last executing test programs: 11m34.096397525s ago: executing program 32 (id=731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x7, 0x4, 0x0, 0x0, @msi={0x2, 0x11, 0x6}}]}) 9m56.782520391s ago: executing program 33 (id=1682): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x5, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x19, 0x0, 0x0}) 9m38.440226423s ago: executing program 34 (id=1824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 8m7.493071754s ago: executing program 35 (id=2644): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) 6m24.474765281s ago: executing program 36 (id=3501): getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x1e4, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 6m18.245319968s ago: executing program 37 (id=3545): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8004, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x8000) r4 = eventfd(0x162) dup2(r0, r3) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x18, 0x2, r3}) 6m9.866629245s ago: executing program 1 (id=3606): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000400)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6m7.039924539s ago: executing program 1 (id=3627): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000400)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x2) 6m5.924121046s ago: executing program 1 (id=3631): socket(0x40000000015, 0x5, 0x0) pipe(&(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2319, 0x43fb, 0x16, 0x0, 0x0) 6m5.587568972s ago: executing program 1 (id=3632): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) 6m5.2546914s ago: executing program 1 (id=3634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x1, r2, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m4.887501584s ago: executing program 1 (id=3637): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000100)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x4, 0x0, 0x2080, {0x8080000, 0xffffffffffffffff, {}, 0x0, 0xff}, {"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", "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"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$pptp(0x18, 0x1, 0x2) 6m4.077618344s ago: executing program 38 (id=3637): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000100)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x4, 0x0, 0x2080, {0x8080000, 0xffffffffffffffff, {}, 0x0, 0xff}, {"d29e768d4105ff19716422a5dcacb0993a1194e09cc26558dbec3b54885e8d753e13ea5b749b1ba99e6dc0aeacc04a5912479f2f63d7c8fc374d19732970f7a66e89772de0b9e04fceac3f30ee58fcd6d2f69a398ca3b2351bf569112e1c677df15445bd64e5e08f84a2a773aa953987d70e624b3ab685bb447d550d4dd3712eced1e08475be37ddb4e74c364d6b06fd28dd338fd6d396d73261ae523cfeef0bc581358ad70035c0e9fc88f69e7fb6ab874cb2e5815f19adf50611ded071cebc792a4ecef8dad99dda31672728ec562f312001474b30b2ae73339429231842e15ee0c35591bef531db438600ee67c1d0a167e5193c3269406e930da0da9fb58937c44e0fc2fdebd0814b6efa1bec7371972f650b884d4b3dff5f913baaf5bb38d03f1d310454d9b5e41b3fdb5da3be982c758ea20340fba26dd75d1ec54879c70f5c8d2133bb4f1548622a152f9f2c67399bacd3f9fd7e0f6d77de48338f1c14bd844c9ea35319f4c49ed111e49eca4adc4d05db71b17df1c00a0bf888b4409790452ae906ef2cf1ffac4aba4c47d50f30cbc850cc6fd64321eca44433a99b9fa989c51e80780f07324c6ffb2de5bb70ed98356c8818357ec2c96cc5c5202bf19abb49b4362c57534b4a635d59e53b5f861bfd2bbea4024a17c20eeb286bb8dd218f1c44ecd68ee2858b657fd21bf761fe99241a36c46aa98f931398aa71441c0c5e76d58e30bd53852f72bf2d825b8d19b241560473ed3c9dd7143fabefed9040b55771e639102d1bc0f3a72cc3ba92396d97fa4adffb52492a0690d2c15ac8bb655fc67c217e5d5819f8317e2748a9978eb398d4b5911dc0538eaf5af152ff05b029edd9f917ef738f1cbbf5e42956265264e96009acf5e000f25a6f7213085dc7a879768d5b1b5e80b8b7b9d30d53df30758ec0cfec643f181f732a44ee4499a8f8a809acbfa5ef611c929d30806d9644c251c132ad2afc9c5e9e189562acc433559a5268a8b920693c165afea70300fc06836abbe89cd1a057b030cb130931669f72e9f582b63163f95b562f68e0bb551ef21782adc04334dea27ec126bde33424fb1a6c8553a51889b217601ccb69be43f834a7deb35a970e4330fc3fd5b867813931de10c76e05ff3c2b021f1fb141fca3a199e78360b0e917bf6ea51873fcc329b83f10d795d02bf4f79391fc30a17f9bf8e662edf065b9d3d133b17f6ee69e7695bf8613682f4daa9bce62ea2f6abbb23b2436164f04cac6b0b11df9964383693d3abf90101fdb50fd2e0a407eeb69acb9712fc8f3bb9e7e00329b1db06c51a84910e535c66a2e4e1257ab27df467bf1a687bc2c1cceaa5022b9443ef2e3e366a5db2672c9cdad433ce3df3efaca0ec74ccf5968c32c62c5ca9b9638482be60d7396ade7481b5ba4f706db43d5f9b66be2c038a3a3d5a82c05f1cf126980739f6b2689e00db32f0b873932145518a1ac1350ea471d12dd4ed34352b787b37279258bfb2afdbdf467286c5cc5f0b5933fde332827897cf027a7e3e040aece86e87a2f7b6d0fc62fbb32b7d0a4b19717f9ed23e9a06aa968d5653cb09e5aa7760dccb639e71c6325e7552dc1cb32af3da2e982fc23ea7c6ef999895fa29f87dba1eb4b5252d642acf78a6a4356672d3ece48388c09bb16afad1258f6c6a5deb1e5cd38ce88e1ebed1da649dc33ab6304265edb2ea588551989406557b1d7093455ebbd7730bb38899f344b106a9057cc437051d00672bc281cb54fec3c05a2438554a7ebb8e87ce41b98d8ef7568beb9a7dd60faec00678e85e8e54a75ebcda2c018a1662805bf67455c855f65572cd234d11951867d6c5147a0e9e6f748abb3f315bc090ab15a28384d7b4752b48d37dd350d28cccb556d25333c758d2c90287c3560ea598b82d8465710c49b96cdc19d6b28f0bfa1ed68ae7d5974b3d9d693326573778fb8f45b80368208195c9e9faab5aa6a937f2ba756e394027933b4e96e81f94a6b29eab99afcb9a811e49c2a7c3ad3cfb202c0596c652f83b7532a57f70e580f21d9e70ba741a35426672479aacc3026bfee9bbebf5057c94a194ad999e6e5ef96d5d6ffb557a34f861c92bb6f7a21d4c63586ff39505144a6ae14c00a7d2fe2e0264e0c254ac08f6a286e4efdf68370de7387fae44d34f59fe1ba6603b7c295c1562fb6a1dd930d2abb67bf4848d5cd82f6af0f8afea1c351483a93770ff88c1b542aaf8d2b8027e0c15772ffc36f24cd36141ff2d3e3b3907d9b9baa74e2f570e826f9642b0e7f4b87e2fc0a3d6e048d2f34afdd3826222d1b096c2dc4f409fe72d1f9efe8b06ecacc7a82a78250ba94a195432ec4883a8fcdcf18c436b0d568507392cfc23f5af32ec6f3c8a1a921d3e71911617edcfa56e06a85a5acb640de79327c8c2335d4354e6b24451af7f87aca41bc70e4f242aecede32456105184322148314ec1123fbf957edc31ce208da1344cf993eb645ef0df734a7bacc73ab09e17d8aa493a8acd4ece209420a389ef7d6fc1e7d41873548da541c35c50c52ca61a4a02e2967a102e5e0c5dfe5681e1770b8f6063445e434efbdaa06bf0588bb7f4e44d50f0b54a9157d03c9e0ffffd77c4765dd17bc2d8305dcc7a6af270d491a30b8cbc3581c4e3642780a6fcff5d877ace24a76836b1829a314aba397094d97790b63978b7a5aee3e3e46167b866ac4199ad9cea7b6767f6d97638b5a6ceec9cd90a90bdaef1d04ac4dd15e7da0bdbe98c60b38cd8683564329298c03ad56bf60697142779024a108f0cd9c75e2cce2e0f9e698e9ad0be29d8ab89187b16f26c1f2f3ec0c9e4c6d88e8f0cb99976ec96a66a8ef8a56b0e3c56ebd664e31c4ccdecb52e7c82a8b38746f7a897f756b634de2ba284bfcd62be4f161522b1285027e3ec2d168ee5ac285204d5c84faee8920f5f8f77481ecdc7fc6aace7c3ef41726109956bb6177ef5e37cbda863a0ebbb99f951ab5ba68691ffb33acc1254de4a192256d81e59cd202d34b178e9a9444ff7eedc16239d7b53afa3ba03126258f18897657a13ed3d772ebe979268db95c2178ac27e9d4b4ed664e36d331cfb11a51441a01af690de87e3106875991810ebca1735d9b578ab9ae2030c7cf65c6b723c4d48b8354687f6180972d1932e1059d988f946f939991cfcce5d69be8b4c6d2c8a95462b5278d8920da73262846b255857b2d7cd96e6432bf98c533ea0a01992da603e2b91ca3ac6717de3a354bd62e5ca74c3da89510dd2126ba68f9a7e7ef71188e5d9a67fa70fee95acdf65342736230048036cd8d07e626659fa70e719d0d061bf36ed8d9a09ca9b3a99082c3b065c7df45c859ac9619043f868f1c8c455e333ec689a74b7262056b4ab8fc4a021fd3aca2cabff0ef3898576a58fc39e52da85462651fb87a1ae0a3be4897dd851fbebb3cd52e908178aaef01e10d07a0f687b87b92ea32f02f2e35d2084bf97f2f5bd72e336eeab025e02d94a2acb1c78764cc7aea8ecc31b98fffbda8dc72996d3b57f79c7e0c940c242f3767c95b1100301a0fc981d7cf16e2605d05accd60ab97510bd9359525edac35df15f21443ff91551d99dd1ab2041e1565f1a8a3c7a566748966105fcdd5f31a8c91f5ab3fa09f1fdd624a9d01abbe9c9d35db88e1d609013b687c0584288f700c3c1c1535664e3ca3cca45575f8b2bffc0d7179d846fc9172a3519e475d03f7e56d5d618e034c8f0ad101cd1c10a383b4f1f2696eff867e3a9cb48b3dd4b4317ed0bb7a88c5f03c9bfd8d44113c941d5258e11d2edd251cd54e429e7e25e85ce1b25fbded1f757a1cb4c48dc84d53302a109dc7a636103c72e4fc092e23dbef5b20eced8ba59cddbdca0571bdfb3d6ec829e7ac2fb449c705519fc9c76c5ac126e237f5fc0fc5dc96ca73f0f77e864abcf0c3ebd3be271aefc3b7e72506e9142f0e20fe127bac47ba18c1b3c62c7405c66023aeb5b75d2daca7528c3be2cbed7b2ba8cb679b31eac8f2e671e065030d4d6d979343ce350fb376f3196ae681598452fbad518b2a6cb763f605255f9bb59852ef729bb094ca151131d6150dbde6a9070e0ba77f49de4b8e47fe055f3c3e2d30438bbd36508a379fe2deef42cb0b7c5cd9e2da868de418a2972489262f8127d2132eddb8c97072688a942b37a133c560c97e2a35f9188aae28e23a28d991ed64751022b4ffbb4375605ba6cc8cd9c0469ce226d975d6c619306f6b338f26a8586aef0c5f523fa87cbbf5aa5652a7c6c563ccdad709ac2c24091ae3a7101809bdbfbc14bacb01b1c55bf569a26d882ccaf864e15b77a3add9f5a717543cbb1c7b089f2d6e52da7b280372d9a65a09a87311eb361a83d7173b748446cbe28895579e4238a3f3288646fe7a7e04943a7417c8a99374e944d9354ec32f4d46df5f30205b58e9dc3645ecf81cf2d1947bca8b6632712c05b264f32ce3da332323d851aad5b00df3d2445bed14d3f979c8cf23dc822c5d562dec813de389adde694058e4bbb8e488c94d94a71c4d19963bbe44e748952cf56d3d16be008ddef79e4137daa1c526c76bbbdc4c6f3f3d20beff4ac504136f43098c44437d6c495041cbb2b00be2ad58af737aa56d4320650df763d3f2b4fd9ced3c35c1cc313f73a4ffa8e291aafff3dffb6ec3883fcb04f2ca697baddc8a34e7b576522342bdd39798c9929f9bf298e987a9e323cbf34398db09689345c94c0fa5809ac06d161423328f1f40a07fe18829b6043bf1a08c086acc4c9a52fe7f8af3fa37f5f9044e512b38029c68bb8ed808901d74c9196176ed7f2e32d70430974f07a0be4967d65adcee3a1ce9ce5ab259b77f67c5a5209e4f811d1271e2f8bcc42bcdce79d607c73667b61f51616c0aa4e09ba7ca0b0663bb3c053546e3503f2c449acc7be9ce2f8eadb683f92af60b7e6fedd30e4bc5a1a54f4281200e0412f903da51ce7c7b4def42d5833b63f97ba96e2332c03755cd9da5948b926f9170520b9f2e9373a28cdf0a92b0ab7e6e0e56c7caed04d3733905c9270cc7a3177d8d2350fdb1195df15640799e62db45775d16d2f8f0cf9793dd35acb97910c95e03b7184e575a19ebf046f975f39709f48c60764416c0bedbe8965bf918a92b0dad33d0e7e301b896c62a8961541dff314f4fefa197668c7a1c239de4f8df5e3cb2fd3734c806d47ef2f61e5ca029dfabbf52797965a3717eceeeda71366ca671eece3bc533a82eb6f6edc355b5640a7e02c2a64bd20d117bdeff104a943aa5453ff2a3caf511ea6593db975e1e2319962c24608d9d106499baf5e027b0fedc5bfeab52c706316e9df34f25f38e14e0496de717ad4b48444b71cbc501e09291e6fde652ace09fa1962582604d6f1a39df04f928ec4729af60d0c75227dca1ecab2514c757ccfc72b470df6bec328e0fd359d992903bd1d75d3b1b458d0da6e5d1bca0943e42411063468e418e66d1c03dd9a8245c6fbc68114fc338ae728f84462a4e2ca8838a65bd83cb2705f80b88267c70bc10b3e7f4830041d865eb8904b5a8a173325f6afe2544aec339d791c8e6e5952102280b9eb0885b896325ed39842c5a12e6907ac7a40eed2e7af117f5d027f20a2c65c0b199834387155435eefe793ab89f50205f3cb4e19c78062313add55c676de35687d8e5c20e6e634fba689dcce3aaf5746a4088f511c9f60ab135127e13186d27d0bd1e106296d587d0a5743bb59184520f7bb228eb17634c9c35c6988e1cb8e7025cd22bb8a731c05a65239fc5a4d516593d0e874a4b51d3ac6b1b12", "919d1703b3608cfa37a008d6332b610cb61fc79f119f81f107218e40dfd35476970eae08db19d3fef841124878d7b8d01149481be173e42de09edb0df43b317cf6c36a87abd8eea91088154acc6e6d2911d84ac479df3a41300161cc7a996301f6fedc5bf0673c4aa0efcc9dfee4795d41f78ef681d07dfb2fe1c6e4a29e29a74e55b03a69e747241c25a303f8daed2e1e5677c30ca4dc3253663d4d69dc5005dd9b7b6051c59458655fc6ab0d912f73b8d47ace041eaf9842fb7abb1746484e66f3392e626648369c7ba0044d4446c09bdec7abe26617fae005d3681a87889f95cdee7ac3727f520991dc286a63832ea34d96386989d7cb4a56878a842c63b43aaf1432eeaefb4a2d2eab166ddaef08112f916728a6efa0db810ef0ede176a95102909365137f1482ed1f74938cb4f3172d3330692888ee37d7460c71651fe27f721a0f6e085085198cc4f0d54c082deeaa3449f3970b7db8e3e2efdc5da93e016e14660a07ede02702bd0260b9dba41259446a9d7ece0d0adec875c25b5336c65346522f2f420c7f750b15114b22b30c0cd97b626fe052ac43a113c0098ed522a156b99c728f6637090fdec19b3bbb0303df29238a9c25204b455bcd0fb93b11695dd55867449cd2c728d4cdfdd7c3150a01265ddc575f2c6ca3920f7aaa067235610a32f8ba4ce8df7f0e20b9d7a9fed282cf163c79a366b767388fd847d9b57c325946d8ec2685b3f4536e2e21d81f7b370944b8a505fc63412a29864817d8cf4da2c9be7c767180f549a67f66c8b9ccb5b87e7d76ccb0b8b4b802b0449bf573ff5ee8115949499cfbe5d2153b353bbd81a15aba59233284a7d7d8abef99cb06aee7aa7f91421dc1b9151a3e6a605ec90e25058bf8f402b5439cd6b52f73b3c0621f83707dc74f1d27414d7a2c657f0e6e28c6135d23aa5a82005043c71877769484545118f0dbc28d6e822d339fae6c66d098d6b4c06799d68a78259d31b9df5ed09160d43d15ede9443f476dfb33a060dea5d562737d99abcb73f7a52518c5446b0ea4017485cf709c6dfda8c85de9f86eae0f2b0eb3262ce8ea71bfb5447933d395ab94de022c6374cabe4bffae304a3678f5712f22006e0b9ab77c88cc58aa9a6f8cee42809c688e6e6f47e4f59f7a3008e1b95d7c44e910d02f1efb96a847782bfecf7f5d8ce01f1b86dee8e88cab69e8bfdca4a0d0277f1235c975e54ff0705055048752de9a15b1c8b401c85d6dd78e9a206dc32bb1a7f790e8bb62ef5c743985a07be1222ad6298aa846a0e6f0cb480c5fb49f952998a66c5cabd89a1edc30169976af6e4b584d5970b5c3acc0871c5fced0d4bdb26acc2b6c350ec2d370d886b7dbc3259c374354c9af8bfe4afc4f606edf1cde63ab9f937d334e79f38f0ee8e2e2e889aebd1695aab132f241a6dbeff7aeb827e330a5fbd2ca6ab4a295e03e756218c305ed83252cc3b824a3565e32d1b5294787308483fa5d690b05a39ebd9144f64ad43c09717a9192ce7f0877c7ec1baf242f77081876b91957aaad28c32ea23cfb520acaa8d81dce18785eb5a4a13537c5c56ff7625f94641ae5f242d4e66258942495ae340ee8f11d583428f55b01ea9308c49cf9df8cd016ff37960b1191edb97558275d59a18818a7daf1af51503396da2d876d259ebaa045d9dca255a9519a7bfbaee1a19869593b78968a3acbfb574523043df23cbb72946a06aea2eb918ed3e7a8368ccafe1ce8d8fcd07aba9006c272ec72c77d70ed1dcd6dcc27bdfd431fb026cbf8fd42bca1baa36b0b8d3d6b8aff00ddae2227c67796f7f3e0d2704695655ed99b8037d0853b6b95fedcfcee4d7d122157e6a317f435b73370e6a3128bc777f17e2dfec9eaaa7901300fdda1154833ae979257d73a8dad783b71ea1fc09c74b1e1d4a312c558bc53d1e2c869e33c7b895d1c9701ec0d0a4982a3629a398f2e43620ec4af505de7b3030862c69fbe4c2abcda419bb7c8c11738dc9d53227734e3ddd52c4b4708194f688dd5d6ca45874659ef4acf90d3d9c12faedd13b5f6b365550e2a66092d99b846f679781a8d31775787e759c98cce9b128ca9966df7ecb83ebb9a294a2305261b66174336ca5d91f1efba5b90215e9c4b5cddbaddebfd94b8686461b866dacc80c65327dbc51c8377d0976099d2d13ce2bbfc88c4d858719372cee84d93f5c6c4b48f22b16191ca0ea9430a405dc12370c202982590d2dcd1e2e4ed13449525138cc406be2b5af525cda7f158f8925be319998b5f2bddde5fc985997e157da426f398cd506598477b4b8946a7a59731b6e9a5cd566762a74d16413b584a40dbffacebeacabd1328a0cb19c952ee1a79f7fa533703a830c6bc4fa9c0a32e8fad32e700cdca2b90aa9df72cd6f86fcb47f1a48928e194ed60632707c22e45787af76674a383ad5813f9ba280f584b027f1a9e8a9e0ec8c1406048a4408ef182299cfd1fb25a09f1cb450fd19961e02e16b8091f8c9c5d28b6337907623682d0afed7ef2b7e8645923327308a93a95083076d161cf238aa6be1ce02ad3d8305d0b08dd1242acc8164aae4ee46253544297b2564363ef59971d950dc52be33c2e3cde01c8c40b1202995a41cf02ba8010bde311cfe4b7e5f753f2678a49abfc649ee82185248b5f098b01878ffc2f76095d7797392e33ae3f33c8b21c0e81133b960eb3d8f24b6989b98df02d36700f7eb0c2a2bf77b142af92569e950374cbef4b88d59b687f3757c7591426e34e51a6cb1f1d06c06a3fdc717f4009f12fb4c39c29ba0d6d645c1e4b7cfb29f3d0388ffb1e5900ad33b1f0bb21be69796c3fff06887d65295d5af37e1ba1e45b094f09ba053a5042298eeccfa0715a19a17a3097a48de0ead224a381a67d4998350f44005ecb92a8ad9bcaaf315dd911d7d34e4e26f04a7b5d5502fe45033af360a7cb6f97b2747f399881540648782f85587b5dfdc999792d4deb890c4f68564c41d87a98bbbca6af09a6bb01bea28868944d91843638aba9d4696f2489c7231b7d394659e5aa4afce3d09cfdd06fdc90253ccd1206baea90c4794ddc0bbd5c6c4336ab58104cfe821d465a9b72dd417a0634913d87a97da20c38d45ffd90edfc0727d3652160fb945d16b690dfada5f8cbf5cdbfb8ea5726028657bd0886b097c6e67a86ce8864d5c6046b61bd36813e11148ea70944cb6a46da90873b88bb6786b8f600dbb569d28d21afcdc462888a99fd3ba105071a6db9398ac6cc4853886dc2223c2db5c17ec08407a9ad4077deae893b67d26e155506aec4695a6c315dda5369edb08e58441e956247ea44c8e5e2d0686cb764ce882b64c664d8e1d90fb46e33671d5636d655031e0314b19ed91df0c5f98a72a40a092cd92e0a67dd1e70c4c363e5065c355093854f4e5da053788841246b275713122e7eebe232c231d2bcee23556aa94428e20f5aa236a1999a7f14ac20d4581084b7a09c6b7498c28ac417a20d6b606399602a3ce9463cea60a510f5ea46ec5a9de8173d20dbdd1b01286c64f9e71e0565364e0ad91708c3d25df42d5fc1d3ce5e80925c8ff3a791bcc2d6316781f60e1ad9302f1c3ffc8757d241cb9c4434a029547bc4f4a7b0d931641c58a8c6715a492ab8cacfbe77074c0aebdd4a9a1a1d9d0c0102d2a111b06da9a795687fa2c745c2d082d2d3d9715ce0dce652daebb3379db1042b454e17ef9dd6a2bcf98d5d75fa0438bff18354404c12c14707295a7ad7a99b4dace7ad1d1d4e908b33203fd5b85e36071b3fb06cbfeab3ad6163b1374ed8898a42bd481fe720f398eb61ef946734c66311b81aac30bab8bdce97f630b2ef5fc3f982e3711417cf69c78461b740b95e3ff4dc2c101c484edbb91534cd0984b4040d62b923a6fef59f3442cf2b3ae6e7acfd6c0257cf3a731fe478e27fb31259c835834bfa7db505795e43f115b91b0439d16eadc54eff5edae5230246ee382ec00a3b03ae2b37632c97d991b6e0e55a7299a07bcffe23d543ffed74e0a1e8c15180553eeec690ba65af70e122096dbf3954e022c4fc51b1d934eae8a1d6490b0a8e3b602a52e1b79bbbac79d4e76a7566b4d0e7142a3fdcaad766469600c1d1801279f016638840770886e9df818057dcc48a9537598521ffa18826ee9921b8a338791a04d5ac9b4206a582479a95c3ce5227a0198754d85867748c535bcc0ca83d216d89df97d70ef3a5edfa4eb5031161d29fd4370da2420dd18d8d906ec3c61c134df1d47f2d5437ef65c75258d211a560db4264cb691cf64755fdaa25c81a6f2e3ebf46f28fddc829a0c48e0db5906ace1ecb0e2ad6d9d16ec8a8b6558778d193f971ddf00cca3a48bd62712b2275fdf49ca9bf2022a918f2777ace1d05364fb4a2a33c631cbd610552aa2facc1d85944279be3f4f07b397ece61b465fdb3e0e59ce59b2db832cf4204c2d206664a071592326b1e7dfcd05cd6ce50ab5e1d168d014c3183e7a21c31b0714fcb908ff81ac6fa0240d2db912623f5e18452f9ed74f83fdfeeeda0a168cee8be1cf48b7caa0384e0bcff752db9dc1ff89fc1081c69163def2a10d2e5c4ea8658938bfe2c9162b99ca0dedf384e1fc4a4e902b0f80ff0bd23c899d5624ca745ebc775df06cd7f0cdc872d8eb8e827b4a0dce214cfed7fc3625863557de6dcbd327188dad38ada6f79feb05e75bf5952b4edd1ae124d4032e3de939d5e3326086115947c55fea415b92ccbc6df6f15c6e725302fd7b61743a7b4c056ece81eb160b6ca02a2520c71deaf820135448405bd8975f75ca53ea550e86e4ebf2a93877db89ece218eaaeae4f9079d56d289f3fa01c670860bc4be69cf4b15d56213b6b3aa1df7bd925d006f07c7e78f9112515a101c11e537088c8bbca6814b73482c63a0bda6d91038f49090c7218a8a0aa432c92782c6dcd428dc9858ba21a68ec38a6e0675d9037e417cccd5e7392c5aea472a149d781ca8c541dc18e765222ea144fcc5c73a8e46494244c73a5e893a4067a46aae5820d155b878ca34343a30c14a63aa353c6f0707173bb0cac90a3a37893f1ac5fb4013b906510da40363baa708b7fe3281b22178408621a06fecc1b77725dcb18fa2f07895e78003b54436681fb937d590b2f97c0e11d1b79e41e6c8d629d13a31e01152646e8d4b2ad50913137219dfc67a714dcf27c240bd87d349dd043170621a0088dbf1c342e61435fa1e1d76c46523b483de8b7964074cdde1d3b9e06dac603699648cc429ede23b41fe1be976550cd2eb817b38dfff19d4fd9161549e8c76f5d32249c397648e4cddab98142e98590e404759942917f874df6fe98c1d03da50afc5646ef218e99eaab5d8ba0db83e16aa0614b8a90e89180f2597f6b33c32cd253830e469a22c72f85d5b2fe7592d1bb112b7edf7ee105929610b6cc69f53acf632270d968eb39193cb143d46575dfaaf5ae53045f223285e910b67f742726f4440d95b84ed1631ac7eec04e27e0fafcd00c37638ebdcf9d74402ce06c310755cd571664f9d7bfe183a5e03a4c40b508b5014cc030b8328bd00e5212c2c07ad542b63c42073e390345f7281876e0730b9b4a7b7a3b1fcda1c204f4c4e7b7c665b389fe2654c26fd3e989ebc82bfb8d11449e68df96d71e8f9cb7312451b93b223d3efcaf70993a151b53030752c3761d9cd29e71a69ed8247de71089b3a5c18770f926f6a8c2aae28898ce04aaf60dbc0b68c4cfe832a3bf8bbd1ea9f44c0cba267ac96031d57b57bb0e33ed0c375275eb600516ff4acd0a4c284ddf6"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$pptp(0x18, 0x1, 0x2) 5m24.428678918s ago: executing program 5 (id=3883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5m22.922453553s ago: executing program 5 (id=3886): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @sack_perm, @sack_perm, @sack_perm, @window={0x3, 0x8, 0x6}], 0x5) memfd_create(&(0x7f0000000180)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\a\xa3s\x00\x00Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0\xa9\xa7\x8f\xaaUi\x02U\xfe\x1cdt<\xac2\xc4\x05\xa1\x97\xe5\xef\xbbi\x12\xb4n\x11\xff\x14\x1c\xba)\xe3b\xc3K1k\xe4\x15\x1a\x94\xd4DL%\xf7g\x89\xf1\x1d\xa1\xea\xe2\xd9\vt|\xd1\\\\\xbfP\xdd\x0fE\x9e\xfd\xf0\xe8#K\xc5\xec\xfc&\xf3\x0e\xf2\x96\xeb\x03\xdf\x86!M`\xa9 \xb5\xcd\x8e\x0e\x81\xa2\x9e}\xc0/1\xf7\xf9r\a}\x9c\b\x00\xe6\r\xb7D\x87\x86z\xb4\x03\x11\x86.\xa7K\xf0\xb1\x00\x13\x00\x00\x00\x00\x00\xa0\x00\x00\x00', 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) 5m22.481842086s ago: executing program 5 (id=3891): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x8, 0x0, 0x2080, {0x60000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m22.266336994s ago: executing program 5 (id=3892): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) 5m21.281506949s ago: executing program 5 (id=3899): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$can_j1939(r0, 0x0, 0x0) 5m19.775026164s ago: executing program 5 (id=3905): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2) 5m19.11773385s ago: executing program 39 (id=3905): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2) 4m32.333235145s ago: executing program 4 (id=4216): r0 = syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x31f}, &(0x7f0000000040), &(0x7f0000000480), &(0x7f0000000000)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x5148, 0xe93c, 0x2, 0x0, 0x0) 4m32.139218302s ago: executing program 4 (id=4219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x200000000000000, &(0x7f0000000280)="021b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 4m31.109847542s ago: executing program 4 (id=4231): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000080)="400f23280f019c990e000000b91a0200000f32c344240000600000c744240200800000c7442406000000000f011c246566262e440f23b126673e660f382943b0c4c3914984fb499e00007fc744240000000000c744240278581667c7442406000000000f011c2467440fc7580066b804008ee8", 0x73}], 0x1, 0x45f5cb4379c34ee0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400048008"], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m30.866242456s ago: executing program 4 (id=4233): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) 4m30.632511316s ago: executing program 4 (id=4237): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r3, 0x4, 0x42000) 4m30.203055322s ago: executing program 4 (id=4241): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x30, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 4m29.55018346s ago: executing program 40 (id=4241): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x30, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 3m12.265649153s ago: executing program 7 (id=4694): syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0x4, 0xc, 0xd, '\x00', 0x5}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0xf000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m11.806625054s ago: executing program 7 (id=4696): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x845, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x0, 0x4002004c2, 0x2000000000fff, 0x13ffffffffffffff, 0x0, 0x3fd, 0x2001080, 0x3, 0x0, 0x8, 0x4000000000008d], 0x100000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m11.533921806s ago: executing program 7 (id=4698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="66ba6100ecb9e40900000f32fd48b809000000000000800f23c80f21f835080010000f23f8b9800000c00f3235000800000f30c403e56c34cd4e12e1daa566baf80cb8cd84de8def66bafc0cec440f20c0350d000000440f22c066460f38823948b805000000000000000f23d00f21f835100000090f23f8", 0x78}], 0x1, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m11.162574213s ago: executing program 7 (id=4699): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x3) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 3m11.045696237s ago: executing program 7 (id=4700): memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x69100f4f, 0xd, 0xe000, 0x10, 0x2, 0x0, 0x0, 0x80, 0x5}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m9.411128879s ago: executing program 7 (id=4706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c855}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) 3m9.130000175s ago: executing program 41 (id=4706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c855}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) 1m12.992984193s ago: executing program 2 (id=5416): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m12.660803346s ago: executing program 2 (id=5418): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x24000010) 1m11.623059492s ago: executing program 2 (id=5430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x2c00) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 1m11.429602738s ago: executing program 2 (id=5431): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff03000000000000000100000000000000ccb600000000000007000000000000003b00000003000000010000000000000034fcffffffffffff01000000000000000300000000000000ff7f000000000000000100000000000005000000fdffffff070000000040000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="018000000000b8df0000000002000000844d793c108331c20000000001"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m11.049247384s ago: executing program 2 (id=5434): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x3328}], 0x1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r2, 0x4236}, {r3, 0x3328}], 0x2, 0x0, 0x0, 0x0) close(r0) 1m10.31962808s ago: executing program 2 (id=5440): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000500)={0x40, 0x14, 0x3, "e501c6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x0, 0x10, 0x3, "61dcd7"}, 0x0, 0x0}) 1m9.686715734s ago: executing program 42 (id=5440): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000500)={0x40, 0x14, 0x3, "e501c6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x0, 0x10, 0x3, "61dcd7"}, 0x0, 0x0}) 11.336496904s ago: executing program 9 (id=5700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xb, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 6.321477657s ago: executing program 9 (id=5712): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) socket$igmp(0x2, 0x3, 0x2) r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r1, &(0x7f0000000000)="01", 0x1, 0xc000, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xb}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) sendto$inet6(r1, &(0x7f0000000100)='0', 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.107827848s ago: executing program 9 (id=5714): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x6) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x2c1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 5.097374987s ago: executing program 9 (id=5721): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_open_dev$loop(0x0, 0xffff, 0x180) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.765051431s ago: executing program 6 (id=5723): socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 4.478375042s ago: executing program 6 (id=5724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x4, 0x8, 0xc66c, 0x21, 0x0, "7f0900006b3beb000000009e9d00000800", 0x0, 0x5}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x40, 0xac5, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', 0xc0, 0x8000, 0xc3, 0x621}}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.980335591s ago: executing program 6 (id=5725): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.317650553s ago: executing program 9 (id=5729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000000c0)=""/30, 0x1e) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, &(0x7f0000000100)}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97) 3.315560138s ago: executing program 0 (id=5730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x90, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r3, 0x0, 0x0, 0x200}]) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={r5, 0x2}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.990928799s ago: executing program 6 (id=5732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xa, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.917201127s ago: executing program 8 (id=5733): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c250000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000000}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.873652216s ago: executing program 0 (id=5734): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 2.755513273s ago: executing program 0 (id=5735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x4}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r5, 0x1d}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)="cc14dd0ec9e2610b4f51019c4a33", 0xe}], 0x1}, 0x4008081) 2.633045252s ago: executing program 6 (id=5736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0xd0, 0x0, 0xd0, 0x1a0, 0x0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [0xff, 0xffffffff, 0x0, 0xff], [0x0, 0xffffff00, 0xff000000, 0xffffff00], 'wlan0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x2f, 0x1, 0x5, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x8}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.399530927s ago: executing program 8 (id=5737): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) dup2(r1, r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x80000006) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xfffffffffffffff7) dup2(r5, r4) 2.33730093s ago: executing program 0 (id=5739): syz_io_uring_setup(0x2d64, 0x0, 0x0, &(0x7f0000011000), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fanotify_init(0x10, 0x2) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc0100000400000000000000000000000000000004"], 0xfc}}, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2.174899793s ago: executing program 6 (id=5740): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.153345213s ago: executing program 8 (id=5741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.785649729s ago: executing program 3 (id=5742): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') close(r0) 1.66103346s ago: executing program 8 (id=5743): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_timeval(r5, 0x1, 0x45, 0x0, &(0x7f00000000c0)) 1.440551378s ago: executing program 3 (id=5744): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0xbc, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.047740778s ago: executing program 0 (id=5745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0xeeee8000, 0x10000, 0x7, 0x10, 0x6}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x5, 0xe51, 0x2, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0x7b00, 0x1, 0x40000000009, 0x5, 0x6a], 0xeeee0000, 0x808d6}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000000)={0x0, 0x3, [0x79a, 0xab2, 0x445, 0xf2e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 899.386545ms ago: executing program 3 (id=5746): ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) 693.173146ms ago: executing program 0 (id=5747): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$pid(0x2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 596.254913ms ago: executing program 3 (id=5748): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',ro']) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 498.489099ms ago: executing program 8 (id=5749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x265, 0xe29, 0x2, 0x3ff}, 0x1000, 0x0, 0x23, 0x2, 0x7, 0x12, 0x16, 0x19, 0x4, 0x7, {0xf66b, 0x8, 0x6, 0x5, 0x3, 0x400}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 360.789248ms ago: executing program 3 (id=5750): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000001680)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x80002, 0x0, 0xfffe, 0x2, 0xfffffff4, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x10012, r2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 121.906271ms ago: executing program 8 (id=5751): syz_clone(0x1e18ae000, 0x0, 0xfffffffffffffdbf, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 116.591478ms ago: executing program 9 (id=5752): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) stat(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 3 (id=5753): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) capset(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000340)={'sit0\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc880, 0x7, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x40000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$setsig(0x4203, 0x0, 0x725b, &(0x7f0000000000)={0x32, 0x6, 0x2}) pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x7fffffffffffffff, 0x7) kernel console output (not intermixed with test programs): 9 code=0x0 [ 719.597983][T14648] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 719.604334][T18243] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 719.627265][T14648] usb 9-1: config 0 has no interface number 0 [ 719.643609][T14648] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.671820][T14648] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.696587][T14648] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 719.711776][T14648] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.740813][T14648] usb 9-1: config 0 descriptor?? [ 719.786248][T18243] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 719.812856][T18243] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 719.843262][T18243] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 719.874131][T18243] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 719.893357][T18243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.916120][T21361] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 720.239140][T14648] input: HID 04d9:a055 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:04D9:A055.0053/input/input88 [ 720.461191][T14648] holtek_kbd 0003:04D9:A055.0053: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.8-1/input1 [ 721.334160][T21397] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5040'. [ 721.484386][T14648] usb 9-1: reset high-speed USB device number 14 using dummy_hcd [ 721.517515][T16851] bridge_slave_1: left allmulticast mode [ 721.547068][T16851] bridge_slave_1: left promiscuous mode [ 721.560464][T16851] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.590403][T16851] bridge_slave_0: left allmulticast mode [ 721.596436][T16851] bridge_slave_0: left promiscuous mode [ 721.602348][T16851] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.725568][T16851] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 721.759746][ T29] audit: type=1800 audit(1779318826.189:1820): pid=21403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5042" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 721.973914][T16851] bond1 (unregistering): (slave gre1): Releasing backup interface [ 722.142316][T16851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.166763][T16851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.191731][T16851] bond0 (unregistering): Released all slaves [ 722.225738][T16851] bond1 (unregistering): Released all slaves [ 722.276655][T16851] bond2 (unregistering): Released all slaves [ 722.290814][ T5696] usb 9-1: USB disconnect, device number 14 [ 722.596046][T16851] tipc: Left network mode [ 722.639881][T18243] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 722.678808][T18243] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input87 [ 722.844420][T16819] net_ratelimit: 23 callbacks suppressed [ 722.844440][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 722.893992][T18243] usb 4-1: USB disconnect, device number 57 [ 722.900131][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 723.007689][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 723.146884][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 723.346305][T16851] hsr_slave_0: left promiscuous mode [ 723.363642][T16851] hsr_slave_1: left promiscuous mode [ 723.397182][T16851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.438610][T16851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.480470][T16851] batman_adv: batadv0: Removing interface: dummy0 [ 724.441529][T16851] team0 (unregistering): Port device team_slave_1 removed [ 724.516472][T16851] team0 (unregistering): Port device team_slave_0 removed [ 725.301096][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 725.438200][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 725.566586][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 725.663186][T21494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 725.696899][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 726.133172][T21500] netlink: 1319 bytes leftover after parsing attributes in process `syz.9.5072'. [ 726.176426][T16846] bond1: (slave geneve1): failed to get link speed/duplex [ 726.328229][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 726.464210][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 726.764296][T18243] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 726.950577][T18243] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 726.998557][T18243] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.028233][T18243] usb 10-1: Product: syz [ 727.050884][T18243] usb 10-1: Manufacturer: syz [ 727.067804][T18243] usb 10-1: SerialNumber: syz [ 727.532013][T18243] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 727.716994][ T29] audit: type=1804 audit(1779318832.149:1821): pid=21531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5081" name="/newroot/286/file0" dev="fuse" ino=1 res=1 errno=0 [ 728.025584][T16845] net_ratelimit: 12 callbacks suppressed [ 728.025604][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 728.294235][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 728.371628][T21551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5087'. [ 728.645807][T21560] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 728.684208][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 728.772818][T18243] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 728.800989][T18243] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 728.816665][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 728.835718][T18243] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 728.847974][T18243] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 728.866316][T18243] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 728.892914][T18243] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 728.944454][T16853] bond1: (slave geneve1): failed to get link speed/duplex [ 728.955324][T18243] usb 10-1: USB disconnect, device number 20 [ 729.080084][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 729.214198][T16853] bond1: (slave geneve1): failed to get link speed/duplex [ 729.551138][T21589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5100'. [ 729.578255][T21589] netlink: 'syz.2.5100': attribute type 10 has an invalid length. [ 729.586321][T21589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5100'. [ 729.614241][T14648] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 729.784798][T14648] usb 4-1: Using ep0 maxpacket: 32 [ 729.794386][T14648] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 729.814223][T14648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.822281][T14648] usb 4-1: Product: syz [ 729.826637][T14648] usb 4-1: Manufacturer: syz [ 729.831300][T14648] usb 4-1: SerialNumber: syz [ 729.841727][T14648] usb 4-1: config 0 descriptor?? [ 729.974273][T18243] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 730.124185][T18243] usb 10-1: Using ep0 maxpacket: 32 [ 730.137424][T18243] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 730.165541][T18243] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 730.177844][T18243] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.207937][T18243] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 730.243602][T18243] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 730.266404][T14648] airspy 4-1:0.0: Board ID: 00 [ 730.275690][T14648] airspy 4-1:0.0: Firmware version: [ 730.279663][T18243] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.305564][T18243] usb 10-1: Product: syz [ 730.316495][T18243] usb 10-1: Manufacturer: syz [ 730.321457][T18243] usb 10-1: SerialNumber: syz [ 730.335104][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 730.348244][T18243] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input89 [ 730.564210][T18243] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 730.574235][T18243] (id 0x00) [ 730.654156][T18243] rc_core: IR keymap rc-imon-pad not found [ 730.655419][T14650] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 730.665707][T18243] Registered IR keymap rc-empty [ 730.676775][T18243] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 730.683176][T14648] airspy 4-1:0.0: usb_control_msg() failed -32 request 0e [ 730.693531][T18243] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 730.723369][T14648] airspy 4-1:0.0: Registered as swradio24 [ 730.732402][T14648] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 730.775333][T18243] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 730.809822][T18243] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input90 [ 730.854360][T18243] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:21> initialized [ 730.862515][T14650] usb 9-1: Using ep0 maxpacket: 16 [ 730.895660][T14650] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.937392][T14650] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.996142][T14650] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 731.027919][T14650] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 731.042477][ T24] usb 10-1: USB disconnect, device number 21 [ 731.067396][T14650] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.091907][T14650] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 731.110744][T14650] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 731.145425][T14650] usb 9-1: Manufacturer: syz [ 731.163445][T21601] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.170882][T21601] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.197812][T14650] usb 9-1: config 0 descriptor?? [ 731.403243][T21601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.504199][T14650] rc_core: IR keymap rc-hauppauge not found [ 731.510390][T14650] Registered IR keymap rc-empty [ 731.522800][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 731.564414][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 731.598114][T14650] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 731.666584][T14650] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input91 [ 731.713465][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 731.745033][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 731.785099][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 731.824488][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 731.854939][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 731.894389][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 731.914461][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 731.948492][T21622] netlink: 'syz.9.5107': attribute type 9 has an invalid length. [ 731.956762][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 731.964214][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5107'. [ 731.984558][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 731.996792][T21622] macvlan0: entered promiscuous mode [ 732.002287][T21622] syz_tun: entered promiscuous mode [ 732.008151][T21622] macvlan0: entered allmulticast mode [ 732.013650][T21622] syz_tun: entered allmulticast mode [ 732.019571][T14650] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.057882][T14650] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 732.079141][T14650] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 732.112354][T14650] usb 9-1: USB disconnect, device number 15 [ 732.554645][T21610] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 732.714526][T21610] usb 1-1: Using ep0 maxpacket: 32 [ 732.730422][T21610] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 732.748431][T21610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.756671][T21610] usb 1-1: Product: syz [ 732.760970][T21610] usb 1-1: Manufacturer: syz [ 732.765851][T21604] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 732.773741][T21610] usb 1-1: SerialNumber: syz [ 732.782977][T21610] usb 1-1: config 0 descriptor?? [ 732.802912][T21610] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 732.846293][T18243] usb 4-1: USB disconnect, device number 58 [ 732.874934][ T5761] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 732.924194][T21604] usb 10-1: Using ep0 maxpacket: 32 [ 732.947080][T21604] usb 10-1: config 0 has an invalid interface number: 61 but max is 1 [ 732.970744][T21604] usb 10-1: config 0 has no interface number 1 [ 732.981600][T21604] usb 10-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 733.009455][T21604] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.023382][T21604] usb 10-1: Product: syz [ 733.029672][T21604] usb 10-1: Manufacturer: syz [ 733.035075][T21604] usb 10-1: SerialNumber: syz [ 733.051707][T21604] usb 10-1: config 0 descriptor?? [ 733.070342][ T5761] usb 3-1: Using ep0 maxpacket: 8 [ 733.084224][T16838] net_ratelimit: 26 callbacks suppressed [ 733.084254][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 733.106035][ T5761] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 733.120995][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.129699][ T5761] usb 3-1: Product: syz [ 733.133925][ T5761] usb 3-1: Manufacturer: syz [ 733.141400][ T5761] usb 3-1: SerialNumber: syz [ 733.178026][ T5761] usb 3-1: config 0 descriptor?? [ 733.209794][T21604] viperboard 10-1:0.61: version 0.00 found at bus 010 address 022 [ 733.234472][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 733.281521][T21604] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 733.293008][T21604] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 733.346240][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 733.405450][ T5761] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 733.424689][T21604] viperboard 10-1:0.0: version 0.df found at bus 010 address 022 [ 733.453583][T21604] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 733.470150][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 733.476682][T21604] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 733.571279][T18243] usb 10-1: USB disconnect, device number 22 [ 733.604350][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 733.725965][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 733.844231][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 733.955038][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 734.084304][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 734.194360][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 734.494346][T21604] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 734.646489][T21604] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.658322][T21604] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 734.668312][T21604] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.681745][T21604] usb 10-1: config 0 descriptor?? [ 734.699778][T21604] pwc: Askey VC010 type 2 USB webcam detected. [ 735.071840][T21610] gspca_ov534_9: reg_r err -71 [ 735.103538][T21604] pwc: recv_control_msg error -32 req 02 val 2b00 [ 735.111437][T21604] pwc: recv_control_msg error -32 req 02 val 2700 [ 735.119016][T21604] pwc: recv_control_msg error -32 req 02 val 2c00 [ 735.126650][T21604] pwc: recv_control_msg error -32 req 04 val 1000 [ 735.135200][T21604] pwc: recv_control_msg error -32 req 04 val 1300 [ 735.142500][T21604] pwc: recv_control_msg error -32 req 04 val 1400 [ 735.157946][T21604] pwc: recv_control_msg error -32 req 02 val 2000 [ 735.173024][T21604] pwc: recv_control_msg error -32 req 02 val 2100 [ 735.334239][T21610] gspca_ov534_9: Unknown sensor 0000 [ 735.334427][T21610] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 735.353864][T21610] usb 1-1: USB disconnect, device number 84 [ 735.384376][T21604] pwc: recv_control_msg error -71 req 02 val 2500 [ 735.404273][T21604] pwc: recv_control_msg error -71 req 02 val 2400 [ 735.411628][T21604] pwc: recv_control_msg error -71 req 02 val 2600 [ 735.421321][T21604] pwc: recv_control_msg error -71 req 02 val 2900 [ 735.428482][T21604] pwc: recv_control_msg error -71 req 02 val 2800 [ 735.437672][ T5761] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 735.439444][T21604] pwc: recv_control_msg error -71 req 04 val 1100 [ 735.458342][ T5761] usb 3-1: USB disconnect, device number 58 [ 735.470685][T21604] pwc: recv_control_msg error -71 req 04 val 1200 [ 735.511082][T21604] pwc: Registered as video103. [ 735.522525][T21604] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input92 [ 735.562646][T21604] usb 10-1: USB disconnect, device number 23 [ 735.883591][T21664] binder: 21663:21664 ioctl c0306201 200000000680 returned -14 [ 736.228807][T21675] picdev_write: 1 callbacks suppressed [ 736.228829][T21675] kvm: pic: non byte write [ 736.394453][T21684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5131'. [ 736.414227][T21604] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 736.554644][ T5632] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 736.584853][T21604] usb 1-1: Using ep0 maxpacket: 32 [ 736.602758][T21604] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 736.624145][T21604] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 736.653510][T21604] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 736.674018][T21604] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 736.703559][T21604] usb 1-1: config 0 interface 0 has no altsetting 0 [ 736.719952][T21604] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 736.736392][ T5632] usb 9-1: Using ep0 maxpacket: 8 [ 736.737554][T21604] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 736.750842][ T5632] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 736.774203][T21604] usb 1-1: Product: syz [ 736.783621][T21604] usb 1-1: Manufacturer: syz [ 736.788767][ T5632] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 736.799289][T21604] usb 1-1: SerialNumber: syz [ 736.821014][T21604] usb 1-1: config 0 descriptor?? [ 736.825288][ T5632] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 736.865725][ T5632] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 736.892338][T21604] ldusb 1-1:0.0: Interrupt in endpoint not found [ 736.894837][ T5632] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 736.938908][ T5632] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 736.994630][ T5632] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.029233][ T5632] usb 9-1: config 0 descriptor?? [ 737.036448][T21679] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 737.186081][ T5632] usb 1-1: USB disconnect, device number 85 [ 737.274237][ T5761] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 737.434356][ T5761] usb 4-1: Using ep0 maxpacket: 16 [ 737.457985][ T5761] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.474331][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 737.487388][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 737.506857][ T5761] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 737.525682][ T5761] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.545723][ T5761] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 737.556089][ T5761] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 737.573975][ T5633] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 737.585126][T21610] usb 9-1: USB disconnect, device number 16 [ 737.596845][ T5761] usb 4-1: Manufacturer: syz [ 737.612071][ T5761] usb 4-1: config 0 descriptor?? [ 737.807323][T21702] pic_ioport_write: 4 callbacks suppressed [ 737.807357][T21702] kvm: pic: level sensitive irq not supported [ 737.813315][T21702] kvm: pic: non byte read [ 737.829456][T21702] kvm: pic: level sensitive irq not supported [ 737.829531][T21702] kvm: pic: non byte read [ 737.924319][ T5761] rc_core: IR keymap rc-hauppauge not found [ 737.935475][ T5761] Registered IR keymap rc-empty [ 737.945922][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 737.974191][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 737.995849][ T5761] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 738.012401][ T5761] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input93 [ 738.041569][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 738.074748][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 738.105707][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 738.145122][T16852] net_ratelimit: 34 callbacks suppressed [ 738.145156][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 738.158328][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 738.182762][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 738.236460][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 738.264947][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 738.304406][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 738.324226][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 738.340042][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 738.374851][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 738.415556][ T5761] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 738.458369][ T5761] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 738.467788][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 738.476778][ T5761] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 738.498049][ T5761] usb 4-1: USB disconnect, device number 59 [ 738.574591][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 738.661554][T21726] loop9: detected capacity change from 0 to 524287936 [ 738.884810][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 739.004107][T21732] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 739.054178][T21604] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 739.085814][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 739.214671][T21604] usb 1-1: Using ep0 maxpacket: 32 [ 739.226637][T16853] bond1: (slave geneve1): failed to get link speed/duplex [ 739.233429][T21604] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.254474][T21604] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.288713][T21604] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 739.306307][T21604] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 739.315433][T21738] fuse: Unknown parameter '0x0000000000000004' [ 739.324463][T21604] usb 1-1: Product: syz [ 739.334740][T21604] usb 1-1: Manufacturer: syz [ 739.354408][ T35] bond1: (slave geneve1): failed to get link speed/duplex [ 739.365677][T21604] hub 1-1:4.0: USB hub found [ 739.484339][T16853] bond1: (slave geneve1): failed to get link speed/duplex [ 739.570535][T21604] hub 1-1:4.0: 2 ports detected [ 739.625933][T16853] bond1: (slave geneve1): failed to get link speed/duplex [ 740.364645][ T5725] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 740.526853][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.556492][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.594157][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 740.636432][ T5725] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.664830][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.696675][ T5725] usb 3-1: config 0 descriptor?? [ 740.822094][T21604] hub 1-1:4.0: activate --> -90 [ 741.147769][ T5725] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 741.551873][ T9] usb 3-1: USB disconnect, device number 59 [ 741.561622][T21752] usb 3-1: string descriptor 0 read error: -19 [ 741.631071][ T5725] usb 1-1: USB disconnect, device number 86 [ 741.638936][T21604] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 741.667817][T21604] usb 1-1-port2: attempt power cycle [ 742.501769][T21783] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5165'. [ 742.591269][T21786] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5165'. [ 742.688808][T21783] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.696266][T21783] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.736594][T21786] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.743904][T21786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.751495][T21786] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.758688][T21786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.778020][T21786] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5165'. [ 742.809966][T21786] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.817257][T21786] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.958138][T21796] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5170'. [ 743.404846][T16853] net_ratelimit: 29 callbacks suppressed [ 743.404865][T16853] bond1: (slave geneve1): failed to get link speed/duplex [ 743.536753][T16853] bond1: (slave geneve1): failed to get link speed/duplex [ 743.665374][T16851] bond1: (slave geneve1): failed to get link speed/duplex [ 743.836635][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 743.981635][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 744.124285][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 744.265098][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 744.417484][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 744.579310][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 744.714174][T16824] bond1: (slave geneve1): failed to get link speed/duplex [ 745.057198][T21812] syz.3.5174 (21812): drop_caches: 2 [ 746.014945][T21853] syzkaller0: entered promiscuous mode [ 746.033871][T21853] syzkaller0: entered allmulticast mode [ 746.076205][ T29] audit: type=1800 audit(1779318850.489:1822): pid=21842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5185" name="/" dev="fuse" ino=4 res=0 errno=0 [ 746.454743][T21872] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer. [ 746.806712][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 747.035622][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 747.063795][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.095636][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.103847][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.150768][ T9] usb 4-1: config 0 has no interfaces? [ 747.161875][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 747.185608][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.219688][ T9] usb 4-1: config 0 descriptor?? [ 747.564334][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 747.769664][ T9] usb 9-1: config 0 has no interfaces? [ 747.803144][ T9] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 747.835702][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.875851][ T9] usb 9-1: Product: syz [ 747.883473][ T9] usb 9-1: Manufacturer: syz [ 747.907646][ T9] usb 9-1: SerialNumber: syz [ 747.940032][ T9] usb 9-1: config 0 descriptor?? [ 748.213109][T21874] kvm: kvm [21864]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 748.258320][T21874] kvm: kvm [21864]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 748.277732][T21883] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.340256][T21883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 748.384521][ T24] usb 9-1: USB disconnect, device number 17 [ 748.494122][T16824] net_ratelimit: 18 callbacks suppressed [ 748.494143][T16824] bond1: (slave geneve1): failed to get link speed/duplex [ 748.634283][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 748.744726][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 748.864173][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 749.047095][T21903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5204'. [ 749.058604][T16833] bond1: (slave geneve1): failed to get link speed/duplex [ 749.087847][T21903] netlink: 'syz.0.5204': attribute type 5 has an invalid length. [ 749.117011][T21903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5204'. [ 749.195233][T21903] geneve2: entered promiscuous mode [ 749.207730][T21903] geneve2: entered allmulticast mode [ 749.235201][T16845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 749.254418][T16845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 749.422963][ T24] usb 4-1: USB disconnect, device number 60 [ 749.676004][T16845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 749.715791][T16845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 749.814206][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 749.905501][T21919] pic_ioport_write: 1 callbacks suppressed [ 749.905550][T21919] kvm: pic: single mode not supported [ 749.911973][T21919] kvm: pic: level sensitive irq not supported [ 749.960988][T21919] kvm: pic: single mode not supported [ 750.030911][T21919] kvm: pic: level sensitive irq not supported [ 750.085217][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 750.265639][T16833] bond1: (slave geneve1): failed to get link speed/duplex [ 750.405923][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 750.675179][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 751.334368][ T24] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 751.507054][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.527043][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 751.561544][ T24] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 751.590277][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 751.618755][ T24] usb 10-1: SerialNumber: syz [ 751.714220][T18243] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 751.829388][ T5289] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 751.875850][ T24] usb 10-1: 0:2 : does not exist [ 751.920224][T18243] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 751.963707][T18243] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 751.987670][T18243] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 752.043741][T18243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.050954][ T24] usb 10-1: USB disconnect, device number 24 [ 752.100355][T21964] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 752.158216][T18243] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 752.258332][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 752.590518][T18243] usb 4-1: USB disconnect, device number 61 [ 753.160963][T18243] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 753.207181][T18243] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz1] on syz0 [ 753.589593][T16838] net_ratelimit: 24 callbacks suppressed [ 753.589613][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 753.754332][T16833] bond1: (slave geneve1): failed to get link speed/duplex [ 753.887401][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 753.911498][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5236'. [ 753.933165][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5236'. [ 754.034882][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 754.157131][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 754.274316][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 754.395149][T16833] bond1: (slave geneve1): failed to get link speed/duplex [ 754.407161][T22018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 754.449928][ T29] audit: type=1326 audit(1779318858.879:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22017 comm="syz.2.5240" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed2e19ce59 code=0x0 [ 754.524331][T16833] bond1: (slave geneve1): failed to get link speed/duplex [ 754.645079][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 754.785526][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 755.239783][T22037] binder_alloc: 22036: binder_alloc_buf size -360 failed, no address space [ 755.265156][T22037] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 755.318415][T22039] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5247'. [ 755.330744][T22039] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.338183][T22039] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.377663][T22039] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5247'. [ 755.396263][T22039] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.403504][T22039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.411131][T22039] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.418332][T22039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.432594][T22039] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5247'. [ 755.458463][T22041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5248'. [ 755.469341][T22041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5248'. [ 755.500589][T22039] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.507967][T22039] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.074359][T18243] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 756.086521][T22056] binder: BINDER_SET_CONTEXT_MGR already set [ 756.124899][T22056] binder: 22055:22056 ioctl 4018620d 200000004a80 returned -16 [ 756.258206][T18243] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 756.288802][T18243] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 756.300767][T18243] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.311568][T18243] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 756.325376][T18243] usb 10-1: config 0 interface 0 has no altsetting 0 [ 756.332194][T18243] usb 10-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 756.357629][T18243] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.392891][T18243] usb 10-1: config 0 descriptor?? [ 756.839126][T18243] hid-alps 0003:044E:120C.0056: unbalanced collection at end of report description [ 756.861809][T18243] hid-alps 0003:044E:120C.0056: parse failed [ 756.876045][T18243] hid-alps 0003:044E:120C.0056: probe with driver hid-alps failed with error -22 [ 757.049532][ T24] usb 10-1: USB disconnect, device number 25 [ 757.325874][T22078] input: syz1 as /devices/virtual/input/input95 [ 757.431976][T22078] bond2: left promiscuous mode [ 757.445730][T22078] vcan1: left promiscuous mode [ 757.463392][T22078] bond3: left promiscuous mode [ 757.475986][T22078] bridge2: left promiscuous mode [ 757.496700][T22078] geneve2: left promiscuous mode [ 757.512771][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 757.537179][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 757.573771][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 757.598692][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 758.695926][T16819] net_ratelimit: 30 callbacks suppressed [ 758.695948][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 758.861122][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 759.019033][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 759.165336][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 759.296885][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 759.454231][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 759.554464][T18243] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 759.585692][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 759.717798][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 759.737354][T18243] usb 10-1: config index 0 descriptor too short (expected 1572, got 36) [ 759.783715][T18243] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.833725][T18243] usb 10-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 759.873955][T18243] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.874522][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 759.920062][T18243] usb 10-1: Product: syz [ 759.939270][T18243] usb 10-1: Manufacturer: syz [ 759.954102][T18243] usb 10-1: SerialNumber: syz [ 760.000698][T18243] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input96 [ 760.044276][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 760.192479][ T4978] bcm5974 10-1:1.0: could not read from device [ 760.235611][T22117] netlink: 'syz.8.5271': attribute type 12 has an invalid length. [ 760.271890][T18243] bcm5974 10-1:1.0: could not read from device [ 760.324299][ T4978] bcm5974 10-1:1.0: could not read from device [ 760.356640][T18243] input: failed to attach handler mousedev to device input96, error: -5 [ 760.383058][T18243] usb 10-1: USB disconnect, device number 26 [ 760.393099][ T4978] bcm5974 10-1:1.0: could not read from device [ 760.425520][ T5725] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 760.614378][ T5725] usb 1-1: Using ep0 maxpacket: 32 [ 760.641632][ T5725] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.710325][ T5725] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.753680][T22126] loop4: detected capacity change from 0 to 2640 [ 760.768471][ T5725] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 760.783143][T22126] buffer_io_error: 6 callbacks suppressed [ 760.783158][T22126] Buffer I/O error on dev loop4, logical block 0, async page read [ 760.788201][ T5725] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 760.805510][T22126] Buffer I/O error on dev loop4, logical block 0, async page read [ 760.819393][ T5725] usb 1-1: Product: syz [ 760.823719][T22126] Buffer I/O error on dev loop4, logical block 0, async page read [ 760.857903][ T5725] usb 1-1: Manufacturer: syz [ 760.897617][ T5725] hub 1-1:4.0: USB hub found [ 760.910599][T22129] Buffer I/O error on dev loop4, logical block 0, async page read [ 760.969759][T22126] Buffer I/O error on dev loop4, logical block 0, async page read [ 761.042047][T22126] Buffer I/O error on dev loop4, logical block 0, async page read [ 761.058696][T22126] Buffer I/O error on dev loop4, logical block 0, async page read [ 761.110731][ T5725] hub 1-1:4.0: 2 ports detected [ 761.129860][T22129] Buffer I/O error on dev loop4, logical block 0, async page read [ 761.162491][T22126] Buffer I/O error on dev loop4, logical block 0, async page read [ 761.220028][T22136] netlink: 'syz.9.5277': attribute type 10 has an invalid length. [ 761.243561][T22126] Buffer I/O error on dev loop4, logical block 0, async page read [ 761.307104][T22126] ldm_validate_partition_table(): Disk read failed. [ 761.325408][T22126] Dev loop4: unable to read RDB block 0 [ 761.373140][T22126] loop4: unable to read partition table [ 761.429319][T22126] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 761.609801][T22136] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 762.220828][T22153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5281'. [ 762.326151][ T5725] hub 1-1:4.0: activate --> -90 [ 762.574391][ T9] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 762.619870][ T9] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.00 Device [syz1] on syz0 [ 762.728014][ T5725] usb 1-1-port2: config error [ 762.731422][T18243] usb 1-1: USB disconnect, device number 91 [ 762.936406][ T9] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 763.004393][ T5632] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 763.105202][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 763.119598][ T9] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 763.134107][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.145517][ T9] usb 10-1: Product: syz [ 763.152531][ T9] usb 10-1: Manufacturer: syz [ 763.162676][ T9] usb 10-1: SerialNumber: syz [ 763.176000][ T5632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 763.195362][ T9] usb 10-1: config 0 descriptor?? [ 763.200607][ T5632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 763.213299][ T5632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 763.229105][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 763.286068][ T5632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 763.323376][ T5632] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 763.354476][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.405375][ T5632] usb 3-1: Product: syz [ 763.425458][ T5632] usb 3-1: Manufacturer: syz [ 763.441516][ T5632] usb 3-1: SerialNumber: syz [ 763.464906][T22179] input: syz1 as /devices/virtual/input/input97 [ 763.478188][ T5632] usb 3-1: config 0 descriptor?? [ 763.694884][T22185] bond0: entered promiscuous mode [ 763.726848][T22185] bond_slave_0: entered promiscuous mode [ 763.735745][ T5632] adutux 3-1:0.0: Could not retrieve serial number [ 763.744528][T22185] bond_slave_1: entered promiscuous mode [ 763.759493][ T5632] adutux 3-1:0.0: probe with driver adutux failed with error -5 [ 763.762907][T22185] team0: entered promiscuous mode [ 763.786875][T22185] team_slave_0: entered promiscuous mode [ 763.792992][T22185] team_slave_1: entered promiscuous mode [ 763.801373][T22185] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 763.894170][T16845] net_ratelimit: 24 callbacks suppressed [ 763.894191][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 763.971676][ T5632] usb 3-1: USB disconnect, device number 60 [ 764.026306][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 764.164238][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 764.296987][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 764.336744][T22195] kvm: pic: non byte write [ 764.434284][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 764.555911][T16824] bond1: (slave geneve1): failed to get link speed/duplex [ 764.714445][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 764.844304][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 764.955183][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 765.094147][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 765.447375][ T9] gspca_sonixj: reg_w1 err -71 [ 765.484304][ T9] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 765.506741][ T9] usb 10-1: USB disconnect, device number 27 [ 765.844274][ T5725] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 766.025384][ T5725] usb 9-1: Using ep0 maxpacket: 8 [ 766.036181][ T5725] usb 9-1: config 0 has no interfaces? [ 766.053647][ T5725] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 766.072941][ T5725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.104437][ T5725] usb 9-1: Product: syz [ 766.118902][ T5725] usb 9-1: Manufacturer: syz [ 766.144194][ T5725] usb 9-1: SerialNumber: syz [ 766.155937][ T5725] usb 9-1: config 0 descriptor?? [ 766.202869][ T29] audit: type=1804 audit(1779318870.629:1824): pid=22230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5304" name="/newroot/699/file0" dev="fuse" ino=1 res=1 errno=0 [ 766.399892][T22219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.431428][T22219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.487667][ T5725] usb 9-1: USB disconnect, device number 18 [ 766.849970][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 767.024282][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 767.039875][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.078725][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 767.119763][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.171827][ T9] usb 4-1: config 0 descriptor?? [ 767.178034][T22254] binder: 22253:22254 ioctl c0306201 200000002980 returned -22 [ 767.224885][ T5725] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 767.414218][ T5725] usb 3-1: Using ep0 maxpacket: 16 [ 767.442148][ T5725] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 767.459835][T22241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.475444][T22241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.484475][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.494144][T21610] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 767.503846][T22260] syzkaller0: entered allmulticast mode [ 767.516339][ T5725] usb 3-1: config 0 descriptor?? [ 767.547316][ T5725] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 767.656791][T21610] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.685910][T21610] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 767.723365][T21610] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 767.753881][T21610] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.774267][T21610] usb 9-1: Product: syz [ 767.779017][T21610] usb 9-1: Manufacturer: syz [ 767.788778][T21610] usb 9-1: SerialNumber: syz [ 767.818551][T21610] cdc_mbim 9-1:1.0: skipping garbage [ 768.027755][T22258] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 768.156803][T22266] kvm: pic: non byte write [ 768.178433][T22266] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (56 ns). Using initial count to start timer. [ 768.322047][T21610] cdc_mbim 9-1:1.0: bind() failure [ 768.347281][T21610] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 768.359963][T21610] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 768.372135][T21610] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 768.394015][T21610] usb 9-1: USB disconnect, device number 19 [ 768.415470][ T5726] usb 4-1: USB disconnect, device number 62 [ 768.572364][T22269] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 768.971138][T22282] netlink: 'syz.9.5326': attribute type 1 has an invalid length. [ 769.004294][T21610] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 769.006119][T16825] net_ratelimit: 32 callbacks suppressed [ 769.006170][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 769.155622][T21610] usb 1-1: device descriptor read/64, error -71 [ 769.338217][T22282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 769.406652][T21610] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 769.442662][T22287] bond3: (slave ip6gretap1): making interface the new active one [ 769.463564][T22287] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 769.514966][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 769.574175][T21610] usb 1-1: device descriptor read/64, error -71 [ 769.646690][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 769.684816][T21610] usb usb1-port1: attempt power cycle [ 769.754275][T16824] bond1: (slave geneve1): failed to get link speed/duplex [ 769.774776][ T5725] gspca_sonixj: i2c_w8 err -71 [ 769.786174][ T5725] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 769.808175][ T5725] usb 3-1: USB disconnect, device number 61 [ 769.896643][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 770.034787][T21610] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 770.043403][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 770.075255][T21610] usb 1-1: device descriptor read/8, error -71 [ 770.155007][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 770.284285][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 770.394149][T21610] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 770.414835][T21610] usb 1-1: device descriptor read/8, error -71 [ 770.424512][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 770.535033][T21610] usb usb1-port1: unable to enumerate USB device [ 770.565395][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 770.910237][ C0] Unknown status report in ack skb [ 771.603971][T22310] syz.8.5335 (22310): drop_caches: 2 [ 772.174216][T21610] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 772.354159][T21610] usb 1-1: Using ep0 maxpacket: 32 [ 772.363600][T22323] kvm: requested 97219 ns i8254 timer period limited to 200000 ns [ 772.379044][T21610] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 772.403722][T22323] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 772.407987][T21610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.436796][T22323] kvm: requested 46095 ns i8254 timer period limited to 200000 ns [ 772.457874][T21610] usb 1-1: config 0 descriptor?? [ 772.466284][T22323] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 772.488759][T21610] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 772.509136][T22323] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 772.532010][T22323] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 772.574390][T22323] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 772.594878][T22323] kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 772.613916][T22323] kvm: requested 140800 ns i8254 timer period limited to 200000 ns [ 772.624461][ T9] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 772.645678][T22323] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 772.786394][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 772.812220][ T9] usb 4-1: config 0 has no interface number 0 [ 772.849846][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 772.886406][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 772.922026][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.952404][ T9] usb 4-1: Product: syz [ 772.965475][ T9] usb 4-1: Manufacturer: syz [ 772.981410][ T9] usb 4-1: SerialNumber: syz [ 773.007535][ T9] usb 4-1: config 0 descriptor?? [ 773.179751][T22332] binder: 22330:22332 ioctl c0306201 0 returned -14 [ 773.206091][T22332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.577197][T22338] syzkaller0: entered promiscuous mode [ 773.591735][T22338] syzkaller0: entered allmulticast mode [ 773.642827][T22342] syz.2.5347 (22342): drop_caches: 2 [ 773.810847][T22346] loop6: detected capacity change from 0 to 2640 [ 773.840012][T22346] buffer_io_error: 13 callbacks suppressed [ 773.840031][T22346] Buffer I/O error on dev loop6, logical block 0, async page read [ 773.873680][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 773.879089][T22346] Buffer I/O error on dev loop6, logical block 0, async page read [ 773.895019][T22346] Buffer I/O error on dev loop6, logical block 0, async page read [ 773.903013][T22346] Buffer I/O error on dev loop6, logical block 0, async page read [ 773.913641][T22346] Buffer I/O error on dev loop6, logical block 0, async page read [ 773.931565][T22346] Buffer I/O error on dev loop6, logical block 0, async page read [ 773.940650][T22346] Buffer I/O error on dev loop6, logical block 0, async page read [ 773.950408][T22346] Buffer I/O error on dev loop6, logical block 0, async page read [ 773.958695][T22346] ldm_validate_partition_table(): Disk read failed. [ 773.982697][T22346] Buffer I/O error on dev loop6, logical block 0, async page read [ 774.017931][T22346] Buffer I/O error on dev loop6, logical block 0, async page read [ 774.028503][T22346] Dev loop6: unable to read RDB block 0 [ 774.065253][ T13] net_ratelimit: 30 callbacks suppressed [ 774.065272][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 774.094846][T22346] loop6: unable to read partition table [ 774.121091][T22346] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 774.195774][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 774.314253][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.325491][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 774.485881][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 774.604933][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 774.718355][T21610] gspca_vc032x: reg_w err -71 [ 774.723150][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.736723][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 774.749214][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.757168][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.762589][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.769166][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.784504][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.792179][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.801831][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.810355][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.820681][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.839324][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.858310][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 774.860620][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.899536][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.911015][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.922670][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.936452][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.949326][T21610] gspca_vc032x: I2c Bus Busy Wait 00 [ 774.961423][T21610] gspca_vc032x: Unknown sensor... [ 774.979956][T21610] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 774.994835][T16838] bond1: (slave geneve1): failed to get link speed/duplex [ 775.013286][T21610] usb 1-1: USB disconnect, device number 96 [ 775.124188][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 775.354186][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 775.371735][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 775.407971][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 775.445974][ T9] usb 4-1: USB disconnect, device number 63 [ 778.384193][ T5726] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 778.566107][ T5726] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 778.608324][ T5726] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 778.631274][ T5726] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 778.658658][ T5726] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 778.692577][ T5726] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 778.749504][ T5726] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.794302][ T5726] usb 9-1: config 0 descriptor?? [ 778.814546][T22462] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5389'. [ 778.866655][T22462] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5389'. [ 779.107219][T16852] net_ratelimit: 31 callbacks suppressed [ 779.107243][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 779.246739][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 779.278856][ T5726] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 779.365915][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 779.409266][T22473] syz.0.5393: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 779.504652][T22473] CPU: 0 UID: 0 PID: 22473 Comm: syz.0.5393 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.504684][T22473] Tainted: [L]=SOFTLOCKUP [ 779.504691][T22473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 779.504707][T22473] Call Trace: [ 779.504718][T22473] [ 779.504726][T22473] dump_stack_lvl+0xe8/0x150 [ 779.504754][T22473] warn_alloc+0x249/0x340 [ 779.504787][T22473] ? __pfx_warn_alloc+0x10/0x10 [ 779.504825][T22473] ? __mutex_trylock_common+0x158/0x260 [ 779.504854][T22473] __vmalloc_node_range_noprof+0x132/0x1750 [ 779.504882][T22473] ? rcu_is_watching+0x15/0xb0 [ 779.504905][T22473] ? trace_contention_end+0x3d/0x140 [ 779.504931][T22473] ? __mutex_lock+0x319/0x1550 [ 779.504957][T22473] ? tomoyo_path_number_perm+0x219/0x630 [ 779.504981][T22473] ? tomoyo_path_number_perm+0x219/0x630 [ 779.505097][T22473] ? dvb_dvr_do_ioctl+0x76/0x220 [ 779.505132][T22473] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 779.505160][T22473] ? do_vfs_ioctl+0x1166/0x1530 [ 779.505202][T22473] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 779.505233][T22473] vmalloc_noprof+0xb2/0xe0 [ 779.505260][T22473] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 779.505294][T22473] dvb_dvr_do_ioctl+0x12b/0x220 [ 779.505332][T22473] dvb_usercopy+0x199/0x2e0 [ 779.505359][T22473] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 779.505390][T22473] ? __pfx_dvb_usercopy+0x10/0x10 [ 779.505427][T22473] ? __fget_files+0x3a0/0x420 [ 779.505451][T22473] ? __fget_files+0x2a/0x420 [ 779.505479][T22473] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 779.505509][T22473] dvb_dvr_ioctl+0x29/0x40 [ 779.505541][T22473] __se_sys_ioctl+0xfc/0x170 [ 779.505571][T22473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.505594][T22473] do_syscall_64+0x15f/0xf80 [ 779.505625][T22473] ? trace_irq_disable+0x3b/0x140 [ 779.505655][T22473] ? clear_bhb_loop+0x40/0x90 [ 779.505680][T22473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.505701][T22473] RIP: 0033:0x7f0c6359ce59 [ 779.505720][T22473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.505738][T22473] RSP: 002b:00007f0c64525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.505759][T22473] RAX: ffffffffffffffda RBX: 00007f0c63815fa0 RCX: 00007f0c6359ce59 [ 779.505775][T22473] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 779.505789][T22473] RBP: 00007f0c63632d6f R08: 0000000000000000 R09: 0000000000000000 [ 779.505801][T22473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.505812][T22473] R13: 00007f0c63816038 R14: 00007f0c63815fa0 R15: 00007f0c6393fa48 [ 779.505843][T22473] [ 779.505861][T22473] Mem-Info: [ 779.774355][T21610] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 779.848728][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 779.876695][T22473] active_anon:14605 inactive_anon:0 isolated_anon:0 [ 779.876695][T22473] active_file:24873 inactive_file:40313 isolated_file:0 [ 779.876695][T22473] unevictable:768 dirty:2619 writeback:256 [ 779.876695][T22473] slab_reclaimable:9369 slab_unreclaimable:127032 [ 779.876695][T22473] mapped:38538 shmem:7088 pagetables:1826 [ 779.876695][T22473] sec_pagetables:0 bounce:0 [ 779.876695][T22473] kernel_misc_reclaimable:0 [ 779.876695][T22473] free:1251137 free_pcp:13052 free_cma:0 [ 779.935814][T21610] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 779.946896][T22473] Node 0 active_anon:58420kB inactive_anon:0kB active_file:99436kB inactive_file:161044kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153996kB dirty:10076kB writeback:768kB shmem:26816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:16440kB pagetables:7124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 779.993134][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 780.011831][T21610] usb 4-1: config 0 has no interface number 0 [ 780.033127][T21610] usb 4-1: config 0 interface 41 has no altsetting 0 [ 780.090768][T21610] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 780.108445][T22473] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 780.142476][T21610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.142507][T21610] usb 4-1: Product: syz [ 780.142525][T21610] usb 4-1: Manufacturer: syz [ 780.142541][T21610] usb 4-1: SerialNumber: syz [ 780.166657][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 780.176932][T21610] usb 4-1: config 0 descriptor?? [ 780.180176][T22473] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 780.209364][ T9] usb 9-1: USB disconnect, device number 20 [ 780.284180][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 780.299341][T22473] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 780.312732][T22473] Node 0 DMA32 free:1053292kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57920kB inactive_anon:0kB active_file:87788kB inactive_file:169496kB unevictable:1536kB writepending:10080kB zspages:0kB present:3129332kB managed:2552560kB mlocked:0kB bounce:0kB free_pcp:45388kB local_pcp:21020kB free_cma:0kB [ 780.355382][T22473] lowmem_reserve[]: 0 0 0 0 0 [ 780.360369][T22473] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 780.405617][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 780.413277][T22473] lowmem_reserve[]: 0 0 0 0 0 [ 780.419735][T22473] Node 1 Normal free:3938872kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:208kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7880kB local_pcp:0kB free_cma:0kB [ 780.474391][T22473] lowmem_reserve[]: 0 0 0 0 0 [ 780.479309][T22473] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 780.493511][T22473] Node 0 DMA32: 2932*4kB (UME) 4408*8kB (UME) 3604*16kB (UME) 1194*32kB (UME) 834*64kB (UME) 755*128kB (UME) 486*256kB (UME) 229*512kB (UME) 109*1024kB (UME) 45*2048kB (UME) 77*4096kB (UM) = 1053712kB [ 780.518962][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 780.550833][T22473] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 780.582724][T22473] Node 1 Normal: 4*4kB (M) 1*8kB (M) 16*16kB (UM) 5*32kB (UM) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 2*512kB (U) 3*1024kB (UM) 2*2048kB (M) 959*4096kB (UM) = 3938872kB [ 780.601822][T22473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 780.647073][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 780.666410][T22473] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 780.690757][T22473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 780.710801][T22473] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 780.727904][T22473] 71470 total pagecache pages [ 780.739685][T22473] 0 pages in swap cache [ 780.743908][T22473] Free swap = 124996kB [ 780.749480][T22473] Total swap = 124996kB [ 780.753696][T22473] 2097051 pages RAM [ 780.758276][T22473] 0 pages HighMem/MovableOnly [ 780.763221][T22473] 427129 pages reserved [ 780.767827][T22473] 0 pages cma reserved [ 781.123708][T21610] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 781.256554][T22488] syzkaller0: entered promiscuous mode [ 781.286362][T22488] syzkaller0: entered allmulticast mode [ 782.268531][T21610] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 782.291593][T21610] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 782.317648][T21610] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 782.342556][T21610] usb 4-1: USB disconnect, device number 64 [ 782.781916][T22514] kvm: pic: single mode not supported [ 782.781954][T22514] kvm: pic: level sensitive irq not supported [ 782.853230][T22514] kvm: pic: level sensitive irq not supported [ 782.871648][T22514] kvm: pic: single mode not supported [ 782.895713][T22518] syzkaller0: entered promiscuous mode [ 782.934215][T22518] syzkaller0: entered allmulticast mode [ 783.000266][ T5726] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 783.204580][ T5726] usb 9-1: Using ep0 maxpacket: 8 [ 783.230285][ T5726] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 783.273974][ T5726] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.314580][ T5726] usb 9-1: config 0 has no interface number 0 [ 783.398760][ T5726] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 783.436480][ T5726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.496307][ T5726] usb 9-1: Product: syz [ 783.530258][ T5726] usb 9-1: Manufacturer: syz [ 783.552834][ T5726] usb 9-1: SerialNumber: syz [ 783.583008][ T5726] usb 9-1: config 0 descriptor?? [ 783.630462][ T5726] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 783.685713][ T5726] uvcvideo 9-1:0.31: No valid video chain found. [ 784.166080][ T13] net_ratelimit: 25 callbacks suppressed [ 784.166100][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 784.249952][T22536] syzkaller0: entered allmulticast mode [ 784.354208][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 784.464968][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 784.584348][T16825] bond1: (slave geneve1): failed to get link speed/duplex [ 784.680184][ T5725] usb 9-1: USB disconnect, device number 21 [ 784.704141][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 784.827274][T22547] kvm: pic: non byte write [ 784.859186][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 784.921077][T22552] binder: 22551:22552 ioctl c0306201 200000004a40 returned -22 [ 784.985894][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 785.124827][T16819] bond1: (slave geneve1): failed to get link speed/duplex [ 785.197902][T22560] binder: 22558:22560 unknown command 0 [ 785.220531][T22560] binder: 22558:22560 ioctl c0306201 2000000001c0 returned -22 [ 785.264189][T16852] bond1: (slave geneve1): failed to get link speed/duplex [ 785.382938][T22563] binder: transaction release 241 bad handle 1, ret = -22 [ 785.594720][T16846] bond1: (slave geneve1): failed to get link speed/duplex [ 787.158856][T22607] program syz.9.5439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 787.223461][T22607] input: syz0 as /devices/virtual/input/input99 [ 788.099278][ T4944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 788.145151][ T4944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 788.156518][ T4944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 788.178632][ T4944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 788.202125][ T4944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 788.384166][ T5726] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 788.611235][ T5726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.630521][ T5726] usb 1-1: config 0 has no interfaces? [ 788.670875][ T5726] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 788.696271][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.714827][ T5726] usb 1-1: Product: syz [ 788.733236][ T5726] usb 1-1: Manufacturer: syz [ 788.748508][ T5726] usb 1-1: SerialNumber: syz [ 788.766278][ T5726] usb 1-1: config 0 descriptor?? [ 790.265005][ T4944] Bluetooth: hci1: command tx timeout [ 791.023177][T21610] usb 1-1: USB disconnect, device number 97 [ 791.055112][ T13] net_ratelimit: 4 callbacks suppressed [ 791.055131][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 791.263389][T22634] xt_hashlimit: size too large, truncated to 1048576 [ 791.311422][T16819] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.356751][T16819] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.739723][T16819] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.783234][T16819] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.351211][ T4944] Bluetooth: hci1: command tx timeout [ 792.432188][T16819] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.467992][T16819] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.730665][T16819] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.798109][T16819] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.984119][T16845] bond1: (slave geneve1): failed to get link speed/duplex [ 793.199331][T16846] bond1: (slave geneve1): failed to get link speed/duplex [ 793.426159][ T13] bond1: (slave geneve1): failed to get link speed/duplex [ 793.806432][T22674] syzkaller0: entered promiscuous mode [ 793.836590][T22674] syzkaller0: entered allmulticast mode [ 794.082596][T22685] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5462'. [ 794.254729][T22685] bond4: entered promiscuous mode [ 794.260334][T22685] 8021q: adding VLAN 0 to HW filter on device bond4 [ 794.428913][ T4944] Bluetooth: hci1: command tx timeout [ 794.440430][T22620] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.462313][T22620] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.472676][T22620] bridge_slave_0: entered allmulticast mode [ 794.481181][T22620] bridge_slave_0: entered promiscuous mode [ 794.490318][T22620] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.498547][T22620] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.507843][T22620] bridge_slave_1: entered allmulticast mode [ 794.516783][T22620] bridge_slave_1: entered promiscuous mode [ 794.641176][T22685] 8021q: adding VLAN 0 to HW filter on device bond4 [ 794.648608][T22685] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 794.663339][T22685] bond4: (slave sit1): Error -95 calling set_mac_address [ 794.808560][T22620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.868077][T22620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.958740][T16853] bond1: (slave geneve1): failed to get link speed/duplex [ 795.235513][ T4944] Bluetooth: hci3: command 0x0406 tx timeout [ 795.794246][ T5725] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 795.873754][T16819] bond0 (unregistering): (slave vti0): Releasing backup interface [ 795.964670][ T5725] usb 9-1: Using ep0 maxpacket: 16 [ 795.982617][ T5725] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 796.034961][ T5725] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 796.066898][ T5725] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 796.107318][ T5725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.139014][T16819] bond1 (unregistering): (slave geneve1): Removing an active aggregator [ 796.152429][ T5725] usb 9-1: Product: syz [ 796.167166][ T5725] usb 9-1: Manufacturer: syz [ 796.178485][ T5725] usb 9-1: SerialNumber: syz [ 796.195426][T16819] bond1 (unregistering): (slave geneve1): Releasing backup interface [ 796.198515][ T5725] usb 9-1: config 0 descriptor?? [ 796.228521][ T5725] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 796.273943][ T5725] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 796.385864][T16819] bond1 (unregistering): Released all slaves [ 796.481710][T16819] bond0 (unregistering): Released all slaves [ 796.504222][ T5633] Bluetooth: hci1: command tx timeout [ 796.578307][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 796.615795][T22620] team0: Port device team_slave_0 added [ 796.663748][T22620] team0: Port device team_slave_1 added [ 796.785245][T22620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.801383][T22620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.849788][ T5725] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 796.880130][ T5725] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 796.889175][T22620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.097191][T22620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.112853][T22620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.142444][T22620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.220465][T22733] syzkaller0: entered promiscuous mode [ 797.250737][T22733] syzkaller0: entered allmulticast mode [ 797.923279][ T5725] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 798.147013][ T5725] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 798.173175][ T5725] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 798.198616][ T5725] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 798.226346][ T5725] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 798.257806][ T5725] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 798.303874][ T5725] usb 9-1: USB disconnect, device number 22 [ 799.179023][ T9] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 799.377755][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 799.386871][ T9] usb 10-1: config 6 has an invalid descriptor of length 64, skipping remainder of the config [ 799.400051][ T9] usb 10-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.24 [ 799.409784][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.418143][ T9] usb 10-1: Product: syz [ 799.422712][ T9] usb 10-1: Manufacturer: syz [ 799.427953][ T9] usb 10-1: SerialNumber: syz [ 802.341598][T22620] hsr_slave_0: entered promiscuous mode [ 802.393837][T22620] hsr_slave_1: entered promiscuous mode [ 802.411995][T22620] debugfs: 'hsr0' already exists in 'hsr' [ 802.433443][T22620] Cannot create hsr debugfs directory [ 802.516738][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10 [ 802.821682][T16819] hsr_slave_0: left promiscuous mode [ 802.861745][ T9] qmi_wwan 10-1:6.0: invalid descriptor buffer length [ 802.876982][T16819] hsr_slave_1: left promiscuous mode [ 802.903793][ T9] qmi_wwan 10-1:6.0: probe with driver qmi_wwan failed with error -22 [ 802.957895][ T9] usb 10-1: USB disconnect, device number 28 [ 802.965810][T16819] veth1_macvtap: left promiscuous mode [ 802.981042][T16819] veth0_macvtap: left promiscuous mode [ 803.023935][T16819] veth1_vlan: left promiscuous mode [ 803.047513][T16819] veth0_vlan: left promiscuous mode [ 803.184216][ T5632] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 803.354213][ T5632] usb 4-1: Using ep0 maxpacket: 8 [ 803.377866][ T5632] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 803.414990][ T5632] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 803.427311][ T5632] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 803.490131][ T5632] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 803.558347][ T5632] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 803.623133][ T5632] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 803.704073][ T5632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.007112][ T5632] usb 4-1: GET_CAPABILITIES returned 0 [ 804.029098][ T5632] usbtmc 4-1:16.0: can't read capabilities [ 804.094768][T22797] vivid-001: ================= START STATUS ================= [ 804.135592][T22797] vivid-001: Radio HW Seek Mode: Bounded [ 804.249476][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.258581][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.267646][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.276726][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.285798][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.297130][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.306258][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.315363][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.324479][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.344152][T22797] vivid-001: Radio Programmable HW Seek: false [ 804.361969][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.371110][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.380198][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.389281][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.434650][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.440010][ T5632] usb 4-1: USB disconnect, device number 65 [ 804.443793][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.458824][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.474688][T22797] vivid-001: RDS Rx I/O Mode: Block I/O [ 804.501374][T22797] vivid-001: Generate RBDS Instead of RDS: false [ 804.539780][T22797] vivid-001: RDS Reception: true [ 804.565747][T22797] vivid-001: RDS Program Type: 0 inactive [ 804.585811][T22797] vivid-001: RDS PS Name: inactive [ 804.605845][T22797] vivid-001: RDS Radio Text: inactive [ 804.630255][T22797] vivid-001: RDS Traffic Announcement: false inactive [ 804.659098][T22797] vivid-001: RDS Traffic Program: false inactive [ 804.677038][ T5633] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 804.685686][T22797] vivid-001: RDS Music: false inactive [ 804.703261][T22797] vivid-001: ================== END STATUS ================== [ 805.437028][T22814] syzkaller0: entered promiscuous mode [ 805.458867][T22814] syzkaller0: entered allmulticast mode [ 805.500754][T22811] kvm_intel: kvm [22809]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 805.535578][T22811] kvm_intel: kvm [22809]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 805.556712][T22811] kvm_intel: kvm [22809]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 805.569218][T22811] kvm_intel: kvm [22809]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 805.623380][T22811] kvm_intel: kvm [22809]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 805.646080][T22811] kvm_intel: kvm [22809]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 805.738442][T22811] kvm_intel: kvm [22809]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 805.805421][T22811] kvm_intel: kvm [22809]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 805.862755][T22811] kvm_intel: kvm [22809]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 805.906701][T22811] kvm_intel: kvm [22809]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 805.985599][T16819] IPVS: stop unused estimator thread 0... [ 807.411214][T22852] xt_hashlimit: size too large, truncated to 1048576 [ 808.484849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 808.507044][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.513588][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.526249][T22620] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 809.612421][T22888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5509'. [ 809.623349][T22620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 809.668967][T22620] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 809.685295][T22888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5509'. [ 809.743300][T22620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 809.753903][T22888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5509'. [ 809.773911][T22620] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 809.820456][T22893] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5510'. [ 809.842759][T22893] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5510'. [ 809.885952][T22620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 809.922781][T22620] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 809.972610][T22620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 810.318844][T22620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.370538][T22620] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.385374][T16845] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.392566][T16845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.421565][T16845] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.428753][T16845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.620695][T22620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.723180][T22620] veth0_vlan: entered promiscuous mode [ 810.759234][T22620] veth1_vlan: entered promiscuous mode [ 810.856703][T22620] veth0_macvtap: entered promiscuous mode [ 810.885638][T22620] veth1_macvtap: entered promiscuous mode [ 810.948338][T22620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.993309][T22620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.046831][T16833] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.060250][T16833] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.079213][T16833] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.088846][T16833] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.308788][T16852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.320663][T16852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.363021][T16825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.373772][T16825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.047089][T22956] kvm: pic: single mode not supported [ 812.049238][T22956] kvm: pic: single mode not supported [ 812.054884][T22956] kvm: pic: level sensitive irq not supported [ 812.648466][T22970] create_pit_timer: 1 callbacks suppressed [ 812.648489][T22970] kvm: requested 97219 ns i8254 timer period limited to 200000 ns [ 812.668521][T22970] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 812.677924][T22970] kvm: requested 46095 ns i8254 timer period limited to 200000 ns [ 812.686048][T22970] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 812.755322][T22970] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 812.797689][T22970] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 812.831688][T22970] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 812.857440][T22970] kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 812.898838][T22970] kvm: requested 140800 ns i8254 timer period limited to 200000 ns [ 812.937911][T22970] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 813.298789][T22984] vlan4: entered promiscuous mode [ 813.315016][T22984] bridge0: entered promiscuous mode [ 813.376346][T21610] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 813.435775][ T29] audit: type=1326 audit(1779318917.859:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22990 comm="syz.6.5525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082999ce59 code=0x7ffc0000 [ 813.520913][ T29] audit: type=1326 audit(1779318917.869:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22990 comm="syz.6.5525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082999ce59 code=0x7ffc0000 [ 813.597253][T21610] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 813.623332][T21610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.652344][ T29] audit: type=1326 audit(1779318917.899:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22990 comm="syz.6.5525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082999ce59 code=0x7ffc0000 [ 813.692594][T21610] usb 4-1: Product: syz [ 813.711368][T21610] usb 4-1: Manufacturer: syz [ 813.722083][T21610] usb 4-1: SerialNumber: syz [ 813.766425][ T29] audit: type=1326 audit(1779318917.899:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22990 comm="syz.6.5525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f082999ce59 code=0x7ffc0000 [ 813.857201][ T29] audit: type=1326 audit(1779318917.899:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22990 comm="syz.6.5525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082999ce59 code=0x7ffc0000 [ 813.966331][ T29] audit: type=1326 audit(1779318917.939:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22990 comm="syz.6.5525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f082995d68e code=0x7ffc0000 [ 814.043442][ T29] audit: type=1326 audit(1779318917.949:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22990 comm="syz.6.5525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f082995d68e code=0x7ffc0000 [ 814.142472][ T29] audit: type=1326 audit(1779318917.949:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22990 comm="syz.6.5525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f082995d68e code=0x7ffc0000 [ 814.190379][T21610] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 814.227945][T21610] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 814.263266][ T29] audit: type=1326 audit(1779318917.949:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22990 comm="syz.6.5525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f082995d68e code=0x7ffc0000 [ 814.342704][ T29] audit: type=1326 audit(1779318917.979:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22990 comm="syz.6.5525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f082995d68e code=0x7ffc0000 [ 814.376450][T23006] binder: 23005:23006 ioctl c0306201 200000000440 returned -14 [ 814.694555][T23008] syzkaller0: entered promiscuous mode [ 814.724170][T23008] syzkaller0: entered allmulticast mode [ 815.284333][T18243] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 815.434367][T18243] usb 7-1: Using ep0 maxpacket: 32 [ 815.448008][T18243] usb 7-1: config index 0 descriptor too short (expected 3659, got 75) [ 815.458870][ T5726] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 815.478888][T18243] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.517281][T18243] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 815.538223][T18243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.562064][T18243] usb 7-1: Product: syz [ 815.579300][T18243] usb 7-1: Manufacturer: syz [ 815.593956][T18243] usb 7-1: SerialNumber: syz [ 815.624598][T18243] usb 7-1: config 0 descriptor?? [ 815.652477][T18243] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 815.662760][ T5726] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 815.700769][ T5726] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 815.737132][ T5726] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 815.757935][ T5726] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 815.782301][ T5726] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 815.836337][ T5726] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 815.886140][ T5726] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 815.904100][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 815.939909][ T5726] usb 1-1: Product: syz [ 815.946923][T21610] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 815.960173][ T5726] usb 1-1: Manufacturer: syz [ 815.990275][T23017] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 815.999742][T21610] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 816.016553][ T5726] cdc_wdm 1-1:1.0: skipping garbage [ 816.033896][ T5726] cdc_wdm 1-1:1.0: skipping garbage [ 816.049682][T21610] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 816.101950][T21610] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 816.132463][ T5726] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 816.143627][T21610] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 816.144388][ T5726] cdc_wdm 1-1:1.0: Unknown control protocol [ 816.214190][T21610] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 816.249002][T21610] usb 4-1: USB disconnect, device number 66 [ 816.332376][ C0] wdm_int_callback: 26 callbacks suppressed [ 816.332408][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 816.344963][ C0] wdm_int_callback: 26 callbacks suppressed [ 816.344985][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 816.357246][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 816.363876][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 816.370963][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 816.377606][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 816.384457][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 816.391090][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 816.398341][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 816.404982][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 816.411449][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 816.418094][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 816.426630][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 816.433279][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 816.441549][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 816.448170][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 816.454496][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 816.461122][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 816.467995][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 816.474616][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 816.673019][T21610] usb 1-1: USB disconnect, device number 98 [ 816.673050][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 816.689357][T23017] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 816.822822][T23033] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5538'. [ 817.032528][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5540'. [ 817.075421][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5540'. [ 817.375213][T21610] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 817.557018][T21610] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.567789][T21610] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 817.577092][T21610] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 817.613509][T21610] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.628582][T21610] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.645717][T21610] usb 10-1: Product: syz [ 817.654333][T21610] usb 10-1: Manufacturer: syz [ 817.664312][T21610] usb 10-1: SerialNumber: syz [ 817.698881][T21610] cdc_mbim 10-1:1.0: skipping garbage [ 817.714273][T21610] usb 10-1: selecting invalid altsetting 1 [ 817.897563][T21610] cdc_mbim 10-1:1.0: bind() failure [ 817.936494][T21610] usb 10-1: USB disconnect, device number 29 [ 818.112560][T18243] gspca_sunplus: reg_r err -71 [ 818.125655][T18243] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 818.152894][T18243] usb 7-1: USB disconnect, device number 26 [ 818.315870][T23060] vivid-001: disconnect [ 818.331395][T23059] vivid-001: reconnect [ 818.655557][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 818.655577][ T29] audit: type=1804 audit(1779318923.089:1899): pid=23064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.5549" name="/newroot/395/file1" dev="fuse" ino=1 res=1 errno=0 [ 819.556965][T23088] kvm_pr_unimpl_wrmsr: 2 callbacks suppressed [ 819.556988][T23088] kvm_intel: kvm [23086]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3 [ 819.587905][T23088] kvm_intel: kvm [23086]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 819.598234][T23088] kvm_intel: kvm [23086]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 819.616359][T23088] kvm_intel: kvm [23086]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 819.654960][T23088] kvm_intel: kvm [23086]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 819.675216][T23088] kvm_intel: kvm [23086]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 819.699988][T23088] kvm_intel: kvm [23086]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 819.731431][T23088] kvm_intel: kvm [23086]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 819.775866][T23088] kvm_intel: kvm [23086]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 819.818609][T23088] kvm_intel: kvm [23086]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 819.845912][T23107] syzkaller0: entered promiscuous mode [ 819.891192][T23107] syzkaller0: entered allmulticast mode [ 820.028091][T23110] syzkaller0: entered promiscuous mode [ 820.033960][T23110] syzkaller0: entered allmulticast mode [ 820.164149][T21610] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 820.377914][T21610] usb 1-1: config 0 has no interfaces? [ 820.387153][T21610] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 820.399546][T21610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.456373][T21610] usb 1-1: config 0 descriptor?? [ 820.747829][T21604] usb 1-1: USB disconnect, device number 99 [ 821.271692][T23147] netlink: 'syz.3.5578': attribute type 1 has an invalid length. [ 821.346422][T23151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5578'. [ 821.402913][T23147] bond4: entered promiscuous mode [ 821.412069][T23147] 8021q: adding VLAN 0 to HW filter on device bond4 [ 821.444493][T23151] bond4: entered allmulticast mode [ 821.567484][T23147] bond4: (slave bridge3): making interface the new active one [ 821.602276][T23147] bridge3: entered promiscuous mode [ 821.629929][T23147] bridge3: entered allmulticast mode [ 821.670656][T23147] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 821.914141][T21610] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 822.004441][T23170] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 822.027594][ T29] audit: type=1326 audit(1779318926.449:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.3.5583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84b9ce59 code=0x7ffc0000 [ 822.057056][T23172] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 822.104475][T21610] usb 7-1: Using ep0 maxpacket: 16 [ 822.112399][T21610] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 822.135902][ T29] audit: type=1326 audit(1779318926.489:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.3.5583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84b9ce59 code=0x7ffc0000 [ 822.161004][T23172] SET target dimension over the limit! [ 822.168321][T21610] usb 7-1: config 0 interface 0 has no altsetting 0 [ 822.181431][ T29] audit: type=1326 audit(1779318926.489:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.3.5583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84b9ce59 code=0x7ffc0000 [ 822.186896][T23170] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 822.213075][T21610] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 822.226037][T21610] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.260117][T21610] usb 7-1: Product: syz [ 822.265812][ T29] audit: type=1326 audit(1779318926.489:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.3.5583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fea84b9ce59 code=0x7ffc0000 [ 822.293739][T21610] usb 7-1: Manufacturer: syz [ 822.300303][T21610] usb 7-1: SerialNumber: syz [ 822.335069][T21610] usb 7-1: config 0 descriptor?? [ 822.351646][ T29] audit: type=1326 audit(1779318926.529:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.3.5583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea84b5d68e code=0x7ffc0000 [ 822.377676][ T29] audit: type=1326 audit(1779318926.539:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.3.5583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea84b5d68e code=0x7ffc0000 [ 822.473235][ T29] audit: type=1326 audit(1779318926.539:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.3.5583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea84b5d68e code=0x7ffc0000 [ 822.560449][ T29] audit: type=1326 audit(1779318926.559:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.3.5583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea84b5d68e code=0x7ffc0000 [ 822.586743][T21610] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input100 [ 822.682840][ T29] audit: type=1326 audit(1779318926.559:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.3.5583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea84b5d68e code=0x7ffc0000 [ 822.926724][T21610] rc_core: IR keymap rc-imon-pad not found [ 822.962694][T21610] Registered IR keymap rc-empty [ 822.994375][T21610] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 823.025767][T21610] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 823.134378][T21610] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 823.222705][T21610] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input101 [ 823.339379][T23158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.361409][T21610] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:27> initialized [ 823.387041][T23158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.781688][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 823.786875][T18243] usb 7-1: USB disconnect, device number 27 [ 824.496672][T23219] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 824.575965][T23222] syzkaller0: entered promiscuous mode [ 824.581590][T23222] syzkaller0: entered allmulticast mode [ 824.832877][T21610] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 825.012259][T23238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5605'. [ 825.021258][T21610] usb 9-1: Using ep0 maxpacket: 32 [ 825.040711][T21610] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 825.049244][T21610] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 825.070809][T21610] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 825.081576][T21610] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 825.091612][T21610] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 825.101377][T21610] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 825.117933][T21610] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 825.127518][T21610] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.139105][T21610] usb 9-1: config 0 descriptor?? [ 825.386103][T21610] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 825.616665][ C0] usblp0: nonzero read bulk status received: -71 [ 825.623682][T18243] usb 9-1: USB disconnect, device number 23 [ 826.257084][T18243] usblp0: removed [ 827.924934][T23252] tipc: Failed to remove unknown binding: 66,0,0/0:1179389570/1179389571 [ 827.925418][T23252] tipc: Failed to remove unknown binding: 66,0,0/0:1179389570/1179389571 [ 827.925464][T23252] tipc: Failed to remove unknown binding: 66,0,0/0:1179389570/1179389571 [ 828.183876][T23228] syzkaller0: entered promiscuous mode [ 828.203038][T23228] syzkaller0: entered allmulticast mode [ 828.316065][T23238] hsr_slave_0 (unregistering): left promiscuous mode [ 828.555036][T23264] binder_alloc: 23263: pid 23263 spamming oneway? 1 buffers allocated for a total size of 4096 [ 828.678349][T23271] binder: BINDER_SET_CONTEXT_MGR already set [ 828.692155][T23271] binder: 23270:23271 ioctl 4018620d 200000001000 returned -16 [ 828.799883][T23269] syzkaller0: entered promiscuous mode [ 828.805716][T23269] syzkaller0: entered allmulticast mode [ 830.109685][ T5726] IPVS: starting estimator thread 0... [ 830.214559][T23301] IPVS: using max 28 ests per chain, 67200 per kthread [ 830.854353][ T5726] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 831.004144][ T5726] usb 1-1: Using ep0 maxpacket: 8 [ 831.012742][ T5726] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 831.026224][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 831.036716][ T5726] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 831.046074][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.054170][ T5726] usb 1-1: Product: syz [ 831.058502][ T5726] usb 1-1: Manufacturer: syz [ 831.063143][ T5726] usb 1-1: SerialNumber: syz [ 831.125217][ T5726] usb 1-1: config 0 descriptor?? [ 831.143721][ T5726] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 831.392677][ T5726] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 831.401546][ T5726] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 831.412835][ T5726] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 831.630883][ T5726] usb 1-1: USB disconnect, device number 100 [ 832.252371][T18243] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 832.415553][T18243] usb 10-1: Using ep0 maxpacket: 32 [ 832.431896][T18243] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 832.456567][T18243] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.472988][T18243] usb 10-1: Product: syz [ 832.483263][T18243] usb 10-1: Manufacturer: syz [ 832.504428][T18243] usb 10-1: SerialNumber: syz [ 832.524529][T18243] usb 10-1: config 0 descriptor?? [ 832.548693][T18243] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 833.732928][T23326] tipc: Enabling of bearer rejected, failed to enable media [ 834.054875][T23343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.269309][T23352] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5642'. [ 834.810797][T18243] gspca_ov534_9: sccb_write failed [ 835.011416][T18243] gspca_ov534_9: reg_w failed -71 [ 835.027034][T23368] tipc: Cannot configure node identity twice [ 835.274168][T18243] gspca_ov534_9: Unknown sensor 0000 [ 835.274266][T18243] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 835.308122][T18243] usb 10-1: USB disconnect, device number 30 [ 835.516364][T23372] syzkaller1: entered promiscuous mode [ 835.535978][T23372] syzkaller1: entered allmulticast mode [ 835.791840][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 835.791860][ T29] audit: type=1800 audit(1779318940.219:1976): pid=23375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5651" name="/" dev="fuse" ino=1 res=0 errno=0 [ 836.334317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 836.434195][ T5726] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 836.465976][T18243] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 836.624605][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 836.646555][T18243] usb 1-1: Using ep0 maxpacket: 16 [ 836.661969][ T5726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.684757][T18243] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 836.697282][ T5726] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 836.710552][T18243] usb 1-1: config 0 has no interface number 0 [ 836.741647][T18243] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 836.757638][ T5726] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 836.798381][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 836.808756][T18243] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 836.843162][ T5726] usb 4-1: SerialNumber: syz [ 836.869307][T18243] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 836.896869][T18243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.918301][T18243] usb 1-1: Product: syz [ 836.935129][T18243] usb 1-1: Manufacturer: syz [ 836.962136][T18243] usb 1-1: SerialNumber: syz [ 836.999781][T18243] usb 1-1: config 0 descriptor?? [ 837.027396][T23384] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 837.078230][T23384] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 837.126152][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5653'. [ 837.181855][ T9] usb 4-1: USB disconnect, device number 67 [ 837.348565][T23384] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 837.384661][T23384] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 838.128722][ T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 838.322257][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 838.346976][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.371547][ T9] usb 4-1: Product: syz [ 838.380514][ T9] usb 4-1: Manufacturer: syz [ 838.388816][ T9] usb 4-1: SerialNumber: syz [ 838.423641][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 838.460601][ T5761] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 838.526416][T21604] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 838.721288][T21604] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 838.755171][T21604] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.782745][T21604] usb 7-1: Product: syz [ 838.802581][T21604] usb 7-1: Manufacturer: syz [ 838.822925][T21604] usb 7-1: SerialNumber: syz [ 838.845570][T21604] usb 7-1: config 0 descriptor?? [ 839.093119][T18243] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 839.124724][T21604] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 839.241092][T23418] kvm: pic: non byte write [ 839.545839][ T5761] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 839.561750][T18243] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 839.581875][ T5761] ath9k_htc: Failed to initialize the device [ 839.701632][T18243] asix 1-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 839.736438][T18243] asix 1-1:0.251: probe with driver asix failed with error -5 [ 839.795972][T18243] usb 1-1: USB disconnect, device number 101 [ 839.919300][ T5761] usb 4-1: ath9k_htc: USB layer deinitialized [ 840.144359][T23425] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 840.159014][ T9] usb 4-1: USB disconnect, device number 68 [ 840.585152][T21604] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 840.601260][T21604] usb 7-1: USB disconnect, device number 28 [ 840.614339][ T5725] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 840.810719][ T5725] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 840.844520][ T5725] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.873052][ T5725] usb 10-1: Product: syz [ 840.887798][ T5725] usb 10-1: Manufacturer: syz [ 840.907888][ T5725] usb 10-1: SerialNumber: syz [ 840.943886][ T5725] usb 10-1: config 0 descriptor?? [ 841.205993][ T5725] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 842.644113][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 842.818481][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 842.850292][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.878752][ T5725] usb 10-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 842.906404][ T9] usb 4-1: Product: syz [ 842.911175][ T5725] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 842.924806][ T9] usb 4-1: Manufacturer: syz [ 842.934737][ T9] usb 4-1: SerialNumber: syz [ 842.942971][ T5725] usb 10-1: media controller created [ 842.963875][T23472] syzkaller0: entered promiscuous mode [ 842.971458][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 842.982481][T23472] syzkaller0: entered allmulticast mode [ 843.052401][ T5725] dvb_usb_rtl28xxu 10-1:0.0: unknown tuner MT2266 [ 843.113031][ T5725] usb 10-1: USB disconnect, device number 31 [ 843.361577][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 843.408314][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 843.750647][T23480] syzkaller0: entered promiscuous mode [ 843.757213][T23480] syzkaller0: entered allmulticast mode [ 843.794906][T23478] kvm: pic: non byte write [ 845.255918][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 845.295451][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 845.352275][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 845.370411][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 845.411521][ T9] usb 4-1: USB disconnect, device number 69 [ 845.608839][T23524] syzkaller0: entered promiscuous mode [ 845.614750][T23524] syzkaller0: entered allmulticast mode [ 847.736505][T23552] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 847.994233][ T5725] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 848.144172][ T5725] usb 1-1: Using ep0 maxpacket: 32 [ 848.152114][ T5725] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 848.161837][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.180403][ T5725] usb 1-1: config 0 descriptor?? [ 848.198855][ T5725] gspca_main: sunplus-2.14.0 probing 041e:400b [ 849.217490][ T5725] gspca_sunplus: reg_r err -71 [ 849.233788][ T5725] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 849.246369][ T5725] usb 1-1: USB disconnect, device number 102 [ 849.808820][ T29] audit: type=1326 audit(1779318954.229:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.0.5706" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6359ce59 code=0x7ffc0000 [ 849.860077][ T29] audit: type=1326 audit(1779318954.229:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.0.5706" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6359ce59 code=0x7ffc0000 [ 849.910145][ T29] audit: type=1326 audit(1779318954.229:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.0.5706" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6359ce59 code=0x7ffc0000 [ 849.938504][ T29] audit: type=1326 audit(1779318954.229:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.0.5706" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0c6359ce59 code=0x7ffc0000 [ 849.973857][ T29] audit: type=1326 audit(1779318954.289:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.0.5706" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c6355d68e code=0x7ffc0000 [ 850.034322][ T29] audit: type=1326 audit(1779318954.289:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.0.5706" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c6355d68e code=0x7ffc0000 [ 850.074604][ T29] audit: type=1326 audit(1779318954.289:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.0.5706" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c6355d68e code=0x7ffc0000 [ 850.099147][ T29] audit: type=1326 audit(1779318954.329:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.0.5706" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c6355d68e code=0x7ffc0000 [ 850.133243][ T29] audit: type=1326 audit(1779318954.329:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.0.5706" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c6355d68e code=0x7ffc0000 [ 850.165161][ T29] audit: type=1326 audit(1779318954.329:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23553 comm="syz.0.5706" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c6355d68e code=0x7ffc0000 [ 850.411477][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5708'. [ 850.810788][T23537] syzkaller0: entered promiscuous mode [ 850.818338][T23537] syzkaller0: entered allmulticast mode [ 850.847380][T23550] syzkaller1: entered promiscuous mode [ 850.866810][T23550] syzkaller1: entered allmulticast mode [ 851.754668][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 851.914115][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 851.927148][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 851.946593][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.972162][ T24] usb 4-1: config 0 descriptor?? [ 851.997712][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 853.621835][T23610] tipc: Enabled bearer , priority 0 [ 853.636255][T23610] syzkaller0: entered promiscuous mode [ 853.647198][T23610] syzkaller0: entered allmulticast mode [ 853.751922][T23612] tipc: Resetting bearer [ 853.846670][T23609] tipc: Resetting bearer [ 853.933307][T23609] tipc: Disabling bearer [ 854.075296][T23614] syzkaller0: entered promiscuous mode [ 854.088753][T23614] syzkaller0: entered allmulticast mode [ 854.463007][ T24] gspca_sonixj: reg_w1 err -71 [ 854.472055][ T5725] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 854.488969][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 854.528954][ T24] usb 4-1: USB disconnect, device number 70 [ 854.544707][T23627] syzkaller0: entered promiscuous mode [ 854.551268][T23627] syzkaller0: entered allmulticast mode [ 854.655273][ T5725] usb 10-1: Using ep0 maxpacket: 32 [ 854.686034][ T5725] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 854.701037][ T5725] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 854.712525][ T5725] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 854.721133][ T5725] usb 10-1: Product: syz [ 854.725874][ T5725] usb 10-1: Manufacturer: syz [ 854.730620][ T5725] usb 10-1: SerialNumber: syz [ 854.748906][ T5725] usb 10-1: config 0 descriptor?? [ 854.761607][T23620] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 854.857326][T23634] syzkaller0: entered promiscuous mode [ 854.872206][T23634] syzkaller0: entered allmulticast mode [ 854.889043][T23636] syzkaller0: entered promiscuous mode [ 854.908912][T23636] syzkaller0: entered allmulticast mode [ 855.343713][T23645] kvm: pic: non byte read [ 855.363258][T23645] kvm: pic: non byte read [ 857.047525][T23677] syzkaller0: entered promiscuous mode [ 857.058787][T23677] syzkaller0: entered allmulticast mode [ 857.084286][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 857.208550][ T5761] usb 10-1: USB disconnect, device number 32 [ 857.280990][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 857.298332][ T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 857.319273][ T9] usb 1-1: config 0 has no interface number 0 [ 857.327659][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 857.350999][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 857.379343][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 857.402159][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.422120][ T9] usb 1-1: Product: syz [ 857.431285][ T9] usb 1-1: Manufacturer: syz [ 857.442468][ T9] usb 1-1: SerialNumber: syz [ 857.469956][ T9] usb 1-1: config 0 descriptor?? [ 857.484549][T23686] [ 857.486925][T23686] ===================================================== [ 857.492059][T23672] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 857.493877][T23686] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 857.508476][T23686] syzkaller #0 Tainted: G L [ 857.514473][T23686] ----------------------------------------------------- [ 857.521423][T23686] syz.8.5751/23686 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 857.529180][T23686] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 857.537863][T23686] [ 857.537863][T23686] and this task is already holding: [ 857.544856][T23672] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 857.545255][T23686] ffff88802c852a20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 857.561018][T23686] which would create a new lock dependency: [ 857.566980][T23686] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 857.574626][T23686] [ 857.574626][T23686] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 857.584099][T23686] (kbd_event_lock){..-.}-{3:3} [ 857.584130][T23686] [ 857.584130][T23686] ... which became SOFTIRQ-irq-safe at: [ 857.596694][T23686] lock_acquire+0x106/0x350 [ 857.601305][T23686] _raw_spin_lock+0x2e/0x40 [ 857.605928][T23686] kbd_event+0xd7/0x42f0 [ 857.610274][T23686] input_handle_events_default+0xd4/0x1a0 [ 857.616094][T23686] input_pass_values+0x288/0x890 [ 857.621141][T23686] input_event_dispose+0x3e5/0x6b0 [ 857.626369][T23686] input_inject_event+0x1dc/0x330 [ 857.631505][T23686] kd_sound_helper+0x101/0x210 [ 857.636390][T23686] input_handler_for_each_handle+0x101/0x1c0 [ 857.642498][T23686] call_timer_fn+0x192/0x5e0 [ 857.647184][T23686] __run_timer_base+0x652/0x8b0 [ 857.652137][T23686] run_timer_softirq+0xb7/0x170 [ 857.657097][T23686] handle_softirqs+0x22a/0x840 [ 857.661968][T23686] __irq_exit_rcu+0xca/0x220 [ 857.666681][T23686] irq_exit_rcu+0x9/0x30 [ 857.671031][T23686] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 857.676778][T23686] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 857.682859][T23686] queue_work_on+0x162/0x1d0 [ 857.687548][T23686] soft_cursor+0xb1e/0xd80 [ 857.692089][T23686] bit_cursor+0x11a9/0x1990 [ 857.696702][T23686] hide_cursor+0xd8/0x490 [ 857.701149][T23686] do_con_write+0x1ba/0x58f0 [ 857.705842][T23686] con_put_char+0x82/0xc0 [ 857.710281][T23686] tty_put_char+0xce/0x160 [ 857.714808][T23686] do_output_char+0x6ac/0x970 [ 857.719590][T23686] n_tty_write+0xe0b/0x1220 [ 857.724216][T23686] file_tty_write+0x558/0xa10 [ 857.729003][T23686] vfs_write+0x61d/0xb90 [ 857.733356][T23686] ksys_write+0x150/0x270 [ 857.737785][T23686] do_syscall_64+0x15f/0xf80 [ 857.742489][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.748494][T23686] [ 857.748494][T23686] to a SOFTIRQ-irq-unsafe lock: [ 857.755524][T23686] (tasklist_lock){.+.+}-{3:3} [ 857.755550][T23686] [ 857.755550][T23686] ... which became SOFTIRQ-irq-unsafe at: [ 857.768205][T23686] ... [ 857.768212][T23686] lock_acquire+0x106/0x350 [ 857.775453][T23686] _raw_read_lock+0x36/0x50 [ 857.780070][T23686] __do_wait+0xde/0x740 [ 857.784322][T23686] do_wait+0x1e7/0x510 [ 857.788502][T23686] kernel_wait+0xd6/0x1c0 [ 857.792939][T23686] call_usermodehelper_exec_work+0xbe/0x230 [ 857.798929][T23686] process_scheduled_works+0xb5d/0x1860 [ 857.804567][T23686] worker_thread+0xa53/0xfc0 [ 857.809252][T23686] kthread+0x389/0x470 [ 857.813433][T23686] ret_from_fork+0x514/0xb70 [ 857.818134][T23686] ret_from_fork_asm+0x1a/0x30 [ 857.822999][T23686] [ 857.822999][T23686] other info that might help us debug this: [ 857.822999][T23686] [ 857.833232][T23686] Chain exists of: [ 857.833232][T23686] kbd_event_lock --> &f_owner->lock --> tasklist_lock [ 857.833232][T23686] [ 857.845952][T23686] Possible interrupt unsafe locking scenario: [ 857.845952][T23686] [ 857.854289][T23686] CPU0 CPU1 [ 857.859665][T23686] ---- ---- [ 857.865036][T23686] lock(tasklist_lock); [ 857.869291][T23686] local_irq_disable(); [ 857.876071][T23686] lock(kbd_event_lock); [ 857.882944][T23686] lock(&f_owner->lock); [ 857.889805][T23686] [ 857.893276][T23686] lock(kbd_event_lock); [ 857.897802][T23686] [ 857.897802][T23686] *** DEADLOCK *** [ 857.897802][T23686] [ 857.905954][T23686] 6 locks held by syz.8.5751/23686: [ 857.911162][T23686] #0: ffff88807b43e410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 857.920346][T23686] #1: ffffffff8eb03e30 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4e1/0x1ea0 [ 857.929539][T23686] #2: ffff8880375f34e8 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4eb/0x1ea0 [ 857.939085][T23686] #3: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 857.948188][T23686] #4: ffff888076e6ade0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 857.957350][T23686] #5: ffff88802c852a20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 857.966428][T23686] [ 857.966428][T23686] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 857.976834][T23686] -> (kbd_event_lock){..-.}-{3:3} { [ 857.982323][T23686] IN-SOFTIRQ-W at: [ 857.986584][T23686] lock_acquire+0x106/0x350 [ 857.993292][T23686] _raw_spin_lock+0x2e/0x40 [ 858.000009][T23686] kbd_event+0xd7/0x42f0 [ 858.006442][T23686] input_handle_events_default+0xd4/0x1a0 [ 858.014351][T23686] input_pass_values+0x288/0x890 [ 858.021495][T23686] input_event_dispose+0x3e5/0x6b0 [ 858.028824][T23686] input_inject_event+0x1dc/0x330 [ 858.036077][T23686] kd_sound_helper+0x101/0x210 [ 858.043083][T23686] input_handler_for_each_handle+0x101/0x1c0 [ 858.051352][T23686] call_timer_fn+0x192/0x5e0 [ 858.058141][T23686] __run_timer_base+0x652/0x8b0 [ 858.065171][T23686] run_timer_softirq+0xb7/0x170 [ 858.072215][T23686] handle_softirqs+0x22a/0x840 [ 858.079182][T23686] __irq_exit_rcu+0xca/0x220 [ 858.085959][T23686] irq_exit_rcu+0x9/0x30 [ 858.092399][T23686] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 858.100263][T23686] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 858.108448][T23686] queue_work_on+0x162/0x1d0 [ 858.115247][T23686] soft_cursor+0xb1e/0xd80 [ 858.121867][T23686] bit_cursor+0x11a9/0x1990 [ 858.128573][T23686] hide_cursor+0xd8/0x490 [ 858.135091][T23686] do_con_write+0x1ba/0x58f0 [ 858.141879][T23686] con_put_char+0x82/0xc0 [ 858.148424][T23686] tty_put_char+0xce/0x160 [ 858.155033][T23686] do_output_char+0x6ac/0x970 [ 858.161904][T23686] n_tty_write+0xe0b/0x1220 [ 858.168603][T23686] file_tty_write+0x558/0xa10 [ 858.175488][T23686] vfs_write+0x61d/0xb90 [ 858.181919][T23686] ksys_write+0x150/0x270 [ 858.188447][T23686] do_syscall_64+0x15f/0xf80 [ 858.195270][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.203369][T23686] INITIAL USE at: [ 858.207556][T23686] lock_acquire+0x106/0x350 [ 858.214169][T23686] _raw_spin_lock_irqsave+0x40/0x60 [ 858.221482][T23686] vt_reset_unicode+0x2b/0x160 [ 858.228344][T23686] reset_vc+0x68/0x1b0 [ 858.234516][T23686] vc_init+0x70/0x4a0 [ 858.240603][T23686] con_init+0x377/0x6a0 [ 858.246865][T23686] console_init+0x10b/0x4a0 [ 858.253475][T23686] start_kernel+0x230/0x3e0 [ 858.260078][T23686] x86_64_start_reservations+0x24/0x30 [ 858.267665][T23686] x86_64_start_kernel+0x143/0x1c0 [ 858.274892][T23686] common_startup_64+0x13e/0x147 [ 858.281947][T23686] } [ 858.284761][T23686] ... key at: [] kbd_event_lock+0x18/0xa0 [ 858.292850][T23686] -> (&tty->flow.lock){....}-{3:3} { [ 858.298365][T23686] INITIAL USE at: [ 858.302470][T23686] lock_acquire+0x106/0x350 [ 858.308901][T23686] _raw_spin_lock_irqsave+0x40/0x60 [ 858.316032][T23686] start_tty+0x1b/0x50 [ 858.322033][T23686] n_tty_set_termios+0xa7c/0x10a0 [ 858.329020][T23686] tty_set_termios+0xdb3/0x1800 [ 858.335803][T23686] set_termios+0x566/0x710 [ 858.342188][T23686] tty_mode_ioctl+0x4a6/0x7d0 [ 858.348828][T23686] tty_ioctl+0x9c5/0xde0 [ 858.355037][T23686] __se_sys_ioctl+0xfc/0x170 [ 858.361567][T23686] do_syscall_64+0x15f/0xf80 [ 858.368101][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.375933][T23686] } [ 858.378624][T23686] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 858.387501][T23686] ... acquired at: [ 858.391494][T23686] _raw_spin_lock_irqsave+0x40/0x60 [ 858.396893][T23686] stop_tty+0x2f/0x140 [ 858.401164][T23686] kbd_event+0x2f91/0x42f0 [ 858.405777][T23686] input_handle_events_default+0xd4/0x1a0 [ 858.411702][T23686] input_pass_values+0x288/0x890 [ 858.416856][T23686] input_event_dispose+0x330/0x6b0 [ 858.422158][T23686] input_inject_event+0x1dc/0x330 [ 858.427404][T23686] evdev_write+0x325/0x4c0 [ 858.432011][T23686] vfs_write+0x29a/0xb90 [ 858.436465][T23686] ksys_write+0x150/0x270 [ 858.441010][T23686] do_syscall_64+0x15f/0xf80 [ 858.445804][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.451897][T23686] [ 858.454242][T23686] -> (&new->fa_lock){....}-{3:3} { [ 858.459486][T23686] INITIAL USE at: [ 858.463476][T23686] lock_acquire+0x106/0x350 [ 858.469730][T23686] _raw_write_lock_irq+0x3d/0x50 [ 858.476427][T23686] fasync_remove_entry+0xf1/0x1c0 [ 858.483211][T23686] lease_modify+0x4f7/0x6c0 [ 858.489486][T23686] locks_remove_file+0x5f0/0xf70 [ 858.496187][T23686] __fput+0x3ae/0xa60 [ 858.501925][T23686] fput_close_sync+0x11f/0x240 [ 858.508449][T23686] __x64_sys_close+0x7e/0x110 [ 858.514892][T23686] do_syscall_64+0x15f/0xf80 [ 858.521252][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.528898][T23686] INITIAL READ USE at: [ 858.533344][T23686] lock_acquire+0x106/0x350 [ 858.540040][T23686] _raw_read_lock_irqsave+0x48/0x60 [ 858.547429][T23686] kill_fasync+0x199/0x4d0 [ 858.554040][T23686] anon_pipe_read+0xf7e/0x10a0 [ 858.561006][T23686] do_iter_readv_writev+0x619/0x8c0 [ 858.568405][T23686] vfs_readv+0x288/0x840 [ 858.574831][T23686] do_readv+0x154/0x2e0 [ 858.581181][T23686] do_syscall_64+0x15f/0xf80 [ 858.587982][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.596062][T23686] } [ 858.598655][T23686] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 858.607426][T23686] ... acquired at: [ 858.611325][T23686] _raw_read_lock_irqsave+0x48/0x60 [ 858.616723][T23686] kill_fasync+0x199/0x4d0 [ 858.621334][T23686] __start_tty+0x18c/0x220 [ 858.625946][T23686] tty_send_xchar+0x1cf/0x4b0 [ 858.630825][T23686] tty_ioctl+0x9c5/0xde0 [ 858.635280][T23686] __se_sys_ioctl+0xfc/0x170 [ 858.640081][T23686] do_syscall_64+0x15f/0xf80 [ 858.644873][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.650962][T23686] [ 858.653302][T23686] -> (&f_owner->lock){....}-{3:3} { [ 858.658542][T23686] INITIAL USE at: [ 858.662447][T23686] lock_acquire+0x106/0x350 [ 858.668529][T23686] _raw_write_lock_irq+0x3d/0x50 [ 858.675049][T23686] __f_setown+0x67/0x370 [ 858.680890][T23686] generic_setlease+0xacf/0xfd0 [ 858.687326][T23686] do_fcntl_add_lease+0x35e/0x470 [ 858.693927][T23686] fcntl_setlease+0x123/0x180 [ 858.700195][T23686] do_fcntl+0x8b3/0x1a20 [ 858.706029][T23686] __se_sys_fcntl+0xc8/0x150 [ 858.712205][T23686] do_syscall_64+0x15f/0xf80 [ 858.718378][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.725853][T23686] INITIAL READ USE at: [ 858.730203][T23686] lock_acquire+0x106/0x350 [ 858.736728][T23686] _raw_read_lock_irqsave+0x48/0x60 [ 858.743947][T23686] send_sigio+0x38/0x370 [ 858.750224][T23686] kill_fasync+0x24d/0x4d0 [ 858.756657][T23686] lease_break_callback+0x26/0x30 [ 858.763698][T23686] __break_lease+0x81f/0x1ea0 [ 858.770395][T23686] do_dentry_open+0x1010/0x14e0 [ 858.777263][T23686] vfs_open+0x3b/0x340 [ 858.783350][T23686] path_openat+0x2e08/0x3860 [ 858.789957][T23686] do_file_open+0x23e/0x4a0 [ 858.796472][T23686] do_sys_openat2+0x113/0x200 [ 858.803159][T23686] __x64_sys_openat+0x138/0x170 [ 858.810017][T23686] do_syscall_64+0x15f/0xf80 [ 858.816619][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.824523][T23686] } [ 858.827032][T23686] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 858.835896][T23686] ... acquired at: [ 858.839708][T23686] _raw_read_lock_irqsave+0x48/0x60 [ 858.845098][T23686] send_sigio+0x38/0x370 [ 858.849533][T23686] kill_fasync+0x24d/0x4d0 [ 858.854146][T23686] lease_break_callback+0x26/0x30 [ 858.859358][T23686] __break_lease+0x81f/0x1ea0 [ 858.864236][T23686] do_dentry_open+0x1010/0x14e0 [ 858.869281][T23686] vfs_open+0x3b/0x340 [ 858.873556][T23686] path_openat+0x2e08/0x3860 [ 858.878341][T23686] do_file_open+0x23e/0x4a0 [ 858.883030][T23686] do_sys_openat2+0x113/0x200 [ 858.887902][T23686] __x64_sys_openat+0x138/0x170 [ 858.892941][T23686] do_syscall_64+0x15f/0xf80 [ 858.897713][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.903790][T23686] [ 858.906122][T23686] [ 858.906122][T23686] the dependencies between the lock to be acquired [ 858.906133][T23686] and SOFTIRQ-irq-unsafe lock: [ 858.919675][T23686] -> (tasklist_lock){.+.+}-{3:3} { [ 858.924926][T23686] HARDIRQ-ON-R at: [ 858.928934][T23686] lock_acquire+0x106/0x350 [ 858.935119][T23686] _raw_read_lock+0x36/0x50 [ 858.941301][T23686] __do_wait+0xde/0x740 [ 858.947138][T23686] do_wait+0x1e7/0x510 [ 858.952887][T23686] kernel_wait+0xd6/0x1c0 [ 858.958926][T23686] call_usermodehelper_exec_work+0xbe/0x230 [ 858.966495][T23686] process_scheduled_works+0xb5d/0x1860 [ 858.973724][T23686] worker_thread+0xa53/0xfc0 [ 858.979991][T23686] kthread+0x389/0x470 [ 858.985746][T23686] ret_from_fork+0x514/0xb70 [ 858.992013][T23686] ret_from_fork_asm+0x1a/0x30 [ 858.998454][T23686] SOFTIRQ-ON-R at: [ 859.002447][T23686] lock_acquire+0x106/0x350 [ 859.008629][T23686] _raw_read_lock+0x36/0x50 [ 859.014810][T23686] __do_wait+0xde/0x740 [ 859.020648][T23686] do_wait+0x1e7/0x510 [ 859.026398][T23686] kernel_wait+0xd6/0x1c0 [ 859.032421][T23686] call_usermodehelper_exec_work+0xbe/0x230 [ 859.039997][T23686] process_scheduled_works+0xb5d/0x1860 [ 859.047221][T23686] worker_thread+0xa53/0xfc0 [ 859.053494][T23686] kthread+0x389/0x470 [ 859.059248][T23686] ret_from_fork+0x514/0xb70 [ 859.065515][T23686] ret_from_fork_asm+0x1a/0x30 [ 859.071966][T23686] INITIAL USE at: [ 859.075873][T23686] lock_acquire+0x106/0x350 [ 859.081951][T23686] _raw_write_lock_irq+0x3d/0x50 [ 859.088478][T23686] copy_process+0x2b4c/0x4440 [ 859.094757][T23686] kernel_clone+0x284/0x8f0 [ 859.100841][T23686] user_mode_thread+0x110/0x180 [ 859.107302][T23686] rest_init+0x23/0x300 [ 859.113031][T23686] start_kernel+0x38a/0x3e0 [ 859.119120][T23686] x86_64_start_reservations+0x24/0x30 [ 859.126157][T23686] x86_64_start_kernel+0x143/0x1c0 [ 859.132847][T23686] common_startup_64+0x13e/0x147 [ 859.139364][T23686] INITIAL READ USE at: [ 859.143703][T23686] lock_acquire+0x106/0x350 [ 859.150223][T23686] _raw_read_lock+0x36/0x50 [ 859.156754][T23686] __do_wait+0xde/0x740 [ 859.162936][T23686] do_wait+0x1e7/0x510 [ 859.169025][T23686] kernel_wait+0xd6/0x1c0 [ 859.175374][T23686] call_usermodehelper_exec_work+0xbe/0x230 [ 859.183291][T23686] process_scheduled_works+0xb5d/0x1860 [ 859.190862][T23686] worker_thread+0xa53/0xfc0 [ 859.197478][T23686] kthread+0x389/0x470 [ 859.203574][T23686] ret_from_fork+0x514/0xb70 [ 859.210173][T23686] ret_from_fork_asm+0x1a/0x30 [ 859.216950][T23686] } [ 859.219455][T23686] ... key at: [] tasklist_lock+0x18/0x40 [ 859.227179][T23686] ... acquired at: [ 859.230986][T23686] _raw_read_lock+0x36/0x50 [ 859.235681][T23686] send_sigio+0x101/0x370 [ 859.240229][T23686] kill_fasync+0x24d/0x4d0 [ 859.244857][T23686] lease_break_callback+0x26/0x30 [ 859.250082][T23686] __break_lease+0x81f/0x1ea0 [ 859.254965][T23686] vfs_truncate+0x449/0x540 [ 859.259671][T23686] ksys_truncate+0xf3/0x1c0 [ 859.264478][T23686] __x64_sys_truncate+0x5b/0x70 [ 859.269541][T23686] do_syscall_64+0x15f/0xf80 [ 859.274343][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.280446][T23686] [ 859.282793][T23686] [ 859.282793][T23686] stack backtrace: [ 859.288710][T23686] CPU: 1 UID: 0 PID: 23686 Comm: syz.8.5751 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.288738][T23686] Tainted: [L]=SOFTLOCKUP [ 859.288752][T23686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 859.288764][T23686] Call Trace: [ 859.288772][T23686] [ 859.288780][T23686] dump_stack_lvl+0xe8/0x150 [ 859.288803][T23686] __lock_acquire+0x2a94/0x2cf0 [ 859.288832][T23686] ? send_sigio+0x101/0x370 [ 859.288856][T23686] lock_acquire+0x106/0x350 [ 859.288874][T23686] ? send_sigio+0x101/0x370 [ 859.288899][T23686] ? lock_acquire+0x106/0x350 [ 859.288917][T23686] ? kill_fasync+0x199/0x4d0 [ 859.288945][T23686] _raw_read_lock+0x36/0x50 [ 859.288970][T23686] ? send_sigio+0x101/0x370 [ 859.288993][T23686] send_sigio+0x101/0x370 [ 859.289020][T23686] kill_fasync+0x24d/0x4d0 [ 859.289045][T23686] ? kill_fasync+0x53/0x4d0 [ 859.289071][T23686] lease_break_callback+0x26/0x30 [ 859.289104][T23686] __break_lease+0x81f/0x1ea0 [ 859.289131][T23686] ? lock_acquire+0x106/0x350 [ 859.289151][T23686] ? __pfx___break_lease+0x10/0x10 [ 859.289173][T23686] ? mnt_get_write_access+0x66/0x280 [ 859.289206][T23686] ? mnt_get_write_access+0x213/0x280 [ 859.289234][T23686] ? break_lease+0xfd/0x150 [ 859.289262][T23686] vfs_truncate+0x449/0x540 [ 859.289290][T23686] ? __pfx_vfs_truncate+0x10/0x10 [ 859.289317][T23686] ? do_getname+0x151/0x250 [ 859.289336][T23686] ksys_truncate+0xf3/0x1c0 [ 859.289362][T23686] ? __pfx_ksys_truncate+0x10/0x10 [ 859.289392][T23686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.289410][T23686] __x64_sys_truncate+0x5b/0x70 [ 859.289436][T23686] do_syscall_64+0x15f/0xf80 [ 859.289464][T23686] ? trace_irq_disable+0x3b/0x140 [ 859.289492][T23686] ? clear_bhb_loop+0x40/0x90 [ 859.289512][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.289529][T23686] RIP: 0033:0x7fc07f79ce59 [ 859.289546][T23686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.289563][T23686] RSP: 002b:00007fc0806bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 859.289582][T23686] RAX: ffffffffffffffda RBX: 00007fc07fa16090 RCX: 00007fc07f79ce59 [ 859.289596][T23686] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000080 [ 859.289607][T23686] RBP: 00007fc07f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 859.289619][T23686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.289630][T23686] R13: 00007fc07fa16128 R14: 00007fc07fa16090 R15: 00007fc07fb3fa48 [ 859.289650][T23686] [ 859.603461][T23672] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 859.636870][T23672] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 859.859982][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 861.469483][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 861.481661][ T9] asix 1-1:0.34: probe with driver asix failed with error -71 [ 861.494285][ T9] usb 1-1: USB disconnect, device number 103