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 529.702259][ T5868] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 529.715047][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.736244][ T5868] usb 6-1: Product: syz [ 529.740522][ T5868] usb 6-1: Manufacturer: syz [ 529.757126][ T5948] gspca_vc032x: reg_w err -71 [ 529.772747][ T5868] usb 6-1: SerialNumber: syz [ 529.779061][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.784954][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.790302][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.796777][ T5868] usb 6-1: config 0 descriptor?? [ 529.817928][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.823742][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.832459][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.848623][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.849853][T15925] loop4: detected capacity change from 0 to 7 [ 529.860816][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.860857][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.860869][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.860879][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.875301][T15925] Dev loop4: unable to read RDB block 7 [ 529.888208][T15925] loop4: AHDI p1 p2 p3 [ 529.891898][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.892409][T15925] loop4: partition table partially beyond EOD, [ 529.900949][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.907823][T15925] truncated [ 529.923302][T15925] loop4: p1 start 16843009 is beyond EOD, truncated [ 529.925418][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.962767][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.981983][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 529.997863][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.015788][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.041520][ T5948] gspca_vc032x: Unknown sensor... [ 530.053118][ T5948] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 530.065641][ T5948] usb 3-1: USB disconnect, device number 45 [ 530.235846][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 530.248425][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 530.270611][ T5868] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 530.288287][ T5868] gspca_sunplus: reg_w_riv err -71 [ 530.295863][ T5868] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 530.310636][ T5868] usb 6-1: USB disconnect, device number 6 [ 532.533026][ T5868] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 532.723978][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 532.744218][ T5868] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 532.759089][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.767542][ T5868] usb 3-1: Product: syz [ 532.771909][ T5868] usb 3-1: Manufacturer: syz [ 532.796768][ T5868] usb 3-1: SerialNumber: syz [ 532.809693][ T5868] usb 3-1: config 0 descriptor?? [ 532.867143][ T5868] as10x_usb: device has been detected [ 532.879899][ T5868] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 532.918402][ T5868] usb 3-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 533.137393][ T5868] as10x_usb: error during firmware upload part1 [ 533.145174][T15972] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 533.164313][T15972] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 533.171682][ T5868] Registered device Sky IT Digital Key (green led) [ 533.191963][T15972] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 533.236515][T15972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 533.242843][T15972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 533.261513][T15972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 533.298211][T15972] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 533.318876][T15972] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 533.334105][T15972] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 533.357956][T15988] random: crng reseeded on system resumption [ 533.406140][ T980] usb 3-1: USB disconnect, device number 46 [ 533.457784][ T980] Unregistered device Sky IT Digital Key (green led) [ 533.459817][ T980] as10x_usb: device has been disconnected [ 533.622622][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.810384][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.960707][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.224982][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.652786][ T5921] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 534.819095][ T12] bridge_slave_1: left allmulticast mode [ 534.839696][ T12] bridge_slave_1: left promiscuous mode [ 534.845800][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.861239][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.882721][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.925142][ T5921] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 534.941983][T16024] __nla_validate_parse: 9 callbacks suppressed [ 534.942004][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3377'. [ 534.957429][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 534.966683][ T12] bridge_slave_0: left allmulticast mode [ 534.979586][ T5921] usb 3-1: SerialNumber: syz [ 534.987897][T16027] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 535.006815][T16029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3377'. [ 535.010975][T16027] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 535.025004][T16027] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 535.032114][ T12] bridge_slave_0: left promiscuous mode [ 535.039389][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.047459][T16027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.055544][T16027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.193388][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 535.194742][T16027] Bluetooth: hci4: command 0x0c1a tx timeout [ 535.200729][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 535.246263][ T5921] usb 3-1: 0:2 : does not exist [ 535.290682][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 535.324288][ T5921] usb 3-1: USB disconnect, device number 47 [ 535.438991][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.054341][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.069282][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.080733][ T12] bond0 (unregistering): Released all slaves [ 536.122869][ T5921] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 536.270837][ T12] bond1 (unregistering): Released all slaves [ 536.292866][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 536.298192][T16022] syzkaller1: entered promiscuous mode [ 536.298216][T16022] syzkaller1: entered allmulticast mode [ 536.313220][ T5921] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 536.321934][ T5921] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 536.335104][ T5921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 536.346248][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 536.386089][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 536.410884][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 536.436870][ T5921] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 536.446337][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.482613][ T5921] usb 3-1: config 0 descriptor?? [ 536.746482][ T5921] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 536.844275][ T5921] usb 3-1: USB disconnect, device number 48 [ 536.878811][ T5921] usblp0: removed [ 537.113732][ T51] Bluetooth: hci0: command tx timeout [ 537.283800][ T5921] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 537.352866][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 537.389477][ T12] hsr_slave_0: left promiscuous mode [ 537.457201][ T12] hsr_slave_1: left promiscuous mode [ 537.477950][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 537.504048][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.505246][ T5921] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 537.511509][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.562201][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.585303][ T5921] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 537.616760][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.624995][ T5921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 537.667550][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 537.690838][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 537.709862][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 537.720710][ T12] veth1_macvtap: left promiscuous mode [ 537.730822][ T5921] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 537.750233][ T12] veth0_macvtap: left promiscuous mode [ 537.755999][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.759153][ T12] veth1_vlan: left promiscuous mode [ 537.769735][ T12] veth0_vlan: left promiscuous mode [ 537.795391][ T5921] usb 3-1: config 0 descriptor?? [ 537.885076][ T5973] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 538.015123][ T5921] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 538.084790][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.101067][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.123298][ T5973] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 538.132403][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.148520][ T5973] usb 4-1: config 0 descriptor?? [ 538.288351][ C0] usblp0: nonzero read bulk status received: -71 [ 538.296960][ T5868] usb 3-1: USB disconnect, device number 49 [ 538.521104][T16043] usblp0: removed [ 538.638994][ T12] team0 (unregistering): Port device team_slave_1 removed [ 538.694766][ T12] team0 (unregistering): Port device team_slave_0 removed [ 539.200077][ T51] Bluetooth: hci0: command tx timeout [ 539.411701][ T5973] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0026/input/input56 [ 539.432894][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 539.546334][ T5973] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0026/input/input57 [ 539.607545][ T5973] uclogic 0003:256C:006D.0026: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 539.684738][ T5973] usb 4-1: USB disconnect, device number 43 [ 539.831665][T16090] fido_id[16090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 540.093470][ T51] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 540.358664][T16031] chnl_net:caif_netlink_parms(): no params data found [ 540.429688][T16107] syz_tun: entered allmulticast mode [ 540.507757][T16106] syz_tun: left allmulticast mode [ 540.878930][T16031] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.921714][T16031] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.933551][T16031] bridge_slave_0: entered allmulticast mode [ 540.950441][T16031] bridge_slave_0: entered promiscuous mode [ 540.971204][T16031] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.978500][T16031] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.997513][T16031] bridge_slave_1: entered allmulticast mode [ 541.041692][T16031] bridge_slave_1: entered promiscuous mode [ 541.278011][ T51] Bluetooth: hci0: command tx timeout [ 541.415439][T16031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.471394][T16031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.649724][T16031] team0: Port device team_slave_0 added [ 541.688638][T16031] team0: Port device team_slave_1 added [ 542.030221][T16031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.073100][T16031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.213747][T16031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.415078][T16031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.457898][T16031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.584666][T16031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.803533][T16172] loop7: detected capacity change from 0 to 16384 [ 543.203320][T16173] loop7: detected capacity change from 16384 to 16383 [ 543.352913][ T51] Bluetooth: hci0: command tx timeout [ 543.390061][T16031] hsr_slave_0: entered promiscuous mode [ 543.434023][T16031] hsr_slave_1: entered promiscuous mode [ 543.440175][T16031] debugfs: 'hsr0' already exists in 'hsr' [ 543.515568][T16031] Cannot create hsr debugfs directory [ 545.727141][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3427'. [ 546.701969][T16031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 546.769299][T16031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 546.891124][T16031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 546.953458][T16031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 547.578255][T16260] netlink: 212924 bytes leftover after parsing attributes in process `syz.7.3436'. [ 547.746618][T16031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.892043][T16031] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.009278][ T9047] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.016655][ T9047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.158796][T12981] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.166045][T12981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.247388][T16284] ip6tnl0: Master is either lo or non-ether device [ 548.395977][T16031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.586484][T16031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.785640][T16031] veth0_vlan: entered promiscuous mode [ 548.861606][T16031] veth1_vlan: entered promiscuous mode [ 549.353273][ T5950] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 549.361629][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.386235][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.459397][T16031] veth0_macvtap: entered promiscuous mode [ 549.562828][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.603838][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.634777][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.639861][ T5950] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 549.662942][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.739356][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.805367][T16031] veth1_macvtap: entered promiscuous mode [ 549.818563][ T5950] usb 4-1: config 0 descriptor?? [ 550.016177][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.040437][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.118204][T16031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.314059][ T5950] steelseries 0003:1038:12B6.0027: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 550.380020][ T61] bond0: (slave netdevsim0): Releasing backup interface [ 550.443991][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 550.486031][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 550.538616][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.570443][T16329] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 550.589743][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.708276][T16031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.773157][ T5868] usb 4-1: USB disconnect, device number 44 [ 550.819169][T12981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.869083][T12981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.994684][T12981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.043697][T12981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.284993][T16033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.307778][T16033] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.323026][T16033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.348321][T16033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 551.359022][T16033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 551.527367][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.581027][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.699326][ T61] bridge_slave_1: left allmulticast mode [ 551.712479][ T61] bridge_slave_1: left promiscuous mode [ 551.738817][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.765338][ T61] bridge_slave_0: left allmulticast mode [ 551.791680][ T61] bridge_slave_0: left promiscuous mode [ 551.806717][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.839101][T16357] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.3464'. [ 551.870379][T16357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3464'. [ 552.312527][ T61] bond1 (unregistering): (slave gretap1): Releasing active interface [ 552.828251][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3466'. [ 552.975656][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.984745][ T61] bond_slave_0: left promiscuous mode [ 552.990704][ T61] bond_slave_0: left allmulticast mode [ 552.999989][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.009535][ T61] bond_slave_1: left promiscuous mode [ 553.015501][ T61] bond_slave_1: left allmulticast mode [ 553.023924][ T61] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 553.032529][ T61] dummy0: left promiscuous mode [ 553.038957][ T61] dummy0: left allmulticast mode [ 553.047666][ T61] bond0 (unregistering): Released all slaves [ 553.061816][ T61] bond1 (unregistering): Released all slaves [ 553.106698][T16378] bridge2: entered allmulticast mode [ 553.146637][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.180908][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.433274][T16033] Bluetooth: hci4: command tx timeout [ 554.746659][ T61] hsr_slave_0: left promiscuous mode [ 554.809236][ T61] hsr_slave_1: left promiscuous mode [ 554.850183][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.910190][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.983262][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.990698][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.022838][ T5949] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 555.203092][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 555.238053][ T5949] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 555.295222][ T5949] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 555.295428][ T61] team_slave_0: left promiscuous mode [ 555.310207][ T61] team_slave_1: left promiscuous mode [ 555.316078][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 555.383446][ T5949] usb 4-1: Product: syz [ 555.397126][ T61] veth1_macvtap: left promiscuous mode [ 555.408019][ T5949] usb 4-1: Manufacturer: syz [ 555.444545][ T5949] usb 4-1: SerialNumber: syz [ 555.445334][ T61] veth0_macvtap: left promiscuous mode [ 555.504243][ T5949] usb 4-1: config 0 descriptor?? [ 555.517858][ T51] Bluetooth: hci4: command tx timeout [ 555.525270][T16414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 556.310096][T16427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.366888][T16427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.013004][ T61] team0 (unregistering): Port device team_slave_1 removed [ 557.137920][ T61] team0 (unregistering): Port device team_slave_0 removed [ 557.595089][ T51] Bluetooth: hci4: command tx timeout [ 557.826760][ T5948] usb 4-1: USB disconnect, device number 45 [ 557.967710][T16452] loop2: detected capacity change from 0 to 7 [ 557.995626][ T5976] Dev loop2: unable to read RDB block 7 [ 558.001480][ T5976] loop2: unable to read partition table [ 558.014988][ T5976] loop2: partition table beyond EOD, truncated [ 558.022559][T16452] Dev loop2: unable to read RDB block 7 [ 558.031722][T16452] loop2: unable to read partition table [ 558.037998][T16452] loop2: partition table beyond EOD, truncated [ 558.046547][T16452] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 558.539428][T16346] chnl_net:caif_netlink_parms(): no params data found [ 558.966935][ T5950] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 559.158400][T16346] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.176271][ T5950] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 559.212994][ T5950] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 559.213102][T16346] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.248817][ T5950] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 559.258254][T16346] bridge_slave_0: entered allmulticast mode [ 559.271976][T16346] bridge_slave_0: entered promiscuous mode [ 559.286599][ T5950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 559.322476][ T980] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 559.336772][T16346] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.349011][ T61] IPVS: stop unused estimator thread 0... [ 559.353169][ T5950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 559.376676][T16346] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.395935][T16346] bridge_slave_1: entered allmulticast mode [ 559.411657][ T5950] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 559.434580][T16346] bridge_slave_1: entered promiscuous mode [ 559.448870][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 559.478890][ T5950] usb 2-1: Product: syz [ 559.483524][ T5950] usb 2-1: Manufacturer: syz [ 559.508136][ T5950] cdc_wdm 2-1:1.0: skipping garbage [ 559.513810][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 559.527097][ T980] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 559.552959][ T5950] cdc_wdm 2-1:1.0: skipping garbage [ 559.567609][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.585865][ T5950] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 559.591845][ T980] usb 4-1: Product: syz [ 559.596826][ T5950] cdc_wdm 2-1:1.0: Unknown control protocol [ 559.616930][ T980] usb 4-1: Manufacturer: syz [ 559.621597][ T980] usb 4-1: SerialNumber: syz [ 559.645376][T16346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.654026][ T980] usb 4-1: config 0 descriptor?? [ 559.672893][ T51] Bluetooth: hci4: command tx timeout [ 559.680010][ T980] as10x_usb: device has been detected [ 559.687098][ T980] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 559.721907][T16346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.722793][ T980] usb 4-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 559.819222][ T980] as10x_usb: error during firmware upload part1 [ 559.826172][ C1] wdm_int_callback: 99 callbacks suppressed [ 559.826195][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 559.828563][T15002] usb 2-1: USB disconnect, device number 32 [ 559.832211][ C1] wdm_int_callback: 99 callbacks suppressed [ 559.832232][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 559.856769][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 559.897453][ T980] Registered device Sky IT Digital Key (green led) [ 559.955648][T16475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.986708][T16475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.001751][T16475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 560.021088][T16475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.027374][T16475] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 560.094824][T16475] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 560.119282][T16346] team0: Port device team_slave_0 added [ 560.138925][T16475] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 560.142608][T16346] team0: Port device team_slave_1 added [ 560.173346][T16475] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 560.206738][T16475] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 560.250902][ T980] usb 4-1: USB disconnect, device number 46 [ 560.271888][T16346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.289606][ T980] Unregistered device Sky IT Digital Key (green led) [ 560.290934][T16346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.327337][ T980] as10x_usb: device has been disconnected [ 560.341109][T16346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.359771][T16346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.369558][T16346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.399937][T16346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.497663][T16346] hsr_slave_0: entered promiscuous mode [ 560.505366][T16346] hsr_slave_1: entered promiscuous mode [ 560.511976][T16346] debugfs: 'hsr0' already exists in 'hsr' [ 560.520247][T16346] Cannot create hsr debugfs directory [ 561.993146][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 561.993177][T16033] Bluetooth: hci2: command 0x0406 tx timeout [ 562.072869][T16033] Bluetooth: hci0: command 0x0c1a tx timeout [ 562.079191][T16033] Bluetooth: hci1: command 0x0c1a tx timeout [ 562.152971][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 562.364460][T16522] syzkaller0: entered promiscuous mode [ 562.411219][T16522] syzkaller0: entered allmulticast mode [ 563.046871][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.053281][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.616415][T16346] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 563.632796][ T980] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 563.704331][T16346] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 563.754242][T16346] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 563.787594][T16346] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 563.821067][ T980] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 563.849619][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.888297][ T980] usb 4-1: Product: syz [ 563.892536][ T980] usb 4-1: Manufacturer: syz [ 563.913007][ T980] usb 4-1: SerialNumber: syz [ 564.142038][T16346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.153664][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 564.237212][T16346] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.239098][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 564.267412][T12978] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.274745][T12978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.318928][T12978] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.326142][T12978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.485448][T16346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.689454][T16346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.886903][T16346] veth0_vlan: entered promiscuous mode [ 564.921390][T16346] veth1_vlan: entered promiscuous mode [ 565.016874][T16346] veth0_macvtap: entered promiscuous mode [ 565.041414][T16346] veth1_macvtap: entered promiscuous mode [ 565.094414][T16346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.140130][T16346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.178217][ T980] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 565.199173][ T1153] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.219337][ T1153] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.219383][ T980] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 565.233368][ T1153] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.266172][ T1153] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.278893][ T980] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 565.320192][ T980] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 565.363986][ T980] usb 4-1: USB disconnect, device number 47 [ 565.540185][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.567866][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.659785][T12978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.689850][T12978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.233362][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 566.313374][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 566.352855][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'. [ 567.080310][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.483086][T16641] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.492383][T16641] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.135823][T16641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.178179][T16641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.786983][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.902824][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.932336][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.977699][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.132343][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.268870][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.497321][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.509764][T16033] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 569.522472][T16033] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 569.534438][T16033] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 569.543795][T16033] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 569.551926][T16033] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 569.643644][T16695] binder: 16694:16695 ioctl c0306201 0 returned -14 [ 569.983902][T16702] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 570.192769][ T2154] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 570.225018][ T61] bridge_slave_1: left allmulticast mode [ 570.230730][ T61] bridge_slave_1: left promiscuous mode [ 570.248176][T16716] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3536'. [ 570.275441][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.316787][ T61] bridge_slave_0: left allmulticast mode [ 570.322610][ T61] bridge_slave_0: left promiscuous mode [ 570.371941][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.405658][ T2154] usb 4-1: Using ep0 maxpacket: 32 [ 570.423317][ T2154] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 570.451424][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.473640][ T2154] usb 4-1: Product: syz [ 570.477842][ T2154] usb 4-1: Manufacturer: syz [ 570.492873][ T2154] usb 4-1: SerialNumber: syz [ 570.525138][ T2154] usb 4-1: config 0 descriptor?? [ 570.560611][ T2154] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 571.052803][ T980] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 571.239270][ T980] usb 9-1: Using ep0 maxpacket: 8 [ 571.258581][ T980] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.289755][ T980] usb 9-1: config 0 has no interfaces? [ 571.298646][ T980] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 571.318519][ T980] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.364396][ T980] usb 9-1: Product: syz [ 571.389963][ T980] usb 9-1: Manufacturer: syz [ 571.411174][ T980] usb 9-1: SerialNumber: syz [ 571.447003][ T980] usb 9-1: config 0 descriptor?? [ 571.593076][T16033] Bluetooth: hci1: command tx timeout [ 571.628018][T16741] kvm: pic: non byte read [ 571.632929][T16741] kvm: pic: level sensitive irq not supported [ 571.633063][T16741] kvm: pic: non byte read [ 571.645947][T16741] kvm: pic: level sensitive irq not supported [ 571.646018][T16741] kvm: pic: non byte read [ 571.657206][T16741] kvm: pic: level sensitive irq not supported [ 571.657274][T16741] kvm: pic: non byte read [ 571.668294][T16741] kvm: pic: level sensitive irq not supported [ 571.668363][T16741] kvm: pic: non byte read [ 571.679355][T16741] kvm: pic: level sensitive irq not supported [ 571.679473][T16741] kvm: pic: non byte read [ 571.690358][T16741] kvm: pic: level sensitive irq not supported [ 571.690448][T16741] kvm: pic: non byte read [ 571.701414][T16741] kvm: pic: level sensitive irq not supported [ 571.701483][T16741] kvm: pic: non byte read [ 571.712544][T16741] kvm: pic: level sensitive irq not supported [ 571.712730][T16741] kvm: pic: non byte read [ 571.731153][ T980] usb 9-1: USB disconnect, device number 4 [ 572.140397][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.179181][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.199044][ T61] bond0 (unregistering): Released all slaves [ 572.257262][T16749] vlan2: entered allmulticast mode [ 572.268428][T16749] macvtap0: entered allmulticast mode [ 572.409207][ T2154] gspca_stk1135: reg_w 0x200 err -71 [ 572.445481][ T2154] gspca_stk1135: serial bus timeout: status=0x00 [ 572.454261][ T2154] gspca_stk1135: Sensor write failed [ 572.459626][ T2154] gspca_stk1135: serial bus timeout: status=0x00 [ 572.469488][ T2154] gspca_stk1135: Sensor write failed [ 572.476600][ T2154] gspca_stk1135: serial bus timeout: status=0x00 [ 572.485175][ T2154] gspca_stk1135: Sensor read failed [ 572.490450][ T2154] gspca_stk1135: serial bus timeout: status=0x00 [ 572.497912][ T2154] gspca_stk1135: Sensor read failed [ 572.503495][ T2154] gspca_stk1135: Detected sensor type unknown (0x0) [ 572.510330][ T2154] gspca_stk1135: serial bus timeout: status=0x00 [ 572.518208][ T2154] gspca_stk1135: Sensor read failed [ 572.526667][ T2154] gspca_stk1135: serial bus timeout: status=0x00 [ 572.534796][ T2154] gspca_stk1135: Sensor read failed [ 572.540067][ T2154] gspca_stk1135: serial bus timeout: status=0x00 [ 572.552056][ T2154] gspca_stk1135: Sensor write failed [ 572.586734][ T2154] gspca_stk1135: serial bus timeout: status=0x00 [ 572.608229][ T2154] gspca_stk1135: Sensor write failed [ 572.626563][ T2154] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 572.681242][ T2154] usb 4-1: USB disconnect, device number 48 [ 573.246207][ T61] hsr_slave_0: left promiscuous mode [ 573.268512][ T61] hsr_slave_1: left promiscuous mode [ 573.318116][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.336943][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.360042][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.385502][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.491572][ T61] veth1_macvtap: left promiscuous mode [ 573.508309][ T61] veth0_macvtap: left promiscuous mode [ 573.529608][ T61] veth1_vlan: left promiscuous mode [ 573.550351][ T61] veth0_vlan: left promiscuous mode [ 573.673256][T16033] Bluetooth: hci1: command tx timeout [ 574.795915][ T5973] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 574.815026][ T61] team0 (unregistering): Port device team_slave_1 removed [ 574.867341][ T61] team0 (unregistering): Port device team_slave_0 removed [ 574.979258][ T5973] usb 9-1: Using ep0 maxpacket: 16 [ 574.988691][ T5973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.999692][ T5973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.010119][ T5973] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 575.023102][ T5973] usb 9-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 575.032177][ T5973] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.044408][ T5973] usb 9-1: config 0 descriptor?? [ 575.483546][ T5973] hid-multitouch 0003:0457:07DA.0028: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.8-1/input0 [ 575.542076][T16692] chnl_net:caif_netlink_parms(): no params data found [ 575.764122][T16033] Bluetooth: hci1: command tx timeout [ 575.775443][ T5949] usb 9-1: USB disconnect, device number 5 [ 576.142398][T16810] syzkaller0: entered promiscuous mode [ 576.155977][T16810] syzkaller0: entered allmulticast mode [ 576.416372][T16692] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.450224][T16692] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.474721][T16692] bridge_slave_0: entered allmulticast mode [ 576.511573][T16692] bridge_slave_0: entered promiscuous mode [ 576.549880][T16692] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.570587][T16692] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.588667][T16692] bridge_slave_1: entered allmulticast mode [ 576.615966][T16692] bridge_slave_1: entered promiscuous mode [ 576.734795][T16692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.754679][T16692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.835128][T16692] team0: Port device team_slave_0 added [ 576.857412][T16692] team0: Port device team_slave_1 added [ 577.034926][T16692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.042042][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.069149][T16692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.088696][T16692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.096034][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.124131][T16692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.187482][T16692] hsr_slave_0: entered promiscuous mode [ 577.194414][T16692] hsr_slave_1: entered promiscuous mode [ 577.200597][T16692] debugfs: 'hsr0' already exists in 'hsr' [ 577.206746][T16692] Cannot create hsr debugfs directory [ 577.213019][T15002] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 577.416021][T15002] usb 4-1: Using ep0 maxpacket: 8 [ 577.444587][T15002] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.470935][T15002] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.517314][T15002] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 577.557292][T15002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.582850][T15002] usb 4-1: Product: syz [ 577.593402][T15002] usb 4-1: Manufacturer: syz [ 577.618467][T15002] usb 4-1: SerialNumber: syz [ 577.634508][T15002] usb 4-1: config 0 descriptor?? [ 577.843053][T16033] Bluetooth: hci1: command tx timeout [ 578.214600][T16857] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4127567289 (33020538312 ns) > initial count (21272959856 ns). Using initial count to start timer. [ 578.665887][T16692] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 578.686240][T16692] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 578.703291][ T5921] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 578.715394][T16692] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 578.732594][T16692] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 578.874138][ T5921] usb 9-1: Using ep0 maxpacket: 8 [ 578.889192][ T5921] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 578.920412][ T5921] usb 9-1: config 0 has no interface number 0 [ 578.939696][ T5921] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 578.991742][ T5921] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 579.018048][T16692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.024931][ T5921] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 579.045786][ T5921] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 579.070120][T16692] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.077191][ T5921] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 579.092266][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.100672][T12978] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.107900][T12978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.118089][ T5921] usb 9-1: config 0 descriptor?? [ 579.157294][ T5921] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 579.158798][T12978] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.172706][T12978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.340157][T16692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.528383][T16692] veth0_vlan: entered promiscuous mode [ 579.576027][T16692] veth1_vlan: entered promiscuous mode [ 579.746726][T16692] veth0_macvtap: entered promiscuous mode [ 579.793855][T16692] veth1_macvtap: entered promiscuous mode [ 579.897150][T16692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.008516][ T5973] usb 4-1: USB disconnect, device number 49 [ 580.011294][T16692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.368486][T12978] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.447841][T12978] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.589324][ T5973] usb 9-1: USB disconnect, device number 6 [ 580.589466][ C1] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 580.617224][ T5973] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 580.626593][T12978] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.680511][T12978] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.984985][T12981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.017396][T12981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.162139][T12978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.193521][T12978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.457615][T16918] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 581.464588][T16918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 581.542988][T16924] Failed to get privilege flags for destination (handle=0x2:0x0) [ 581.561233][T16918] vhci_hcd vhci_hcd.0: Device attached [ 581.772860][ T5921] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 581.852749][ T5973] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 581.860434][T15002] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 582.026076][T15002] usb 10-1: Using ep0 maxpacket: 16 [ 582.031474][ T5973] usb 9-1: Using ep0 maxpacket: 16 [ 582.040422][T15002] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 582.092020][ T5973] usb 9-1: config 0 has no interfaces? [ 582.102696][T15002] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.113023][ T5973] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 582.130229][ T5973] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.143329][T15002] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.155666][ T5973] usb 9-1: config 0 descriptor?? [ 582.167288][T15002] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.187164][T15002] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.202758][T15002] usb 10-1: Product: syz [ 582.207068][T15002] usb 10-1: Manufacturer: syz [ 582.222060][T15002] usb 10-1: SerialNumber: syz [ 582.409940][T16920] usb 49-1: recv xbuf, 0 [ 582.447527][ T2154] usb 9-1: USB disconnect, device number 7 [ 582.475478][T12981] vhci_hcd: stop threads [ 582.481842][T12981] vhci_hcd: release socket [ 582.507291][T12981] vhci_hcd: disconnect device [ 582.534409][ T5921] vhci_hcd: vhci_device speed not set [ 582.681535][T15002] usb 10-1: 0:2 : does not exist [ 583.922596][T15002] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 584.057391][T15002] usb 10-1: USB disconnect, device number 3 [ 584.127860][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.533500][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 584.712742][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 584.726498][ T9] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 584.745920][ T9] usb 9-1: config 0 has no interface number 0 [ 584.779124][ T9] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 584.807484][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.826011][ T9] usb 9-1: Product: syz [ 584.830420][ T9] usb 9-1: Manufacturer: syz [ 584.836137][ T9] usb 9-1: SerialNumber: syz [ 584.854161][ T9] usb 9-1: config 0 descriptor?? [ 584.870572][ T9] asix 9-1:0.251: probe with driver asix failed with error -22 [ 585.417996][T17022] loop8: detected capacity change from 0 to 7 [ 585.419242][T17020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 585.465746][T17022] Dev loop8: unable to read RDB block 7 [ 585.471398][T17022] loop8: unable to read partition table [ 585.516753][T17022] loop8: partition table beyond EOD, truncated [ 585.542802][T17022] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 586.689322][T17050] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3600'. [ 586.729183][T17050] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 587.359770][ T9] usb 9-1: USB disconnect, device number 8 [ 587.513184][T17068] syzkaller0: entered promiscuous mode [ 587.566667][T17068] syzkaller0: entered allmulticast mode [ 588.686235][T17096] netlink: 372 bytes leftover after parsing attributes in process `syz.3.3613'. [ 588.716058][T17060] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3604'. [ 588.751160][T17060] netlink: 'syz.7.3604': attribute type 13 has an invalid length. [ 588.788122][T17060] netlink: 'syz.7.3604': attribute type 17 has an invalid length. [ 588.900112][T17060] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 589.900395][ T30] audit: type=1326 audit(1757365606.433:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17119 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff238b8ebe9 code=0x7ffc0000 [ 590.003432][ T30] audit: type=1326 audit(1757365606.433:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17119 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff238b8ebe9 code=0x7ffc0000 [ 590.140408][ T30] audit: type=1326 audit(1757365606.463:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17119 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff238b8ebe9 code=0x7ffc0000 [ 590.231986][ T30] audit: type=1326 audit(1757365606.463:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17119 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff238b8ebe9 code=0x7ffc0000 [ 590.321265][ T30] audit: type=1326 audit(1757365606.463:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17119 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff238b8ebe9 code=0x7ffc0000 [ 590.419359][ T30] audit: type=1326 audit(1757365606.463:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17119 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff238b8ebe9 code=0x7ffc0000 [ 590.574763][ T30] audit: type=1326 audit(1757365606.463:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17119 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff238b8ebe9 code=0x7ffc0000 [ 590.679743][T17137] loop6: detected capacity change from 0 to 7 [ 590.699733][ T30] audit: type=1326 audit(1757365606.463:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17119 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff238b8ebe9 code=0x7ffc0000 [ 590.764797][T17137] Dev loop6: unable to read RDB block 7 [ 590.784951][T17137] loop6: AHDI p1 p2 p3 p4 [ 590.797785][T17137] loop6: partition table partially beyond EOD, truncated [ 590.821609][ T30] audit: type=1326 audit(1757365606.463:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17119 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff238b8ebe9 code=0x7ffc0000 [ 590.852235][T17137] loop6: p1 start 1633771873 is beyond EOD, truncated [ 590.874095][T17137] loop6: p2 start 1633771873 is beyond EOD, truncated [ 590.891701][T17137] loop6: p3 start 1886353253 is beyond EOD, truncated [ 590.912405][ T30] audit: type=1326 audit(1757365606.463:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17119 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff238b8ebe9 code=0x7ffc0000 [ 593.281558][T17215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.142843][ T5949] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 597.423373][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.511367][T17274] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3655'. [ 597.522219][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.599778][ T5949] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 597.612752][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.676217][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 597.676260][ T30] audit: type=1326 audit(1757365614.213:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17279 comm="syz.0.3659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff238b8ebe9 code=0x0 [ 597.706749][ T5949] usb 4-1: config 0 descriptor?? [ 597.848586][T17283] [ 597.850958][T17283] ===================================================== [ 597.857905][T17283] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 597.865399][T17283] syzkaller #0 Not tainted [ 597.869831][T17283] ----------------------------------------------------- [ 597.876760][T17283] syz.8.3658/17283 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 597.884484][T17283] ffff888044c75948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 597.893208][T17283] [ 597.893208][T17283] and this task is already holding: [ 597.900571][T17283] ffff88807df33028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 597.910341][T17283] which would create a new lock dependency: [ 597.916253][T17283] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 597.924404][T17283] [ 597.924404][T17283] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 597.933860][T17283] (&dev->event_lock#2){..-.}-{3:3} [ 597.933909][T17283] [ 597.933909][T17283] ... which became SOFTIRQ-irq-safe at: [ 597.946819][T17283] lock_acquire+0x120/0x360 [ 597.951434][T17283] _raw_spin_lock_irqsave+0xa7/0xf0 [ 597.956750][T17283] input_event+0x76/0xe0 [ 597.961094][T17283] hidinput_report_event+0xa1/0x100 [ 597.966432][T17283] hid_report_raw_event+0x148b/0x16d0 [ 597.971899][T17283] hid_input_report+0x43e/0x520 [ 597.976846][T17283] hid_irq_in+0x47e/0x6d0 [ 597.981286][T17283] __usb_hcd_giveback_urb+0x376/0x540 [ 597.986768][T17283] dummy_timer+0x862/0x4550 [ 597.991366][T17283] __hrtimer_run_queues+0x529/0xc60 [ 597.996659][T17283] hrtimer_run_softirq+0x187/0x2b0 [ 598.001867][T17283] handle_softirqs+0x283/0x870 [ 598.006725][T17283] __irq_exit_rcu+0xca/0x1f0 [ 598.011407][T17283] irq_exit_rcu+0x9/0x30 [ 598.015738][T17283] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 598.021472][T17283] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 598.027552][T17283] memset_orig+0x7b/0xb0 [ 598.031889][T17283] __kasan_kmalloc+0x7f/0xb0 [ 598.036595][T17283] __kmalloc_noprof+0x27a/0x4f0 [ 598.041555][T17283] cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 598.047899][T17283] cfg80211_inform_bss_data+0x1fb/0x3b30 [ 598.053638][T17283] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 598.059807][T17283] ieee80211_bss_info_update+0x746/0x9e0 [ 598.065538][T17283] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 598.071812][T17283] ieee80211_iface_work+0x85f/0x12d0 [ 598.077216][T17283] cfg80211_wiphy_work+0x2b8/0x470 [ 598.082431][T17283] process_scheduled_works+0xae1/0x17b0 [ 598.088084][T17283] worker_thread+0x8a0/0xda0 [ 598.092768][T17283] kthread+0x70e/0x8a0 [ 598.096959][T17283] ret_from_fork+0x3fc/0x770 [ 598.101644][T17283] ret_from_fork_asm+0x1a/0x30 [ 598.106504][T17283] [ 598.106504][T17283] to a SOFTIRQ-irq-unsafe lock: [ 598.113524][T17283] (tasklist_lock){.+.+}-{3:3} [ 598.113549][T17283] [ 598.113549][T17283] ... which became SOFTIRQ-irq-unsafe at: [ 598.126182][T17283] ... [ 598.126191][T17283] lock_acquire+0x120/0x360 [ 598.133388][T17283] _raw_read_lock+0x36/0x50 [ 598.137996][T17283] __do_wait+0xde/0x740 [ 598.142258][T17283] do_wait+0x1f8/0x520 [ 598.146426][T17283] kernel_wait+0xab/0x170 [ 598.150861][T17283] call_usermodehelper_exec_work+0xbe/0x230 [ 598.156856][T17283] process_scheduled_works+0xae1/0x17b0 [ 598.162494][T17283] worker_thread+0x8a0/0xda0 [ 598.167179][T17283] kthread+0x70e/0x8a0 [ 598.171347][T17283] ret_from_fork+0x3fc/0x770 [ 598.176028][T17283] ret_from_fork_asm+0x1a/0x30 [ 598.180922][T17283] [ 598.180922][T17283] other info that might help us debug this: [ 598.180922][T17283] [ 598.191166][T17283] Chain exists of: [ 598.191166][T17283] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 598.191166][T17283] [ 598.204745][T17283] Possible interrupt unsafe locking scenario: [ 598.204745][T17283] [ 598.213068][T17283] CPU0 CPU1 [ 598.218443][T17283] ---- ---- [ 598.223814][T17283] lock(tasklist_lock); [ 598.228065][T17283] local_irq_disable(); [ 598.234821][T17283] lock(&dev->event_lock#2); [ 598.242034][T17283] lock(&client->buffer_lock); [ 598.249416][T17283] [ 598.252873][T17283] lock(&dev->event_lock#2); [ 598.257856][T17283] [ 598.257856][T17283] *** DEADLOCK *** [ 598.257856][T17283] [ 598.266003][T17283] 7 locks held by syz.8.3658/17283: [ 598.271211][T17283] #0: ffff888029527118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 598.280368][T17283] #1: ffff888029520230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 598.290487][T17283] #2: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 598.300184][T17283] #3: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 598.309798][T17283] #4: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 598.318944][T17283] #5: ffff88807df33028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 598.329174][T17283] #6: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 598.338240][T17283] [ 598.338240][T17283] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 598.348678][T17283] -> (&dev->event_lock#2){..-.}-{3:3} { [ 598.354343][T17283] IN-SOFTIRQ-W at: [ 598.358417][T17283] lock_acquire+0x120/0x360 [ 598.364816][T17283] _raw_spin_lock_irqsave+0xa7/0xf0 [ 598.371853][T17283] input_event+0x76/0xe0 [ 598.377928][T17283] hidinput_report_event+0xa1/0x100 [ 598.385030][T17283] hid_report_raw_event+0x148b/0x16d0 [ 598.392252][T17283] hid_input_report+0x43e/0x520 [ 598.398945][T17283] hid_irq_in+0x47e/0x6d0 [ 598.405117][T17283] __usb_hcd_giveback_urb+0x376/0x540 [ 598.412320][T17283] dummy_timer+0x862/0x4550 [ 598.418650][T17283] __hrtimer_run_queues+0x529/0xc60 [ 598.425710][T17283] hrtimer_run_softirq+0x187/0x2b0 [ 598.432657][T17283] handle_softirqs+0x283/0x870 [ 598.439261][T17283] __irq_exit_rcu+0xca/0x1f0 [ 598.445683][T17283] irq_exit_rcu+0x9/0x30 [ 598.451756][T17283] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 598.459253][T17283] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 598.467062][T17283] memset_orig+0x7b/0xb0 [ 598.473161][T17283] __kasan_kmalloc+0x7f/0xb0 [ 598.479585][T17283] __kmalloc_noprof+0x27a/0x4f0 [ 598.486273][T17283] cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 598.494349][T17283] cfg80211_inform_bss_data+0x1fb/0x3b30 [ 598.501819][T17283] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 598.509853][T17283] ieee80211_bss_info_update+0x746/0x9e0 [ 598.517326][T17283] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 598.525236][T17283] ieee80211_iface_work+0x85f/0x12d0 [ 598.532355][T17283] cfg80211_wiphy_work+0x2b8/0x470 [ 598.539300][T17283] process_scheduled_works+0xae1/0x17b0 [ 598.546693][T17283] worker_thread+0x8a0/0xda0 [ 598.553113][T17283] kthread+0x70e/0x8a0 [ 598.559015][T17283] ret_from_fork+0x3fc/0x770 [ 598.565470][T17283] ret_from_fork_asm+0x1a/0x30 [ 598.572073][T17283] INITIAL USE at: [ 598.576075][T17283] lock_acquire+0x120/0x360 [ 598.582325][T17283] _raw_spin_lock_irqsave+0xa7/0xf0 [ 598.590403][T17283] input_inject_event+0xa5/0x340 [ 598.597087][T17283] kbd_led_trigger_activate+0xbc/0x100 [ 598.604291][T17283] led_trigger_set+0x52a/0x950 [ 598.610795][T17283] led_trigger_set_default+0x260/0x2a0 [ 598.617991][T17283] led_classdev_register_ext+0x73d/0x930 [ 598.625363][T17283] input_leds_connect+0x517/0x790 [ 598.632137][T17283] input_register_device+0xcfd/0x1140 [ 598.639257][T17283] atkbd_connect+0x72e/0xa00 [ 598.645587][T17283] serio_driver_probe+0x82/0xd0 [ 598.652195][T17283] really_probe+0x26d/0x9e0 [ 598.658460][T17283] __driver_probe_device+0x18c/0x2f0 [ 598.665511][T17283] driver_probe_device+0x4f/0x430 [ 598.672284][T17283] __driver_attach+0x452/0x700 [ 598.678882][T17283] bus_for_each_dev+0x233/0x2b0 [ 598.685536][T17283] serio_handle_event+0x1f9/0x8d0 [ 598.692323][T17283] process_scheduled_works+0xae1/0x17b0 [ 598.699658][T17283] worker_thread+0x8a0/0xda0 [ 598.705996][T17283] kthread+0x70e/0x8a0 [ 598.711811][T17283] ret_from_fork+0x3fc/0x770 [ 598.718148][T17283] ret_from_fork_asm+0x1a/0x30 [ 598.724670][T17283] } [ 598.727257][T17283] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 598.736626][T17283] -> (&client->buffer_lock){....}-{3:3} { [ 598.742376][T17283] INITIAL USE at: [ 598.746288][T17283] lock_acquire+0x120/0x360 [ 598.752376][T17283] _raw_spin_lock_irqsave+0xa7/0xf0 [ 598.759257][T17283] evdev_ioctl_handler+0x1969/0x1f10 [ 598.766137][T17283] __se_sys_ioctl+0xfc/0x170 [ 598.772316][T17283] do_syscall_64+0xfa/0x3b0 [ 598.778404][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.785867][T17283] } [ 598.788432][T17283] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 598.796611][T17283] ... acquired at: [ 598.800412][T17283] lock_acquire+0x120/0x360 [ 598.805100][T17283] _raw_spin_lock+0x2e/0x40 [ 598.809788][T17283] evdev_pass_values+0xb9/0xbd0 [ 598.814843][T17283] evdev_events+0x1e6/0x340 [ 598.819523][T17283] input_pass_values+0x288/0x890 [ 598.824655][T17283] input_event_dispose+0x330/0x6b0 [ 598.829959][T17283] input_inject_event+0x1dd/0x340 [ 598.835204][T17283] evdev_write+0x2fc/0x480 [ 598.839797][T17283] vfs_write+0x27b/0xb30 [ 598.844240][T17283] ksys_write+0x145/0x250 [ 598.848781][T17283] do_syscall_64+0xfa/0x3b0 [ 598.853462][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.859569][T17283] [ 598.861906][T17283] [ 598.861906][T17283] the dependencies between the lock to be acquired [ 598.861916][T17283] and SOFTIRQ-irq-unsafe lock: [ 598.875431][T17283] -> (tasklist_lock){.+.+}-{3:3} { [ 598.880735][T17283] HARDIRQ-ON-R at: [ 598.884981][T17283] lock_acquire+0x120/0x360 [ 598.891494][T17283] _raw_read_lock+0x36/0x50 [ 598.898088][T17283] __do_wait+0xde/0x740 [ 598.904256][T17283] do_wait+0x1f8/0x520 [ 598.910334][T17283] kernel_wait+0xab/0x170 [ 598.916673][T17283] call_usermodehelper_exec_work+0xbe/0x230 [ 598.924578][T17283] process_scheduled_works+0xae1/0x17b0 [ 598.932126][T17283] worker_thread+0x8a0/0xda0 [ 598.938760][T17283] kthread+0x70e/0x8a0 [ 598.944979][T17283] ret_from_fork+0x3fc/0x770 [ 598.951573][T17283] ret_from_fork_asm+0x1a/0x30 [ 598.958347][T17283] SOFTIRQ-ON-R at: [ 598.962506][T17283] lock_acquire+0x120/0x360 [ 598.969019][T17283] _raw_read_lock+0x36/0x50 [ 598.975536][T17283] __do_wait+0xde/0x740 [ 598.981712][T17283] do_wait+0x1f8/0x520 [ 598.987791][T17283] kernel_wait+0xab/0x170 [ 598.994125][T17283] call_usermodehelper_exec_work+0xbe/0x230 [ 599.002118][T17283] process_scheduled_works+0xae1/0x17b0 [ 599.009664][T17283] worker_thread+0x8a0/0xda0 [ 599.016292][T17283] kthread+0x70e/0x8a0 [ 599.022372][T17283] ret_from_fork+0x3fc/0x770 [ 599.028971][T17283] ret_from_fork_asm+0x1a/0x30 [ 599.035838][T17283] INITIAL USE at: [ 599.039914][T17283] lock_acquire+0x120/0x360 [ 599.046341][T17283] _raw_write_lock_irq+0xa2/0xf0 [ 599.053281][T17283] copy_process+0x224f/0x3c00 [ 599.059877][T17283] kernel_clone+0x21e/0x840 [ 599.066312][T17283] user_mode_thread+0xdd/0x140 [ 599.073013][T17283] rest_init+0x23/0x300 [ 599.079175][T17283] start_kernel+0x3a9/0x410 [ 599.085608][T17283] x86_64_start_reservations+0x24/0x30 [ 599.092986][T17283] x86_64_start_kernel+0x143/0x1c0 [ 599.100056][T17283] common_startup_64+0x13e/0x147 [ 599.106933][T17283] INITIAL READ USE at: [ 599.111446][T17283] lock_acquire+0x120/0x360 [ 599.118314][T17283] _raw_read_lock+0x36/0x50 [ 599.125258][T17283] __do_wait+0xde/0x740 [ 599.131772][T17283] do_wait+0x1f8/0x520 [ 599.138199][T17283] kernel_wait+0xab/0x170 [ 599.144889][T17283] call_usermodehelper_exec_work+0xbe/0x230 [ 599.153146][T17283] process_scheduled_works+0xae1/0x17b0 [ 599.161574][T17283] worker_thread+0x8a0/0xda0 [ 599.168553][T17283] kthread+0x70e/0x8a0 [ 599.175011][T17283] ret_from_fork+0x3fc/0x770 [ 599.182400][T17283] ret_from_fork_asm+0x1a/0x30 [ 599.189534][T17283] } [ 599.192213][T17283] ... key at: [] tasklist_lock+0x18/0x40 [ 599.200124][T17283] ... acquired at: [ 599.204114][T17283] lock_acquire+0x120/0x360 [ 599.208847][T17283] _raw_read_lock+0x36/0x50 [ 599.213571][T17283] send_sigurg+0x12b/0x420 [ 599.218191][T17283] sk_send_sigurg+0x6c/0x2e0 [ 599.222967][T17283] queue_oob+0x420/0x4f0 [ 599.227400][T17283] unix_stream_sendmsg+0xc3f/0xdf0 [ 599.232789][T17283] __sock_sendmsg+0x21c/0x270 [ 599.237668][T17283] ____sys_sendmsg+0x505/0x830 [ 599.242621][T17283] ___sys_sendmsg+0x21f/0x2a0 [ 599.247499][T17283] __x64_sys_sendmsg+0x19b/0x260 [ 599.252660][T17283] do_syscall_64+0xfa/0x3b0 [ 599.257363][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.263442][T17283] [ 599.265773][T17283] -> (&f_owner->lock){....}-{3:3} { [ 599.271085][T17283] INITIAL USE at: [ 599.275085][T17283] lock_acquire+0x120/0x360 [ 599.281393][T17283] _raw_write_lock_irq+0xa2/0xf0 [ 599.288086][T17283] __f_setown+0x67/0x370 [ 599.294082][T17283] fcntl_dirnotify+0x3fa/0x6a0 [ 599.300594][T17283] do_fcntl+0x6d0/0x1910 [ 599.306585][T17283] __se_sys_fcntl+0xc8/0x150 [ 599.312930][T17283] do_syscall_64+0xfa/0x3b0 [ 599.319238][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.326876][T17283] INITIAL READ USE at: [ 599.331303][T17283] lock_acquire+0x120/0x360 [ 599.337994][T17283] _raw_read_lock_irqsave+0xaf/0x100 [ 599.345466][T17283] send_sigio+0x38/0x370 [ 599.351889][T17283] dnotify_handle_event+0x169/0x440 [ 599.359266][T17283] fsnotify+0x1814/0x1a80 [ 599.365784][T17283] vfs_symlink+0x291/0x2f0 [ 599.372387][T17283] do_symlinkat+0x1b1/0x3f0 [ 599.379077][T17283] __x64_sys_symlink+0x7a/0x90 [ 599.386126][T17283] do_syscall_64+0xfa/0x3b0 [ 599.392814][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.400889][T17283] } [ 599.403492][T17283] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 599.412538][T17283] ... acquired at: [ 599.416447][T17283] lock_acquire+0x120/0x360 [ 599.421134][T17283] _raw_read_lock_irqsave+0xaf/0x100 [ 599.426603][T17283] send_sigio+0x38/0x370 [ 599.431041][T17283] kill_fasync+0x24d/0x4d0 [ 599.435649][T17283] lease_break_callback+0x26/0x30 [ 599.440863][T17283] __break_lease+0x6a2/0x1620 [ 599.445736][T17283] do_dentry_open+0x8b7/0x13f0 [ 599.450677][T17283] vfs_open+0x3b/0x340 [ 599.454932][T17283] path_openat+0x2ee5/0x3830 [ 599.459701][T17283] do_filp_open+0x1fa/0x410 [ 599.464380][T17283] do_sys_openat2+0x121/0x1c0 [ 599.469236][T17283] __x64_sys_open+0x11e/0x150 [ 599.474106][T17283] do_syscall_64+0xfa/0x3b0 [ 599.478795][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.484892][T17283] [ 599.487226][T17283] -> (&new->fa_lock){....}-{3:3} { [ 599.492357][T17283] INITIAL USE at: [ 599.496257][T17283] lock_acquire+0x120/0x360 [ 599.502342][T17283] _raw_write_lock_irq+0xa2/0xf0 [ 599.508851][T17283] fasync_remove_entry+0xf1/0x1c0 [ 599.515472][T17283] sock_fasync+0x85/0xf0 [ 599.521294][T17283] __fput+0x8a2/0xa70 [ 599.526847][T17283] task_work_run+0x1d1/0x260 [ 599.533066][T17283] exit_to_user_mode_loop+0xec/0x110 [ 599.539932][T17283] do_syscall_64+0x2bd/0x3b0 [ 599.546097][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.553579][T17283] INITIAL READ USE at: [ 599.557916][T17283] lock_acquire+0x120/0x360 [ 599.564436][T17283] _raw_read_lock_irqsave+0xaf/0x100 [ 599.571739][T17283] kill_fasync+0x199/0x4d0 [ 599.578175][T17283] sock_wake_async+0x137/0x160 [ 599.584972][T17283] sk_wake_async+0x184/0x280 [ 599.591564][T17283] mptcp_destroy_common+0x152/0x320 [ 599.598794][T17283] mptcp_disconnect+0x23d/0x700 [ 599.605656][T17283] inet_shutdown+0x1c4/0x390 [ 599.612324][T17283] __x64_sys_shutdown+0x13c/0x1a0 [ 599.619444][T17283] do_syscall_64+0xfa/0x3b0 [ 599.625953][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.633850][T17283] } [ 599.636358][T17283] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 599.645051][T17283] ... acquired at: [ 599.648858][T17283] lock_acquire+0x120/0x360 [ 599.653597][T17283] _raw_read_lock_irqsave+0xaf/0x100 [ 599.659078][T17283] kill_fasync+0x199/0x4d0 [ 599.663686][T17283] evdev_pass_values+0x627/0xbd0 [ 599.668802][T17283] evdev_events+0x1e6/0x340 [ 599.673488][T17283] input_pass_values+0x288/0x890 [ 599.678613][T17283] input_event_dispose+0x330/0x6b0 [ 599.683946][T17283] input_inject_event+0x1dd/0x340 [ 599.689179][T17283] evdev_write+0x2fc/0x480 [ 599.693771][T17283] vfs_write+0x27b/0xb30 [ 599.698218][T17283] ksys_write+0x145/0x250 [ 599.702735][T17283] do_syscall_64+0xfa/0x3b0 [ 599.707431][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.713499][T17283] [ 599.715822][T17283] [ 599.715822][T17283] stack backtrace: [ 599.721844][T17283] CPU: 1 UID: 0 PID: 17283 Comm: syz.8.3658 Not tainted syzkaller #0 PREEMPT(full) [ 599.721868][T17283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.721883][T17283] Call Trace: [ 599.721891][T17283] [ 599.721898][T17283] dump_stack_lvl+0x189/0x250 [ 599.721920][T17283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.721937][T17283] ? __pfx__printk+0x10/0x10 [ 599.721961][T17283] validate_chain+0x1f05/0x2140 [ 599.721985][T17283] __lock_acquire+0xab9/0xd20 [ 599.722010][T17283] ? kill_fasync+0x199/0x4d0 [ 599.722026][T17283] lock_acquire+0x120/0x360 [ 599.722047][T17283] ? kill_fasync+0x199/0x4d0 [ 599.722068][T17283] _raw_read_lock_irqsave+0xaf/0x100 [ 599.722092][T17283] ? kill_fasync+0x199/0x4d0 [ 599.722107][T17283] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 599.722129][T17283] ? do_raw_spin_lock+0x121/0x290 [ 599.722151][T17283] kill_fasync+0x199/0x4d0 [ 599.722166][T17283] ? kill_fasync+0x53/0x4d0 [ 599.722183][T17283] evdev_pass_values+0x627/0xbd0 [ 599.722201][T17283] ? evdev_pass_values+0x681/0xbd0 [ 599.722218][T17283] evdev_events+0x1e6/0x340 [ 599.722232][T17283] ? evdev_events+0x79/0x340 [ 599.722246][T17283] ? input_pass_values+0x8d/0x890 [ 599.722259][T17283] input_pass_values+0x288/0x890 [ 599.722274][T17283] ? input_handle_event+0x70c/0xf30 [ 599.722296][T17283] input_event_dispose+0x330/0x6b0 [ 599.722317][T17283] input_inject_event+0x1dd/0x340 [ 599.722338][T17283] ? input_inject_event+0xb6/0x340 [ 599.722358][T17283] evdev_write+0x2fc/0x480 [ 599.722375][T17283] ? __pfx_evdev_write+0x10/0x10 [ 599.722391][T17283] ? bpf_lsm_file_permission+0x9/0x20 [ 599.722409][T17283] ? security_file_permission+0x75/0x290 [ 599.722431][T17283] ? rw_verify_area+0x255/0x4d0 [ 599.722449][T17283] ? __lock_acquire+0xab9/0xd20 [ 599.722470][T17283] ? __pfx_evdev_write+0x10/0x10 [ 599.722485][T17283] vfs_write+0x27b/0xb30 [ 599.722507][T17283] ? __pfx_vfs_write+0x10/0x10 [ 599.722527][T17283] ? __fget_files+0x2a/0x420 [ 599.722540][T17283] ? __fget_files+0x2a/0x420 [ 599.722552][T17283] ? __fget_files+0x3a0/0x420 [ 599.722563][T17283] ? __fget_files+0x2a/0x420 [ 599.722579][T17283] ksys_write+0x145/0x250 [ 599.722599][T17283] ? __pfx_ksys_write+0x10/0x10 [ 599.722618][T17283] ? rcu_is_watching+0x15/0xb0 [ 599.722642][T17283] ? do_syscall_64+0xbe/0x3b0 [ 599.722666][T17283] do_syscall_64+0xfa/0x3b0 [ 599.722687][T17283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.722706][T17283] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 599.722726][T17283] ? clear_bhb_loop+0x60/0xb0 [ 599.722751][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.722771][T17283] RIP: 0033:0x7effc378ebe9 [ 599.722789][T17283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.722802][T17283] RSP: 002b:00007effc45d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 599.722818][T17283] RAX: ffffffffffffffda RBX: 00007effc39c5fa0 RCX: 00007effc378ebe9 [ 599.722830][T17283] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 599.722840][T17283] RBP: 00007effc3811e19 R08: 0000000000000000 R09: 0000000000000000 [ 599.722849][T17283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.722863][T17283] R13: 00007effc39c6038 R14: 00007effc39c5fa0 R15: 00007effc3aefa28 [ 599.722880][T17283] [ 600.096886][ T5949] usbhid 4-1:0.0: can't add hid device: -71 [ 600.103136][ T5949] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 600.113667][ T5949] usb 4-1: USB disconnect, device number 50