last executing test programs: 19m8.079595083s ago: executing program 32 (id=185): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0xb) 17m33.966435665s ago: executing program 33 (id=1057): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)="dd23f9e9597f43c9a9239656d50ae5286968e25cd6ac013e75066c8f000004a1", 0xfffffffffffffe9b, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 15m46.456066971s ago: executing program 34 (id=2113): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000000) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a80)=""/218, 0xda}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 15m10.877943845s ago: executing program 35 (id=2503): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x60, &(0x7f0000000840)={{0x12, 0x1, 0x310, 0x76, 0x87, 0x63, 0x20, 0xb3c, 0xc005, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x7f, 0x9, 0x0, 0xe8, [{{0x9, 0x4, 0x6, 0x6, 0x1, 0x58, 0x72, 0xef, 0x1e, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7, 0x7f, "b589d7e3ae5178f3"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0xe9}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x3, 0x10, "1aad14b6"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x57, 0x1, 0x3, 0x10}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x5}]}], [{{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x0, 0xff, 0x6}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m33.593149453s ago: executing program 36 (id=2873): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x203}, r1}}, 0x38) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 13m54.868355422s ago: executing program 37 (id=3315): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) 13m16.763763136s ago: executing program 38 (id=3642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 12m38.495593321s ago: executing program 39 (id=4013): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000300)={0x50, 0xffff, 0x0, {0x0, 0x68bd}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 11m20.312754486s ago: executing program 0 (id=4762): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x154c, 0xef91, 0x48, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r5, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) 11m19.228986667s ago: executing program 0 (id=4769): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) read(r0, &(0x7f0000000180)=""/170, 0xaa) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f00000c9000/0x4000)=nil, 0x4000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 11m18.923601743s ago: executing program 0 (id=4775): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@hyper, 0x2}, @local, 0x0, 0x0, 0x100, 0x6, 0x10, 0x3}) 11m18.804716816s ago: executing program 0 (id=4776): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 11m17.901390076s ago: executing program 0 (id=4780): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x3, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e21, 0x3, @empty, 0x2800}}, 0xf, 0x4, 0x20000, 0x2, 0xe, 0x0, 0x5}, 0x9c) 11m16.908722703s ago: executing program 0 (id=4789): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) listen(r1, 0x3) 11m16.735378241s ago: executing program 40 (id=4789): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) listen(r1, 0x3) 10m33.796744263s ago: executing program 1 (id=5093): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 10m33.549618369s ago: executing program 1 (id=5095): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 10m33.33391339s ago: executing program 1 (id=5098): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe(0x0) io_setup(0x3ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xbc}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 10m31.282670629s ago: executing program 1 (id=5114): r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) 10m30.064155331s ago: executing program 1 (id=5123): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x7000001d}) 10m28.168622004s ago: executing program 1 (id=5137): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881aa, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10m27.522240831s ago: executing program 41 (id=5137): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881aa, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10m3.093981212s ago: executing program 5 (id=5281): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) listen(r2, 0x5) accept4(r2, 0x0, 0x0, 0x80800) socket$inet6_tcp(0xa, 0x1, 0x0) 10m2.198675255s ago: executing program 5 (id=5293): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xd5519c743dfffab1, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10m2.094325112s ago: executing program 5 (id=5294): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x41624800ab113288, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 10m1.992671298s ago: executing program 5 (id=5296): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 10m1.854959577s ago: executing program 5 (id=5299): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000040)='{', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) 10m1.378264285s ago: executing program 5 (id=5303): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 10m0.373991178s ago: executing program 42 (id=5303): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 9m1.231717392s ago: executing program 9 (id=5708): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f00000007c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xde3ebb5) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) 9m0.857955892s ago: executing program 9 (id=5710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8848, r3, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 9m0.485625018s ago: executing program 9 (id=5714): sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffea8, {0xf000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000088b000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000380)="260f7804640f09660f3880b50080baf80c66b8be19848066efbafc0cb8bff6ef670f20e60fc779e60f06f30fc77200baf80c66b863cc298666efbafc0cec66b9a10300000f32", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m59.968825527s ago: executing program 9 (id=5715): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 8m59.172073062s ago: executing program 9 (id=5724): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) madvise(&(0x7f0000053000/0x2000)=nil, 0x500500, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x89727a31546dcc44, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 8m58.916938779s ago: executing program 9 (id=5727): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x400000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec20000000000010902"], 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 8m58.521479256s ago: executing program 43 (id=5727): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x400000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec20000000000010902"], 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 1m40.967548602s ago: executing program 2 (id=7504): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socket(0x10, 0x800, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000500)={r4, r4, r3}, &(0x7f0000000b40)=""/4111, 0x100f, 0x0) 1m38.860921918s ago: executing program 2 (id=7510): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1) socket$l2tp6(0xa, 0x2, 0x73) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m38.336675851s ago: executing program 2 (id=7515): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x84) 1m35.896692933s ago: executing program 2 (id=7518): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m34.832744912s ago: executing program 2 (id=7523): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x10100, 0x1, 0xfffffffd, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000180)={0x4000}, 0x0) landlock_restrict_self(r5, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 1m30.696614264s ago: executing program 2 (id=7534): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1m29.457338511s ago: executing program 44 (id=7534): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 11.488847666s ago: executing program 8 (id=7776): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e000000013000100000000008bcd36aa5f9eca00000000cde73661dc24b5af93b6"], 0xe0}], 0x1}, 0x0) unshare(0x2040400) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10.107198747s ago: executing program 6 (id=7777): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2) r3 = syz_io_uring_setup(0xccb, &(0x7f00000000c0)={0x0, 0x3232, 0x0, 0x0, 0x2eb}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[r2], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 9.68873791s ago: executing program 4 (id=7781): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="3861a7ebdc08d7ed88c42130be4bf8457b577302f57de1d7104c966d3cd1c65536d52fbb4270839a7e830f", 0x2b, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 9.613576313s ago: executing program 8 (id=7782): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @local, 0x9}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="f36b4e96df5d87b82f69b7868c9a534d6de2d3f1fc8ff2c693dd49c230347a2db044da732480cd3f36", 0x29}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffdc8, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8000061, 0x2}}]}, 0x20}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r2, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r4, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 9.343609944s ago: executing program 7 (id=7784): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$tipc(r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 9.289633877s ago: executing program 8 (id=7785): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7.921623659s ago: executing program 4 (id=7787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) fchdir(r3) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r4, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 7.747494745s ago: executing program 7 (id=7788): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1d, 0x2, 0x6) socket(0x1, 0x1, 0x0) epoll_create(0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 7.213052091s ago: executing program 6 (id=7789): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0x8d33, 0x800, 0x0, 0x300}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2200}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 7.011186096s ago: executing program 8 (id=7791): socket$netlink(0x10, 0x3, 0x2) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20002) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x39) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6.777449676s ago: executing program 7 (id=7792): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r3, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) 6.690043704s ago: executing program 3 (id=7793): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82200, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socket$inet6(0xa, 0x5, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 6.469732771s ago: executing program 6 (id=7794): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="fec96b1890e924f0e68a5720c990384ffbdf05ecba334fb8", 0x18, 0x8) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB="1c007a800c000300631f17af01aa24ee0c00030058422dbbcfd0238f"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5044}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x9, 0xe55, 0x80000000000006, 0x2, 0x1040, 0x4, 0x0, 0x8, 0xfffffffffffffffe, 0x6, 0x1, 0x4, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 6.248414548s ago: executing program 6 (id=7795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) 6.142632658s ago: executing program 4 (id=7796): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1000003, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1032, 0x20a}}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3c3}}, 0x20}}, 0x0) 5.467007476s ago: executing program 4 (id=7797): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) write$dsp(r4, &(0x7f0000000200)='m', 0x1) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) 4.952523429s ago: executing program 8 (id=7798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9546}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.809613483s ago: executing program 3 (id=7799): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(r0, &(0x7f0000000240)="94", 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.426708422s ago: executing program 4 (id=7800): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) 4.275446716s ago: executing program 6 (id=7801): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x61000006, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r2, &(0x7f00000000c0)="ad", 0x1, 0x4, &(0x7f000005ffe4)={0xa, 0xffff, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x401}, 0x1c) shutdown(r2, 0x1) 4.230990374s ago: executing program 3 (id=7802): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) link(0x0, 0x0) r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3404c8d4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) 4.064525611s ago: executing program 7 (id=7803): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) 3.156983241s ago: executing program 3 (id=7804): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x2, {0x3}, 0x3}) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000040000000800000008", @ANYRESOCT=r4], 0x48) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) 2.755363239s ago: executing program 3 (id=7805): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 2.17665969s ago: executing program 3 (id=7806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r4, 0x0, 0x201f00) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) 1.64864568s ago: executing program 7 (id=7807): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 1.35677203s ago: executing program 6 (id=7808): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 295.909748ms ago: executing program 4 (id=7809): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r4) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 271.622757ms ago: executing program 8 (id=7810): r0 = socket$alg(0x26, 0x5, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, 0x0, 0x0) dup2(r5, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=7811): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) kernel console output (not intermixed with test programs): 4][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.416499][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.422225][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.427865][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.433565][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.439397][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.445201][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.451131][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.456957][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.462753][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.469701][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.475570][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.481920][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.487612][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.493416][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.499133][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.504902][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.510603][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.516617][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.522294][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.528140][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.533988][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.539973][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.545717][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.551510][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.557170][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.562974][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.568670][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.575084][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.580764][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.586663][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.592343][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.598127][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.603903][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 963.609621][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.615437][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.621318][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.627148][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.633064][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.638877][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.644772][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.650627][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.656427][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.662221][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.668004][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.674419][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.680242][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.686199][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.692056][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.697893][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.703709][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.709550][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.715346][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.721219][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.727008][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.732799][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.738641][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.744456][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.750250][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.756185][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.762038][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.767849][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.774331][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.780157][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.785944][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.791758][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.797549][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.803331][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.809161][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.815012][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.820802][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.826587][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.832429][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.838306][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.844081][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.849925][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.855763][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.861592][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.867375][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.873158][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.879575][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.885363][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.891207][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.897018][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.902856][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.908701][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.914550][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.920406][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.926367][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.932192][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.938125][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.944016][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.949924][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.955721][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.961555][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.967701][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.973574][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.980686][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.987167][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.992976][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 963.998889][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.004970][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.010985][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.016911][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.022703][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.028585][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.034632][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.040413][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.046581][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.052401][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.058191][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.064001][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.069795][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.075598][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.082030][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.087846][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.093656][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.099456][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.105370][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.111198][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.116983][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.122765][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.128550][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.134337][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.140201][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.146009][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.151814][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.157606][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.163605][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.169404][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.175289][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.181566][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.188045][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.193862][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.199514][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.205315][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.211196][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.217118][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.222920][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.228833][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.234617][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.240404][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.246329][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.252110][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.258015][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.263781][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.269583][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.275397][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.281210][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.288670][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.294728][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.300545][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.306432][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.312336][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.318227][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.324038][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.329847][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.335679][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.341483][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.347414][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.353081][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.358820][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.364630][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.370327][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.376104][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.382016][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.388455][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.394291][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.400006][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.405868][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.411549][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.417319][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.422955][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.428692][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.434548][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.440296][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.445979][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.451777][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.457660][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.463512][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.469714][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.475602][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.481723][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.487611][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.494621][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.500543][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.506474][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.512261][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.518362][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.524234][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.530118][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.535960][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.541613][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.547334][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.553188][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.558854][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.564579][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.570433][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.576316][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.582028][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.587835][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.593502][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.600025][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.605934][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.611717][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.617559][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.623409][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.629081][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.634917][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.640926][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.646771][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.652605][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.658473][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.664284][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.670132][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.675972][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.681774][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.687558][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.693205][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.699420][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.705651][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.711521][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.717393][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.723316][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.728978][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 964.734851][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.740675][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.746558][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.752460][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.758356][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.764215][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.770171][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.776019][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.781913][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.787769][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 964.793474][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 964.966807][ T5924] usb 4-1: USB disconnect, device number 67 [ 965.136228][T26666] syz.7.6842 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 965.566403][T20931] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 965.796313][T20931] usb 8-1: Using ep0 maxpacket: 32 [ 965.833315][T20931] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 965.850586][T20931] usb 8-1: config 0 has no interface number 0 [ 965.901711][T20931] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 965.980950][T20931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.059703][T20931] usb 8-1: Product: syz [ 966.087442][T20931] usb 8-1: Manufacturer: syz [ 966.092171][T20931] usb 8-1: SerialNumber: syz [ 966.120730][T20931] usb 8-1: config 0 descriptor?? [ 966.131367][T20931] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 966.337620][T20931] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 966.607044][T20931] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 966.837869][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 966.856475][T20931] usb 8-1: USB disconnect, device number 29 [ 966.889107][T20931] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 966.990807][T20931] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 967.027378][T20931] quatech2 8-1:0.51: device disconnected [ 967.801593][T26711] binder: 26710:26711 ioctl c0306201 200000000440 returned -14 [ 969.700615][T26730] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 970.809644][ T30] audit: type=1800 audit(1761632148.343:968): pid=26737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6861" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 972.220172][T26754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 972.581540][T26759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.591067][T26759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.805423][T26759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.814482][T26759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.190356][T26771] binder_alloc: 26770: pid 26770 spamming oneway? 1 buffers allocated for a total size of 4096 [ 973.204986][T26771] binder_alloc: 26770: pid 26770 spamming oneway? 2 buffers allocated for a total size of 5120 [ 973.903879][ T5924] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 974.016285][ T5890] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 974.058629][ T5924] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 974.067660][ T5924] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 974.075802][ T5924] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 974.207121][ T5924] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 974.219815][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 974.254743][ T5924] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 974.286214][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 974.326830][ T5890] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 974.365699][ T5890] usb 4-1: config 4 has no interface number 0 [ 974.377661][ T5924] usb 8-1: string descriptor 0 read error: -22 [ 974.408034][ T5924] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 974.418174][ T5890] usb 4-1: config 4 interface 51 has no altsetting 0 [ 974.436805][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.447145][ T5890] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 974.466517][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.474553][ T5890] usb 4-1: Product: syz [ 974.486481][ T5890] usb 4-1: Manufacturer: syz [ 974.491846][ T5924] usb 8-1: config 0 descriptor?? [ 974.499262][T26781] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 974.516401][ T5890] usb 4-1: SerialNumber: syz [ 974.527735][ T5890] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 974.547921][ T5924] hub 8-1:0.0: bad descriptor, ignoring hub [ 974.559135][ T5924] hub 8-1:0.0: probe with driver hub failed with error -5 [ 974.576411][ T980] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 974.576985][ T5924] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input83 [ 974.748788][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 974.751012][ T980] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 974.751058][ T980] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 974.751085][ T980] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 974.751111][ T980] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 974.755737][ T980] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 974.755765][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.755785][ T980] usb 3-1: Product: syz [ 974.755801][ T980] usb 3-1: Manufacturer: syz [ 974.755816][ T980] usb 3-1: SerialNumber: syz [ 974.774351][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 974.796368][ T980] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input84 [ 974.849483][ C1] usb_acecad 8-1:0.0: can't resubmit intr, dummy_hcd.7-1/input0, status -1 [ 974.851294][ T5924] usb 8-1: USB disconnect, device number 30 [ 975.088997][T20931] usb 4-1: USB disconnect, device number 68 [ 975.096236][ T980] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 975.096257][ T980] (id 0x00) [ 975.307607][ T980] rc_core: IR keymap rc-imon-pad not found [ 975.307630][ T980] Registered IR keymap rc-empty [ 975.307712][ T980] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 975.307731][ T980] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 975.347348][ T980] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 975.349467][ T980] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input85 [ 975.361353][ T980] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:24> initialized [ 975.883679][T26797] tty tty29: ldisc open failed (-12), clearing slot 28 [ 977.565020][T26824] imon:send_packet: packet tx failed (-71) [ 977.573498][ T5924] usb 3-1: USB disconnect, device number 24 [ 977.596544][T26824] imon:vfd_write: send packet #5 failed [ 977.744432][T26834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.758669][T26834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.563775][T26844] kvm: kvm [26843]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 978.573155][T26844] kvm: kvm [26843]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 978.657325][T26844] input: syz1 as /devices/virtual/input/input86 [ 981.661981][T26875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6902'. [ 983.394239][T26877] bridge5: port 1(veth0_to_bond) entered blocking state [ 983.403077][T26877] bridge5: port 1(veth0_to_bond) entered disabled state [ 983.415544][T26877] veth0_to_bond: entered allmulticast mode [ 983.458428][T26877] veth0_to_bond: entered promiscuous mode [ 983.663350][T26893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6904'. [ 984.060162][T26908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.218279][T26911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6909'. [ 984.752139][T26914] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6911'. [ 984.817683][T26911] bridge_slave_1: left allmulticast mode [ 984.920198][T26911] bridge_slave_1: left promiscuous mode [ 984.959158][T26911] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.467954][T26911] bridge_slave_0: left allmulticast mode [ 985.473651][T26911] bridge_slave_0: left promiscuous mode [ 985.614156][T26911] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.760627][T26948] sock: sock_set_timeout: `syz.7.6922' (pid 26948) tries to set negative timeout [ 986.793861][T26946] syzkaller0: entered promiscuous mode [ 986.842027][T26946] syzkaller0: entered allmulticast mode [ 987.748282][T26967] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 987.757050][T26967] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 987.787963][T26967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 987.796294][T26967] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 987.817454][T26967] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 987.826479][T26967] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 988.062619][T26967] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 988.099894][T26967] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 988.498956][T26967] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 988.536390][T26967] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 991.506031][T26996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6934'. [ 992.983569][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.991681][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.006703][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 996.123700][T27053] netlink: 'syz.6.6950': attribute type 17 has an invalid length. [ 996.186967][ T5891] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 996.193789][T27053] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6950'. [ 996.207898][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 996.252025][ T9] usb 3-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 996.422692][ T9] usb 3-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 996.489807][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 996.490846][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.521075][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 996.551781][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.586991][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.610166][ T5891] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 996.646060][ T9] usb 3-1: config 0 descriptor?? [ 996.653996][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.729136][ T5891] usb 4-1: config 0 descriptor?? [ 997.067801][T27047] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 997.130101][ T9] playstation 0003:054C:09CC.0042: hidraw0: USB HID vff.ed Device [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 997.243817][ T5891] cp2112 0003:10C4:EA90.0043: unknown main item tag 0x0 [ 997.320700][ T9] playstation 0003:054C:09CC.0042: Failed to retrieve feature with reportID 18: -71 [ 997.330423][ T5891] cp2112 0003:10C4:EA90.0043: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 997.413884][ T9] playstation 0003:054C:09CC.0042: Failed to retrieve DualShock4 pairing info: -71 [ 997.425807][ T5891] cp2112 0003:10C4:EA90.0043: Part Number: 0x82 Device Version: 0xFE [ 997.472353][ T9] playstation 0003:054C:09CC.0042: Failed to get MAC address from DualShock4 [ 997.503840][ T9] playstation 0003:054C:09CC.0042: Failed to create dualshock4. [ 997.543563][ T9] playstation 0003:054C:09CC.0042: probe with driver playstation failed with error -71 [ 997.587870][ T9] usb 3-1: USB disconnect, device number 25 [ 998.071170][ T5891] cp2112 0003:10C4:EA90.0043: error reading lock byte: -71 [ 998.222962][ T5891] usb 4-1: USB disconnect, device number 69 [ 998.366293][ T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 998.693559][ T9] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 998.706303][ T9] usb 3-1: config 0 has no interface number 0 [ 998.735678][ T9] usb 3-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=51.8f [ 998.764933][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.779790][ T9] usb 3-1: Product: syz [ 998.784178][ T9] usb 3-1: Manufacturer: syz [ 998.834975][ T9] usb 3-1: SerialNumber: syz [ 998.869056][ T9] usb 3-1: config 0 descriptor?? [ 999.191827][ T9] gspca_main: spca501-2.14.0 probing 040a:0002 [ 1000.360625][ T9] gspca_spca501: reg write: error -71 [ 1000.366040][ T9] spca501 3-1:0.9: Reg write failed for 0x00,0x00,0x05 [ 1000.388291][ T9] spca501 3-1:0.9: probe with driver spca501 failed with error -22 [ 1000.405627][ T9] usb 3-1: USB disconnect, device number 26 [ 1001.244975][T27128] syzkaller0: entered promiscuous mode [ 1001.261371][T27128] syzkaller0: entered allmulticast mode [ 1001.474141][T27130] input: syz1 as /devices/virtual/input/input87 [ 1002.366239][ T5890] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1002.531044][ T5890] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 1002.546187][ T5890] usb 3-1: config 0 has no interface number 0 [ 1002.554328][ T5890] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 1002.564223][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.572963][ T5890] usb 3-1: Product: syz [ 1002.583296][ T5890] usb 3-1: Manufacturer: syz [ 1002.588248][ T5890] usb 3-1: SerialNumber: syz [ 1002.596900][ T5890] usb 3-1: config 0 descriptor?? [ 1002.621208][ T5890] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1002.645070][ T5890] ems_usb 3-1:0.204: probe with driver ems_usb failed with error -22 [ 1003.078896][ T5891] usb 3-1: USB disconnect, device number 27 [ 1003.083326][T27146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6976'. [ 1003.191214][T27151] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1003.198752][T27146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6976'. [ 1003.235184][T22626] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1003.278223][T22626] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1003.712972][T27146] bond6 (unregistering): (slave geneve2): Releasing backup interface [ 1004.197893][T27146] bond6 (unregistering): Released all slaves [ 1004.396277][T22626] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1004.521300][T22626] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1005.948855][T27184] create_pit_timer: 18 callbacks suppressed [ 1005.948867][T27184] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1006.402623][T27184] kvm: pic: non byte read [ 1006.407514][T27184] kvm: pic: level sensitive irq not supported [ 1006.407565][T27184] kvm: pic: non byte read [ 1006.447464][T27184] kvm: pic: level sensitive irq not supported [ 1006.447520][T27184] kvm: pic: non byte read [ 1006.769553][T27196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.794237][T27196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.050884][T27200] kvm: pic: non byte write [ 1007.060970][T27203] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 1007.110689][T27198] kvm: pic: non byte write [ 1007.704136][T27215] binder_alloc: 27214: binder_alloc_buf size -624 failed, no address space [ 1007.747658][T27215] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 8176 (num: 1 largest: 8176) [ 1009.581289][T27246] syzkaller0: entered promiscuous mode [ 1009.626711][T27246] syzkaller0: entered allmulticast mode [ 1010.965044][T27269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.021415][T27269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.148747][T27264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.156078][T27264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.665381][T27264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.677942][T27264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.134743][ T3527] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.175630][ T3527] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.406501][ T3527] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.509281][ T3527] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.570172][T27308] netlink: 'syz.7.7019': attribute type 10 has an invalid length. [ 1013.703679][T27309] debugfs: 'netdev:nicvf0' already exists in 'phy39' [ 1013.711011][T27308] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7019'. [ 1014.160385][ T30] audit: type=1326 audit(1761632191.693:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27312 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1014.359815][T27317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1014.366458][ T30] audit: type=1326 audit(1761632191.693:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27312 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1015.263735][ T30] audit: type=1326 audit(1761632191.693:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27312 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1015.294305][ T30] audit: type=1326 audit(1761632191.693:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27312 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1015.438552][ T30] audit: type=1326 audit(1761632191.693:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27312 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1015.735285][ T30] audit: type=1326 audit(1761632191.703:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27312 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1015.836197][ T30] audit: type=1326 audit(1761632191.703:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27312 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1016.101273][ T30] audit: type=1326 audit(1761632191.703:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27312 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1016.487704][ T30] audit: type=1326 audit(1761632191.703:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27312 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1016.888005][ T30] audit: type=1326 audit(1761632191.703:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27312 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1018.757281][T27366] openvswitch: netlink: IP tunnel dst address not specified [ 1018.933819][T27372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7039'. [ 1018.985566][T27373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7039'. [ 1019.093572][T27378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.134562][T27378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.192626][T27380] kvm: pic: level sensitive irq not supported [ 1019.206070][T27380] kvm: pic: non byte read [ 1019.531827][T27392] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1022.476040][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1022.476058][ T30] audit: type=1800 audit(1761632200.003:990): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7054" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1023.380594][T27449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7062'. [ 1026.731064][T27511] netlink: 'syz.7.7079': attribute type 4 has an invalid length. [ 1027.050248][T27517] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1027.356650][T27527] binder: 27525:27527 ioctl c0306201 200000000440 returned -14 [ 1027.759457][T27542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7090'. [ 1027.917654][T27542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7090'. [ 1027.983263][T27551] binder_alloc: 27547: pid 27547 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1028.002521][T27549] binder: BINDER_SET_CONTEXT_MGR already set [ 1028.010673][T27549] binder: 27548:27549 ioctl 4018620d 200000000040 returned -16 [ 1030.998044][T27604] netlink: 'syz.7.7111': attribute type 4 has an invalid length. [ 1031.067051][T27602] vlan2: entered promiscuous mode [ 1031.101151][T27602] bond0: entered promiscuous mode [ 1031.606231][T27270] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1031.756267][T27270] usb 8-1: Using ep0 maxpacket: 32 [ 1031.780587][T27270] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.800113][T27270] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1031.815034][T27270] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1031.828070][T27270] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1031.863822][T27270] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1031.874481][T27270] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.884605][T27270] usb 8-1: Product: syz [ 1031.893685][T27270] usb 8-1: Manufacturer: syz [ 1031.900740][T27270] usb 8-1: SerialNumber: syz [ 1031.919643][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1031.941337][T27270] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input88 [ 1032.141171][T27270] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1032.177336][T27270] (id 0x00) [ 1032.306351][T27270] rc_core: IR keymap rc-imon-pad not found [ 1032.312185][T27270] Registered IR keymap rc-empty [ 1032.317973][T27270] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1032.331162][T27270] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1032.417982][T27270] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 1032.430194][T27270] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input89 [ 1032.470050][T27270] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:31> initialized [ 1033.577274][T27633] syzkaller0: entered promiscuous mode [ 1033.594291][T27633] syzkaller0: entered allmulticast mode [ 1034.852637][T27656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.879407][T27656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.923923][T27656] imon:display_open: display port is already open [ 1035.069940][T27282] usb 8-1: USB disconnect, device number 31 [ 1036.976230][T27270] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1037.332006][T27270] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.424088][T27270] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1037.465965][T27270] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.517558][T27270] usb 8-1: config 0 descriptor?? [ 1037.524830][T27270] pwc: Askey VC010 type 2 USB webcam detected. [ 1037.937117][T27270] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1037.946997][T27270] pwc: recv_control_msg error -32 req 02 val 2700 [ 1038.056295][T27270] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1038.080805][T27270] pwc: recv_control_msg error -32 req 04 val 1000 [ 1038.101486][T27270] pwc: recv_control_msg error -32 req 04 val 1300 [ 1038.128905][T27270] pwc: recv_control_msg error -32 req 04 val 1400 [ 1038.149762][T27270] pwc: recv_control_msg error -32 req 02 val 2000 [ 1038.169494][T27270] pwc: recv_control_msg error -32 req 02 val 2100 [ 1038.206294][T27270] pwc: recv_control_msg error -32 req 04 val 1500 [ 1038.440041][T27270] pwc: recv_control_msg error -71 req 02 val 2400 [ 1038.450000][T27270] pwc: recv_control_msg error -71 req 02 val 2600 [ 1038.458178][T27270] pwc: recv_control_msg error -71 req 02 val 2900 [ 1038.479275][T27270] pwc: recv_control_msg error -71 req 02 val 2800 [ 1038.491799][T27270] pwc: recv_control_msg error -71 req 04 val 1100 [ 1038.517360][T27270] pwc: recv_control_msg error -71 req 04 val 1200 [ 1038.531911][T27270] pwc: Registered as video103. [ 1038.554716][T27270] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input90 [ 1038.607670][T27270] usb 8-1: USB disconnect, device number 32 [ 1039.381444][T27665] syz.6.7125 (27665): drop_caches: 1 [ 1039.438640][T27668] syz.6.7125 (27668): drop_caches: 1 [ 1040.135581][T27712] binder: transaction release 348 bad handle 1, ret = -22 [ 1042.576736][T27282] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1042.826341][T27282] usb 8-1: Using ep0 maxpacket: 16 [ 1042.834885][T27282] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1042.875289][T27282] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1042.924562][T27282] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1042.935264][T27282] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.051308][T27282] usb 8-1: Product: syz [ 1043.073235][T27282] usb 8-1: Manufacturer: syz [ 1043.093575][T27282] usb 8-1: SerialNumber: syz [ 1043.131036][T27282] usb 8-1: config 0 descriptor?? [ 1043.171903][T27282] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1043.219870][T27761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.229629][T27282] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1043.352660][T27761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.793431][T27282] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1043.803758][T27282] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1044.143024][T27770] bridge0: entered allmulticast mode [ 1044.232956][ T30] audit: type=1804 audit(1761632221.763:991): pid=27774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.7157" name="/newroot/1334/file1" dev="fuse" ino=1 res=1 errno=0 [ 1044.468941][T27282] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 1044.483154][T27282] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 1044.492474][T27282] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 1044.731135][T27282] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 1044.746352][T27282] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 1044.756617][T27282] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 1044.778454][T27282] usb 8-1: USB disconnect, device number 33 [ 1045.517061][T27802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.531170][T27802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.012736][T27814] netlink: 'syz.7.7170': attribute type 1 has an invalid length. [ 1046.291353][T27814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1046.418413][T27819] gretap1: entered promiscuous mode [ 1046.433983][T27819] bond2: (slave gretap1): making interface the new active one [ 1046.442359][T27819] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1046.571108][T27824] xt_TCPMSS: Only works on TCP SYN packets [ 1046.602707][T27824] hub 1-0:1.0: USB hub found [ 1046.609482][T27824] hub 1-0:1.0: 1 port detected [ 1047.116224][ T5946] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 1047.129231][T27842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.140321][T27842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.268109][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1047.283529][ T5946] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1047.299202][ T5946] usb 8-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1047.308930][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.325482][ T5946] usb 8-1: config 0 descriptor?? [ 1047.333175][T27838] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1047.610066][ T5946] usbhid 8-1:0.0: can't add hid device: -71 [ 1047.625339][ T5946] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1047.658068][ T5946] usb 8-1: USB disconnect, device number 34 [ 1050.891298][T27902] binder_alloc: 27901: pid 27901 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1050.920929][T27902] binder_alloc: 27901: pid 27901 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1051.067904][T27904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.095317][T27904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.784204][T27918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.839264][T27918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.865961][T27918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.957136][T27918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.164201][T27925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.228004][T27925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.794059][T27933] binder_alloc: 27932: pid 27932 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1053.352310][T27948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7210'. [ 1053.394892][T27948] vlan0: entered allmulticast mode [ 1053.446317][T27948] dummy0: entered allmulticast mode [ 1054.193950][T27959] fuse: Bad value for 'user_id' [ 1054.200141][T27959] fuse: Bad value for 'user_id' [ 1054.432420][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.438804][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.285330][ T3527] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.296526][ T3527] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.324947][ T3527] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.420677][ T3527] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.216198][T27282] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1058.366398][T27282] usb 3-1: Using ep0 maxpacket: 16 [ 1058.398993][T27282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1058.424701][T27282] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1058.436748][T27282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.452395][T27282] usb 3-1: Product: syz [ 1058.462879][T27282] usb 3-1: Manufacturer: syz [ 1058.469550][T27282] usb 3-1: SerialNumber: syz [ 1058.484848][T27282] usb 3-1: config 0 descriptor?? [ 1058.497796][T27282] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1058.507538][T27282] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1058.541846][T28012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1058.564049][T28014] bond3: (slave ip6gretap2): making interface the new active one [ 1058.603933][T28014] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1059.007528][ T5890] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 1059.102336][T27282] em28xx 3-1:0.0: chip ID is em2765 [ 1059.178291][ T5890] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1059.190341][ T5890] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.246508][ T5890] usb 8-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1059.262300][ T5890] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1059.270981][ T5890] usb 8-1: Manufacturer: syz [ 1059.285388][ T5890] usb 8-1: config 0 descriptor?? [ 1059.802359][T27282] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1059.817989][ T5890] cougar 0003:060B:700A.0044: unknown main item tag 0x0 [ 1059.827870][T27282] em28xx 3-1:0.0: board has no eeprom [ 1059.833387][ T5890] cougar 0003:060B:700A.0044: unknown main item tag 0x0 [ 1059.850979][ T5890] cougar 0003:060B:700A.0044: unknown main item tag 0x0 [ 1059.892517][ T5890] cougar 0003:060B:700A.0044: unknown main item tag 0x0 [ 1059.918029][ T5890] cougar 0003:060B:700A.0044: unknown main item tag 0x0 [ 1059.958924][ T5890] cougar 0003:060B:700A.0044: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1060.039856][ T5890] usb 8-1: USB disconnect, device number 35 [ 1060.116283][T27282] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1060.124631][T27282] em28xx 3-1:0.0: dvb set to bulk mode. [ 1060.215382][ T5924] em28xx 3-1:0.0: Binding DVB extension [ 1060.282374][ T5890] usb 3-1: USB disconnect, device number 28 [ 1060.295284][ T5890] em28xx 3-1:0.0: Disconnecting em28xx [ 1060.755948][ T5924] em28xx 3-1:0.0: Registering input extension [ 1060.871269][T28038] fido_id[28038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1060.884828][ T5890] em28xx 3-1:0.0: Closing input extension [ 1061.031001][ T5890] em28xx 3-1:0.0: Freeing device [ 1061.442331][T27270] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1062.296192][T27270] usb 8-1: Using ep0 maxpacket: 8 [ 1062.656392][T27270] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.810968][T27270] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1062.951441][T27270] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.983337][T27270] usb 8-1: Product: syz [ 1062.993476][T27270] usb 8-1: Manufacturer: syz [ 1063.007931][T27270] usb 8-1: SerialNumber: syz [ 1063.258154][T27270] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 1063.301438][T27270] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 1063.626208][ T5946] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1063.898800][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 1063.910827][ T5946] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.921798][ T5946] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1063.986465][ T5946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1064.051023][ T5946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1064.234204][ T5946] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1064.286613][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.330987][ T5946] hub 4-1:1.0: bad descriptor, ignoring hub [ 1064.356254][ T5946] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1064.389761][ T5946] cdc_wdm 4-1:1.0: skipping garbage [ 1064.414059][ T5946] cdc_wdm 4-1:1.0: skipping garbage [ 1064.432110][ T5946] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1064.456212][ T5946] cdc_wdm 4-1:1.0: Unknown control protocol [ 1064.874571][T28080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.899283][T28080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.948721][T27282] usb 8-1: USB disconnect, device number 36 [ 1065.108995][T28082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.357877][T28082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.414390][T28084] syz_tun: entered allmulticast mode [ 1067.086633][ T5953] usb 4-1: USB disconnect, device number 70 [ 1067.723725][T28105] tipc: Started in network mode [ 1067.836348][T28105] tipc: Node identity a67e7af271ad, cluster identity 4711 [ 1067.846376][T28105] tipc: Enabled bearer , priority 0 [ 1067.944609][T28104] tipc: Resetting bearer [ 1068.016589][T28103] syzkaller0: entered promiscuous mode [ 1068.109697][T28102] tipc: Resetting bearer [ 1068.320863][T28102] tipc: Disabling bearer [ 1068.521782][T20931] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1068.711199][T20931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.726271][T20931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.790919][T20931] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1068.900323][T28121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.918130][T20931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.939829][T28121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.940466][T20931] usb 3-1: config 0 descriptor?? [ 1069.474245][ T30] audit: type=1326 audit(1761632247.003:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.6.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1069.636458][ T30] audit: type=1326 audit(1761632247.003:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.6.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1069.659123][ T30] audit: type=1326 audit(1761632247.043:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.6.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1069.665993][T20931] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1069.682242][ T30] audit: type=1326 audit(1761632247.043:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.6.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1069.713658][ T30] audit: type=1326 audit(1761632247.043:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.6.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1069.736122][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.746781][ T30] audit: type=1326 audit(1761632247.043:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.6.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1069.769207][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.795763][ T30] audit: type=1326 audit(1761632247.043:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.6.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1069.818190][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.884680][T20931] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1069.907860][T20931] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1069.914948][ T30] audit: type=1326 audit(1761632247.043:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.6.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1069.914998][T20931] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1069.937656][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.961385][T20931] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1069.968806][T20931] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1069.989367][T20931] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1070.018087][T20931] cp2112 0003:10C4:EA90.0045: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1070.075165][ T30] audit: type=1326 audit(1761632247.113:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.6.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1070.099733][T20931] cp2112 0003:10C4:EA90.0045: Part Number: 0x00 Device Version: 0x00 [ 1070.131804][ T30] audit: type=1326 audit(1761632247.113:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.6.7254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1070.154269][ C1] vkms_vblank_simulate: vblank timer overrun [ 1070.215510][T20931] cp2112 0003:10C4:EA90.0045: error requesting SMBus config [ 1070.228718][T20931] cp2112 0003:10C4:EA90.0045: probe with driver cp2112 failed with error -32 [ 1070.314706][T28134] netlink: 'syz.7.7256': attribute type 10 has an invalid length. [ 1070.371369][T28134] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1070.493627][ T7766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.502149][ T7766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.695140][T28143] cgroup: fork rejected by pids controller in /syz3 [ 1071.532256][T28142] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7258'. [ 1071.986264][T20931] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1072.136682][T20931] usb 8-1: Using ep0 maxpacket: 8 [ 1072.146203][T20931] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1072.163815][T20931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.216321][T20931] usb 8-1: Product: syz [ 1072.224599][T20931] usb 8-1: Manufacturer: syz [ 1072.239411][T20931] usb 8-1: SerialNumber: syz [ 1072.319417][T20931] usb 8-1: config 0 descriptor?? [ 1072.339072][T20931] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1072.622253][ T5946] usb 3-1: USB disconnect, device number 29 [ 1072.857068][T20931] gspca_sonixj: reg_w1 err -110 [ 1072.877054][T20931] sonixj 8-1:0.0: probe with driver sonixj failed with error -110 [ 1073.028768][ T5924] usb 8-1: USB disconnect, device number 37 [ 1073.190059][T30745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1075.610016][T31425] kvm: pic: non byte write [ 1075.630353][T31425] kvm: pic: non byte write [ 1075.661499][T31428] netlink: 'syz.3.7269': attribute type 10 has an invalid length. [ 1075.672831][T31425] kvm: pic: non byte write [ 1075.679584][T31425] kvm: pic: non byte write [ 1075.714422][T31428] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1075.742078][T31428] team0: Failed to send options change via netlink (err -105) [ 1075.761534][T31428] team0: Port device netdevsim0 added [ 1075.771618][ T3494] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1075.789211][T31431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.801868][T31431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.895574][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1077.895590][ T30] audit: type=1326 audit(1761632255.423:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31455 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1077.975023][ T30] audit: type=1326 audit(1761632255.423:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31455 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1077.997772][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.003910][ T30] audit: type=1326 audit(1761632255.433:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31455 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1078.026900][ T30] audit: type=1326 audit(1761632255.433:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31455 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1078.049902][ T30] audit: type=1326 audit(1761632255.433:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31455 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1078.135413][ T30] audit: type=1326 audit(1761632255.453:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31455 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1078.161257][ T30] audit: type=1326 audit(1761632255.453:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31455 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1078.184731][ T30] audit: type=1326 audit(1761632255.453:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31455 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1078.207991][ T30] audit: type=1326 audit(1761632255.453:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31455 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1078.230485][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.268474][ T30] audit: type=1326 audit(1761632255.463:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31455 comm="syz.4.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1078.681856][T31467] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7281'. [ 1078.806192][ T5953] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1079.175242][T31470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7283'. [ 1079.333480][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.362859][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.420142][ T5953] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1079.441086][ T5953] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1079.460049][ T5953] usb 4-1: Manufacturer: syz [ 1079.477492][ T5953] usb 4-1: config 0 descriptor?? [ 1080.593320][ T5953] uclogic 0003:256C:006D.0046: interface is invalid, ignoring [ 1081.483403][ T5946] usb 4-1: USB disconnect, device number 71 [ 1083.705635][T31526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.725479][T31526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.166299][ T5946] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1085.319003][ T5946] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1085.346151][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.476023][ T5946] usb 3-1: Product: syz [ 1085.481005][ T5946] usb 3-1: Manufacturer: syz [ 1085.485898][ T5946] usb 3-1: SerialNumber: syz [ 1085.520428][ T5946] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1085.772395][T20931] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1086.057527][ C0] usb 3-1: ath9k_htc: invalid pkt_len (fd7e) [ 1086.334382][T31542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.353971][T31542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.186640][T20931] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1088.193849][T20931] ath9k_htc: Failed to initialize the device [ 1088.221941][ T5946] usb 3-1: USB disconnect, device number 30 [ 1088.289082][ T5946] usb 3-1: ath9k_htc: USB layer deinitialized [ 1091.468171][T31634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.477974][T31634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.520207][T31647] binder: BINDER_SET_CONTEXT_MGR already set [ 1093.526705][T31647] binder: 31646:31647 ioctl 4018620d 2000000002c0 returned -16 [ 1093.729411][T31651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.746577][T31651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.437426][ T5946] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1095.926234][ T5946] usb 8-1: Using ep0 maxpacket: 8 [ 1095.935286][ T5946] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1095.956551][ T5946] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1095.999924][ T5946] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1096.030584][ T5946] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.065498][ T5946] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1096.080712][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.328625][ T5946] usb 8-1: GET_CAPABILITIES returned 0 [ 1096.354666][ T5946] usbtmc 8-1:16.0: can't read capabilities [ 1097.429800][ T5890] usb 8-1: USB disconnect, device number 38 [ 1098.510371][T31695] syz.7.7345 (31695): drop_caches: 1 [ 1098.805827][T31694] syz.7.7345 (31694): drop_caches: 1 [ 1099.683903][T31720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.693822][T31720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.032586][T31694] syz.7.7345 (31694): drop_caches: 1 [ 1101.030144][T31724] bridge2: entered promiscuous mode [ 1101.048633][T31724] bridge2: entered allmulticast mode [ 1101.076030][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1101.076046][ T30] audit: type=1800 audit(1761632278.603:1059): pid=31726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7354" name="bus" dev="tmpfs" ino=7146 res=0 errno=0 [ 1101.102765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.373194][T31728] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1101.373194][T31728] The task syz.6.7354 (31728) triggered the difference, watch for misbehavior. [ 1101.588786][T31730] netlink: 'syz.3.7355': attribute type 1 has an invalid length. [ 1101.622514][T31730] bond2: entered promiscuous mode [ 1101.629051][T31730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1101.646921][T31730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7355'. [ 1101.656575][T31730] bond2: entered allmulticast mode [ 1101.673899][T31730] bond2: (slave bridge0): making interface the new active one [ 1101.681738][T31730] bridge0: entered promiscuous mode [ 1101.687295][T31730] bridge0: entered allmulticast mode [ 1101.693494][T31730] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 1105.125792][T31762] netlink: 'syz.4.7363': attribute type 3 has an invalid length. [ 1105.951167][T31782] sctp: [Deprecated]: syz.4.7368 (pid 31782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1105.951167][T31782] Use struct sctp_sack_info instead [ 1108.055676][T31785] syz.2.7369 (31785): drop_caches: 2 [ 1110.242057][ T5924] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1110.496580][ T5924] usb 8-1: Using ep0 maxpacket: 32 [ 1110.504335][ T5924] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1110.514036][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.543909][ T5924] usb 8-1: config 0 descriptor?? [ 1110.597065][ T5924] as10x_usb: device has been detected [ 1110.658078][ T5924] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1110.752061][ T5924] usb 8-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 1110.973476][ T5924] as10x_usb: error during firmware upload part1 [ 1110.985164][ T5924] Registered device nBox DVB-T Dongle [ 1111.346191][ T5924] delete_channel: no stack [ 1111.421099][ T5924] usb 8-1: USB disconnect, device number 39 [ 1111.464854][ T5924] Unregistered device nBox DVB-T Dongle [ 1111.469776][ T5924] as10x_usb: device has been disconnected [ 1111.527207][ T5946] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1111.703799][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 1111.797925][ T5946] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1111.860963][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.891601][ T5946] usb 4-1: config 0 descriptor?? [ 1111.907409][ T5946] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1112.359150][T31854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.381999][T31854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.438594][T31854] fuse: Unknown parameter 'fd0x0000000000000007' [ 1113.639464][ T3540] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1113.697976][ T3540] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1113.755945][ T3540] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1113.929952][ T3540] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1114.131881][T31869] tipc: Started in network mode [ 1114.151638][T31869] tipc: Node identity c241712163a8, cluster identity 4711 [ 1114.201056][T31869] tipc: Enabled bearer , priority 0 [ 1114.260137][T31870] syzkaller0: entered promiscuous mode [ 1114.326557][T31870] syzkaller0: entered allmulticast mode [ 1114.334958][T31869] tipc: Resetting bearer [ 1114.353947][T31867] tipc: Resetting bearer [ 1114.537926][T31867] tipc: Disabling bearer [ 1114.640810][ T5946] gspca_sonixj: reg_w1 err -71 [ 1114.647092][ T5946] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1114.682771][ T5946] usb 4-1: USB disconnect, device number 72 [ 1115.586141][T27282] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1115.861947][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.868453][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.936813][T27282] usb 4-1: Using ep0 maxpacket: 8 [ 1115.971342][T27282] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1115.997034][T27282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.045468][T27282] usb 4-1: Product: syz [ 1116.050658][T27282] usb 4-1: Manufacturer: syz [ 1116.055359][T27282] usb 4-1: SerialNumber: syz [ 1116.076570][T27282] usb 4-1: config 0 descriptor?? [ 1116.099004][T27282] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1117.171478][T27282] gspca_sonixj: reg_r err -110 [ 1117.176405][T27282] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 1118.050604][T31908] netlink: 'syz.4.7403': attribute type 3 has an invalid length. [ 1118.130501][T31908] netlink: 'syz.4.7403': attribute type 3 has an invalid length. [ 1118.158931][T31908] netlink: 'syz.4.7403': attribute type 3 has an invalid length. [ 1118.176584][T31908] netlink: 'syz.4.7403': attribute type 3 has an invalid length. [ 1118.185589][T31908] netlink: 'syz.4.7403': attribute type 3 has an invalid length. [ 1118.207025][T31908] netlink: 'syz.4.7403': attribute type 3 has an invalid length. [ 1118.232986][T31908] netlink: 'syz.4.7403': attribute type 3 has an invalid length. [ 1118.256157][T31908] netlink: 'syz.4.7403': attribute type 3 has an invalid length. [ 1118.296255][T31908] netlink: 'syz.4.7403': attribute type 3 has an invalid length. [ 1118.307417][T31908] netlink: 'syz.4.7403': attribute type 3 has an invalid length. [ 1118.475359][T27282] usb 4-1: USB disconnect, device number 73 [ 1118.957186][T31927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.972964][T31927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.726757][T31971] syzkaller0: entered promiscuous mode [ 1122.810954][T31971] syzkaller0: entered allmulticast mode [ 1123.872523][T31983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7422'. [ 1125.627815][ T30] audit: type=1800 audit(1761632303.163:1060): pid=31993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7425" name="bus" dev="ramfs" ino=171471 res=0 errno=0 [ 1127.307982][T32024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7433'. [ 1127.552355][T32032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.565626][T32032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.653421][T32033] binder: BINDER_SET_CONTEXT_MGR already set [ 1127.686173][T32033] binder: 32031:32033 ioctl 4018620d 200000004a80 returned -16 [ 1127.751920][T32037] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7439'. [ 1128.870497][T32052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.885092][T32052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.462553][T20931] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1129.562358][T32064] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7446'. [ 1129.695256][ T5890] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1129.731910][T32067] bridge4: entered promiscuous mode [ 1129.787304][T32067] bridge4: entered allmulticast mode [ 1129.897680][ T5890] usb 8-1: Using ep0 maxpacket: 32 [ 1129.918925][ T5890] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1129.929944][ T5890] usb 8-1: config 0 has no interface number 0 [ 1129.999689][T20931] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 1130.030106][ T5890] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1130.039302][T20931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.087548][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.098808][T20931] usb 3-1: Product: syz [ 1130.111676][T20931] usb 3-1: Manufacturer: syz [ 1130.122919][T20931] usb 3-1: SerialNumber: syz [ 1130.125713][ T5890] usb 8-1: Product: syz [ 1130.155727][ T5890] usb 8-1: Manufacturer: syz [ 1130.157051][T20931] usb 3-1: config 0 descriptor?? [ 1130.188064][T20931] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1130.205881][ T5890] usb 8-1: SerialNumber: syz [ 1130.609599][ T5890] usb 8-1: config 0 descriptor?? [ 1130.653605][ T5890] smsc95xx v2.0.0 [ 1131.066875][ T5890] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1131.124282][ T5890] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1131.537465][T32074] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1131.933049][T32078] bond6: (slave ip6gretap2): making interface the new active one [ 1131.952835][T32078] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1133.157899][T27270] usb 3-1: USB disconnect, device number 31 [ 1133.244076][ T5890] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 1133.256686][ T5890] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 1133.273476][ T5890] usb 8-1: USB disconnect, device number 40 [ 1133.317175][T32099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.354262][T32101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.354457][T32099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.413868][T32099] random: crng reseeded on system resumption [ 1133.426834][T32101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.336429][ T5890] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1134.684041][ T5890] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1134.715032][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.736308][ T5890] usb 3-1: Product: syz [ 1134.750745][ T5890] usb 3-1: Manufacturer: syz [ 1134.791056][ T5890] usb 3-1: SerialNumber: syz [ 1134.848728][ T5890] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1134.894261][ T5924] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1135.166473][T27270] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1135.318080][T27270] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1135.335460][T27270] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1135.352470][ T5946] usb 3-1: USB disconnect, device number 32 [ 1135.380231][T27270] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1135.391003][T27270] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1135.402288][T27270] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1135.420217][T27270] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1135.444367][T27270] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1135.460259][T27270] usb 4-1: Product: syz [ 1135.466947][T27270] usb 4-1: Manufacturer: syz [ 1135.489592][T27270] cdc_wdm 4-1:1.0: skipping garbage [ 1135.494863][T27270] cdc_wdm 4-1:1.0: skipping garbage [ 1135.502718][T27270] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1135.509172][T27270] cdc_wdm 4-1:1.0: Unknown control protocol [ 1135.984504][ T5924] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1136.004934][ T5924] ath9k_htc: Failed to initialize the device [ 1136.028147][ T5946] usb 3-1: ath9k_htc: USB layer deinitialized [ 1136.552163][T27270] usb 4-1: USB disconnect, device number 74 [ 1136.874022][T32165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.886259][T32165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.996234][T32190] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1139.487939][T32203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.513711][T32203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.952428][T32209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.968391][T32209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.777601][T32229] validate_nla: 35 callbacks suppressed [ 1140.777616][T32229] netlink: 'syz.6.7484': attribute type 1 has an invalid length. [ 1140.978017][T32229] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1141.043276][T32232] bond5: entered allmulticast mode [ 1141.096275][T32235] bond5: (slave ip6gretap2): making interface the new active one [ 1141.126163][T32235] ip6gretap2: entered allmulticast mode [ 1141.139056][T32235] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1141.259379][T32245] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1141.336454][ T30] audit: type=1326 audit(1761632318.863:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32239 comm="syz.2.7486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6853b8efc9 code=0x7ffc0000 [ 1141.362798][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.516289][ T30] audit: type=1326 audit(1761632318.863:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32239 comm="syz.2.7486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6853b8efc9 code=0x7ffc0000 [ 1142.025510][T32254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1142.226359][ T30] audit: type=1326 audit(1761632318.863:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32239 comm="syz.2.7486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6853b8efc9 code=0x7ffc0000 [ 1142.346175][ T30] audit: type=1326 audit(1761632318.863:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32239 comm="syz.2.7486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6853b8efc9 code=0x7ffc0000 [ 1142.456444][ T30] audit: type=1326 audit(1761632318.863:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32239 comm="syz.2.7486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6853b8efc9 code=0x7ffc0000 [ 1142.636550][ T30] audit: type=1326 audit(1761632318.863:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32239 comm="syz.2.7486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6853b8efc9 code=0x7ffc0000 [ 1142.695275][ T30] audit: type=1326 audit(1761632318.863:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32239 comm="syz.2.7486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6853b8efc9 code=0x7ffc0000 [ 1142.921311][ T30] audit: type=1326 audit(1761632318.863:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32239 comm="syz.2.7486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6853b8efc9 code=0x7ffc0000 [ 1142.944541][ T30] audit: type=1326 audit(1761632318.863:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32239 comm="syz.2.7486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6853b8efc9 code=0x7ffc0000 [ 1143.072138][ T30] audit: type=1326 audit(1761632318.863:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32239 comm="syz.2.7486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6853b8efc9 code=0x7ffc0000 [ 1143.264050][T32268] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1143.464210][T32268] SET target dimension over the limit! [ 1144.096715][T32277] syzkaller0: entered promiscuous mode [ 1144.129924][T32277] syzkaller0: entered allmulticast mode [ 1145.266227][ T5924] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 1145.567178][ T5924] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1145.616570][ T5924] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.657330][ T5924] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1145.831209][ T5924] usb 8-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1145.840690][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.864576][ T5924] usb 8-1: config 0 descriptor?? [ 1146.758568][ T5924] uclogic 0003:28BD:0075.0047: interface is invalid, ignoring [ 1146.965623][T27270] usb 8-1: USB disconnect, device number 41 [ 1147.816222][T27271] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1147.966373][T27271] usb 4-1: Using ep0 maxpacket: 16 [ 1148.036190][ T5924] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1148.160551][T27271] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1148.199153][T27271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1148.255256][ T5924] usb 8-1: Using ep0 maxpacket: 8 [ 1148.278809][ T5924] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1148.279599][T27271] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1148.298765][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.307714][ T5924] usb 8-1: Product: syz [ 1148.314313][T27271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.334950][T27271] usb 4-1: Product: syz [ 1148.351218][T27271] usb 4-1: Manufacturer: syz [ 1148.394533][T27271] usb 4-1: SerialNumber: syz [ 1148.510543][ T5924] usb 8-1: Manufacturer: syz [ 1148.515589][ T5924] usb 8-1: SerialNumber: syz [ 1148.687152][ T5924] usb 8-1: config 0 descriptor?? [ 1148.696790][ T5924] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1148.899333][T27271] usb 4-1: 0:2 : does not exist [ 1148.925539][T27271] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1148.977925][T27271] usb 4-1: USB disconnect, device number 75 [ 1149.112769][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1151.853270][ T5924] gspca_sonixj: reg_w1 err -71 [ 1151.906213][ T5924] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 1151.957196][ T5924] usb 8-1: USB disconnect, device number 42 [ 1152.343390][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.226858][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.316226][ T5924] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1153.693666][ T5924] usb 8-1: Using ep0 maxpacket: 16 [ 1153.701603][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1153.777416][ T5924] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1153.806288][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.870460][ T5924] usb 8-1: Product: syz [ 1153.874661][ T5924] usb 8-1: Manufacturer: syz [ 1153.892349][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.930275][ T5924] usb 8-1: SerialNumber: syz [ 1153.965352][ T5924] usb 8-1: config 0 descriptor?? [ 1154.002763][ T5924] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1154.022999][ T5924] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1154.073874][T32386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7530'. [ 1154.081443][T32385] syzkaller0: entered promiscuous mode [ 1154.094694][T32385] syzkaller0: entered allmulticast mode [ 1154.232971][T32390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.279146][T32390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.481201][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.993230][ T5924] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1155.372889][ T5924] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1155.381169][ T5924] em28xx 8-1:0.0: board has no eeprom [ 1155.687295][ T5924] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1155.696737][ T5924] em28xx 8-1:0.0: dvb set to bulk mode. [ 1155.705716][T27283] em28xx 8-1:0.0: Binding DVB extension [ 1155.806515][T32398] tipc: Started in network mode [ 1155.835936][T32398] tipc: Node identity 56249be2167f, cluster identity 4711 [ 1155.920726][T32398] tipc: Enabled bearer , priority 0 [ 1156.095931][ T5946] usb 8-1: USB disconnect, device number 43 [ 1156.122266][ T5946] em28xx 8-1:0.0: Disconnecting em28xx [ 1156.186960][T32399] syzkaller0: entered promiscuous mode [ 1156.215134][T32399] syzkaller0: entered allmulticast mode [ 1156.251793][ T3494] syzkaller0: tun_net_xmit 70 [ 1156.271648][T27283] em28xx 8-1:0.0: Registering input extension [ 1156.307041][ T5946] em28xx 8-1:0.0: Closing input extension [ 1156.337740][T32397] tipc: Resetting bearer [ 1156.389794][ T5946] em28xx 8-1:0.0: Freeing device [ 1156.428421][T32397] tipc: Disabling bearer [ 1158.590221][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1158.621554][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1158.630870][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1158.639320][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1158.648431][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1160.365069][ T49] bond0 (unregistering): Released all slaves [ 1160.486503][T32448] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7546'. [ 1160.755215][ T5844] Bluetooth: hci2: command tx timeout [ 1160.967157][ T5924] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1161.126236][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 1161.147113][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1161.172437][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1161.193256][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1161.222404][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.241989][ T5924] usb 4-1: Product: syz [ 1161.253733][ T5924] usb 4-1: Manufacturer: syz [ 1161.255745][T32467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.272395][ T5924] usb 4-1: SerialNumber: syz [ 1161.405280][T32469] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3137339392 (6274678784 ns) > initial count (4 ns). Using initial count to start timer. [ 1161.425042][ T5924] usb 4-1: config 0 descriptor?? [ 1161.440071][ T5924] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1161.449820][ T5924] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1162.075730][ T5924] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1162.098424][ T5924] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1162.167427][ T49] hsr_slave_0: left promiscuous mode [ 1162.179784][ T49] hsr_slave_1: left promiscuous mode [ 1162.224194][T32489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.247006][ T49] veth1_macvtap: left promiscuous mode [ 1162.263286][T32489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.271505][ T49] veth0_macvtap: left promiscuous mode [ 1162.286360][ T49] veth1_vlan: left promiscuous mode [ 1162.300435][ T49] veth0_vlan: left promiscuous mode [ 1162.778698][ T5924] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1162.790190][ T5924] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1162.818406][ T5841] Bluetooth: hci2: command tx timeout [ 1163.596146][ T5924] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1163.658120][ T5924] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1163.804939][ T5924] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1163.836880][ T5924] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1163.856986][ T5924] usb 4-1: USB disconnect, device number 76 [ 1164.222965][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1164.222983][ T30] audit: type=1326 audit(1761632341.753:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32504 comm="syz.7.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1164.376221][ T30] audit: type=1326 audit(1761632341.763:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32504 comm="syz.7.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1164.512215][ T30] audit: type=1326 audit(1761632341.763:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32504 comm="syz.7.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1164.552786][ T30] audit: type=1326 audit(1761632341.763:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32504 comm="syz.7.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1164.590657][ T30] audit: type=1326 audit(1761632341.763:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32504 comm="syz.7.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1164.614304][ T30] audit: type=1326 audit(1761632341.763:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32504 comm="syz.7.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1164.640541][ T30] audit: type=1326 audit(1761632341.763:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32504 comm="syz.7.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1164.665057][ T30] audit: type=1326 audit(1761632341.763:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32504 comm="syz.7.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1164.691057][ T30] audit: type=1326 audit(1761632341.763:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32504 comm="syz.7.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1164.717519][ T30] audit: type=1326 audit(1761632341.763:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32504 comm="syz.7.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3f8efc9 code=0x7ffc0000 [ 1164.906928][ T5841] Bluetooth: hci2: command tx timeout [ 1167.047579][ T5841] Bluetooth: hci2: command tx timeout [ 1168.023283][T32433] chnl_net:caif_netlink_parms(): no params data found [ 1168.488512][T32553] loop7: detected capacity change from 0 to 16384 [ 1168.526536][T27282] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1168.747488][T27282] usb 8-1: Using ep0 maxpacket: 8 [ 1168.751907][T27282] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.751923][T27282] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1168.751949][T27282] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1168.751963][T27282] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1168.751987][T27282] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1168.752017][T27282] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.759543][T27282] hub 8-1:1.0: bad descriptor, ignoring hub [ 1168.759563][T27282] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1168.759906][T27282] cdc_wdm 8-1:1.0: skipping garbage [ 1168.759915][T27282] cdc_wdm 8-1:1.0: skipping garbage [ 1168.767154][T27282] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1168.767177][T27282] cdc_wdm 8-1:1.0: Unknown control protocol [ 1169.042868][T32550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.043244][T32550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.100095][T32433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.100199][T32433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.100459][T32433] bridge_slave_0: entered allmulticast mode [ 1169.102242][T32433] bridge_slave_0: entered promiscuous mode [ 1169.105502][T32433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.105668][T32433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.105837][T32433] bridge_slave_1: entered allmulticast mode [ 1169.107019][T32548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.112891][T32548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.113314][T32433] bridge_slave_1: entered promiscuous mode [ 1169.115267][T32558] loop7: detected capacity change from 16384 to 16297 [ 1169.549857][T32433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.553559][T32433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.727781][T32433] team0: Port device team_slave_0 added [ 1169.753897][T32433] team0: Port device team_slave_1 added [ 1170.019529][T32433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.019548][T32433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.019573][T32433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.021623][T32433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.021646][T32433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.021670][T32433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.180407][T32433] hsr_slave_0: entered promiscuous mode [ 1170.311880][ C0] vkms_vblank_simulate: vblank timer overrun [ 1170.390923][T32433] hsr_slave_1: entered promiscuous mode [ 1170.412281][T32433] debugfs: 'hsr0' already exists in 'hsr' [ 1170.428123][T32433] Cannot create hsr debugfs directory [ 1171.176789][ T5924] usb 8-1: USB disconnect, device number 44 [ 1172.324109][T32433] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.351663][T32433] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.502980][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1172.502992][ T30] audit: type=1326 audit(1761632350.003:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32606 comm="syz.6.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1172.613683][ T30] audit: type=1326 audit(1761632350.003:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32606 comm="syz.6.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1172.638830][ T30] audit: type=1326 audit(1761632350.003:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32606 comm="syz.6.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1172.663450][T32433] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.681076][T32433] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.696394][ T30] audit: type=1326 audit(1761632350.003:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32606 comm="syz.6.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1172.824930][ T30] audit: type=1326 audit(1761632350.003:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32606 comm="syz.6.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1172.871368][T32614] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 1172.887466][T32614] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 1172.975285][ T30] audit: type=1326 audit(1761632350.003:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32606 comm="syz.6.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1173.087500][T32433] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.131834][ T30] audit: type=1326 audit(1761632350.003:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32606 comm="syz.6.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1173.171658][T32433] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.266697][ T30] audit: type=1326 audit(1761632350.003:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32606 comm="syz.6.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1173.316283][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 1173.331592][ T30] audit: type=1326 audit(1761632350.003:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32606 comm="syz.6.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1173.363456][ T30] audit: type=1326 audit(1761632350.003:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32606 comm="syz.6.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1173.538728][T32433] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.570126][T32433] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.120329][T32639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.129724][T32639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.189608][T32433] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1174.252238][T32433] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1174.759517][T32433] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1174.781164][T32433] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1175.672612][T32660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7587'. [ 1175.796985][T32660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7587'. [ 1175.831676][T32433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.955749][T32433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.095596][T22626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.102837][T22626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.319980][T22626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.327229][T22626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.667336][T32433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1176.707338][T32682] tipc: Enabled bearer , priority 0 [ 1176.718500][T32682] syzkaller0: entered promiscuous mode [ 1176.724708][T32682] syzkaller0: entered allmulticast mode [ 1176.837302][T32684] tipc: Resetting bearer [ 1176.850763][T32681] tipc: Resetting bearer [ 1176.986758][T32681] tipc: Disabling bearer [ 1177.122979][T32433] veth0_vlan: entered promiscuous mode [ 1177.187317][T32433] veth1_vlan: entered promiscuous mode [ 1177.323576][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.330811][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.879632][T32689] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1177.899164][T32689] vlan0: entered promiscuous mode [ 1177.904329][T32689] bond0: entered promiscuous mode [ 1178.052460][T32433] veth0_macvtap: entered promiscuous mode [ 1178.160339][T32433] veth1_macvtap: entered promiscuous mode [ 1178.226371][T27270] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1178.279278][T32433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.299298][T32705] binder: 32699:32705 ioctl c0306201 0 returned -14 [ 1178.537614][T32433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.545219][T27270] usb 8-1: Using ep0 maxpacket: 16 [ 1178.572487][T27270] usb 8-1: config 0 has an invalid interface number: 71 but max is 1 [ 1178.579632][ T7766] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.586057][T27270] usb 8-1: config 0 has an invalid interface number: 220 but max is 1 [ 1178.595583][ T7766] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.626161][T27270] usb 8-1: config 0 has no interface number 0 [ 1178.632736][T27270] usb 8-1: config 0 has no interface number 1 [ 1178.640984][T27270] usb 8-1: config 0 interface 71 has no altsetting 0 [ 1178.650380][T27270] usb 8-1: config 0 interface 220 has no altsetting 0 [ 1178.663946][T27270] usb 8-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=1b.69 [ 1178.683700][T27270] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.702914][T27270] usb 8-1: Product: syz [ 1178.712140][T27270] usb 8-1: Manufacturer: syz [ 1178.716825][T27270] usb 8-1: SerialNumber: syz [ 1178.724356][T27270] usb 8-1: config 0 descriptor?? [ 1178.857671][ T7766] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.006616][ T7766] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.260870][T27270] usb 8-1: USB disconnect, device number 45 [ 1179.282185][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.71/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1179.739962][T28050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.752971][T28050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.109753][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.156244][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.497037][ T5924] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1180.593045][T32727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.635450][T32727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.707890][ T5924] usb 8-1: Using ep0 maxpacket: 8 [ 1180.755911][ T5924] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1180.888952][ T5924] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1180.941446][ T5924] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1181.151925][ T5924] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1181.276159][ T5924] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1181.308130][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.756833][T32717] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 1181.773734][ T5924] usb 8-1: GET_CAPABILITIES returned 0 [ 1181.822773][ T5924] usbtmc 8-1:16.0: can't read capabilities [ 1182.339278][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1182.339297][ T30] audit: type=1326 audit(1761632359.843:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32741 comm="syz.4.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1182.714803][ T30] audit: type=1326 audit(1761632359.843:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32741 comm="syz.4.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1182.786257][ T30] audit: type=1326 audit(1761632359.843:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32741 comm="syz.4.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1182.874401][ T30] audit: type=1326 audit(1761632359.843:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32741 comm="syz.4.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1182.878376][T20931] usb 8-1: USB disconnect, device number 46 [ 1182.971202][T32744] hfs: unable to load iocharset "io#harset" [ 1183.155111][ T30] audit: type=1326 audit(1761632359.843:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32741 comm="syz.4.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1183.336394][ T30] audit: type=1326 audit(1761632359.843:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32741 comm="syz.4.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1183.508471][ T30] audit: type=1326 audit(1761632359.843:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32741 comm="syz.4.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1183.544513][T32752] pim6reg1: entered promiscuous mode [ 1183.580195][T32752] pim6reg1: entered allmulticast mode [ 1183.680359][ T30] audit: type=1326 audit(1761632360.513:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32741 comm="syz.4.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1183.828323][ T30] audit: type=1326 audit(1761632360.513:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32741 comm="syz.4.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a18efc9 code=0x7ffc0000 [ 1185.705210][ T328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.738550][ T328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.184320][ T333] syzkaller0: entered promiscuous mode [ 1186.202251][ T333] syzkaller0: entered allmulticast mode [ 1186.381513][ T333] tipc: Enabled bearer , priority 0 [ 1186.399726][ T330] tipc: Resetting bearer [ 1186.518076][ T330] tipc: Disabling bearer [ 1186.720318][ T343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.768252][ T343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.938572][ T352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.947957][ T352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.847196][ T361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7629'. [ 1190.553738][ T395] syzkaller0: entered promiscuous mode [ 1190.570747][ T395] syzkaller0: entered allmulticast mode [ 1191.671279][ T412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.689423][ T412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.666251][ T432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.681837][ T432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.660647][ T451] binder: 450:451 unknown command 0 [ 1193.721879][ T451] binder: 450:451 ioctl c0306201 200000000080 returned -22 [ 1194.079175][ T461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.098606][ T461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.419598][ T475] binder: 474:475 ioctl c00c620f 0 returned -14 [ 1195.489834][ T475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7652'. [ 1196.081445][ T495] program syz.8.7653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1196.747504][ T503] ptrace attach of "./syz-executor exec"[20502] was attempted by ""[503] [ 1199.540268][ T537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.560501][ T537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.203829][ T555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.213210][ T555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.062304][ T581] netlink: 'syz.4.7675': attribute type 4 has an invalid length. [ 1203.115456][ T581] netlink: 'syz.4.7675': attribute type 4 has an invalid length. [ 1204.777607][ T610] tipc: Started in network mode [ 1204.835687][ T610] tipc: Node identity deaffc075a76, cluster identity 4711 [ 1204.908684][ T610] tipc: Enabled bearer , priority 0 [ 1204.915685][ T611] syzkaller0: entered promiscuous mode [ 1204.921646][ T611] syzkaller0: entered allmulticast mode [ 1205.028715][ T610] tipc: Resetting bearer [ 1205.109603][ T609] tipc: Resetting bearer [ 1205.202069][ T609] tipc: Disabling bearer [ 1205.413036][ T621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7686'. [ 1205.475801][ T624] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7687'. [ 1205.572990][ T624] veth3: entered promiscuous mode [ 1205.596122][ T624] veth3: entered allmulticast mode [ 1205.835780][ T628] veth3: entered promiscuous mode [ 1205.842140][ T628] veth3: entered allmulticast mode [ 1205.870774][ T640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.911153][ T640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.148672][ T646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7694'. [ 1206.723194][ T661] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1206.730555][ T30] audit: type=1804 audit(1761632384.253:1150): pid=660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7697" name="/newroot/1474/file1" dev="fuse" ino=1 res=1 errno=0 [ 1207.337474][T27283] IPVS: starting estimator thread 0... [ 1207.436625][ T665] IPVS: using max 49 ests per chain, 117600 per kthread [ 1209.888206][ T693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7707'. [ 1209.958153][ T693] IPv6: sit2: Disabled Multicast RS [ 1209.987950][ T693] sit2: entered allmulticast mode [ 1210.835275][ T709] loop7: detected capacity change from 0 to 7 [ 1211.280912][ C1] blk_print_req_error: 5 callbacks suppressed [ 1211.280933][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1211.297101][ C1] buffer_io_error: 9 callbacks suppressed [ 1211.297113][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1212.587752][ T728] syzkaller0: entered promiscuous mode [ 1212.593847][ T728] syzkaller0: entered allmulticast mode [ 1212.760007][ T30] audit: type=1326 audit(1761632390.283:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1212.787870][ T734] syzkaller0: entered promiscuous mode [ 1212.793621][ T734] syzkaller0: entered allmulticast mode [ 1212.833420][ T30] audit: type=1326 audit(1761632390.283:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1212.914853][ T30] audit: type=1326 audit(1761632390.283:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1212.939886][ T30] audit: type=1326 audit(1761632390.283:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1212.963462][ T30] audit: type=1326 audit(1761632390.283:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1212.995722][ T30] audit: type=1326 audit(1761632390.283:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1213.043534][ T30] audit: type=1326 audit(1761632390.283:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1213.069654][ T30] audit: type=1326 audit(1761632390.283:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1213.141046][ T30] audit: type=1326 audit(1761632390.283:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1213.165345][ T30] audit: type=1326 audit(1761632390.283:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33798efc9 code=0x7ffc0000 [ 1213.266437][ T743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7732'. [ 1213.293999][ T743] sch_tbf: burst 511 is lower than device veth5 mtu (1514) ! [ 1214.968689][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1215.150476][ T9] usb 4-1: config 0 has no interfaces? [ 1215.165460][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1215.181989][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.200820][ T9] usb 4-1: Product: syz [ 1215.213805][ T9] usb 4-1: Manufacturer: syz [ 1215.222476][ T9] usb 4-1: SerialNumber: syz [ 1215.243495][ T9] usb 4-1: config 0 descriptor?? [ 1215.725983][ T755] team0: Port device netdevsim0 removed [ 1215.734181][ T755] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.840127][ T774] syzkaller0: entered promiscuous mode [ 1215.852064][ T774] syzkaller0: entered allmulticast mode [ 1215.864669][ T9] usb 4-1: USB disconnect, device number 77 [ 1216.406284][ T980] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1216.656161][ T980] usb 9-1: Using ep0 maxpacket: 8 [ 1216.679543][ T980] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1216.692464][ T980] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1216.722713][ T980] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1216.780626][ T980] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1216.877420][ T980] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1216.927010][ T980] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1216.971214][ T980] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1216.986968][ T980] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1217.016787][ T980] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1217.054733][ T980] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1217.067252][ T980] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1217.075265][ T980] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1217.089306][ T980] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1217.176738][ T980] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1217.472815][ T980] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1217.521508][ T980] usb 9-1: string descriptor 0 read error: -22 [ 1217.528775][ T980] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1217.576670][ T980] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.590992][ T804] : renamed from bond_slave_0 [ 1217.621022][ T980] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1217.828302][ T783] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1217.940919][ T783] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1218.014303][T27283] usb 9-1: USB disconnect, device number 6 [ 1218.412978][ T811] tipc: Enabling of bearer rejected, failed to enable media [ 1219.681979][ T826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1220.407478][ T836] netlink: 'syz.7.7742': attribute type 1 has an invalid length. [ 1221.116237][T27270] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1221.277495][T27270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.298346][T27270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.493963][T27270] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1221.516281][T27270] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1221.524311][T27270] usb 4-1: Manufacturer: syz [ 1221.558452][T27270] usb 4-1: config 0 descriptor?? [ 1222.988562][ T867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7750'. [ 1223.003030][T27270] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0048/input/input94 [ 1223.014249][ T867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7750'. [ 1223.094419][T27270] uclogic 0003:256C:006D.0048: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1223.211801][ T980] usb 4-1: USB disconnect, device number 78 [ 1223.691546][ T870] syzkaller0: entered promiscuous mode [ 1223.698400][ T870] syzkaller0: entered allmulticast mode [ 1223.732311][ T868] fido_id[868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1223.826125][T27283] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1224.042080][T27283] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 1224.061725][T27283] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.516837][T27283] usb 9-1: config 0 has no interface number 0 [ 1224.556256][T27283] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1224.746167][T27283] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1224.801311][T27283] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1224.825672][T27283] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.856473][T27283] usb 9-1: Product: syz [ 1224.866204][T27283] usb 9-1: Manufacturer: syz [ 1225.006519][T27283] usb 9-1: SerialNumber: syz [ 1225.027390][T27283] usb 9-1: config 0 descriptor?? [ 1225.304860][T27283] usbtouchscreen 9-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1225.324350][T27283] usb 9-1: USB disconnect, device number 7 [ 1232.057349][ T975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.068395][ T975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.036925][ T895] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 1236.046589][ T895] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 1236.532702][ T1008] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 1236.564101][ T1008] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 1237.473146][ T1035] blktrace: Concurrent blktraces are not allowed on loop3 [ 1237.999524][ T1037] syzkaller0: entered promiscuous mode [ 1238.015895][ T1037] syzkaller0: entered allmulticast mode [ 1238.752165][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.758996][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.750270][ T9] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1239.758711][T27270] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1239.846140][ T5924] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1239.953261][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1239.962249][T27270] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.974921][T27270] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1239.988127][T27270] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.002017][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1240.017771][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.033589][ T9] usb 8-1: Product: syz [ 1240.036978][ T5924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.064416][T27270] usb 9-1: config 0 descriptor?? [ 1240.070308][ T9] usb 8-1: Manufacturer: syz [ 1240.074919][ T9] usb 8-1: SerialNumber: syz [ 1240.080172][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1240.101922][ T9] usb 8-1: config 0 descriptor?? [ 1240.114523][ T5924] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1240.124346][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1240.132651][ T5924] usb 4-1: SerialNumber: syz [ 1240.142556][ T1074] netlink: 'syz.4.7796': attribute type 1 has an invalid length. [ 1240.231783][ T1074] veth7: entered promiscuous mode [ 1240.242047][ T1074] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1240.428760][ T5924] usb 4-1: 0:2 : does not exist [ 1240.443925][T27270] usbhid 9-1:0.0: can't add hid device: -71 [ 1240.466482][ T1074] bond7: entered promiscuous mode [ 1240.474086][ T9] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1240.484585][T27270] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1240.492867][ T1074] bond7: entered allmulticast mode [ 1240.493268][ T1074] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1240.502362][T27270] usb 9-1: USB disconnect, device number 8 [ 1240.523021][ T5924] usb 4-1: USB disconnect, device number 79 [ 1240.750906][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.031066][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1241.031084][ T30] audit: type=1800 audit(1761632418.533:1170): pid=1077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7795" name="bus" dev="ramfs" ino=182888 res=0 errno=0 [ 1241.156908][ T9] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1241.157439][ T1064] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7792'. [ 1241.205063][ T1064] macvlan2: entered promiscuous mode [ 1241.231570][ T1064] bond0: entered promiscuous mode [ 1241.246954][ T1064] : entered promiscuous mode [ 1241.256408][ T1064] bond_slave_1: entered promiscuous mode [ 1241.267533][ T1064] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 1241.277672][ T1064] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1241.299337][ T980] usb 8-1: USB disconnect, device number 47 [ 1241.460008][ T1089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7799'. [ 1241.564307][ T1089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7799'. [ 1241.636426][ T3520] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.638310][ T1091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7799'. [ 1241.649101][ T3520] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.676593][ T3520] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.703757][ T1091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7799'. [ 1242.813069][ T1105] overlayfs: missing 'lowerdir' [ 1243.135718][ T1108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7804'. [ 1243.183223][ T1108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7804'. [ 1243.856358][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1246.303185][ T1141] [ 1246.305540][ T1141] ===================================================== [ 1246.312473][ T1141] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1246.320021][ T1141] syzkaller #0 Not tainted [ 1246.324462][ T1141] ----------------------------------------------------- [ 1246.331500][ T1141] syz.4.7809/1141 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1246.339176][ T1141] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 1246.347909][ T1141] [ 1246.347909][ T1141] and this task is already holding: [ 1246.355274][ T1141] ffff888058c6b0a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1246.364004][ T1141] which would create a new lock dependency: [ 1246.369999][ T1141] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1246.377690][ T1141] [ 1246.377690][ T1141] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1246.387234][ T1141] (kbd_event_lock){..-.}-{3:3} [ 1246.387269][ T1141] [ 1246.387269][ T1141] ... which became SOFTIRQ-irq-safe at: [ 1246.399821][ T1141] lock_acquire+0x120/0x360 [ 1246.404539][ T1141] _raw_spin_lock+0x2e/0x40 [ 1246.409131][ T1141] kbd_event+0xd2/0x3f70 [ 1246.413466][ T1141] input_handle_events_default+0xd4/0x1a0 [ 1246.419365][ T1141] input_pass_values+0x288/0x890 [ 1246.424467][ T1141] input_event_dispose+0x3e5/0x6b0 [ 1246.429660][ T1141] input_event+0x89/0xe0 [ 1246.433997][ T1141] hidinput_hid_event+0x145e/0x1dd0 [ 1246.439352][ T1141] hid_process_event+0x4be/0x620 [ 1246.444567][ T1141] hid_report_raw_event+0xe91/0x16d0 [ 1246.450038][ T1141] hid_input_report+0x43e/0x520 [ 1246.454981][ T1141] hid_irq_in+0x47e/0x6d0 [ 1246.459402][ T1141] __usb_hcd_giveback_urb+0x376/0x540 [ 1246.464852][ T1141] dummy_timer+0x85f/0x44c0 [ 1246.469474][ T1141] __hrtimer_run_queues+0x52c/0xc60 [ 1246.474768][ T1141] hrtimer_run_softirq+0x187/0x2b0 [ 1246.479964][ T1141] handle_softirqs+0x286/0x870 [ 1246.484810][ T1141] run_ksoftirqd+0x9b/0x100 [ 1246.489392][ T1141] smpboot_thread_fn+0x542/0xa60 [ 1246.494493][ T1141] kthread+0x711/0x8a0 [ 1246.498869][ T1141] ret_from_fork+0x4bc/0x870 [ 1246.503575][ T1141] ret_from_fork_asm+0x1a/0x30 [ 1246.508520][ T1141] [ 1246.508520][ T1141] to a SOFTIRQ-irq-unsafe lock: [ 1246.515706][ T1141] (tasklist_lock){.+.+}-{3:3} [ 1246.515733][ T1141] [ 1246.515733][ T1141] ... which became SOFTIRQ-irq-unsafe at: [ 1246.528450][ T1141] ... [ 1246.528460][ T1141] lock_acquire+0x120/0x360 [ 1246.535690][ T1141] _raw_read_lock+0x36/0x50 [ 1246.540425][ T1141] __do_wait+0xde/0x740 [ 1246.544778][ T1141] do_wait+0x1f8/0x510 [ 1246.548956][ T1141] kernel_wait+0xab/0x170 [ 1246.553371][ T1141] call_usermodehelper_exec_work+0xbe/0x230 [ 1246.559345][ T1141] process_scheduled_works+0xae1/0x17b0 [ 1246.564968][ T1141] worker_thread+0x8a0/0xda0 [ 1246.569638][ T1141] kthread+0x711/0x8a0 [ 1246.573783][ T1141] ret_from_fork+0x4bc/0x870 [ 1246.578450][ T1141] ret_from_fork_asm+0x1a/0x30 [ 1246.583296][ T1141] [ 1246.583296][ T1141] other info that might help us debug this: [ 1246.583296][ T1141] [ 1246.593527][ T1141] Chain exists of: [ 1246.593527][ T1141] kbd_event_lock --> &f_owner->lock --> tasklist_lock [ 1246.593527][ T1141] [ 1246.606212][ T1141] Possible interrupt unsafe locking scenario: [ 1246.606212][ T1141] [ 1246.614616][ T1141] CPU0 CPU1 [ 1246.619986][ T1141] ---- ---- [ 1246.625428][ T1141] lock(tasklist_lock); [ 1246.629677][ T1141] local_irq_disable(); [ 1246.636414][ T1141] lock(kbd_event_lock); [ 1246.643347][ T1141] lock(&f_owner->lock); [ 1246.650309][ T1141] [ 1246.653858][ T1141] lock(kbd_event_lock); [ 1246.658529][ T1141] [ 1246.658529][ T1141] *** DEADLOCK *** [ 1246.658529][ T1141] [ 1246.666746][ T1141] 6 locks held by syz.4.7809/1141: [ 1246.671861][ T1141] #0: ffff88806425e420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1246.681011][ T1141] #1: ffffffff8e0b0a30 (file_rwsem){++++}-{0:0}, at: __break_lease+0x37f/0x1620 [ 1246.690158][ T1141] #2: ffff888063a99e88 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x387/0x1620 [ 1246.699825][ T1141] #3: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1246.708883][ T1141] #4: ffff88807f261de0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1246.718115][ T1141] #5: ffff888058c6b0a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1246.727285][ T1141] [ 1246.727285][ T1141] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1246.737687][ T1141] -> (kbd_event_lock){..-.}-{3:3} { [ 1246.743155][ T1141] IN-SOFTIRQ-W at: [ 1246.747470][ T1141] lock_acquire+0x120/0x360 [ 1246.754315][ T1141] _raw_spin_lock+0x2e/0x40 [ 1246.761340][ T1141] kbd_event+0xd2/0x3f70 [ 1246.767775][ T1141] input_handle_events_default+0xd4/0x1a0 [ 1246.775756][ T1141] input_pass_values+0x288/0x890 [ 1246.782863][ T1141] input_event_dispose+0x3e5/0x6b0 [ 1246.790138][ T1141] input_event+0x89/0xe0 [ 1246.796631][ T1141] hidinput_hid_event+0x145e/0x1dd0 [ 1246.804005][ T1141] hid_process_event+0x4be/0x620 [ 1246.811104][ T1141] hid_report_raw_event+0xe91/0x16d0 [ 1246.818554][ T1141] hid_input_report+0x43e/0x520 [ 1246.825666][ T1141] hid_irq_in+0x47e/0x6d0 [ 1246.832147][ T1141] __usb_hcd_giveback_urb+0x376/0x540 [ 1246.839688][ T1141] dummy_timer+0x85f/0x44c0 [ 1246.846359][ T1141] __hrtimer_run_queues+0x52c/0xc60 [ 1246.853712][ T1141] hrtimer_run_softirq+0x187/0x2b0 [ 1246.861068][ T1141] handle_softirqs+0x286/0x870 [ 1246.867994][ T1141] run_ksoftirqd+0x9b/0x100 [ 1246.874737][ T1141] smpboot_thread_fn+0x542/0xa60 [ 1246.881920][ T1141] kthread+0x711/0x8a0 [ 1246.888153][ T1141] ret_from_fork+0x4bc/0x870 [ 1246.894994][ T1141] ret_from_fork_asm+0x1a/0x30 [ 1246.901915][ T1141] INITIAL USE at: [ 1246.906056][ T1141] lock_acquire+0x120/0x360 [ 1246.912628][ T1141] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1246.919895][ T1141] vt_reset_unicode+0x2b/0x160 [ 1246.926735][ T1141] reset_vc+0x68/0x1b0 [ 1246.932874][ T1141] vc_init+0x70/0x4a0 [ 1246.938922][ T1141] con_init+0x385/0x9c0 [ 1246.945148][ T1141] console_init+0x10e/0x430 [ 1246.951720][ T1141] start_kernel+0x254/0x410 [ 1246.958567][ T1141] x86_64_start_reservations+0x24/0x30 [ 1246.966270][ T1141] x86_64_start_kernel+0x143/0x1c0 [ 1246.973636][ T1141] common_startup_64+0x13e/0x147 [ 1246.980690][ T1141] } [ 1246.983528][ T1141] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1246.991589][ T1141] -> (&tty->flow.lock){....}-{3:3} { [ 1246.997059][ T1141] INITIAL USE at: [ 1247.001109][ T1141] lock_acquire+0x120/0x360 [ 1247.008036][ T1141] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1247.015135][ T1141] start_tty+0x20/0x70 [ 1247.021110][ T1141] n_tty_set_termios+0xa7c/0x1090 [ 1247.028039][ T1141] tty_set_termios+0xda4/0x17e0 [ 1247.034785][ T1141] set_termios+0x516/0x6c0 [ 1247.041718][ T1141] tty_mode_ioctl+0x47e/0x740 [ 1247.048295][ T1141] tty_ioctl+0x9c6/0xde0 [ 1247.054435][ T1141] __se_sys_ioctl+0xfc/0x170 [ 1247.060947][ T1141] do_syscall_64+0xfa/0xfa0 [ 1247.067361][ T1141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.075367][ T1141] } [ 1247.078022][ T1141] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1247.087206][ T1141] ... acquired at: [ 1247.091261][ T1141] lock_acquire+0x120/0x360 [ 1247.095924][ T1141] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1247.101281][ T1141] stop_tty+0x2f/0x150 [ 1247.105537][ T1141] kbd_event+0x2b72/0x3f70 [ 1247.110205][ T1141] input_handle_events_default+0xd4/0x1a0 [ 1247.116093][ T1141] input_pass_values+0x288/0x890 [ 1247.121208][ T1141] input_event_dispose+0x330/0x6b0 [ 1247.126481][ T1141] input_inject_event+0x1dd/0x340 [ 1247.131667][ T1141] evdev_write+0x2fc/0x480 [ 1247.136240][ T1141] vfs_write+0x27e/0xb30 [ 1247.140648][ T1141] ksys_write+0x145/0x250 [ 1247.145138][ T1141] do_syscall_64+0xfa/0xfa0 [ 1247.149804][ T1141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.155961][ T1141] [ 1247.158292][ T1141] -> (&new->fa_lock){....}-{3:3} { [ 1247.163767][ T1141] INITIAL USE at: [ 1247.167741][ T1141] lock_acquire+0x120/0x360 [ 1247.173974][ T1141] _raw_write_lock_irq+0xa2/0xf0 [ 1247.181080][ T1141] fasync_remove_entry+0xf1/0x1c0 [ 1247.187927][ T1141] sock_fasync+0x85/0xf0 [ 1247.194014][ T1141] __fput+0x8a2/0xa70 [ 1247.199759][ T1141] task_work_run+0x1d4/0x260 [ 1247.206090][ T1141] exit_to_user_mode_loop+0xe9/0x130 [ 1247.213099][ T1141] do_syscall_64+0x2bd/0xfa0 [ 1247.219435][ T1141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.227149][ T1141] INITIAL READ USE at: [ 1247.231566][ T1141] lock_acquire+0x120/0x360 [ 1247.238328][ T1141] _raw_read_lock_irqsave+0xaf/0x100 [ 1247.245804][ T1141] kill_fasync+0x199/0x4d0 [ 1247.252404][ T1141] sock_wake_async+0x137/0x160 [ 1247.259444][ T1141] sock_def_error_report+0x332/0x390 [ 1247.266908][ T1141] sk_error_report+0x48/0x290 [ 1247.273841][ T1141] unix_dgram_connect+0x96b/0xc20 [ 1247.281234][ T1141] __sys_connect+0x316/0x440 [ 1247.288177][ T1141] __x64_sys_connect+0x7a/0x90 [ 1247.295120][ T1141] do_syscall_64+0xfa/0xfa0 [ 1247.301786][ T1141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.309843][ T1141] } [ 1247.312414][ T1141] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1247.321162][ T1141] ... acquired at: [ 1247.325066][ T1141] lock_acquire+0x120/0x360 [ 1247.329851][ T1141] _raw_read_lock_irqsave+0xaf/0x100 [ 1247.335332][ T1141] kill_fasync+0x199/0x4d0 [ 1247.340102][ T1141] __start_tty+0x18c/0x220 [ 1247.344884][ T1141] start_tty+0x2b/0x70 [ 1247.349132][ T1141] n_tty_set_termios+0xa7c/0x1090 [ 1247.354323][ T1141] tty_set_termios+0xda4/0x17e0 [ 1247.359604][ T1141] set_termios+0x516/0x6c0 [ 1247.364518][ T1141] tty_mode_ioctl+0x47e/0x740 [ 1247.369463][ T1141] tty_ioctl+0x9c6/0xde0 [ 1247.373882][ T1141] __se_sys_ioctl+0xfc/0x170 [ 1247.378638][ T1141] do_syscall_64+0xfa/0xfa0 [ 1247.383317][ T1141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.389541][ T1141] [ 1247.391850][ T1141] -> (&f_owner->lock){....}-{3:3} { [ 1247.397100][ T1141] INITIAL USE at: [ 1247.401072][ T1141] lock_acquire+0x120/0x360 [ 1247.407127][ T1141] _raw_write_lock_irq+0xa2/0xf0 [ 1247.413613][ T1141] __f_setown+0x67/0x370 [ 1247.419678][ T1141] generic_setlease+0xd60/0x1240 [ 1247.426186][ T1141] fcntl_setlease+0x3a2/0x4c0 [ 1247.432423][ T1141] do_fcntl+0x6a9/0x1910 [ 1247.438311][ T1141] __se_sys_fcntl+0xc8/0x150 [ 1247.444558][ T1141] do_syscall_64+0xfa/0xfa0 [ 1247.450627][ T1141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.458071][ T1141] INITIAL READ USE at: [ 1247.462385][ T1141] lock_acquire+0x120/0x360 [ 1247.468867][ T1141] _raw_read_lock_irqsave+0xaf/0x100 [ 1247.476143][ T1141] send_sigio+0x38/0x370 [ 1247.482378][ T1141] kill_fasync+0x24d/0x4d0 [ 1247.488785][ T1141] lease_break_callback+0x26/0x30 [ 1247.495796][ T1141] __break_lease+0x6a5/0x1620 [ 1247.502547][ T1141] do_dentry_open+0x8b7/0x13f0 [ 1247.509662][ T1141] vfs_open+0x3b/0x340 [ 1247.515730][ T1141] path_openat+0x2ee5/0x3830 [ 1247.522306][ T1141] do_filp_open+0x1fa/0x410 [ 1247.528795][ T1141] do_sys_openat2+0x121/0x1c0 [ 1247.535460][ T1141] __x64_sys_creat+0x8f/0xc0 [ 1247.542038][ T1141] do_syscall_64+0xfa/0xfa0 [ 1247.548541][ T1141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.556505][ T1141] } [ 1247.558988][ T1141] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1247.567930][ T1141] ... acquired at: [ 1247.571725][ T1141] lock_acquire+0x120/0x360 [ 1247.576400][ T1141] _raw_read_lock_irqsave+0xaf/0x100 [ 1247.581947][ T1141] send_sigio+0x38/0x370 [ 1247.586356][ T1141] kill_fasync+0x24d/0x4d0 [ 1247.590959][ T1141] lease_break_callback+0x26/0x30 [ 1247.596149][ T1141] __break_lease+0x6a5/0x1620 [ 1247.600999][ T1141] do_dentry_open+0x8b7/0x13f0 [ 1247.605926][ T1141] vfs_open+0x3b/0x340 [ 1247.610152][ T1141] path_openat+0x2ee5/0x3830 [ 1247.614926][ T1141] do_filp_open+0x1fa/0x410 [ 1247.619610][ T1141] do_sys_openat2+0x121/0x1c0 [ 1247.624463][ T1141] __x64_sys_creat+0x8f/0xc0 [ 1247.629243][ T1141] do_syscall_64+0xfa/0xfa0 [ 1247.633914][ T1141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.639999][ T1141] [ 1247.642583][ T1141] [ 1247.642583][ T1141] the dependencies between the lock to be acquired [ 1247.642594][ T1141] and SOFTIRQ-irq-unsafe lock: [ 1247.656334][ T1141] -> (tasklist_lock){.+.+}-{3:3} { [ 1247.661453][ T1141] HARDIRQ-ON-R at: [ 1247.665419][ T1141] lock_acquire+0x120/0x360 [ 1247.671585][ T1141] _raw_read_lock+0x36/0x50 [ 1247.677728][ T1141] __do_wait+0xde/0x740 [ 1247.683610][ T1141] do_wait+0x1f8/0x510 [ 1247.689316][ T1141] kernel_wait+0xab/0x170 [ 1247.695286][ T1141] call_usermodehelper_exec_work+0xbe/0x230 [ 1247.702828][ T1141] process_scheduled_works+0xae1/0x17b0 [ 1247.710068][ T1141] worker_thread+0x8a0/0xda0 [ 1247.716649][ T1141] kthread+0x711/0x8a0 [ 1247.722371][ T1141] ret_from_fork+0x4bc/0x870 [ 1247.728633][ T1141] ret_from_fork_asm+0x1a/0x30 [ 1247.735048][ T1141] SOFTIRQ-ON-R at: [ 1247.739042][ T1141] lock_acquire+0x120/0x360 [ 1247.745181][ T1141] _raw_read_lock+0x36/0x50 [ 1247.751757][ T1141] __do_wait+0xde/0x740 [ 1247.757755][ T1141] do_wait+0x1f8/0x510 [ 1247.763482][ T1141] kernel_wait+0xab/0x170 [ 1247.769475][ T1141] call_usermodehelper_exec_work+0xbe/0x230 [ 1247.777118][ T1141] process_scheduled_works+0xae1/0x17b0 [ 1247.784343][ T1141] worker_thread+0x8a0/0xda0 [ 1247.790615][ T1141] kthread+0x711/0x8a0 [ 1247.796590][ T1141] ret_from_fork+0x4bc/0x870 [ 1247.802908][ T1141] ret_from_fork_asm+0x1a/0x30 [ 1247.809310][ T1141] INITIAL USE at: [ 1247.813189][ T1141] lock_acquire+0x120/0x360 [ 1247.819329][ T1141] _raw_write_lock_irq+0xa2/0xf0 [ 1247.826091][ T1141] copy_process+0x224f/0x3c00 [ 1247.832419][ T1141] kernel_clone+0x21e/0x840 [ 1247.838483][ T1141] user_mode_thread+0xdd/0x140 [ 1247.844911][ T1141] rest_init+0x23/0x300 [ 1247.850646][ T1141] start_kernel+0x3ae/0x410 [ 1247.856716][ T1141] x86_64_start_reservations+0x24/0x30 [ 1247.863731][ T1141] x86_64_start_kernel+0x143/0x1c0 [ 1247.870397][ T1141] common_startup_64+0x13e/0x147 [ 1247.876918][ T1141] INITIAL READ USE at: [ 1247.881243][ T1141] lock_acquire+0x120/0x360 [ 1247.887728][ T1141] _raw_read_lock+0x36/0x50 [ 1247.894229][ T1141] __do_wait+0xde/0x740 [ 1247.900367][ T1141] do_wait+0x1f8/0x510 [ 1247.906435][ T1141] kernel_wait+0xab/0x170 [ 1247.912761][ T1141] call_usermodehelper_exec_work+0xbe/0x230 [ 1247.920635][ T1141] process_scheduled_works+0xae1/0x17b0 [ 1247.928183][ T1141] worker_thread+0x8a0/0xda0 [ 1247.934757][ T1141] kthread+0x711/0x8a0 [ 1247.940828][ T1141] ret_from_fork+0x4bc/0x870 [ 1247.947775][ T1141] ret_from_fork_asm+0x1a/0x30 [ 1247.954697][ T1141] } [ 1247.957268][ T1141] ... key at: [] tasklist_lock+0x18/0x40 [ 1247.965169][ T1141] ... acquired at: [ 1247.968966][ T1141] lock_acquire+0x120/0x360 [ 1247.973686][ T1141] _raw_read_lock+0x36/0x50 [ 1247.978482][ T1141] send_sigio+0x101/0x370 [ 1247.983076][ T1141] kill_fasync+0x24d/0x4d0 [ 1247.987757][ T1141] lease_break_callback+0x26/0x30 [ 1247.992951][ T1141] __break_lease+0x6a5/0x1620 [ 1247.997890][ T1141] vfs_truncate+0x428/0x520 [ 1248.002558][ T1141] do_sys_truncate+0xdb/0x190 [ 1248.007419][ T1141] __x64_sys_truncate+0x5b/0x70 [ 1248.012447][ T1141] do_syscall_64+0xfa/0xfa0 [ 1248.017121][ T1141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.023177][ T1141] [ 1248.025515][ T1141] [ 1248.025515][ T1141] stack backtrace: [ 1248.031420][ T1141] CPU: 1 UID: 0 PID: 1141 Comm: syz.4.7809 Not tainted syzkaller #0 PREEMPT(full) [ 1248.031442][ T1141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1248.031456][ T1141] Call Trace: [ 1248.031465][ T1141] [ 1248.031473][ T1141] dump_stack_lvl+0x189/0x250 [ 1248.031498][ T1141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1248.031516][ T1141] ? __pfx__printk+0x10/0x10 [ 1248.031534][ T1141] validate_chain+0x1f05/0x2140 [ 1248.031557][ T1141] __lock_acquire+0xab9/0xd20 [ 1248.031573][ T1141] ? send_sigio+0x101/0x370 [ 1248.031588][ T1141] lock_acquire+0x120/0x360 [ 1248.031602][ T1141] ? send_sigio+0x101/0x370 [ 1248.031618][ T1141] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1248.031636][ T1141] ? _raw_read_lock_irqsave+0xbb/0x100 [ 1248.031653][ T1141] _raw_read_lock+0x36/0x50 [ 1248.031669][ T1141] ? send_sigio+0x101/0x370 [ 1248.031684][ T1141] send_sigio+0x101/0x370 [ 1248.031701][ T1141] kill_fasync+0x24d/0x4d0 [ 1248.031716][ T1141] ? kill_fasync+0x53/0x4d0 [ 1248.031733][ T1141] lease_break_callback+0x26/0x30 [ 1248.031754][ T1141] __break_lease+0x6a5/0x1620 [ 1248.031776][ T1141] ? __pfx___break_lease+0x10/0x10 [ 1248.031793][ T1141] ? mnt_get_write_access+0x66/0x280 [ 1248.031811][ T1141] ? mnt_get_write_access+0x213/0x280 [ 1248.031829][ T1141] vfs_truncate+0x428/0x520 [ 1248.031854][ T1141] ? __pfx_vfs_truncate+0x10/0x10 [ 1248.031876][ T1141] do_sys_truncate+0xdb/0x190 [ 1248.031895][ T1141] ? __pfx_do_sys_truncate+0x10/0x10 [ 1248.031917][ T1141] __x64_sys_truncate+0x5b/0x70 [ 1248.031936][ T1141] do_syscall_64+0xfa/0xfa0 [ 1248.031954][ T1141] ? lockdep_hardirqs_on+0x9c/0x150 [ 1248.031971][ T1141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.031985][ T1141] ? clear_bhb_loop+0x60/0xb0 [ 1248.032000][ T1141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.032017][ T1141] RIP: 0033:0x7f2b9a18efc9 [ 1248.032037][ T1141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1248.032051][ T1141] RSP: 002b:00007f2b983d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1248.032067][ T1141] RAX: ffffffffffffffda RBX: 00007f2b9a3e6090 RCX: 00007f2b9a18efc9 [ 1248.032078][ T1141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1248.032088][ T1141] RBP: 00007f2b9a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1248.032097][ T1141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.032106][ T1141] R13: 00007f2b9a3e6128 R14: 00007f2b9a3e6090 R15: 00007f2b9a50fa28 [ 1248.032122][ T1141]