last executing test programs: 10m22.424417816s ago: executing program 1 (id=2747): socket(0x1000000000000010, 0x80802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xffffffef) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000000), 0x4) r4 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESHEX=r4, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}}, 0x4004810) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000000c0)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r10, &(0x7f0000000600)="6c3b01c0352785418c0b21740f1c1f085a0ce2dc54621a42a6b6c27cc459acc168582a", 0x23) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) 10m19.246658236s ago: executing program 1 (id=2754): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "6c1ca43f8539f3d3a89637f0374c72a964a0193b3e8772c9b700000000005a9cd83fdfb006ac000000000000000000000000ffffffffffffff9700", "24431a1e77a68e174f000000000000000010e200", [0x1f00000000000000]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x40008, 0x2, 0x0, 0x0, 0x10, 0x4, "995e4c8b0ba6f8ed413b1ee5f3a7c862bbf64092868fd6943a428277be3c0fd8c867f86e662e0c2dd39186b32ee0690c16eb180e81ed3e5e2ebe64446497c2fc", "a6fafe5554ac900cc641df63c82e3d2347ef4230f37485c698954b3d8be9b663e59116e54ef137506743aa54d43eeef70999ee41524cf2aef5653e90d68d5ac5", "0286bcec3e402f381e7bfd123ec7d0d13d4c50ed000000000500", [0x0, 0x9]}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) 10m18.488617814s ago: executing program 1 (id=2756): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 10m18.317962555s ago: executing program 1 (id=2757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x3, @local}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="0f00d60f20c035000001000f22c00f20e035040000000f22e00f01cf8fe9209462bfeab1e00b62f300b92b090000b800a00000ba000000000f30c4c2e8f5b46307000000c4e1d16a1136670f00d2", 0x4e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10m17.012738629s ago: executing program 1 (id=2766): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (fail_nth: 1) 10m16.445737813s ago: executing program 1 (id=2769): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 10m15.069023168s ago: executing program 32 (id=2769): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 54.020813654s ago: executing program 3 (id=4908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010000001700000000000a000000000000000000000005001e"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000ffff26bd7000fbd3df2500000000", @ANYRES32=0x0, @ANYBLOB="101a050023000000140012800b0001006272696467650000040002800a000100aaaaaaaaaa370000528de67dd4b7c6bfe9cf2e2cd22b2cf1f5bfa86eccf6195c89ca772cf3202a5cd4482e1988aa1f1e0b6aa679f656dc0546e622ab47fb19bd993e6b50fa61aba9737166eb9da1a2f1"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 53.791790562s ago: executing program 3 (id=4911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x7}, 0x16, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) 44.811486743s ago: executing program 3 (id=4930): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x13, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741ddffc0c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a9e77a68e174f000000000000000010e200"}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000005e00000008000300", @ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x20005000}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) 44.600500124s ago: executing program 3 (id=4933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(0x0, &(0x7f00000002c0)={0x0}) close(r1) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001380)={{0x12, 0x1, 0xe38693bc18896dfd, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x7bf, 0x6, 0x6, 0x1}}}}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x34, &(0x7f0000001400)={0x5, 0xf, 0x34, 0x2, [@generic={0xb, 0x10, 0x3, "8d1d701621c9a746"}, @generic={0x24, 0x10, 0xa, "96a51215d872e486e0ba3528f170dd0f51a1629ee35c46b2a0772caf01cf4f22dd"}]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) umount2(&(0x7f0000000140)='./file0\x00', 0xa) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3fa25a6f", @ANYRES16=r3, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 41.316572135s ago: executing program 3 (id=4942): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f9404010014000000000000000006000002000000020000000000000048000000000000000000000001"], 0x80}}], 0x1, 0x4000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278a, 0x4, 0x3, 0x7, 0x5, 0x10, '\x00', 0x28, 0x80000001}) syz_io_uring_setup(0xc93, &(0x7f0000000140)={0x0, 0x7374, 0x4, 0x3, 0xffdfffff}, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f733e1a00000000", 0xe, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}]}, 0x2c}}, 0x20008840) 40.929109946s ago: executing program 3 (id=4945): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="0000080000000800392cdaab4a73642c218ab26134d572733cf39c43999e61fc428ec1cfbed914c4283dfd6592b9f8a9c0ef5f73e2d4d6d8a9582ad15900d654b95f33f5dccb25f9ba70913da9169fe5b2ab20b602a3f428e7be1b18f6a6c0c3128c3a6517ff02a23de826cc4a0fa4f28d78dd43d1b823d6cf4b1acd4846ab03b16103db3522053dabd1d2d6d4c100dd00"/156], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000008405accd7c746ba05110dc510d8a4bc250727571b6bc1dd8a3b56c59f127a4aa6e65854c35143e5465e05dfd9c38403d9284c92e946fb8a12f1b3736e9f9d761722d35bdb1cd9fdae76ab096d7dc621946d89c7a874a6fbadcfc7be01a80563a9b63e67df0bc409e1f6310477798f2a5f72634a1dd8d51626ede9eaff0657372329fa515e62711e31a880c44dc82e2a71185bbcb04"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) r1 = syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000780)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x6, 0xe, 0x5, 0x10, 0x3}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x1, [{0x12, &(0x7f0000000740)=@string={0x12, 0x3, "052b05cadb5dd903ec4e355c0738d74a"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x5}}, 0x0, 0x0, 0x9, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x4000) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xd1}, 0x20048010) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500)=@gcm_256={{0x304}, "9b1c8f744f83c8aa", "d4da2fa791ea123f6e5674844fb11d8824a6961ea18b67a56ee7f749c76c4f7d", "cd5cde00", "640b90897b65a883"}, 0x38) socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_io_uring_setup(0x124a, &(0x7f00000000c0)={0x0, 0x2170, 0x1, 0x3, 0x1c5}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) r8 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r8, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r8, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/182, 0xb6}, 0x11}], 0x1, 0x10002, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000540)={0x8, "e52d857ac76d4ec7bab25a40a9afdd7677e229dc71ae8ee5a508e3169bed5d40"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}) 37.800094408s ago: executing program 4 (id=4951): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x1000000, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}) 37.565997868s ago: executing program 4 (id=4957): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000000c0)={0x10002, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffd, @broadcast}}}, 0x108) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8850) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x2, 0x4070bd28}, 0x384}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280), 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0xfffffffffffffe90, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1a80000003"], 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1}, 0x4000000) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) 37.318857747s ago: executing program 4 (id=4959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="080005", @ANYRES32=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 37.196569209s ago: executing program 4 (id=4961): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x780200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) pipe2$9p(0x0, 0x80800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x3}], 0x1, 0x0, 0x0) pread64(r5, &(0x7f0000000480)=""/209, 0xd1, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r7, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 35.245114647s ago: executing program 5 (id=4964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x7}, 0x16, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) 33.602481643s ago: executing program 4 (id=4970): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000380)) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e21, 0xbec, @private2, 0x80000001}, {0xa, 0x4e21, 0x8, @private2, 0x7}, 0x1, {[0x1, 0x1, 0x4, 0x1, 0x7, 0x3, 0x0, 0x30dd]}}, 0x5c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004850}, 0x4044014) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000040)='[:::\x00', 0x0) 30.040159439s ago: executing program 4 (id=4973): r0 = memfd_secret(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1e, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x204081, 0x20) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, 0x0) r4 = dup2(r2, r1) write$P9_RWRITE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 29.977828312s ago: executing program 5 (id=4974): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="010000001d0000003249000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0xffff, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000840)='o', &(0x7f0000001640)=""/4096}, 0x20) 29.848659834s ago: executing program 5 (id=4975): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@int=0x6, 0x4) 29.784133176s ago: executing program 5 (id=4977): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0x13, 0x8, 0x9, 0x2c, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0xbe, 0x0, 0x0, 0x70bd29, 0x3505}, @sadb_ident={0x2, 0xb, 0x1, 0x0, 0x8}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x6e6bb0, 0xb70, {0x6, 0x3c, 0x16, 0x5, 0x0, 0x6, 0x0, @in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x25}}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_x_sec_ctx={0x1a, 0x18, 0x9, 0x0, 0xc1, "6bf82664af03a829dc2d57d21d9af77d394b4a8c20eccab174748e882db21438f2f695cdae1cc5ae0dffbfc6563c42163339507e4b0eed528b45d0b88434b9e4c4fd017dc73844298d8d1822a7baef788373c12525d89951e1960098c139efd34c305c910c61f480fe8c623866b35af1d0c39ecb9bcb153a88c759b103f21688a242de3b15ce3756e67ed36fc87f9aec1a7a27bfcf33479e0fc518ff1b1ea3b0a3d0480f6501e40ae9266cebf0deab33040cd1ea7cf80299812c536a7ea0982d81"}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x160}, 0x1, 0x0, 0x7000000}, 0x4048000) 29.677904068s ago: executing program 5 (id=4979): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xee01) open_tree(r5, &(0x7f00000000c0)='./file0\x00', 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 26.196408862s ago: executing program 5 (id=4985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x7}, 0x16, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) 25.548321541s ago: executing program 2 (id=4986): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/68, 0x44}], 0x1, 0x80000000, 0xfff, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r4, 0x0, 0x0) semop(r4, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r4, 0x1, 0xf, 0x0) semop(r4, &(0x7f0000000000)=[{0x0, 0x400, 0x800}, {0x3, 0x6, 0x1000}, {0x0, 0xff}], 0x3) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f00000004c0)=[@exit_looper], 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) sendmmsg$inet6(r3, &(0x7f0000000080)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040884) 25.506252893s ago: executing program 33 (id=4945): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="0000080000000800392cdaab4a73642c218ab26134d572733cf39c43999e61fc428ec1cfbed914c4283dfd6592b9f8a9c0ef5f73e2d4d6d8a9582ad15900d654b95f33f5dccb25f9ba70913da9169fe5b2ab20b602a3f428e7be1b18f6a6c0c3128c3a6517ff02a23de826cc4a0fa4f28d78dd43d1b823d6cf4b1acd4846ab03b16103db3522053dabd1d2d6d4c100dd00"/156], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000008405accd7c746ba05110dc510d8a4bc250727571b6bc1dd8a3b56c59f127a4aa6e65854c35143e5465e05dfd9c38403d9284c92e946fb8a12f1b3736e9f9d761722d35bdb1cd9fdae76ab096d7dc621946d89c7a874a6fbadcfc7be01a80563a9b63e67df0bc409e1f6310477798f2a5f72634a1dd8d51626ede9eaff0657372329fa515e62711e31a880c44dc82e2a71185bbcb04"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) r1 = syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000780)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x6, 0xe, 0x5, 0x10, 0x3}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x1, [{0x12, &(0x7f0000000740)=@string={0x12, 0x3, "052b05cadb5dd903ec4e355c0738d74a"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x5}}, 0x0, 0x0, 0x9, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x4000) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xd1}, 0x20048010) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500)=@gcm_256={{0x304}, "9b1c8f744f83c8aa", "d4da2fa791ea123f6e5674844fb11d8824a6961ea18b67a56ee7f749c76c4f7d", "cd5cde00", "640b90897b65a883"}, 0x38) socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_io_uring_setup(0x124a, &(0x7f00000000c0)={0x0, 0x2170, 0x1, 0x3, 0x1c5}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) r8 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r8, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r8, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/182, 0xb6}, 0x11}], 0x1, 0x10002, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000540)={0x8, "e52d857ac76d4ec7bab25a40a9afdd7677e229dc71ae8ee5a508e3169bed5d40"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}) 24.403695607s ago: executing program 2 (id=4989): r0 = syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001"], 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000080)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x8, 0x0, 0x0}}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="008f7e6f70a5da0955a015806a8e0e28268462986b4b11244b3dfccd54e398a300631e3a8b153fff9d0000000000000000005a9be33d36d52e41f6e48058a14a24b311256bff47e36691e9090853e9602a1485e9eb4620df8c6ee27e004566a4625ebed87ff80ea21ecae9a18a96b8dc6fb4b48322d9eb7948833521c3c42129c8985938ee037c68b8ed6b2bcf49de50d0da927e34684cf2adf1da875ab715b3d8e7f22181fa8624b7cdcef1a51437c77d40d06b03ed4b2569e8cb982abb26ebf7e9b6102ec38022a074f044adcd6bebc3b41ab135c5a8c6c55fdee75da4", 0xde}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="455f1ac145bdd051ce88887e90c18aaca895830b875e2e8a48da0a9f55c9862f1bfd8cbe47eed9ac45cab761270170c2b9515d711721fd116043587a02d98bc7827eb390ff", 0x45}, {&(0x7f0000000240)="d28b8029305d4e05943050885cc85ba15a0058b80f80a6e0da7fad2d0d450ce591b6fcbf9caa1f60bb609a", 0x2b}, {&(0x7f0000000980)="fcc5f917af63b43a663476fe0e6c60f6cc6899a31f2d7585897f3c4504990d00d00646266c8e89c9ab84cf20516c40584db96568c724335893728c039a37297ba6911bd9c6b28816b82c687407ad98b1e0f84a957c9b4fb7dda5d0a4d0c0cfd45e4b2ac8ace5c5610b7a86b27764c76645d78c27f927ee6ba1c6b80ad04827e4776d4d517400669be778e4e7a25f29d75ebc7cc2ae922f4354e915d2", 0x9c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000b40)="32d9d78d7948880e123664a2b92dee88ffe7db3a7ba244eca8efdf19928f08832440cba6820d141789b40dd1b19d3e7cb4c02bb2d318fc26397171b1b830ac5094d6046ea96d0b1b20dc7ad55fb0b774aff3ac7bcbe253322fe98423e2", 0x5d}, {&(0x7f0000000bc0)="1fc69239929d4fcebe31545095c8829e25d1de4e7075c2c64a7cb64db8c89ad14468d9a6a7ac078b5f93c6c94010fbbee2252188d9aa923d3ae9b74928b6da139ae01142b77732ba65474f0ca2ae1928aa09851b6824b4a0461801325942b4f88375c5ee5cd498c22b58f669cb0852e921beb55ecf633089b6452d90cfee2ba643452452bc2687a3eda5", 0x8a}, {&(0x7f0000000c80)="4ef2b3aec7eaa0c6ccb9453f7254b1f2856ad32e1219b40fb2f94f50e07758f9d911c7a23773e58e494fce357ec5ed6b65b2bda951531b93c85ca9546f14127226029487be77f522299f30f04f6796e86ac9a7f0bc6ec363b31046bbb50dc06995d57df56597d3", 0x67}, {&(0x7f0000000d00)="36e4cdc13f376a2b3e26275874e111bae0592811738e84ec2794f00fba1d090b9c1f3331bbec7c406785c7300826cf313f89f90ee5910cb1b0a320ae0d10743ce82d17e14b3867487e530db9a27aadfe430cd81f085c9891b3134fc1c92cbcb6c8ec109900fe428aea186dfcc93599c73e0402acbc87e5270210e460a2a419aba30b64d67db8e054f3ff21393165c4c30fa1aaa45d3bc78c7ffa3e0ec2d831c21691d2471187d7a69ec7b20e114406cf79cc70f20b9f688a2c", 0xb9}, {&(0x7f0000000dc0)="e921ff52d11c884e31a54ec97ff5a43d7b73bcff3c44b6cd0d39372949b4eec86dbda5ff05bce92d43a46a742f19b3e947e96d516121ee0686cb4599cd5444d554541960d1909e2a5d52f4f30856cdf2101ccb16cb6d496f7b6d25f32a250162d31626fd62cf3941a40296071068609791c7322094512c", 0x77}, {&(0x7f0000000e40)="2bf9f528b179032122f56bb0faaac7153e5d4686a88f577b1c8f5dc4a7ec40fbf0dbf87200888584cedf2e2d91fb022dcb22b179a58953677b8a75f941602fc980e1b0bbf7bb6d3ff85f12babb4f658422b66b6ae98b084fab", 0x59}, {&(0x7f0000001700)="d12d168db39e371821a913dbf702fef858f4cc1416da275f0b81c53a0aec275de0deeac0a1ff50a84cce7735f8a71691cda34c4e53610ea2cd0bd3bdb9c17e2913f2193af838ea3eaa020ddfa346b58171479dfc64de6d8fd94085944449edab8f199491971e23f60454af14a3b391d376a0f80c3618c8e06ef8e4074d69b0b208f6243664bc963fc9b2815a6b994b493237dbe120e39c7c791df59c73d052d2e34bb4cb052b8fcfdf55babb676211e4b8c3ee4d23d3e9b29674ddb73168b121bebb145deabb53ac1e7bd25f3453732a85e723ab272e011fcb746a963eae39563f048a8619f3b7a2895fa75c", 0xec}], 0x7}}], 0x3, 0x400c404) sendmmsg$inet6(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x3}, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x3, 0xfb, 0x9, @scatter={0x3, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/197, 0xc5}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000001100)=""/4096, 0x1000}]}, &(0x7f0000000200)="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", &(0x7f0000000340)=""/202, 0x1, 0x23, 0x1, &(0x7f0000000180)}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000500)={0x6, r0, 0x2}) r4 = openat$cgroup_ro(r3, &(0x7f00000004c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[]) syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) unshare(0x400) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001"], 0x48) (async) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000080)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x8, 0x0, 0x0}}, 0x10) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="008f7e6f70a5da0955a015806a8e0e28268462986b4b11244b3dfccd54e398a300631e3a8b153fff9d0000000000000000005a9be33d36d52e41f6e48058a14a24b311256bff47e36691e9090853e9602a1485e9eb4620df8c6ee27e004566a4625ebed87ff80ea21ecae9a18a96b8dc6fb4b48322d9eb7948833521c3c42129c8985938ee037c68b8ed6b2bcf49de50d0da927e34684cf2adf1da875ab715b3d8e7f22181fa8624b7cdcef1a51437c77d40d06b03ed4b2569e8cb982abb26ebf7e9b6102ec38022a074f044adcd6bebc3b41ab135c5a8c6c55fdee75da4", 0xde}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="455f1ac145bdd051ce88887e90c18aaca895830b875e2e8a48da0a9f55c9862f1bfd8cbe47eed9ac45cab761270170c2b9515d711721fd116043587a02d98bc7827eb390ff", 0x45}, {&(0x7f0000000240)="d28b8029305d4e05943050885cc85ba15a0058b80f80a6e0da7fad2d0d450ce591b6fcbf9caa1f60bb609a", 0x2b}, {&(0x7f0000000980)="fcc5f917af63b43a663476fe0e6c60f6cc6899a31f2d7585897f3c4504990d00d00646266c8e89c9ab84cf20516c40584db96568c724335893728c039a37297ba6911bd9c6b28816b82c687407ad98b1e0f84a957c9b4fb7dda5d0a4d0c0cfd45e4b2ac8ace5c5610b7a86b27764c76645d78c27f927ee6ba1c6b80ad04827e4776d4d517400669be778e4e7a25f29d75ebc7cc2ae922f4354e915d2", 0x9c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000b40)="32d9d78d7948880e123664a2b92dee88ffe7db3a7ba244eca8efdf19928f08832440cba6820d141789b40dd1b19d3e7cb4c02bb2d318fc26397171b1b830ac5094d6046ea96d0b1b20dc7ad55fb0b774aff3ac7bcbe253322fe98423e2", 0x5d}, {&(0x7f0000000bc0)="1fc69239929d4fcebe31545095c8829e25d1de4e7075c2c64a7cb64db8c89ad14468d9a6a7ac078b5f93c6c94010fbbee2252188d9aa923d3ae9b74928b6da139ae01142b77732ba65474f0ca2ae1928aa09851b6824b4a0461801325942b4f88375c5ee5cd498c22b58f669cb0852e921beb55ecf633089b6452d90cfee2ba643452452bc2687a3eda5", 0x8a}, {&(0x7f0000000c80)="4ef2b3aec7eaa0c6ccb9453f7254b1f2856ad32e1219b40fb2f94f50e07758f9d911c7a23773e58e494fce357ec5ed6b65b2bda951531b93c85ca9546f14127226029487be77f522299f30f04f6796e86ac9a7f0bc6ec363b31046bbb50dc06995d57df56597d3", 0x67}, {&(0x7f0000000d00)="36e4cdc13f376a2b3e26275874e111bae0592811738e84ec2794f00fba1d090b9c1f3331bbec7c406785c7300826cf313f89f90ee5910cb1b0a320ae0d10743ce82d17e14b3867487e530db9a27aadfe430cd81f085c9891b3134fc1c92cbcb6c8ec109900fe428aea186dfcc93599c73e0402acbc87e5270210e460a2a419aba30b64d67db8e054f3ff21393165c4c30fa1aaa45d3bc78c7ffa3e0ec2d831c21691d2471187d7a69ec7b20e114406cf79cc70f20b9f688a2c", 0xb9}, {&(0x7f0000000dc0)="e921ff52d11c884e31a54ec97ff5a43d7b73bcff3c44b6cd0d39372949b4eec86dbda5ff05bce92d43a46a742f19b3e947e96d516121ee0686cb4599cd5444d554541960d1909e2a5d52f4f30856cdf2101ccb16cb6d496f7b6d25f32a250162d31626fd62cf3941a40296071068609791c7322094512c", 0x77}, {&(0x7f0000000e40)="2bf9f528b179032122f56bb0faaac7153e5d4686a88f577b1c8f5dc4a7ec40fbf0dbf87200888584cedf2e2d91fb022dcb22b179a58953677b8a75f941602fc980e1b0bbf7bb6d3ff85f12babb4f658422b66b6ae98b084fab", 0x59}, {&(0x7f0000001700)="d12d168db39e371821a913dbf702fef858f4cc1416da275f0b81c53a0aec275de0deeac0a1ff50a84cce7735f8a71691cda34c4e53610ea2cd0bd3bdb9c17e2913f2193af838ea3eaa020ddfa346b58171479dfc64de6d8fd94085944449edab8f199491971e23f60454af14a3b391d376a0f80c3618c8e06ef8e4074d69b0b208f6243664bc963fc9b2815a6b994b493237dbe120e39c7c791df59c73d052d2e34bb4cb052b8fcfdf55babb676211e4b8c3ee4d23d3e9b29674ddb73168b121bebb145deabb53ac1e7bd25f3453732a85e723ab272e011fcb746a963eae39563f048a8619f3b7a2895fa75c", 0xec}], 0x7}}], 0x3, 0x400c404) (async) sendmmsg$inet6(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x3}, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x3, 0xfb, 0x9, @scatter={0x3, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/197, 0xc5}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000001100)=""/4096, 0x1000}]}, &(0x7f0000000200)="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", &(0x7f0000000340)=""/202, 0x1, 0x23, 0x1, &(0x7f0000000180)}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000500)={0x6, r0, 0x2}) (async) openat$cgroup_ro(r3, &(0x7f00000004c0)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[]) (async) 23.776492943s ago: executing program 2 (id=4990): set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000080), &(0x7f0000002400)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1011000, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@audit}, {@euid_eq={'euid', 0x3d, 0xee00}}]}}, 0x1, 0x0, &(0x7f0000000340)="7193b3faba058ebc20a2cfba54a4b259fb6095b4cfe3975971a79074f9f81b7ade16648df3948afa356207acfa358e26b3bd97d82372be8a1aabda6c85acf2538434fdea9bb046a4a637946b6e4b47aadb44397e1926b4580f7bfe15f6652d9d6b81a5c1d526909a014eb365ce1e2fe826780982fd07341e088315a1ea1d35b19d2df7211584a620f8087737f56f5f24df080c3184406ac3e382d1b717dfa8af1191d01e2193c160aba8a59ac45fa58cb6") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000400)='./file0\x00', 0x6) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) 22.412715004s ago: executing program 2 (id=4991): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) ftruncate(r5, 0x2007ffd) sendfile(r3, r4, 0x0, 0x1000a3) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x123041) close(r0) 22.21077544s ago: executing program 2 (id=4992): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xf}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000097ffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 21.995896415s ago: executing program 2 (id=4993): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x2000, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d40000001c0016801800018014000b51bb52e2695f033319f3c7055800060000"], 0x58}}, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e1c, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001f00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x400, 0xb, 0x2, 0x10002, 0x1, 0x2000, 0x7}, 0x0) r3 = syz_io_uring_setup(0x5afb, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240"], 0xbc}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r8, @ANYBLOB="cf0400"/18, @ANYRES32=r9, @ANYBLOB="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"], 0x124}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r3, 0x5d62, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {}, {}, {0x0, 0x1ec}, 0x0, 0x0, 0xa, 0x2}, [@tfcpad={0x8, 0x16, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe(&(0x7f0000000000)) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r11, @ANYBLOB="040001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) pipe(&(0x7f0000000080)) 16.964706621s ago: executing program 0 (id=4996): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = userfaultfd(0x80001) fstat(r2, &(0x7f0000000240)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000380)={0x10000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0xfffffffffffffd11) 15.726682652s ago: executing program 0 (id=4997): syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x129103) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f00000000c0)={0x5}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000440)={r3, &(0x7f0000000340)=""/160}) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/136, 0x88}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x4aa, &(0x7f0000000100)={0x0, 0xbbcd, 0x8000, 0xffffffd, 0x13b}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r4, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0xfeaa, 0x0, &(0x7f0000000140)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) ioctl$SG_GET_COMMAND_Q(r9, 0x2270, &(0x7f0000000240)) 15.664229201s ago: executing program 0 (id=4998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000001000e0000001000000000000000000000000e00000010000000000000000000000000000000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/101], 0xb8}}, 0x0) 15.580678491s ago: executing program 0 (id=4999): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd2b, 0x80, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) 15.576532315s ago: executing program 0 (id=5000): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x59, "6179c9889c5c9e6a130f0097810f6dcb3ea178db7c7dd1da7093c3df4268e3304e6b39e3d659b44bb6644ab36e8e83a20b34982b6496e2b6b5cc1d14e3477256be622a5ca7fbb48b596a0846ed05cd1af0268e73e0ea7fc52f"}, &(0x7f0000000080)=0x61) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x8006, 0x80000000, 0xfff, r1}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@int=0x6, 0x4) 15.508339693s ago: executing program 0 (id=5001): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x2a1, 0x20000085) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x12f, 0x208, 0x800000, 0xfffffffe}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) syz_usbip_server_init(0x5) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000000000002000000"], 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) write$sequencer(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="81040808f9ffffff94"], 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') getdents(r5, 0xfffffffffffffffd, 0x3b) r6 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) io_setup(0x9, &(0x7f0000000100)) 15.00784493s ago: executing program 34 (id=4973): r0 = memfd_secret(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1e, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x204081, 0x20) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, 0x0) r4 = dup2(r2, r1) write$P9_RWRITE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 10.510995995s ago: executing program 35 (id=4985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x7}, 0x16, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) 6.505934102s ago: executing program 36 (id=4993): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x2000, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d40000001c0016801800018014000b51bb52e2695f033319f3c7055800060000"], 0x58}}, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e1c, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001f00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x400, 0xb, 0x2, 0x10002, 0x1, 0x2000, 0x7}, 0x0) r3 = syz_io_uring_setup(0x5afb, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240"], 0xbc}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r8, @ANYBLOB="cf0400"/18, @ANYRES32=r9, @ANYBLOB="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"], 0x124}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r3, 0x5d62, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {}, {}, {0x0, 0x1ec}, 0x0, 0x0, 0xa, 0x2}, [@tfcpad={0x8, 0x16, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe(&(0x7f0000000000)) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r11, @ANYBLOB="040001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) pipe(&(0x7f0000000080)) 0s ago: executing program 37 (id=5001): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x2a1, 0x20000085) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x12f, 0x208, 0x800000, 0xfffffffe}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) syz_usbip_server_init(0x5) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000000000002000000"], 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) write$sequencer(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="81040808f9ffffff94"], 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') getdents(r5, 0xfffffffffffffffd, 0x3b) r6 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) io_setup(0x9, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 3.728287][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 1183.733630][ T30] audit: type=1326 audit(1753999660.172:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21476 comm="syz.4.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8958eb69 code=0x7ffc0000 [ 1183.756851][ T30] audit: type=1326 audit(1753999660.172:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21476 comm="syz.4.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2f8958d57c code=0x7ffc0000 [ 1183.780034][ T44] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 1183.789851][ T44] usb 3-1: config 8 has no interface number 0 [ 1183.796565][ T30] audit: type=1326 audit(1753999660.172:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21476 comm="syz.4.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8958eb69 code=0x7ffc0000 [ 1183.825585][ T44] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1183.838545][ T30] audit: type=1326 audit(1753999660.172:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21476 comm="syz.4.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8958eb69 code=0x7ffc0000 [ 1183.862352][ T30] audit: type=1326 audit(1753999660.172:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21476 comm="syz.4.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f2f8958eb69 code=0x7ffc0000 [ 1183.867096][ T44] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1183.886022][ T30] audit: type=1326 audit(1753999660.172:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21476 comm="syz.4.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8958eb69 code=0x7ffc0000 [ 1183.921797][ T44] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1183.985570][ T44] usb 3-1: config 8 interface 39 has no altsetting 0 [ 1184.001362][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1184.013437][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.022864][ T44] usb 3-1: Product: syz [ 1184.027506][ T44] usb 3-1: Manufacturer: syz [ 1184.033015][ T44] usb 3-1: SerialNumber: syz [ 1184.677961][ T44] ipheth 3-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 1184.698138][ T44] ipheth 3-1:8.39: Apple iPhone USB Ethernet device attached [ 1184.816320][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1184.883129][T21465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.908050][T21465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.012864][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1185.022243][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.066025][ T5932] usb 3-1: USB disconnect, device number 59 [ 1185.067360][ T24] usb 5-1: config 0 descriptor?? [ 1185.118711][ T24] cp210x 5-1:0.0: cp210x converter detected [ 1185.156598][ T5932] ipheth 3-1:8.39: Apple iPhone USB Ethernet now disconnected [ 1185.519665][ T24] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1185.645343][ T5932] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1185.740864][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1185.837577][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 1185.863646][ T5932] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1185.899748][ T5932] usb 3-1: config 0 has no interface number 0 [ 1185.934505][ T5932] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1185.975743][ T5932] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1185.989137][T21487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.000248][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.030131][ T5932] usb 3-1: Product: syz [ 1186.039205][T21487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.059211][ T5932] usb 3-1: Manufacturer: syz [ 1186.073492][ T5932] usb 3-1: SerialNumber: syz [ 1186.140980][ T5932] usb 3-1: config 0 descriptor?? [ 1186.178968][ T5932] smsc75xx v1.0.0 [ 1186.201683][ T5932] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1186.257718][ T5932] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1186.394334][T21498] netlink: 'syz.2.4342': attribute type 4 has an invalid length. [ 1186.404362][ T5932] usb 5-1: USB disconnect, device number 52 [ 1186.448925][ T5932] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1186.539998][ T5932] cp210x 5-1:0.0: device disconnected [ 1186.893088][T21521] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4347'. [ 1186.914852][T21521] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4347'. [ 1187.209994][T21532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1187.232637][T21531] netlink: 'syz.4.4348': attribute type 3 has an invalid length. [ 1187.290922][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1187.394817][T21539] loop2: detected capacity change from 0 to 7 [ 1187.435026][T21539] Dev loop2: unable to read RDB block 7 [ 1187.481048][T21539] loop2: AHDI p1 p2 p3 [ 1187.503365][T21539] loop2: partition table partially beyond EOD, truncated [ 1187.539716][T21539] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1187.585526][T21539] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1187.982428][T21552] loop7: detected capacity change from 0 to 16384 [ 1188.389126][ T1211] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1188.397950][ T5970] usb 3-1: USB disconnect, device number 60 [ 1188.599226][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1188.610152][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1188.619390][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1188.628847][ C1] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 1188.633127][T21558] loop7: detected capacity change from 16384 to 0 [ 1188.650423][ T1211] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1188.701973][ T1211] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1188.755193][ T1211] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1188.831252][ T1211] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1188.915901][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.096946][ T1211] usb 6-1: Product: syz [ 1189.114572][ T1211] usb 6-1: Manufacturer: syz [ 1189.134783][ T1211] usb 6-1: SerialNumber: syz [ 1189.294702][T21575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.327837][T21575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.379055][ T1211] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1189.855920][T21580] IPv6: sit1: Disabled Multicast RS [ 1190.134123][T21584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.144402][T21584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.170636][T21600] netlink: 'syz.0.4361': attribute type 1 has an invalid length. [ 1191.195223][ T1211] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 1191.335243][ T1211] usb 3-1: device descriptor read/64, error -71 [ 1191.478694][ T24] usb 6-1: USB disconnect, device number 76 [ 1191.536073][ T24] usblp0: removed [ 1191.547873][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1191.547885][ T30] audit: type=1326 audit(1753999668.112:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855d38eb69 code=0x7ffc0000 [ 1191.689537][ T1211] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 1191.742844][ T30] audit: type=1326 audit(1753999668.112:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f855d32ad69 code=0x7ffc0000 [ 1191.866562][ T1211] usb 3-1: device descriptor read/64, error -71 [ 1191.958450][T21608] binder: 21605:21608 ioctl c018937a 200000000000 returned -22 [ 1191.990742][ T1211] usb usb3-port1: attempt power cycle [ 1192.078263][ T30] audit: type=1326 audit(1753999668.112:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f855d32ad69 code=0x7ffc0000 [ 1192.355398][ T1211] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 1192.371181][ T30] audit: type=1326 audit(1753999668.112:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855d38eb69 code=0x7ffc0000 [ 1192.397432][ T1211] usb 3-1: device descriptor read/8, error -71 [ 1192.404230][ T30] audit: type=1326 audit(1753999668.112:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f855d32ad69 code=0x7ffc0000 [ 1192.432221][ T30] audit: type=1326 audit(1753999668.112:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f855d32ad69 code=0x7ffc0000 [ 1192.462577][ T30] audit: type=1326 audit(1753999668.112:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855d38eb69 code=0x7ffc0000 [ 1192.489425][ T30] audit: type=1326 audit(1753999668.112:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f855d32ad69 code=0x7ffc0000 [ 1192.516342][ T30] audit: type=1326 audit(1753999668.112:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f855d32ad69 code=0x7ffc0000 [ 1192.543757][ T30] audit: type=1326 audit(1753999668.112:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f855d32ad69 code=0x7ffc0000 [ 1192.635346][ T1211] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 1192.655923][ T1211] usb 3-1: device descriptor read/8, error -71 [ 1192.671570][T21610] loop6: detected capacity change from 0 to 524288000 [ 1192.720182][T21611] loop6: detected capacity change from 524288000 to 0 [ 1192.729880][T21610] Buffer I/O error on dev loop6, logical block 0, async page read [ 1192.744585][T21610] ldm_validate_partition_table(): Disk read failed. [ 1192.752922][T21610] Dev loop6: unable to read RDB block 0 [ 1192.765591][ T1211] usb usb3-port1: unable to enumerate USB device [ 1192.807511][T21610] loop6: unable to read partition table [ 1192.832163][T21610] loop6: partition table beyond EOD, truncated [ 1192.892956][T21610] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1194.087317][T21634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4370'. [ 1194.098743][T21635] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1194.424848][T21634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4370'. [ 1194.501538][T21634] bridge0: port 4(vlan2) entered blocking state [ 1194.514686][T21634] bridge0: port 4(vlan2) entered disabled state [ 1194.524566][T21634] vlan2: entered allmulticast mode [ 1194.532599][T21634] bridge0: entered allmulticast mode [ 1194.557025][T21634] vlan2: left allmulticast mode [ 1194.562054][T21634] bridge0: left allmulticast mode [ 1194.703301][T21644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4372'. [ 1195.584520][T21661] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1195.701826][T21668] FAULT_INJECTION: forcing a failure. [ 1195.701826][T21668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.753216][T21668] CPU: 1 UID: 0 PID: 21668 Comm: syz.4.4380 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1195.753245][T21668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1195.753258][T21668] Call Trace: [ 1195.753268][T21668] [ 1195.753295][T21668] dump_stack_lvl+0x189/0x250 [ 1195.753324][T21668] ? __pfx____ratelimit+0x10/0x10 [ 1195.753352][T21668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1195.753374][T21668] ? __pfx__printk+0x10/0x10 [ 1195.753412][T21668] should_fail_ex+0x414/0x560 [ 1195.753445][T21668] _copy_to_user+0x31/0xb0 [ 1195.753471][T21668] simple_read_from_buffer+0xe1/0x170 [ 1195.753502][T21668] proc_fail_nth_read+0x1b3/0x220 [ 1195.753538][T21668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1195.753574][T21668] ? rw_verify_area+0x258/0x650 [ 1195.753596][T21668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1195.753629][T21668] vfs_read+0x1fd/0x980 [ 1195.753651][T21668] ? fdget_pos+0x247/0x320 [ 1195.753682][T21668] ? __pfx___mutex_lock+0x10/0x10 [ 1195.753709][T21668] ? __pfx_vfs_read+0x10/0x10 [ 1195.753733][T21668] ? __fget_files+0x2a/0x420 [ 1195.753765][T21668] ? __fget_files+0x3a0/0x420 [ 1195.753790][T21668] ? __fget_files+0x2a/0x420 [ 1195.753826][T21668] ksys_read+0x145/0x250 [ 1195.753852][T21668] ? __pfx_ksys_read+0x10/0x10 [ 1195.753885][T21668] ? rcu_is_watching+0x15/0xb0 [ 1195.753918][T21668] ? do_syscall_64+0xbe/0x3b0 [ 1195.753945][T21668] do_syscall_64+0xfa/0x3b0 [ 1195.753967][T21668] ? lockdep_hardirqs_on+0x9c/0x150 [ 1195.753988][T21668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.754014][T21668] ? clear_bhb_loop+0x60/0xb0 [ 1195.754037][T21668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.754056][T21668] RIP: 0033:0x7f2f8958d57c [ 1195.754074][T21668] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1195.754090][T21668] RSP: 002b:00007f2f8a42b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1195.754111][T21668] RAX: ffffffffffffffda RBX: 00007f2f897b5fa0 RCX: 00007f2f8958d57c [ 1195.754126][T21668] RDX: 000000000000000f RSI: 00007f2f8a42b0a0 RDI: 0000000000000004 [ 1195.754138][T21668] RBP: 00007f2f8a42b090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.754150][T21668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.754161][T21668] R13: 0000000000000000 R14: 00007f2f897b5fa0 R15: 00007f2f898dfa28 [ 1195.754191][T21668] [ 1196.306879][T21661] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1196.567377][T21670] vlan2: entered promiscuous mode [ 1198.687668][T21685] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1198.998166][T21691] macsec0: entered promiscuous mode [ 1199.012390][T21691] macvlan1: entered promiscuous mode [ 1199.029424][T21691] macsec0: entered allmulticast mode [ 1199.043682][T21691] macvlan1: entered allmulticast mode [ 1199.073750][T21691] macvlan1: left allmulticast mode [ 1199.079206][T21691] macvlan1: left promiscuous mode [ 1199.669326][ T24] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1199.910529][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1199.950968][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.008424][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.021603][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1200.122054][T21725] netlink: 'syz.3.4394': attribute type 2 has an invalid length. [ 1200.162363][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1200.175052][ T24] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1200.184993][ T24] usb 6-1: Manufacturer: syz [ 1200.204883][ T24] usb 6-1: config 0 descriptor?? [ 1200.561783][ T30] kauditd_printk_skb: 315 callbacks suppressed [ 1200.561806][ T30] audit: type=1326 audit(1753999677.052:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1200.639955][ T24] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 1200.654975][ T30] audit: type=1326 audit(1753999677.052:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1200.691122][ T24] appleir 0003:05AC:8243.0027: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1200.766788][ T30] audit: type=1326 audit(1753999677.052:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1200.789133][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.862002][ T30] audit: type=1326 audit(1753999677.052:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1200.884503][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.979089][ T24] usb 6-1: USB disconnect, device number 77 [ 1201.033408][ T30] audit: type=1326 audit(1753999677.052:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1201.098191][ T30] audit: type=1326 audit(1753999677.052:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1201.125786][ T30] audit: type=1326 audit(1753999677.052:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1201.169068][ T30] audit: type=1326 audit(1753999677.052:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1201.173415][T21728] fido_id[21728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1201.297972][ T30] audit: type=1326 audit(1753999677.052:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1201.354440][ T30] audit: type=1326 audit(1753999677.052:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1201.715519][ T24] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1201.925620][T21741] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1201.939438][T21741] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1202.338013][ T24] usb 6-1: config 0 has no interfaces? [ 1202.351326][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1202.402517][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.458636][ T24] usb 6-1: Product: syz [ 1202.494146][ T24] usb 6-1: Manufacturer: syz [ 1202.543984][ T24] usb 6-1: SerialNumber: syz [ 1202.591551][ T24] usb 6-1: config 0 descriptor?? [ 1202.635519][T21747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.693921][T21747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.965769][T21747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.974826][T21747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.345509][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1203.495418][ T24] usb 3-1: device descriptor read/64, error -71 [ 1203.755295][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1203.826395][T21758] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1203.885381][ T24] usb 3-1: device descriptor read/64, error -71 [ 1204.006103][ T24] usb usb3-port1: attempt power cycle [ 1204.262046][T21760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4405'. [ 1204.365523][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1204.396240][ T24] usb 3-1: device descriptor read/8, error -71 [ 1204.655337][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1204.679255][ T1211] usb 6-1: USB disconnect, device number 78 [ 1204.694655][T21764] kvm: pic: non byte write [ 1204.706207][ T24] usb 3-1: device descriptor read/8, error -71 [ 1204.770236][T21770] netlink: 'syz.5.4409': attribute type 1 has an invalid length. [ 1204.836039][ T24] usb usb3-port1: unable to enumerate USB device [ 1205.641032][T21781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4412'. [ 1205.652393][T21781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4412'. [ 1206.542450][ T5970] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1206.717236][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.733601][ T5970] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1206.764154][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.894992][ T5970] usb 3-1: config 0 descriptor?? [ 1207.933942][ T5970] usbhid 3-1:0.0: can't add hid device: -71 [ 1207.940537][ T5970] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1207.971422][ T5970] usb 3-1: USB disconnect, device number 69 [ 1208.575353][ T5970] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1208.745550][ T5970] usb 3-1: Using ep0 maxpacket: 16 [ 1208.778829][ T5970] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 1208.835357][ T5970] usb 3-1: config 8 has no interface number 0 [ 1208.865118][ T5970] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1208.875631][T21836] loop6: detected capacity change from 0 to 524288000 [ 1208.910073][ T5970] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 1208.916513][T21836] Buffer I/O error on dev loop6, logical block 0, async page read [ 1208.949773][ T5970] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 1024 [ 1208.963617][T21836] Buffer I/O error on dev loop6, logical block 0, async page read [ 1208.975213][ T5970] usb 3-1: config 8 interface 39 has no altsetting 0 [ 1208.993113][ T5970] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1209.002901][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.019475][ T5970] usb 3-1: Product: syz [ 1209.034098][ T5970] usb 3-1: Manufacturer: syz [ 1209.043503][ T5970] usb 3-1: SerialNumber: syz [ 1209.055424][T21840] loop6: detected capacity change from 524288000 to 0 [ 1209.060451][T21836] Buffer I/O error on dev loop6, logical block 0, async page read [ 1209.067874][T21826] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1209.092931][T21836] ldm_validate_partition_table(): Disk read failed. [ 1209.100273][T21836] Dev loop6: unable to read RDB block 0 [ 1209.111593][T21836] loop6: unable to read partition table [ 1209.117858][T21836] loop6: partition table beyond EOD, truncated [ 1209.149849][T21836] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1209.390623][ T5970] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1209.418945][ T5970] ipheth 3-1:8.39: probe with driver ipheth failed with error -71 [ 1209.453901][ T5970] usb 3-1: USB disconnect, device number 70 [ 1209.665438][ T1211] usb 6-1: new low-speed USB device number 79 using dummy_hcd [ 1209.832614][ T1211] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1209.853035][ T1211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.866194][ T1211] usb 6-1: config 0 descriptor?? [ 1210.119900][T21874] netlink: 'syz.4.4438': attribute type 5 has an invalid length. [ 1210.416569][T21884] loop6: detected capacity change from 0 to 524288000 [ 1210.438771][T21884] Buffer I/O error on dev loop6, logical block 0, async page read [ 1210.462319][T21884] Buffer I/O error on dev loop6, logical block 0, async page read [ 1210.496677][T21884] Buffer I/O error on dev loop6, logical block 0, async page read [ 1210.545444][T21885] loop6: detected capacity change from 524288000 to 0 [ 1210.555380][T21884] Buffer I/O error on dev loop6, logical block 0, async page read [ 1210.603611][T21884] ldm_validate_partition_table(): Disk read failed. [ 1210.618756][T21884] Dev loop6: unable to read RDB block 0 [ 1210.624647][T21884] loop6: unable to read partition table [ 1210.633392][T21884] loop6: partition table beyond EOD, truncated [ 1210.646907][T21887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.661940][T21884] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1210.676928][T21887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.115449][ T5964] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1211.149980][T21895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4444'. [ 1211.265493][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 1211.273620][ T5964] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1211.282976][ T5964] usb 5-1: config 152 has an invalid interface number: 136 but max is 0 [ 1211.291490][ T5964] usb 5-1: config 152 has an invalid interface association descriptor of length 5, skipping [ 1211.301140][T21842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.302574][ T5964] usb 5-1: config 152 has no interface number 0 [ 1211.323875][T21842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.325986][ T5964] usb 5-1: config 152 interface 136 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1211.343452][ T5964] usb 5-1: config 152 interface 136 has no altsetting 0 [ 1211.358894][ T5964] usb 5-1: New USB device found, idVendor=067b, idProduct=0000, bcdDevice=44.42 [ 1211.373814][T21900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1211.382283][T21900] batadv_slave_0: entered promiscuous mode [ 1211.391534][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.406510][ T5964] usb 5-1: Product: syz [ 1211.410813][ T5964] usb 5-1: Manufacturer: syz [ 1211.415957][ T5964] usb 5-1: SerialNumber: syz [ 1211.427912][ T5970] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1211.585374][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 1211.594677][ T5970] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1211.633265][ T5970] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1211.652942][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.674992][ T5970] usb 3-1: config 0 descriptor?? [ 1211.694172][ T5970] hub 3-1:0.0: bad descriptor, ignoring hub [ 1211.713271][ T5970] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1211.742843][ T5970] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1211.926530][ T5964] plusb 5-1:152.136: probe with driver plusb failed with error -22 [ 1211.985906][ T5964] usb 5-1: USB disconnect, device number 53 [ 1212.363050][T21912] FAULT_INJECTION: forcing a failure. [ 1212.363050][T21912] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.377561][T21912] CPU: 0 UID: 0 PID: 21912 Comm: syz.0.4448 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1212.377586][T21912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1212.377596][T21912] Call Trace: [ 1212.377602][T21912] [ 1212.377611][T21912] dump_stack_lvl+0x189/0x250 [ 1212.377639][T21912] ? __pfx____ratelimit+0x10/0x10 [ 1212.377672][T21912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1212.377691][T21912] ? __pfx__printk+0x10/0x10 [ 1212.377714][T21912] ? __pfx___might_resched+0x10/0x10 [ 1212.377737][T21912] should_fail_ex+0x414/0x560 [ 1212.377760][T21912] should_failslab+0xa8/0x100 [ 1212.377790][T21912] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1212.377814][T21912] ? __alloc_skb+0x112/0x2d0 [ 1212.377835][T21912] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1212.377854][T21912] __alloc_skb+0x112/0x2d0 [ 1212.377873][T21912] pfkey_sendmsg+0x1dd/0x1090 [ 1212.377918][T21912] ? __pfx___might_resched+0x10/0x10 [ 1212.377946][T21912] ? __lock_acquire+0xab9/0xd20 [ 1212.377977][T21912] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1212.378007][T21912] ? aa_sk_perm+0x81e/0x950 [ 1212.378020][T21912] ? is_bpf_text_address+0x26/0x2b0 [ 1212.378042][T21912] ? __pfx_aa_sk_perm+0x10/0x10 [ 1212.378054][T21912] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1212.378086][T21912] ? aa_sock_msg_perm+0x94/0x160 [ 1212.378109][T21912] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1212.378127][T21912] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1212.378151][T21912] __sock_sendmsg+0x219/0x270 [ 1212.378169][T21912] ____sys_sendmsg+0x505/0x830 [ 1212.378192][T21912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1212.378225][T21912] ? import_iovec+0x74/0xa0 [ 1212.378252][T21912] ___sys_sendmsg+0x21f/0x2a0 [ 1212.378281][T21912] ? __pfx____sys_sendmsg+0x10/0x10 [ 1212.378338][T21912] ? __fget_files+0x2a/0x420 [ 1212.378356][T21912] ? __fget_files+0x3a0/0x420 [ 1212.378391][T21912] __x64_sys_sendmsg+0x19b/0x260 [ 1212.378419][T21912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1212.378455][T21912] ? __pfx_ksys_write+0x10/0x10 [ 1212.378469][T21912] ? rcu_is_watching+0x15/0xb0 [ 1212.378493][T21912] ? do_syscall_64+0xbe/0x3b0 [ 1212.378518][T21912] do_syscall_64+0xfa/0x3b0 [ 1212.378543][T21912] ? lockdep_hardirqs_on+0x9c/0x150 [ 1212.378563][T21912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.378581][T21912] ? clear_bhb_loop+0x60/0xb0 [ 1212.378600][T21912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.378613][T21912] RIP: 0033:0x7f855d38eb69 [ 1212.378625][T21912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.378637][T21912] RSP: 002b:00007f855e1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1212.378653][T21912] RAX: ffffffffffffffda RBX: 00007f855d5b5fa0 RCX: 00007f855d38eb69 [ 1212.378667][T21912] RDX: 0000000004048000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1212.378680][T21912] RBP: 00007f855e1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.378692][T21912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.378703][T21912] R13: 0000000000000000 R14: 00007f855d5b5fa0 R15: 00007f855d6dfa28 [ 1212.378730][T21912] [ 1213.054055][T21917] dvmrp0: entered allmulticast mode [ 1213.093149][ T1211] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1213.111919][ T1211] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1213.148900][ T1211] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1213.193815][ T1211] usb 6-1: USB disconnect, device number 79 [ 1213.735483][ T5970] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1213.908744][ T5970] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1213.925359][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1213.979723][ T5970] usb 5-1: config 0 has no interface number 0 [ 1214.019224][ T5970] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1214.068137][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.185631][ T5964] usb 3-1: USB disconnect, device number 71 [ 1214.185742][ T5970] usb 5-1: config 0 descriptor?? [ 1214.554242][T21938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4452'. [ 1214.686864][T21938] bridge0: entered promiscuous mode [ 1214.696014][T21938] bridge0: port 3(macvlan0) entered blocking state [ 1214.702859][T21938] bridge0: port 3(macvlan0) entered disabled state [ 1214.709707][T21938] macvlan0: entered allmulticast mode [ 1214.715242][T21938] bridge0: entered allmulticast mode [ 1214.786257][T21938] macvlan0: left allmulticast mode [ 1214.803307][T21938] bridge0: left allmulticast mode [ 1214.814189][T21938] bridge0: left promiscuous mode [ 1215.821249][T21970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4463'. [ 1217.020240][T21980] fuse: Bad value for 'fd' [ 1217.039214][ T5970] usb 5-1: string descriptor 0 read error: -71 [ 1217.127454][ T5970] usb 5-1: USB disconnect, device number 54 [ 1218.804161][T22000] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 1218.814903][T22000] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1218.879143][T22000] syz_tun: entered promiscuous mode [ 1218.908293][T22000] macsec0: entered promiscuous mode [ 1218.916777][T22000] macsec0: entered allmulticast mode [ 1218.926762][T22000] syz_tun: entered allmulticast mode [ 1218.985656][T22000] syz_tun: left allmulticast mode [ 1219.002939][T22000] syz_tun: left promiscuous mode [ 1219.364985][T22007] veth1_to_bond: entered allmulticast mode [ 1219.402502][T22004] veth1_to_bond: left allmulticast mode [ 1219.453749][T22010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.460904][T22010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.046141][T22021] sctp: [Deprecated]: syz.2.4480 (pid 22021) Use of int in max_burst socket option deprecated. [ 1220.046141][T22021] Use struct sctp_assoc_value instead [ 1220.305938][T22026] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4482'. [ 1220.364557][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4484'. [ 1220.369225][T22026] unsupported nlmsg_type 40 [ 1220.419392][T22031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.448017][T22031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.517041][T22031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.571260][T22031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.682567][T22037] netlink: 'syz.0.4486': attribute type 8 has an invalid length. [ 1220.710663][T22032] vlan3: entered promiscuous mode [ 1221.205293][ T5964] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1221.421409][T22051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.433145][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 1221.450739][T22051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.468187][ T5964] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 1221.476860][ T5964] usb 5-1: config 0 has no interface number 0 [ 1221.492112][ T5964] usb 5-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1221.560077][ T5964] usb 5-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1221.640987][ T5964] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1221.727738][T22056] loop6: detected capacity change from 0 to 524288000 [ 1221.741998][T20961] Buffer I/O error on dev loop6, logical block 0, async page read [ 1221.752111][ T5964] usb 5-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1221.757105][T20961] Buffer I/O error on dev loop6, logical block 0, async page read [ 1221.809720][ T5964] usb 5-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1221.876098][T22057] loop6: detected capacity change from 524288000 to 0 [ 1221.883033][T20961] Buffer I/O error on dev loop6, logical block 0, async page read [ 1221.891728][T20961] ldm_validate_partition_table(): Disk read failed. [ 1221.899241][T20961] Dev loop6: unable to read RDB block 0 [ 1221.908470][T20961] loop6: unable to read partition table [ 1221.945747][T20961] loop6: partition table beyond EOD, truncated [ 1221.962271][ T5964] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1221.990807][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.124866][T22062] sctp: [Deprecated]: syz.3.4491 (pid 22062) Use of int in maxseg socket option. [ 1222.124866][T22062] Use struct sctp_assoc_value instead [ 1222.410908][ T5964] usb 5-1: config 0 descriptor?? [ 1222.431492][ T5964] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1222.570417][T14579] udevd[14579]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1223.462221][ T5964] usb 5-1: USB disconnect, device number 55 [ 1223.501994][T22074] loop6: detected capacity change from 0 to 524287999 [ 1223.743543][T22076] netlink: 'syz.5.4497': attribute type 4 has an invalid length. [ 1223.810163][T22076] netlink: 'syz.5.4497': attribute type 4 has an invalid length. [ 1223.908131][T22080] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4499'. [ 1223.991978][T22080] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4499'. [ 1224.251109][T22096] netlink: 'syz.3.4503': attribute type 1 has an invalid length. [ 1224.835862][ T5853] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1225.022501][ T5853] usb 5-1: not running at top speed; connect to a high speed hub [ 1225.046069][ T5853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.080612][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1225.151743][ T5853] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1225.192600][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.216924][ T5853] usb 5-1: Product: 虘ꏀ疹꫸㸚魃杚ᨐ컪鏮瓮鿛隋鬏恃㜠⃄뫇䷩튞뵥铑焕痜źᗔ䎜鈥囿⠦លퟒ䵘䪼튁硗灚뽶퓚暃ᰏ禚쮉﹜釕헒氶䚶῟⾗蚵訥䜿仟롯蛈᫼왐剽昮냛跽鼝⬻藰㦥乀⼋ [ 1225.270544][ T5853] usb 5-1: SerialNumber: syz [ 1225.514035][T22112] loop6: detected capacity change from 0 to 524287999 [ 1226.051858][T22115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.099820][T22115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.943034][T22127] sctp: [Deprecated]: syz.3.4511 (pid 22127) Use of int in maxseg socket option. [ 1226.943034][T22127] Use struct sctp_assoc_value instead [ 1227.802035][ T5853] usb 5-1: 0:2 : does not exist [ 1227.908486][ T5853] usb 5-1: USB disconnect, device number 56 [ 1228.403510][T22141] netlink: 'syz.3.4516': attribute type 1 has an invalid length. [ 1228.790534][T22154] binder: 22153:22154 ioctl 4018620d 0 returned -22 [ 1228.804312][T22148] loop6: detected capacity change from 0 to 524287999 [ 1228.818277][T22154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.841572][T22154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.466986][ T5853] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1229.635401][ T5853] usb 5-1: device descriptor read/64, error -71 [ 1229.708672][T22161] sg_write: data in/out 2142/14 bytes for SCSI command 0x1-- guessing data in; [ 1229.708672][T22161] program syz.3.4522 not setting count and/or reply_len properly [ 1229.857592][T22165] tipc: Enabling of bearer rejected, failed to enable media [ 1229.897495][T22165] syzkaller0: entered promiscuous mode [ 1229.904395][T22165] syzkaller0: entered allmulticast mode [ 1229.915535][ T5853] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1230.061364][ T5853] usb 5-1: device descriptor read/64, error -71 [ 1230.310153][ T5853] usb usb5-port1: attempt power cycle [ 1230.685487][ T5853] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1230.736551][ T5853] usb 5-1: device descriptor read/8, error -71 [ 1231.000433][ T5853] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1231.046763][ T5853] usb 5-1: device descriptor read/8, error -71 [ 1231.099346][T22187] loop6: detected capacity change from 0 to 524287999 [ 1231.201430][ T5853] usb usb5-port1: unable to enumerate USB device [ 1231.834616][T22195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4532'. [ 1231.875110][T22195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4532'. [ 1232.210217][T22204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.253316][T22204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.359782][T22209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.403952][T22209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.476637][T22211] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 1233.745392][ T1211] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1233.937497][ T1211] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1233.986670][ T1211] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1234.059691][T22235] loop6: detected capacity change from 0 to 524287999 [ 1234.084572][ T1211] usb 3-1: config 0 has no interface number 0 [ 1234.144574][ T1211] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1234.271402][ T1211] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1234.345204][ T1211] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1234.410344][ T1211] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1234.473925][ T1211] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1234.566789][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1234.605552][ T5853] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1234.609919][ T1211] usb 3-1: Product: syz [ 1234.645289][ T1211] usb 3-1: SerialNumber: syz [ 1234.668144][ T1211] usb 3-1: config 0 descriptor?? [ 1234.875471][ T5853] usb 6-1: Using ep0 maxpacket: 8 [ 1234.922615][ T1211] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input58 [ 1234.986061][ T5853] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 1235.024047][ T5853] usb 6-1: config 2 has no interface number 0 [ 1235.031812][ T5853] usb 6-1: config 2 interface 31 has no altsetting 0 [ 1235.047298][ T5853] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1235.061469][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.079726][ T5853] usb 6-1: Product: syz [ 1235.095197][ T5853] usb 6-1: Manufacturer: syz [ 1235.108846][ T5853] usb 6-1: SerialNumber: syz [ 1235.148542][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1235.171954][ T5195] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 1235.183565][ T5970] usb 3-1: USB disconnect, device number 72 [ 1235.209980][ T5195] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 1235.492025][ T5195] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 1235.695335][ T5853] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 1235.799126][ T5853] usb 6-1: USB disconnect, device number 80 [ 1236.601392][T22268] loop6: detected capacity change from 0 to 524287999 [ 1236.805477][ T5970] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1237.012719][ T5970] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.114493][ T5970] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1237.178172][ T5970] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1237.203408][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.321546][T22280] openvswitch: netlink: Message has 7 unknown bytes. [ 1237.488850][T22269] kAFS: unable to lookup cell '.,' [ 1238.034787][T22285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4558'. [ 1238.088707][T22285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4558'. [ 1238.212531][T22285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.222998][T22285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.840339][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.850676][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.830030][T22305] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1240.164426][ T5853] usb 5-1: USB disconnect, device number 61 [ 1240.718900][T22313] loop6: detected capacity change from 0 to 524287999 [ 1241.510855][T22322] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48424) [ 1241.560788][T22322] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1244.567271][T22355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4575'. [ 1244.665425][T22355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4575'. [ 1244.770943][T22357] loop6: detected capacity change from 0 to 524287999 [ 1245.217980][T22369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.275681][T22369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.300438][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1245.300460][ T30] audit: type=1326 audit(1753999721.852:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.4.4578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f8958eb69 code=0x0 [ 1246.405898][T22385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.612471][T22385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.435363][ T5853] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1247.602819][ T5853] usb 3-1: config 0 has no interfaces? [ 1247.618059][ T5853] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1247.632569][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.669553][ T5853] usb 3-1: Product: syz [ 1247.687405][ T5853] usb 3-1: Manufacturer: syz [ 1247.692750][ T5853] usb 3-1: SerialNumber: syz [ 1247.706664][ T5853] usb 3-1: config 0 descriptor?? [ 1248.113555][T22394] vlan2: entered promiscuous mode [ 1249.098880][T22407] netlink: 'syz.5.4590': attribute type 1 has an invalid length. [ 1249.429576][T22407] bond2: entered promiscuous mode [ 1249.593784][T22407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1250.158604][ T1211] usb 3-1: USB disconnect, device number 73 [ 1250.563498][T22416] loop9: detected capacity change from 0 to 7 [ 1250.611938][T22416] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1250.620005][ T5853] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1250.647488][T22416] loop9: partition table partially beyond EOD, truncated [ 1250.662198][T22416] loop9: p1 size 501170297 extends beyond EOD, truncated [ 1250.797465][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 1250.918606][T22421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4595'. [ 1251.516942][T22434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4598'. [ 1252.093281][T22443] ptrace attach of "./syz-executor exec"[16376] was attempted by "./syz-executor exec"[22443] [ 1253.882721][T22457] loop6: detected capacity change from 0 to 524288000 [ 1253.931852][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1253.944138][T22457] Buffer I/O error on dev loop6, logical block 0, async page read [ 1254.863813][ T5853] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1254.898807][T22457] Buffer I/O error on dev loop6, logical block 0, async page read [ 1254.912915][ T5853] usb 5-1: can't read configurations, error -71 [ 1254.948280][T22457] Buffer I/O error on dev loop6, logical block 0, async page read [ 1255.012759][T22457] Buffer I/O error on dev loop6, logical block 0, async page read [ 1255.215267][T22458] loop6: detected capacity change from 524288000 to 0 [ 1255.223184][T22457] Buffer I/O error on dev loop6, logical block 0, async page read [ 1255.357218][T22457] ldm_validate_partition_table(): Disk read failed. [ 1255.510223][T22457] Dev loop6: unable to read RDB block 0 [ 1255.526245][T22457] loop6: unable to read partition table [ 1255.611356][T22457] loop6: partition table beyond EOD, truncated [ 1255.715449][T22457] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1255.819711][T22454] syz.0.4601 (22454): drop_caches: 2 [ 1256.402868][ T30] audit: type=1326 audit(1753999732.962:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22474 comm="syz.0.4607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f855d38eb69 code=0x0 [ 1256.565040][T22480] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4607'. [ 1256.646111][ T5970] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1256.805350][ T5970] usb 3-1: Using ep0 maxpacket: 8 [ 1256.813563][ T5970] usb 3-1: config 12 has an invalid interface number: 166 but max is 2 [ 1256.852638][ T5970] usb 3-1: config 12 has an invalid interface number: 250 but max is 2 [ 1256.903129][ T5970] usb 3-1: config 12 has an invalid interface number: 116 but max is 2 [ 1256.937595][ T5970] usb 3-1: config 12 has no interface number 0 [ 1256.967714][ T5970] usb 3-1: config 12 has no interface number 1 [ 1256.990108][ T5970] usb 3-1: config 12 has no interface number 2 [ 1257.030827][ T5970] usb 3-1: config 12 interface 166 altsetting 6 endpoint 0x7 has invalid maxpacket 1536, setting to 64 [ 1257.154820][T22486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4609'. [ 1257.308566][ T5970] usb 3-1: config 12 interface 166 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1257.325188][ T5970] usb 3-1: config 12 interface 166 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1257.345168][ T5970] usb 3-1: config 12 interface 166 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 1257.452823][ T5970] usb 3-1: config 12 interface 166 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 1257.480297][ T5970] usb 3-1: config 12 interface 166 altsetting 6 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1257.491515][ T5970] usb 3-1: config 12 interface 166 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1257.502559][ T5970] usb 3-1: config 12 interface 166 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 1257.524456][ T5970] usb 3-1: config 12 interface 250 altsetting 156 has an invalid descriptor for endpoint zero, skipping [ 1257.598961][ T5970] usb 3-1: config 12 interface 250 altsetting 156 has a duplicate endpoint with address 0x2, skipping [ 1257.616349][ T5970] usb 3-1: config 12 interface 250 altsetting 156 has a duplicate endpoint with address 0x4, skipping [ 1257.627909][ T5970] usb 3-1: config 12 interface 166 has no altsetting 0 [ 1257.639641][ T5970] usb 3-1: config 12 interface 250 has no altsetting 0 [ 1257.687069][ T5970] usb 3-1: config 12 interface 116 has no altsetting 0 [ 1257.706482][ T5970] usb 3-1: New USB device found, idVendor=12d1, idProduct=9264, bcdDevice=71.b3 [ 1257.716083][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.727066][ T5970] usb 3-1: Product: 퀖掀꩗蛚㈗ể簕犣榨菥碷 [ 1257.734524][ T5970] usb 3-1: Manufacturer: К [ 1257.741751][ T5970] usb 3-1: SerialNumber: ӿ [ 1257.758467][T22473] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1257.887934][T22495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4611'. [ 1257.994168][ T5970] option 3-1:12.166: GSM modem (1-port) converter detected [ 1258.078393][ T5970] usb 3-1: USB disconnect, device number 74 [ 1258.191852][ T5970] option 3-1:12.166: device disconnected [ 1258.443227][T22502] loop6: detected capacity change from 0 to 524287999 [ 1258.486947][T20961] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 1258.938320][T22512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.965547][T22512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.168650][T22520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4618'. [ 1260.404661][T22549] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4626'. [ 1261.186649][T22576] FAULT_INJECTION: forcing a failure. [ 1261.186649][T22576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.200681][T22576] CPU: 1 UID: 0 PID: 22576 Comm: syz.2.4636 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1261.200712][T22576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1261.200726][T22576] Call Trace: [ 1261.200735][T22576] [ 1261.200746][T22576] dump_stack_lvl+0x189/0x250 [ 1261.200775][T22576] ? __pfx____ratelimit+0x10/0x10 [ 1261.200800][T22576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1261.200822][T22576] ? __pfx__printk+0x10/0x10 [ 1261.200847][T22576] ? __might_fault+0xb0/0x130 [ 1261.200885][T22576] should_fail_ex+0x414/0x560 [ 1261.200918][T22576] _copy_from_iter+0x1db/0x16f0 [ 1261.200943][T22576] ? rcu_is_watching+0x15/0xb0 [ 1261.200975][T22576] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1261.201004][T22576] ? __pfx__copy_from_iter+0x10/0x10 [ 1261.201027][T22576] ? __build_skb_around+0x257/0x3e0 [ 1261.201057][T22576] ? netlink_sendmsg+0x642/0xb30 [ 1261.201081][T22576] ? skb_put+0x11b/0x210 [ 1261.201111][T22576] netlink_sendmsg+0x6b2/0xb30 [ 1261.201147][T22576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1261.201176][T22576] ? aa_sock_msg_perm+0x94/0x160 [ 1261.201201][T22576] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1261.201222][T22576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1261.201249][T22576] __sock_sendmsg+0x219/0x270 [ 1261.201273][T22576] ____sys_sendmsg+0x505/0x830 [ 1261.201308][T22576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1261.201346][T22576] ? import_iovec+0x74/0xa0 [ 1261.201374][T22576] ___sys_sendmsg+0x21f/0x2a0 [ 1261.201406][T22576] ? __pfx____sys_sendmsg+0x10/0x10 [ 1261.201473][T22576] ? __fget_files+0x2a/0x420 [ 1261.201500][T22576] ? __fget_files+0x3a0/0x420 [ 1261.201547][T22576] __x64_sys_sendmsg+0x19b/0x260 [ 1261.201580][T22576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1261.201624][T22576] ? __pfx_ksys_write+0x10/0x10 [ 1261.201644][T22576] ? rcu_is_watching+0x15/0xb0 [ 1261.201679][T22576] ? do_syscall_64+0xbe/0x3b0 [ 1261.201709][T22576] do_syscall_64+0xfa/0x3b0 [ 1261.201733][T22576] ? lockdep_hardirqs_on+0x9c/0x150 [ 1261.201755][T22576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.201778][T22576] ? clear_bhb_loop+0x60/0xb0 [ 1261.201803][T22576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.201824][T22576] RIP: 0033:0x7f1c8678eb69 [ 1261.201843][T22576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1261.201861][T22576] RSP: 002b:00007f1c8756a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1261.201883][T22576] RAX: ffffffffffffffda RBX: 00007f1c869b5fa0 RCX: 00007f1c8678eb69 [ 1261.201899][T22576] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1261.201913][T22576] RBP: 00007f1c8756a090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.201926][T22576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.201938][T22576] R13: 0000000000000000 R14: 00007f1c869b5fa0 R15: 00007f1c86adfa28 [ 1261.201970][T22576] [ 1261.498246][T22575] loop6: detected capacity change from 0 to 524287999 [ 1261.675294][ T5964] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1261.805354][T22583] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1261.832740][T22583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4637'. [ 1261.925960][ T5964] usb 6-1: no configurations [ 1261.942259][ T5964] usb 6-1: can't read configurations, error -22 [ 1262.086112][ T5964] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1262.222054][T22590] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4638'. [ 1262.245204][ T44] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1262.609288][ T5964] usb 6-1: no configurations [ 1262.613924][ T5964] usb 6-1: can't read configurations, error -22 [ 1262.631237][ T5964] usb usb6-port1: attempt power cycle [ 1262.678606][T22592] loop2: detected capacity change from 0 to 7 [ 1262.690968][T22592] Dev loop2: unable to read RDB block 7 [ 1262.700118][T22592] loop2: unable to read partition table [ 1262.712754][T22592] loop2: partition table beyond EOD, truncated [ 1262.722025][T22592] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1262.797618][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.809036][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.882308][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1262.945856][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1262.997417][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.045738][ T44] usb 5-1: config 0 descriptor?? [ 1263.055342][ T5964] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1263.077163][ T5964] usb 6-1: no configurations [ 1263.081862][ T5964] usb 6-1: can't read configurations, error -22 [ 1263.235450][ T5964] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1263.276947][ T5964] usb 6-1: no configurations [ 1263.281745][ T5964] usb 6-1: can't read configurations, error -22 [ 1263.306037][ T5964] usb usb6-port1: unable to enumerate USB device [ 1263.539191][ T44] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1264.125460][ T44] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1264.413039][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 1264.736124][ C1] plantronics 0003:047F:FFFF.0028: usb_submit_urb(ctrl) failed: -1 [ 1264.785859][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4647'. [ 1264.813420][T22619] FAULT_INJECTION: forcing a failure. [ 1264.813420][T22619] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.829048][T22619] CPU: 1 UID: 0 PID: 22619 Comm: syz.5.4647 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1264.829076][T22619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1264.829090][T22619] Call Trace: [ 1264.829102][T22619] [ 1264.829111][T22619] dump_stack_lvl+0x189/0x250 [ 1264.829138][T22619] ? __pfx____ratelimit+0x10/0x10 [ 1264.829172][T22619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1264.829195][T22619] ? __pfx__printk+0x10/0x10 [ 1264.829226][T22619] ? __pfx___might_resched+0x10/0x10 [ 1264.829262][T22619] should_fail_ex+0x414/0x560 [ 1264.829294][T22619] should_failslab+0xa8/0x100 [ 1264.829324][T22619] __kmalloc_noprof+0xcb/0x4f0 [ 1264.829349][T22619] ? nf_tables_newrule+0x1506/0x2890 [ 1264.829376][T22619] ? nla_strcmp+0x106/0x140 [ 1264.829409][T22619] nf_tables_newrule+0x1506/0x2890 [ 1264.829456][T22619] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1264.829488][T22619] ? nfnl_pernet+0x23/0x240 [ 1264.829518][T22619] ? __nla_parse+0x40/0x60 [ 1264.829553][T22619] nfnetlink_rcv+0x112f/0x2520 [ 1264.829608][T22619] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1264.829708][T22619] ? netlink_deliver_tap+0x2e/0x1b0 [ 1264.829753][T22619] netlink_unicast+0x82c/0x9e0 [ 1264.829784][T22619] ? __pfx_netlink_unicast+0x10/0x10 [ 1264.829807][T22619] ? netlink_sendmsg+0x642/0xb30 [ 1264.829829][T22619] ? skb_put+0x11b/0x210 [ 1264.829860][T22619] netlink_sendmsg+0x805/0xb30 [ 1264.829895][T22619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1264.829924][T22619] ? aa_sock_msg_perm+0x94/0x160 [ 1264.829948][T22619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1264.829968][T22619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1264.829994][T22619] __sock_sendmsg+0x219/0x270 [ 1264.830018][T22619] ____sys_sendmsg+0x505/0x830 [ 1264.830053][T22619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1264.830092][T22619] ? import_iovec+0x74/0xa0 [ 1264.830120][T22619] ___sys_sendmsg+0x21f/0x2a0 [ 1264.830151][T22619] ? __pfx____sys_sendmsg+0x10/0x10 [ 1264.830224][T22619] ? __fget_files+0x2a/0x420 [ 1264.830250][T22619] ? __fget_files+0x3a0/0x420 [ 1264.830288][T22619] __x64_sys_sendmsg+0x19b/0x260 [ 1264.830318][T22619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1264.830358][T22619] ? __pfx_ksys_write+0x10/0x10 [ 1264.830378][T22619] ? rcu_is_watching+0x15/0xb0 [ 1264.830413][T22619] ? do_syscall_64+0xbe/0x3b0 [ 1264.830443][T22619] do_syscall_64+0xfa/0x3b0 [ 1264.830466][T22619] ? lockdep_hardirqs_on+0x9c/0x150 [ 1264.830489][T22619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.830510][T22619] ? clear_bhb_loop+0x60/0xb0 [ 1264.830534][T22619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.830554][T22619] RIP: 0033:0x7ff31a98eb69 [ 1264.830573][T22619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1264.830591][T22619] RSP: 002b:00007ff31b737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.830613][T22619] RAX: ffffffffffffffda RBX: 00007ff31abb5fa0 RCX: 00007ff31a98eb69 [ 1264.830629][T22619] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1264.830642][T22619] RBP: 00007ff31b737090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.830661][T22619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.830674][T22619] R13: 0000000000000000 R14: 00007ff31abb5fa0 R15: 00007ff31acdfa28 [ 1264.830706][T22619] [ 1265.305775][T22626] loop6: detected capacity change from 0 to 524288000 [ 1265.555724][T22626] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.563744][T22626] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.637946][T22627] loop6: detected capacity change from 524288000 to 0 [ 1265.638733][T22626] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.683863][T22626] ldm_validate_partition_table(): Disk read failed. [ 1265.708813][T22626] Dev loop6: unable to read RDB block 0 [ 1265.735260][T22626] loop6: unable to read partition table [ 1265.747403][T22626] loop6: partition table beyond EOD, truncated [ 1265.781359][T22626] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1265.829281][ T5853] usb 5-1: USB disconnect, device number 64 [ 1265.981217][T22632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1266.324402][T22646] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1266.878574][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1266.904716][ T44] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1266.930446][ T44] usb 3-1: can't read configurations, error -71 [ 1267.244165][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1267.255769][T22654] netlink: 'syz.4.4662': attribute type 5 has an invalid length. [ 1267.263539][T22654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1267.283342][T22654] geneve2: entered promiscuous mode [ 1267.293813][T22654] geneve2: entered allmulticast mode [ 1267.295458][ T44] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1267.307081][T16126] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1267.393077][T16126] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1267.411697][T16126] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1267.426403][T16126] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1267.485364][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 1267.498281][ T44] usb 3-1: no configurations [ 1267.502963][ T44] usb 3-1: can't read configurations, error -22 [ 1267.591500][T22667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.604121][T22667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.812827][ T44] usb usb3-port1: attempt power cycle [ 1268.165458][ T44] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1268.210692][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 1268.237653][ T44] usb 3-1: no configurations [ 1268.242383][ T44] usb 3-1: can't read configurations, error -22 [ 1268.415432][ T44] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1268.459238][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 1268.468128][ T44] usb 3-1: no configurations [ 1268.472865][ T44] usb 3-1: can't read configurations, error -22 [ 1268.494244][ T44] usb usb3-port1: unable to enumerate USB device [ 1268.613343][T22680] vlan2: entered promiscuous mode [ 1268.625480][T22680] bond0: entered promiscuous mode [ 1268.633710][T22680] bond_slave_0: entered promiscuous mode [ 1268.648399][T22680] bond_slave_1: entered promiscuous mode [ 1268.747429][ T5970] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1268.938809][ T5970] usb 5-1: Using ep0 maxpacket: 16 [ 1268.948191][ T5970] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1268.958878][ T5970] usb 5-1: config 8 has an invalid interface number: 122 but max is 0 [ 1268.969229][ T5970] usb 5-1: config 8 has no interface number 0 [ 1268.977718][ T5970] usb 5-1: config 8 interface 122 has no altsetting 0 [ 1268.988937][ T5970] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb2, bcdDevice=74.46 [ 1268.998770][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.007688][ T5970] usb 5-1: Product: syz [ 1269.012166][ T5970] usb 5-1: Manufacturer: syz [ 1269.017442][ T5970] usb 5-1: SerialNumber: syz [ 1269.275435][ T5932] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1269.485833][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 1269.676096][T22676] trusted_key: encrypted_key: insufficient parameters specified [ 1269.691796][ T5970] dvb-usb: found a 'DiBcom NIM7090 reference design' in warm state. [ 1269.715017][ T5970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1269.801262][T22691] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4674'. [ 1269.814892][ T5970] dvbdev: DVB: registering new adapter (DiBcom NIM7090 reference design) [ 1269.825802][ T5970] usb 5-1: media controller created [ 1269.859032][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1269.893180][T22676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.902150][T22676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.155993][ T5970] DVB: Unable to find symbol dib7000p_attach() [ 1270.183355][ T5970] dvb-usb: no frontend was attached by 'DiBcom NIM7090 reference design' [ 1270.647945][ T5970] rc_core: IR keymap rc-dib0700-rc5 not found [ 1270.709856][ T5970] Registered IR keymap rc-empty [ 1270.715299][ T5970] dvb-usb: could not initialize remote control. [ 1270.729422][ T5970] dvb-usb: DiBcom NIM7090 reference design successfully initialized and connected. [ 1270.840175][ T5970] usb 5-1: USB disconnect, device number 65 [ 1271.062408][ T5970] dvb-usb: DiBcom NIM7090 reference design successfully deinitialized and disconnected. [ 1271.556251][ T5970] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1271.757337][ T5970] usb 5-1: device descriptor read/64, error -71 [ 1271.763925][ T30] audit: type=1326 audit(1753999748.302:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22708 comm="syz.0.4678" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f855d38eb69 code=0x0 [ 1271.785821][ C0] vkms_vblank_simulate: vblank timer overrun [ 1271.824935][T22714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.872524][T22714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.046241][ T5970] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1272.210186][ T5970] usb 5-1: device descriptor read/64, error -71 [ 1272.329877][ T5970] usb usb5-port1: attempt power cycle [ 1272.415383][T22715] nvme_fabrics: missing parameter 'transport=%s' [ 1272.422980][T22715] nvme_fabrics: missing parameter 'nqn=%s' [ 1272.676906][ T5970] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1272.717120][ T5970] usb 5-1: device descriptor read/8, error -71 [ 1272.971959][ T5970] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1272.996273][ T5970] usb 5-1: device descriptor read/8, error -71 [ 1273.035497][ T5853] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1273.131496][ T5970] usb usb5-port1: unable to enumerate USB device [ 1273.195446][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 1273.205529][ T5853] usb 3-1: config index 0 descriptor too short (expected 59940, got 36) [ 1273.217227][ T5853] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1273.234535][ T5853] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1273.272909][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.299606][ T5932] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1273.317555][ T5853] usb 3-1: New USB device found, idVendor=6dd8, idProduct=00dd, bcdDevice= 2.00 [ 1273.333346][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.345095][ T5932] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1273.361749][ T5932] usb 6-1: can't read configurations, error -71 [ 1273.398617][ T5853] usb 3-1: config 0 descriptor?? [ 1273.871360][ T5853] hid-generic 0003:6DD8:00DD.0029: hidraw0: USB HID v0.05 Device [HID 6dd8:00dd] on usb-dummy_hcd.2-1/input0 [ 1275.058644][ T5853] usb 3-1: USB disconnect, device number 79 [ 1275.310820][T22738] fido_id[22738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1276.755464][T18988] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1276.922009][T18988] usb 6-1: config index 0 descriptor too short (expected 65426, got 146) [ 1276.951593][T18988] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1276.970104][T18988] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.997281][T18988] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1277.140377][T18988] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1277.168883][T18988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1277.208955][T18988] usb 6-1: SerialNumber: syz [ 1277.345293][ T5853] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1277.431383][T22753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.442444][T22753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.483760][T22753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.525700][T22753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.536814][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 1277.835050][T18988] usb 6-1: USB disconnect, device number 87 [ 1278.170539][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4696'. [ 1278.233842][ T30] audit: type=1326 audit(1753999754.792:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22777 comm="syz.3.4697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd24d8eb69 code=0x0 [ 1278.672327][T22791] nvme_fabrics: missing parameter 'transport=%s' [ 1278.690523][T22791] nvme_fabrics: missing parameter 'nqn=%s' [ 1278.718742][T22796] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1279.849104][T22802] loop6: detected capacity change from 0 to 524287999 [ 1280.565077][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1280.595030][ T5853] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1280.608180][ T5853] usb 5-1: can't read configurations, error -71 [ 1281.015403][ T44] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1281.197416][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 1281.206443][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.218437][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.379022][ T44] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1281.517525][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.532703][ T44] usb 6-1: config 0 descriptor?? [ 1281.675342][ T5853] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1281.828331][ T5853] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1281.908229][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.956157][ T5853] usb 5-1: config 0 descriptor?? [ 1281.995485][ T5853] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1282.369690][T22813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.449379][ T44] playstation 0003:054C:05C4.002A: unbalanced collection at end of report description [ 1282.468215][T22813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.489855][ T44] playstation 0003:054C:05C4.002A: Parse failed [ 1282.522771][ T44] playstation 0003:054C:05C4.002A: probe with driver playstation failed with error -22 [ 1282.605007][ T44] usb 6-1: USB disconnect, device number 88 [ 1282.782934][T22840] loop6: detected capacity change from 0 to 524287999 [ 1282.869930][T22842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4710'. [ 1282.890474][ T5853] gspca_stv06xx: I2C: Read error writing address: -71 [ 1282.932435][ T5853] usb 5-1: USB disconnect, device number 71 [ 1283.319768][T22856] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1283.535382][ T44] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1283.581386][T22863] binder_alloc: binder_alloc_mmap_handler: 22859 200000ffc000-200001000000 already mapped failed -16 [ 1283.717304][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 1283.740844][ T44] usb 3-1: config 0 has no interfaces? [ 1283.927859][ T44] usb 3-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 1283.941525][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.951134][ T44] usb 3-1: Product: syz [ 1283.976936][ T30] audit: type=1326 audit(1753999760.542:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22862 comm="syz.4.4719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f8958eb69 code=0x0 [ 1283.977022][ T5964] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 1284.016983][ T44] usb 3-1: Manufacturer: syz [ 1284.022879][ T44] usb 3-1: SerialNumber: syz [ 1284.058530][ T44] usb 3-1: config 0 descriptor?? [ 1284.212669][T22870] nvme_fabrics: missing parameter 'transport=%s' [ 1284.220114][T22870] nvme_fabrics: missing parameter 'nqn=%s' [ 1284.267060][ T5964] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1284.280418][ T5964] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1284.294919][ T5964] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1284.316714][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.493762][T22876] sctp: [Deprecated]: syz.3.4720 (pid 22876) Use of int in maxseg socket option. [ 1284.493762][T22876] Use struct sctp_assoc_value instead [ 1284.671248][ T5964] usb 6-1: usb_control_msg returned -32 [ 1284.690297][ T5964] usbtmc 6-1:16.0: can't read capabilities [ 1284.875876][T22879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.957834][T22879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.030051][T22882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.046572][T22882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.898555][T22884] loop6: detected capacity change from 0 to 524287999 [ 1286.200658][ T5964] usb 3-1: USB disconnect, device number 80 [ 1286.235336][T22888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.262428][T22888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.416404][T22889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.426841][T22889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.500530][ T5853] usb 6-1: USB disconnect, device number 89 [ 1286.643835][T22891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4725'. [ 1287.954417][T22907] vlan2: entered promiscuous mode [ 1288.380424][T22920] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1289.169894][T22924] kvm: emulating exchange as write [ 1289.603944][T22928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.645743][T22928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.748648][T22928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.775565][T22928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.821208][T22928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.891180][T22928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.113983][T22933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1290.140332][T22932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1290.143362][T22928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.165299][T22928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.111100][T22960] vlan2: entered promiscuous mode [ 1291.127244][T22960] bridge0: entered promiscuous mode [ 1291.135978][T22960] vlan2: entered allmulticast mode [ 1291.145266][T22960] bridge0: entered allmulticast mode [ 1291.235681][T22960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4744'. [ 1291.280445][T22960] dummy0: left allmulticast mode [ 1291.315568][T22960] bridge0: port 3(dummy0) entered disabled state [ 1291.359260][T22960] bridge_slave_0: left allmulticast mode [ 1291.390099][T22960] bridge_slave_0: left promiscuous mode [ 1291.407180][T22960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.462864][T22960] bridge_slave_1: left allmulticast mode [ 1291.503100][T22960] bridge_slave_1: left promiscuous mode [ 1291.535508][T22960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.557957][T22960] bond0: (slave bond_slave_0): Releasing backup interface [ 1291.574964][T22960] bond_slave_0: left promiscuous mode [ 1291.584920][T22960] bond0: (slave bond_slave_1): Releasing backup interface [ 1291.624965][T22960] bond_slave_1: left promiscuous mode [ 1291.667105][T22960] team0: Port device team_slave_0 removed [ 1291.693515][T22960] team0: Port device team_slave_1 removed [ 1291.712816][T22960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.744013][T22960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.765522][T22960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.846232][T22966] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1293.473961][T22980] vlan0: entered promiscuous mode [ 1294.243605][T22999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4756'. [ 1295.863036][T23010] syz.2.4759 (23010): drop_caches: 2 [ 1295.905252][T23010] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1296.857344][T23017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.916638][T23017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.070265][T23021] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1297.534347][ T30] audit: type=1326 audit(1753999774.092:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1297.556822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.568980][ T30] audit: type=1326 audit(1753999774.092:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1297.600038][ T30] audit: type=1326 audit(1753999774.092:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1297.622524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.638253][ T30] audit: type=1326 audit(1753999774.092:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1297.661659][ T5970] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1297.678132][ T30] audit: type=1326 audit(1753999774.092:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1297.708119][ T30] audit: type=1326 audit(1753999774.092:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1297.742232][ T30] audit: type=1326 audit(1753999774.092:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1297.773520][ T30] audit: type=1326 audit(1753999774.092:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1297.802982][ T30] audit: type=1326 audit(1753999774.092:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1297.833060][ T30] audit: type=1326 audit(1753999774.092:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1297.855549][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.862644][ T5970] usb 5-1: Using ep0 maxpacket: 8 [ 1297.879526][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1297.897756][ T5970] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1297.910982][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.922789][ T5970] usb 5-1: Product: syz [ 1297.929926][ T5970] usb 5-1: Manufacturer: syz [ 1297.935885][ T5970] usb 5-1: SerialNumber: syz [ 1297.946816][ T5970] usb 5-1: config 0 descriptor?? [ 1297.962415][ T5970] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1299.065266][T18988] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1299.320307][T18988] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1299.365840][T18988] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1299.377431][T18988] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1299.388569][T18988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1299.405721][T18988] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1299.414794][T18988] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1299.435260][T18988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1299.445741][T18988] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1299.482283][T18988] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1299.495599][T18988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1299.518998][T18988] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1299.553504][T18988] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1299.583983][T18988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1299.605967][T18988] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1299.639609][T18988] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1299.679819][T18988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1299.710965][T18988] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1299.748678][T18988] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1299.779094][T18988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1299.796767][T18988] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1299.817698][T18988] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1300.226802][ T5970] gspca_zc3xx: reg_w_i err -110 [ 1300.283055][T18988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1300.290353][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.297736][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.418291][T18988] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1300.477837][T18988] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1300.516109][T18988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1300.543405][T18988] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1300.553250][T18988] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1300.564361][T18988] usb 3-1: Product: syz [ 1300.569104][T18988] usb 3-1: Manufacturer: syz [ 1300.575196][T18988] usb 3-1: SerialNumber: syz [ 1300.595904][T18988] usb 3-1: config 0 descriptor?? [ 1300.614689][T18988] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1300.623423][T23054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.678102][T23054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.786257][T23054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4773'. [ 1300.942295][ T5970] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1300.953057][ T5970] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1300.996281][ T5970] usb 3-1: USB disconnect, device number 81 [ 1301.011504][ T5970] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1301.345348][ T5970] usb 5-1: USB disconnect, device number 72 [ 1301.419005][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4775'. [ 1301.525351][T23068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4776'. [ 1301.963527][T23082] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1302.542165][T23088] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1303.158418][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1303.158437][ T30] audit: type=1326 audit(1753999779.712:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23089 comm="syz.2.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1303.165992][T23098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.250279][T23098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.397355][ T30] audit: type=1326 audit(1753999779.712:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23089 comm="syz.2.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1303.459763][ T30] audit: type=1326 audit(1753999779.722:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23089 comm="syz.2.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1303.522501][ T30] audit: type=1326 audit(1753999779.722:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23089 comm="syz.2.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1303.592433][ T30] audit: type=1326 audit(1753999779.722:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23089 comm="syz.2.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1303.666723][ T30] audit: type=1326 audit(1753999779.722:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23089 comm="syz.2.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1303.691163][ T30] audit: type=1326 audit(1753999779.722:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23089 comm="syz.2.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8678eb69 code=0x7ffc0000 [ 1304.107362][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4789'. [ 1304.142555][T23110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4790'. [ 1304.422125][T23116] sctp: [Deprecated]: syz.3.4791 (pid 23116) Use of int in maxseg socket option. [ 1304.422125][T23116] Use struct sctp_assoc_value instead [ 1304.580535][T23120] sctp: [Deprecated]: syz.4.4794 (pid 23120) Use of int in max_burst socket option deprecated. [ 1304.580535][T23120] Use struct sctp_assoc_value instead [ 1304.744179][T23122] fuse: Bad value for 'user_id' [ 1305.066129][T18988] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1305.133302][T23122] fuse: Bad value for 'user_id' [ 1305.275649][T18988] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1305.303779][T18988] usb 6-1: not running at top speed; connect to a high speed hub [ 1305.342429][T23125] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1305.355340][T18988] usb 6-1: config 7 has an invalid interface number: 205 but max is 0 [ 1305.374156][T18988] usb 6-1: config 7 has no interface number 0 [ 1305.380821][T18988] usb 6-1: config 7 interface 205 has no altsetting 0 [ 1305.400753][T18988] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice=30.fb [ 1305.421933][T18988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.439152][T18988] usb 6-1: Product: syz [ 1305.461696][T18988] usb 6-1: Manufacturer: syz [ 1305.480764][T18988] usb 6-1: SerialNumber: syz [ 1305.748508][T23118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.762709][T23133] fuse: Bad value for 'fd' [ 1305.780368][T23118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.829766][T23118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.857383][T23118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.945455][T23139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.986746][T23140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.033326][T23139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.067217][T23140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.219176][T18988] usb 6-1: USB disconnect, device number 90 [ 1306.271510][T23146] netlink: 'syz.3.4803': attribute type 21 has an invalid length. [ 1306.422905][T23146] netlink: 'syz.3.4803': attribute type 6 has an invalid length. [ 1306.438258][ T30] audit: type=1326 audit(1753999783.002:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23144 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1306.494346][T23146] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4803'. [ 1306.522721][ T30] audit: type=1326 audit(1753999783.012:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23144 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1306.621471][ T30] audit: type=1326 audit(1753999783.012:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23144 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1306.973305][T23157] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1307.152896][T23159] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1307.772520][T23178] sctp: [Deprecated]: syz.0.4811 (pid 23178) Use of int in maxseg socket option. [ 1307.772520][T23178] Use struct sctp_assoc_value instead [ 1308.224101][T23176] syz.4.4805: attempt to access beyond end of device [ 1308.224101][T23176] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1308.835284][ T5853] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1308.987179][ T5853] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1308.996510][ T5853] usb 3-1: not running at top speed; connect to a high speed hub [ 1309.023430][ T5853] usb 3-1: config 7 has an invalid interface number: 205 but max is 0 [ 1309.050266][ T5853] usb 3-1: config 7 has no interface number 0 [ 1309.067451][ T5853] usb 3-1: config 7 interface 205 has no altsetting 0 [ 1309.099595][ T5853] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice=30.fb [ 1309.166439][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.195408][ T5853] usb 3-1: Product: syz [ 1309.199747][ T5853] usb 3-1: Manufacturer: syz [ 1309.204521][ T5853] usb 3-1: SerialNumber: syz [ 1309.774493][ T5853] usb 3-1: USB disconnect, device number 82 [ 1310.161512][T23196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1310.273203][T23196] batman_adv: batadv0: Adding interface: macsec1 [ 1310.305564][T23196] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.352773][T23196] batman_adv: batadv0: Interface activated: macsec1 [ 1310.407166][T23203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4822'. [ 1310.427309][T23203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4822'. [ 1310.699943][T23209] vlan0: entered promiscuous mode [ 1311.140445][T23214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4824'. [ 1311.202172][T23219] netlink: 'syz.0.4824': attribute type 1 has an invalid length. [ 1311.407856][T23222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4826'. [ 1311.769983][T23223] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1312.045377][ T44] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1312.217004][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1312.250478][ T44] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1312.263598][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.301537][ T44] usb 5-1: Product: syz [ 1312.317918][ T44] usb 5-1: Manufacturer: syz [ 1312.328737][ T44] usb 5-1: SerialNumber: syz [ 1312.340956][ T44] usb 5-1: config 0 descriptor?? [ 1312.573710][T23228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4827'. [ 1312.713488][T23242] loop2: detected capacity change from 0 to 7 [ 1312.750669][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1312.750692][ T30] audit: type=1326 audit(1753999789.302:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23236 comm="syz.3.4830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd24d8eb69 code=0x0 [ 1312.796215][T23242] Dev loop2: unable to read RDB block 7 [ 1312.825328][T23242] loop2: AHDI p1 p2 p3 [ 1312.873405][T23242] loop2: partition table partially beyond EOD, truncated [ 1312.902371][T23242] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1312.955719][T23242] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1312.984019][ T1211] usb 5-1: USB disconnect, device number 73 [ 1313.123725][T13840] udevd[13840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1313.150640][T23253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4833'. [ 1313.219667][T23245] nvme_fabrics: missing parameter 'transport=%s' [ 1313.266131][ T5853] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1313.301814][T23245] nvme_fabrics: missing parameter 'nqn=%s' [ 1313.398037][T23255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1313.463986][T23255] bridge0: entered promiscuous mode [ 1313.474328][ T5853] usb 6-1: Using ep0 maxpacket: 32 [ 1313.486095][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.542954][T23255] batman_adv: batadv0: Adding interface: macsec0 [ 1313.549774][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.561580][T23255] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.615594][ T5853] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1313.646374][T23255] batman_adv: batadv0: Interface activated: macsec0 [ 1313.676009][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.840323][ T5853] usb 6-1: config 0 descriptor?? [ 1313.863498][ T5853] hub 6-1:0.0: USB hub found [ 1313.904555][T23259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4837'. [ 1314.074991][ T5853] hub 6-1:0.0: 1 port detected [ 1314.394076][T23264] sctp: [Deprecated]: syz.4.4840 (pid 23264) Use of int in max_burst socket option deprecated. [ 1314.394076][T23264] Use struct sctp_assoc_value instead [ 1314.676646][T23251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.686914][T23251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.856099][ T5853] hub 6-1:0.0: activate --> -90 [ 1314.880919][T23269] sctp: [Deprecated]: syz.4.4842 (pid 23269) Use of int in max_burst socket option deprecated. [ 1314.880919][T23269] Use struct sctp_assoc_value instead [ 1315.460762][T23251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.501705][T23251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.879221][ T5970] usb 6-1: USB disconnect, device number 91 [ 1315.935234][ T5853] usb 6-1.1: new high-speed USB device number 92 using dummy_hcd [ 1315.944078][ T5853] usb 6-1-port1: attempt power cycle [ 1316.138787][ T30] audit: type=1326 audit(1753999792.672:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23281 comm="syz.4.4845" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f8958eb69 code=0x0 [ 1316.206068][T23290] netlink: 'syz.0.4846': attribute type 2 has an invalid length. [ 1316.214103][T23290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4846'. [ 1316.235496][T23290] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1316.508383][T23289] nvme_fabrics: missing parameter 'transport=%s' [ 1316.515664][T23289] nvme_fabrics: missing parameter 'nqn=%s' [ 1316.679103][T23297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1316.761634][T23297] batman_adv: batadv0: Adding interface: macsec1 [ 1316.771109][T23297] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.840647][T23297] batman_adv: batadv0: Interface activated: macsec1 [ 1317.335356][T23303] loop2: detected capacity change from 0 to 7 [ 1317.369954][T23303] Dev loop2: unable to read RDB block 7 [ 1317.415314][T23303] loop2: AHDI p1 p2 p3 [ 1317.419679][T23303] loop2: partition table partially beyond EOD, truncated [ 1317.483306][T23303] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1317.511317][T23303] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1318.333778][T23323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4856'. [ 1318.574744][T23327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4858'. [ 1318.584741][T23327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4858'. [ 1318.614376][T23327] bridge0: port 1(vlan3) entered blocking state [ 1318.621895][T23327] bridge0: port 1(vlan3) entered disabled state [ 1318.639955][T23327] vlan3: entered allmulticast mode [ 1318.645399][T23327] bridge0: entered allmulticast mode [ 1318.708785][T23327] vlan3: left allmulticast mode [ 1318.713808][T23327] bridge0: left allmulticast mode [ 1319.385375][T23335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4859'. [ 1319.518171][T23339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1320.677630][T23352] sctp: [Deprecated]: syz.4.4865 (pid 23352) Use of int in max_burst socket option deprecated. [ 1320.677630][T23352] Use struct sctp_assoc_value instead [ 1321.386279][ T5970] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1321.535343][ T5970] usb 5-1: device descriptor read/64, error -71 [ 1321.789894][ T5970] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1321.925455][ T5970] usb 5-1: device descriptor read/64, error -71 [ 1321.997946][ T1211] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1322.036014][ T5970] usb usb5-port1: attempt power cycle [ 1322.175212][ T1211] usb 6-1: Using ep0 maxpacket: 16 [ 1322.182907][ T1211] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1322.191739][ T1211] usb 6-1: config 0 has no interface number 0 [ 1322.206627][ T1211] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1322.216278][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.224430][ T1211] usb 6-1: Product: syz [ 1322.229113][ T1211] usb 6-1: Manufacturer: syz [ 1322.234786][ T1211] usb 6-1: SerialNumber: syz [ 1322.273419][ T1211] usb 6-1: config 0 descriptor?? [ 1322.485247][ T5970] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1322.506389][ T5970] usb 5-1: device descriptor read/8, error -71 [ 1322.641392][T23365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.659451][T23365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.659504][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4872'. [ 1322.671765][T23365] fuse: Unknown parameter '000000000000000000000100x0000000000000008' [ 1322.756745][T23373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.765235][ T5970] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1322.806006][ T5970] usb 5-1: device descriptor read/8, error -71 [ 1322.941843][ T5970] usb usb5-port1: unable to enumerate USB device [ 1323.089522][T23377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.100723][T23377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.129321][T23377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.152268][T23377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.332610][ T1211] usb 6-1: selecting invalid altsetting 1 [ 1323.344871][ T1211] speedtch 6-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1323.355836][ T1211] speedtch 6-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1323.363201][ T1211] speedtch 6-1:0.1: probe with driver speedtch failed with error -22 [ 1323.611652][T23386] vivid-000: disconnect [ 1323.617065][T23386] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1323.675053][T23386] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1323.695756][ T1211] usb 6-1: USB disconnect, device number 96 [ 1323.702286][T23386] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1323.718348][T23386] kvm: requested 42742 ns i8254 timer period limited to 200000 ns [ 1323.732041][T23386] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1323.756452][T23386] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1323.764840][T23386] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1323.778924][T23386] kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 1323.791590][T23386] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1323.834034][T23386] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1324.153229][T23382] vivid-000: reconnect [ 1324.335850][T23398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4879'. [ 1324.360959][T23392] loop6: detected capacity change from 0 to 63 [ 1324.411602][T20961] Buffer I/O error on dev loop6, logical block 0, async page read [ 1324.421242][T20961] Buffer I/O error on dev loop6, logical block 0, async page read [ 1324.439796][T20961] Buffer I/O error on dev loop6, logical block 0, async page read [ 1324.504143][T20961] Buffer I/O error on dev loop6, logical block 0, async page read [ 1324.726262][T20961] Buffer I/O error on dev loop6, logical block 0, async page read [ 1325.020913][T23409] program syz.0.4882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1325.032269][T23409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4882'. [ 1325.400941][T23413] fuse: Unknown parameter '000000000000000000000030x0000000000000004' [ 1325.464179][T23416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1325.575869][T23416] bridge0: entered promiscuous mode [ 1325.583029][T23416] batman_adv: batadv0: Adding interface: macsec1 [ 1325.660878][T23416] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.754156][T23416] batman_adv: batadv0: Interface activated: macsec1 [ 1325.879584][ T5958] kworker/1:7 (5958) used greatest stack depth: 18152 bytes left [ 1328.877565][T23465] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1329.476628][T23471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1329.504206][T23474] fuse: blksize only supported for fuseblk [ 1329.977056][T23483] loop6: detected capacity change from 0 to 524288000 [ 1329.986479][T23483] Buffer I/O error on dev loop6, logical block 0, async page read [ 1329.994758][T23483] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.003389][T23483] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.020981][T23483] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.085347][T23485] loop6: detected capacity change from 524288000 to 0 [ 1330.103073][T23483] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.196537][T23483] ldm_validate_partition_table(): Disk read failed. [ 1330.235537][T23483] Dev loop6: unable to read RDB block 0 [ 1330.251535][T23483] loop6: unable to read partition table [ 1330.272050][T23483] loop6: partition table beyond EOD, truncated [ 1330.302268][T23483] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1330.405199][ T5970] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1330.546519][T23494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4907'. [ 1330.698581][ T5970] usb 3-1: Using ep0 maxpacket: 16 [ 1330.745401][ T5970] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1330.801853][T23505] netlink: 'syz.0.4909': attribute type 1 has an invalid length. [ 1330.823914][ T5970] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1330.903789][T23458] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 23458 comm: syz.5.4896) [ 1330.906412][T23505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1330.956856][ T30] audit: type=1800 audit(1753999807.522:1397): pid=23458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4896" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=112592 res=0 errno=0 [ 1330.965461][ T5970] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1331.063638][T23508] bond1: (slave gretap3): making interface the new active one [ 1331.090996][T23508] bond1: (slave gretap3): Enslaving as an active interface with an up link [ 1331.208837][T23509] syzkaller0: entered promiscuous mode [ 1331.224876][T23509] syzkaller0: entered allmulticast mode [ 1331.355820][ T5970] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1331.416207][ T5970] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1331.534948][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.595038][ T5970] usb 3-1: Product: syz [ 1331.609880][ T5970] usb 3-1: Manufacturer: syz [ 1331.614553][ T5970] usb 3-1: SerialNumber: syz [ 1331.771959][T23521] sctp: [Deprecated]: syz.5.4914 (pid 23521) Use of int in maxseg socket option. [ 1331.771959][T23521] Use struct sctp_assoc_value instead [ 1332.141860][ T1211] IPVS: starting estimator thread 0... [ 1332.251233][T23523] IPVS: using max 37 ests per chain, 88800 per kthread [ 1333.174082][T23526] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1333.769712][ T5970] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1333.784737][ T5970] usb 3-1: USB disconnect, device number 83 [ 1334.150077][T23536] loop6: detected capacity change from 0 to 524288000 [ 1334.187591][T20961] Buffer I/O error on dev loop6, logical block 0, async page read [ 1334.233342][T23539] fuse: Bad value for 'fd' [ 1334.250776][T23540] loop6: detected capacity change from 524288000 to 0 [ 1334.259536][T20961] Buffer I/O error on dev loop6, logical block 0, async page read [ 1334.274106][T20961] ldm_validate_partition_table(): Disk read failed. [ 1334.292162][T20961] Dev loop6: unable to read RDB block 0 [ 1334.305864][T20961] loop6: unable to read partition table [ 1334.311956][T20961] loop6: partition table beyond EOD, truncated [ 1335.554632][ T1211] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1336.065310][ T1211] usb 6-1: Using ep0 maxpacket: 16 [ 1336.073617][ T1211] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1336.121342][ T1211] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.186033][ T1211] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1336.233878][ T1211] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1336.272488][ T1211] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1336.293188][ T1211] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1336.303143][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.318436][ T1211] usb 6-1: Product: syz [ 1336.330645][ T1211] usb 6-1: Manufacturer: syz [ 1336.347635][ T1211] usb 6-1: SerialNumber: syz [ 1336.389511][T23550] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1336.629213][ T1211] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input60 [ 1337.021470][ C1] bcm5974 6-1:1.0: trackpad urb failed: -1 [ 1337.155895][ T5853] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1337.315911][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 1337.324347][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.338982][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.378462][ T5853] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1337.421349][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.456129][ T5853] usb 3-1: config 0 descriptor?? [ 1337.592669][ T1211] usb 6-1: USB disconnect, device number 97 [ 1337.600079][ T5195] bcm5974 6-1:1.0: could not read from device [ 1337.637503][T13805] bcm5974 6-1:1.0: could not read from device [ 1337.881782][ T5853] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 1337.892590][ T5853] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 1337.916418][ T5853] kone 0003:1E7D:2CED.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 1338.109450][T23563] loop3: detected capacity change from 0 to 1 [ 1338.169730][T23569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.222258][T23569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.225840][T23563] Dev loop3: unable to read RDB block 1 [ 1338.277160][T23563] loop3: unable to read partition table [ 1338.284025][T23563] loop3: partition table beyond EOD, truncated [ 1338.345819][T23563] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1339.052374][ T5853] kone 0003:1E7D:2CED.002B: couldn't init struct kone_device [ 1339.072228][ T5853] kone 0003:1E7D:2CED.002B: couldn't install mouse [ 1339.091093][ T5853] kone 0003:1E7D:2CED.002B: probe with driver kone failed with error -5 [ 1339.143414][ T5853] usb 3-1: USB disconnect, device number 84 [ 1339.937723][T23593] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4930'. [ 1340.093252][T23599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.104222][T23599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.168274][ T30] audit: type=1326 audit(1753999816.732:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.3.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1340.207957][ T30] audit: type=1326 audit(1753999816.732:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.3.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1340.382298][ T30] audit: type=1326 audit(1753999816.732:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.3.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1340.413011][ T30] audit: type=1326 audit(1753999816.752:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.3.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1340.442246][ T30] audit: type=1326 audit(1753999816.752:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.3.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1340.472517][ T30] audit: type=1326 audit(1753999816.752:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.3.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1340.499966][ T30] audit: type=1326 audit(1753999816.752:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.3.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1340.528408][ T30] audit: type=1326 audit(1753999816.752:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.3.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1340.634921][ T30] audit: type=1326 audit(1753999816.752:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.3.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1340.692562][ T30] audit: type=1326 audit(1753999816.752:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.3.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd24d8eb69 code=0x7ffc0000 [ 1342.695245][ T44] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1342.854077][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 1342.942674][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.967676][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1343.043472][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1343.124060][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.192149][ T44] usb 5-1: Product: ᐁ [ 1343.211779][ T44] usb 5-1: Manufacturer: Є [ 1343.218245][ T44] usb 5-1: SerialNumber: Ь [ 1343.483314][ T44] usb 5-1: 0:2 : does not exist [ 1343.520167][ T44] usb 5-1: USB disconnect, device number 78 [ 1343.577809][T20961] udevd[20961]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1343.578794][T23647] loop6: detected capacity change from 0 to 524287999 [ 1343.806834][T23652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.818344][T23652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.247177][T23665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.122366][T23677] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4950'. [ 1345.398226][T23665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.617282][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4950'. [ 1347.132318][T23697] netlink: 'syz.4.4957': attribute type 1 has an invalid length. [ 1347.252754][T23697] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1347.255925][T23702] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1347.379592][T23706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4959'. [ 1347.394299][T23706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4959'. [ 1347.725427][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1347.725450][ T30] audit: type=1326 audit(1753999824.212:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23709 comm="syz.4.4961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f8958eb69 code=0x0 [ 1348.112263][T23720] nvme_fabrics: missing parameter 'transport=%s' [ 1348.129674][T23720] nvme_fabrics: missing parameter 'nqn=%s' [ 1349.658058][T23742] syzkaller0: entered promiscuous mode [ 1349.664060][T23742] syzkaller0: entered allmulticast mode [ 1350.766739][ T44] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1350.935604][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 1350.959095][ T44] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1350.968755][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.985212][ T44] usb 3-1: Product: syz [ 1350.996038][ T44] usb 3-1: Manufacturer: syz [ 1351.009821][ T44] usb 3-1: SerialNumber: syz [ 1351.057882][ T44] usb 3-1: config 0 descriptor?? [ 1351.078587][ T44] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1352.244493][T23766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4971'. [ 1352.892078][ T44] gspca_ov534_9: reg_r err -71 [ 1353.198588][ T44] gspca_ov534_9: Unknown sensor 0000 [ 1353.198708][ T44] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1353.232133][ T44] usb 3-1: USB disconnect, device number 85 [ 1353.519806][T23769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4972'. [ 1353.532272][T23769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4972'. [ 1354.598321][T23769] bridge0: port 3(vlan2) entered blocking state [ 1354.625710][T23769] bridge0: port 3(vlan2) entered disabled state [ 1354.638680][T23769] vlan2: entered allmulticast mode [ 1354.647269][T23769] bridge0: entered allmulticast mode [ 1354.667902][T23769] vlan2: left allmulticast mode [ 1354.672858][T23769] bridge0: left allmulticast mode [ 1354.696876][T23771] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.4973'. [ 1354.807155][T23775] sctp: [Deprecated]: syz.5.4975 (pid 23775) Use of int in max_burst socket option deprecated. [ 1354.807155][T23775] Use struct sctp_assoc_value instead [ 1355.166438][ T5970] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1355.379425][ T5970] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.393541][ T5970] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1355.452461][ T5970] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1355.523510][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.562921][ T5970] usb 3-1: Product: syz [ 1355.598170][ T5970] usb 3-1: Manufacturer: syz [ 1355.630640][ T5970] usb 3-1: SerialNumber: syz [ 1355.940861][T23779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.952224][T23779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.981674][ T5970] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1356.001610][ T5970] usb 3-1: USB disconnect, device number 86 [ 1356.485901][ T5970] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1356.677420][ T5970] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 1356.686214][ T5970] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.813352][ T5970] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1356.923946][ T5970] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 1356.966191][ T5970] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1357.008350][ T5970] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1357.041963][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.302150][T23779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1357.343066][ T5970] usb 3-1: usb_control_msg returned -71 [ 1357.366368][ T5970] usbtmc 3-1:16.0: can't read capabilities [ 1357.423624][ T5970] usb 3-1: USB disconnect, device number 87 [ 1358.191108][T23822] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1358.670475][T23825] syzkaller0: entered promiscuous mode [ 1358.676199][T23825] syzkaller0: entered allmulticast mode [ 1359.191105][ T1211] usb 4-1: USB disconnect, device number 27 [ 1360.745333][T23842] program syz.2.4989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1361.719869][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.738469][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.466843][T23854] loop2: detected capacity change from 0 to 7 [ 1362.479107][T20961] Dev loop2: unable to read RDB block 7 [ 1362.484892][T20961] loop2: AHDI p1 p2 p3 [ 1362.490418][T20961] loop2: partition table partially beyond EOD, truncated [ 1362.500298][T20961] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1362.508100][T20961] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1362.549677][T23854] Dev loop2: unable to read RDB block 7 [ 1362.555441][T23854] loop2: AHDI p1 p2 p3 [ 1362.559790][T23854] loop2: partition table partially beyond EOD, truncated [ 1362.567243][T23854] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1362.574587][T23854] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1364.109406][T23856] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1368.930473][T23886] binder: 23885:23886 ioctl c0306201 200000000640 returned -22 [ 1368.941267][T23886] binder: 23885:23886 ioctl 2270 200000000240 returned -22 [ 1369.088921][T23892] sctp: [Deprecated]: syz.0.5000 (pid 23892) Use of int in max_burst socket option deprecated. [ 1369.088921][T23892] Use struct sctp_assoc_value instead [ 1369.212922][T23895] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1369.220310][T23895] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1369.232142][T23895] vhci_hcd vhci_hcd.0: Device attached [ 1369.495952][ T44] usb 34-1: SetAddress Request (2) to port 0 [ 1369.507239][ T44] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1423.168192][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.174577][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1458.997404][ T9] kworker/0:0 (9) used greatest stack depth: 15768 bytes left [ 1484.608793][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.615296][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.845595][ T31] INFO: task kworker/0:3:5853 blocked for more than 143 seconds. [ 1494.853379][ T31] Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 [ 1494.860853][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1494.869773][ T31] task:kworker/0:3 state:D stack:16824 pid:5853 tgid:5853 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1494.882073][ T31] Workqueue: events rfkill_sync_work [ 1494.887621][ T31] Call Trace: [ 1494.890927][ T31] [ 1494.893892][ T31] __schedule+0x1798/0x4cc0 [ 1494.898622][ T31] ? __pfx___schedule+0x10/0x10 [ 1494.903747][ T31] ? schedule+0x91/0x360 [ 1494.908112][ T31] schedule+0x165/0x360 [ 1494.912319][ T31] schedule_preempt_disabled+0x13/0x30 [ 1494.918018][ T31] __mutex_lock+0x7e3/0x1340 [ 1494.922655][ T31] ? __mutex_lock+0x5b6/0x1340 [ 1494.927591][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1494.932923][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1494.938155][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1494.943391][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1494.949677][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1494.956158][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1494.961922][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1494.967214][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1494.972986][ T31] rfkill_set_block+0x1cf/0x440 [ 1494.978008][ T31] rfkill_sync_work+0x114/0x200 [ 1494.982905][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1494.988731][ T31] process_scheduled_works+0xade/0x17b0 [ 1494.994342][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1495.000608][ T31] worker_thread+0x8a0/0xda0 [ 1495.005397][ T31] kthread+0x711/0x8a0 [ 1495.009504][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1495.014648][ T31] ? __pfx_kthread+0x10/0x10 [ 1495.019413][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1495.024635][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1495.029940][ T31] ? __pfx_kthread+0x10/0x10 [ 1495.034555][ T31] ret_from_fork+0x3f9/0x770 [ 1495.039308][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.044479][ T31] ? __switch_to_asm+0x39/0x70 [ 1495.049376][ T31] ? __switch_to_asm+0x33/0x70 [ 1495.054167][ T31] ? __pfx_kthread+0x10/0x10 [ 1495.058918][ T31] ret_from_fork_asm+0x1a/0x30 [ 1495.063729][ T31] [ 1495.066920][ T31] INFO: task kworker/0:2:18988 blocked for more than 143 seconds. [ 1495.074836][ T31] Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 [ 1495.082310][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1495.091203][ T31] task:kworker/0:2 state:D stack:20680 pid:18988 tgid:18988 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1495.103390][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1495.110157][ T31] Call Trace: [ 1495.113446][ T31] [ 1495.116565][ T31] __schedule+0x1798/0x4cc0 [ 1495.121149][ T31] ? __pfx___schedule+0x10/0x10 [ 1495.126167][ T31] ? schedule+0x91/0x360 [ 1495.130441][ T31] schedule+0x165/0x360 [ 1495.134619][ T31] schedule_preempt_disabled+0x13/0x30 [ 1495.140236][ T31] __mutex_lock+0x7e3/0x1340 [ 1495.144861][ T31] ? __mutex_lock+0x5b6/0x1340 [ 1495.149720][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1495.156194][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1495.161255][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1495.167117][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1495.172868][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1495.179109][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1495.184862][ T31] process_scheduled_works+0xade/0x17b0 [ 1495.190522][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1495.196737][ T31] worker_thread+0x8a0/0xda0 [ 1495.201369][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1495.207867][ T31] ? __kthread_parkme+0x7b/0x200 [ 1495.212868][ T31] kthread+0x711/0x8a0 [ 1495.217179][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1495.222333][ T31] ? __pfx_kthread+0x10/0x10 [ 1495.227048][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1495.232274][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1495.237704][ T31] ? __pfx_kthread+0x10/0x10 [ 1495.242328][ T31] ret_from_fork+0x3f9/0x770 [ 1495.247086][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.252248][ T31] ? __switch_to_asm+0x39/0x70 [ 1495.257180][ T31] ? __switch_to_asm+0x33/0x70 [ 1495.262013][ T31] ? __pfx_kthread+0x10/0x10 [ 1495.266787][ T31] ret_from_fork_asm+0x1a/0x30 [ 1495.271601][ T31] [ 1495.274638][ T31] INFO: task syz.3.4945:23651 blocked for more than 143 seconds. [ 1495.282517][ T31] Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 [ 1495.289881][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1495.298892][ T31] task:syz.3.4945 state:D stack:26920 pid:23651 tgid:23651 ppid:16376 task_flags:0x400040 flags:0x00004004 [ 1495.311322][ T31] Call Trace: [ 1495.314762][ T31] [ 1495.318318][ T31] __schedule+0x1798/0x4cc0 [ 1495.322936][ T31] ? __pfx___schedule+0x10/0x10 [ 1495.328475][ T31] ? schedule+0x91/0x360 [ 1495.332801][ T31] schedule+0x165/0x360 [ 1495.337643][ T31] schedule_timeout+0x9a/0x270 [ 1495.342505][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1495.348046][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1495.353325][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1495.358687][ T31] ? wait_for_completion+0x267/0x5d0 [ 1495.364055][ T31] wait_for_completion+0x2bf/0x5d0 [ 1495.369356][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1495.375295][ T31] ? __flush_work+0xd2/0xbc0 [ 1495.379969][ T31] ? __flush_work+0xd2/0xbc0 [ 1495.384615][ T31] __flush_work+0x9b9/0xbc0 [ 1495.389553][ T31] ? __flush_work+0xd2/0xbc0 [ 1495.394225][ T31] ? __pfx___flush_work+0x10/0x10 [ 1495.399783][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1495.405405][ T31] ? __pfx___cancel_work+0x10/0x10 [ 1495.410643][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 1495.416761][ T31] __cancel_work_sync+0xbe/0x110 [ 1495.421785][ T31] rfkill_unregister+0x92/0x220 [ 1495.427027][ T31] nfc_unregister_device+0x96/0x2a0 [ 1495.432319][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1495.438252][ T31] virtual_ncidev_close+0x56/0x90 [ 1495.443375][ T31] __fput+0x449/0xa70 [ 1495.447623][ T31] task_work_run+0x1d1/0x260 [ 1495.452340][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1495.457719][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1495.463266][ T31] exit_to_user_mode_loop+0xec/0x110 [ 1495.468714][ T31] do_syscall_64+0x2bd/0x3b0 [ 1495.473384][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1495.478720][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.484868][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1495.489707][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.496002][ T31] RIP: 0033:0x7fdd24d8eb69 [ 1495.500497][ T31] RSP: 002b:00007fdd250dfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1495.509050][ T31] RAX: 0000000000000000 RBX: 000000000014810b RCX: 00007fdd24d8eb69 [ 1495.517279][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1495.525418][ T31] RBP: 00007fdd24fb7ba0 R08: 0000000000000001 R09: 0000001b250dfe7f [ 1495.533507][ T31] R10: 00007fdd24c00000 R11: 0000000000000246 R12: 00007fdd24fb5fac [ 1495.541629][ T31] R13: 00007fdd24fb5fa0 R14: ffffffffffffffff R15: 00007fdd250dfca0 [ 1495.549757][ T31] [ 1495.552839][ T31] [ 1495.552839][ T31] Showing all locks held in the system: [ 1495.560819][ T31] 1 lock held by khungtaskd/31: [ 1495.565784][ T31] #0: ffffffff8e139de0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1495.575947][ T31] 5 locks held by kworker/1:1/44: [ 1495.581076][ T31] #0: ffff88823be1c148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1495.592586][ T31] #1: ffffc90000b47bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1495.604621][ T31] #2: ffff888028bb7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1495.613800][ T31] #3: ffff8881457a0518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1495.623983][ T31] #4: ffff888027c96968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1495.633871][ T31] 2 locks held by getty/5600: [ 1495.638769][ T31] #0: ffff88802ff5a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1495.648699][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1495.658960][ T31] 4 locks held by kworker/0:3/5853: [ 1495.664219][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1495.675404][ T31] #1: ffffc900043bfbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1495.688065][ T31] #2: ffffffff8f7e20e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 1495.698376][ T31] #3: ffff88802c991100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1495.708286][ T31] 3 locks held by kworker/0:2/18988: [ 1495.713642][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1495.724950][ T31] #1: ffffc9001071fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1495.738888][ T31] #2: ffffffff8f7e20e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1495.750382][ T31] 1 lock held by syz.3.4945/23651: [ 1495.755716][ T31] #0: ffff88802c991100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1495.765698][ T31] 3 locks held by syz.4.4973/23771: [ 1495.770960][ T31] #0: ffffffff8f56dbf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1495.779429][ T31] #1: ffffffff8f56da08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1495.788577][ T31] #2: ffffffff8f7e20e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1495.798764][ T31] 2 locks held by syz.5.4985/23824: [ 1495.804066][ T31] #0: ffffffff8f56dbf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1495.812488][ T31] #1: ffffffff8f56da08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1495.821766][ T31] 2 locks held by syz-executor/23828: [ 1495.827322][ T31] #0: ffff88807c1f3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1495.837992][ T31] #1: ffffffff8f7e20e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1495.848359][ T31] 2 locks held by syz.2.4993/23857: [ 1495.853658][ T31] #0: ffffffff8f56dbf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1495.862200][ T31] #1: ffffffff8f56da08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1495.871480][ T31] 2 locks held by syz.0.5001/23895: [ 1495.876915][ T31] #0: ffffffff8f56dbf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1495.885330][ T31] #1: ffffffff8f56da08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1495.894515][ T31] 2 locks held by syz-executor/23899: [ 1495.900023][ T31] #0: ffff88802f57e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1495.910187][ T31] #1: ffffffff8f7e20e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1495.920646][ T31] 2 locks held by syz-executor/23901: [ 1495.926151][ T31] #0: ffff88804ac00118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1495.936566][ T31] #1: ffffffff8f7e20e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1495.946762][ T31] 2 locks held by syz-executor/23903: [ 1495.952229][ T31] #0: ffff88806b249118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1495.962772][ T31] #1: ffffffff8f7e20e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1495.972948][ T31] 2 locks held by syz-executor/23905: [ 1495.978542][ T31] #0: ffff88802ae40918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1495.988768][ T31] #1: ffffffff8f7e20e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1495.999291][ T31] [ 1496.001700][ T31] ============================================= [ 1496.001700][ T31] [ 1496.010321][ T31] NMI backtrace for cpu 0 [ 1496.010340][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1496.010363][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1496.010376][ T31] Call Trace: [ 1496.010384][ T31] [ 1496.010393][ T31] dump_stack_lvl+0x189/0x250 [ 1496.010424][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1496.010446][ T31] ? __pfx__printk+0x10/0x10 [ 1496.010487][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1496.010524][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1496.010559][ T31] ? __pfx__printk+0x10/0x10 [ 1496.010591][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1496.010632][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1496.010670][ T31] watchdog+0xf93/0xfe0 [ 1496.010703][ T31] ? watchdog+0x1de/0xfe0 [ 1496.010735][ T31] kthread+0x711/0x8a0 [ 1496.010762][ T31] ? __pfx_watchdog+0x10/0x10 [ 1496.010788][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.010813][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1496.010835][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1496.010858][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.010882][ T31] ret_from_fork+0x3f9/0x770 [ 1496.010917][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1496.010955][ T31] ? __switch_to_asm+0x39/0x70 [ 1496.010978][ T31] ? __switch_to_asm+0x33/0x70 [ 1496.011001][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.011024][ T31] ret_from_fork_asm+0x1a/0x30 [ 1496.011063][ T31] [ 1496.011073][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1496.161077][ C1] NMI backtrace for cpu 1 [ 1496.161100][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1496.161122][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1496.161133][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1496.161159][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 03 17 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1496.161175][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1496.161192][ C1] RAX: d84a32cd03e9cd00 RBX: ffffffff81966cc8 RCX: d84a32cd03e9cd00 [ 1496.161206][ C1] RDX: 0000000000000001 RSI: ffffffff8d97b80f RDI: ffffffff8be2fd00 [ 1496.161219][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 1496.161232][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa07230 [ 1496.161245][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d6b40 [ 1496.161258][ C1] FS: 0000000000000000(0000) GS:ffff888125d79000(0000) knlGS:0000000000000000 [ 1496.161272][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1496.161285][ C1] CR2: 00007f169ecf66c8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 1496.161300][ C1] Call Trace: [ 1496.161309][ C1] [ 1496.161317][ C1] default_idle+0x13/0x20 [ 1496.161340][ C1] default_idle_call+0x74/0xb0 [ 1496.161364][ C1] do_idle+0x1e8/0x510 [ 1496.161392][ C1] ? __pfx_do_idle+0x10/0x10 [ 1496.161426][ C1] cpu_startup_entry+0x44/0x60 [ 1496.161455][ C1] start_secondary+0x101/0x110 [ 1496.161479][ C1] common_startup_64+0x13e/0x147 [ 1496.161508][ C1] [ 1496.163510][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1496.332794][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1496.344274][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1496.354353][ T31] Call Trace: [ 1496.357660][ T31] [ 1496.360619][ T31] dump_stack_lvl+0x99/0x250 [ 1496.365256][ T31] ? __asan_memcpy+0x40/0x70 [ 1496.369889][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1496.375123][ T31] ? __pfx__printk+0x10/0x10 [ 1496.379774][ T31] vpanic+0x27a/0x730 [ 1496.383882][ T31] ? __pfx_vpanic+0x10/0x10 [ 1496.388414][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1496.394032][ T31] ? preempt_schedule+0xae/0xc0 [ 1496.399019][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1496.404524][ T31] panic+0xb9/0xc0 [ 1496.408367][ T31] ? __pfx_panic+0x10/0x10 [ 1496.412880][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1496.418313][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1496.424517][ T31] watchdog+0xfd2/0xfe0 [ 1496.428723][ T31] ? watchdog+0x1de/0xfe0 [ 1496.433078][ T31] kthread+0x711/0x8a0 [ 1496.437336][ T31] ? __pfx_watchdog+0x10/0x10 [ 1496.442031][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.446644][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1496.451882][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1496.457100][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.461704][ T31] ret_from_fork+0x3f9/0x770 [ 1496.466321][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1496.471462][ T31] ? __switch_to_asm+0x39/0x70 [ 1496.476326][ T31] ? __switch_to_asm+0x33/0x70 [ 1496.481101][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.485701][ T31] ret_from_fork_asm+0x1a/0x30 [ 1496.490489][ T31] [ 1496.493919][ T31] Kernel Offset: disabled [ 1496.498260][ T31] Rebooting in 86400 seconds..