last executing test programs: 14.901753076s ago: executing program 2 (id=1995): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x41) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fanotify_init(0x202, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0xfffffffffffffe05}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000340)=@sg0, 0x0, &(0x7f0000000380)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}}, 0x4000) r5 = syz_usb_connect$uac1(0x6, 0xa1, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0xf, 0xc0, 0x39, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x5, 0xff, "6102d1"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x5, 0x3, 0x5, 0x0, 0x9}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x7, 0x1, 0x6, 0x9], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x56, "299ba5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1f, 0xf8, 0x7, {0x7, 0x25, 0x1, 0x82, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0xa, 0x6, {0x7, 0x25, 0x1, 0x40, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0xc, &(0x7f0000000580)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x4, 0x200}]}, 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x446}}, {0x23, &(0x7f0000000780)=@string={0x23, 0x3, "18bb112e0405c0555b66182fd4cad87ddf79d8eea38cebb28939cb98dc6f599d55"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000900)={0x14, &(0x7f0000000840)={0x0, 0x31, 0x2b, {0x2b, 0x9, "aafea1455597a0986ad01d139f6e5d53226782460d64b9841efffc4fdfdc11513870bf315de8d5d2e4"}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="00030400000004630a40"]}, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000ac0)={0x20, 0x81, 0x1, 'L'}, &(0x7f0000000b00)={0x20, 0x82, 0x2, "4a02"}, &(0x7f0000000300)=ANY=[@ANYBLOB="20a30fcd68ed3a493537a23a0108"], 0x0, 0x0}) 14.303538446s ago: executing program 4 (id=1997): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fsetxattr$security_capability(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0x1, &(0x7f0000000240)=""/201, &(0x7f0000000000)=0xc9) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x6, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xa, 0x2a, 0xf, {0x7, 0x25, 0x1, 0x0, 0x9, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb3, 0x3, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4, 0x401}}}}}}}]}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) 13.249160348s ago: executing program 0 (id=2000): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x24}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x34, 0x12, 0xdbf44c00c5896d57, 0x10000010, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000a80)={0xfc, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0xc0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfba2}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xfffe}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf52}, {0x6, 0x11, 0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000d40)={{r7}, "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"}) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7123, 0x40082) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) 11.566775387s ago: executing program 2 (id=2001): r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x24004080) syz_open_dev$video4linux(0x0, 0x7fffffff, 0x80100) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x2f126000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$vim2m(&(0x7f0000000080), 0xa, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000100)=r8, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x7, @empty, 0x10000}, 0x1c) syz_emit_ethernet(0x87, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000003ffffffffffff86dd6001070000511100fc000000000000000000000000000000ff02000000000000000000000000000100040e22005190"], 0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="cd82f2bcef28a39bc9b6c5e0b97be89822b7ffdca1966ed4d6b7c0a800b7f9f902febdf6ef6d10683529e9b6dd40fb10f4656bdb77faeb7630b348e4e26ea6320e562f6587d27e7616827addfe4f8222d04a3a08d1d3aa936a1217b96f94ad17228d8fce21f245a8d32a47c30539a5b8147ead4aa6f316fd55ad92d6fe79abf4d6870f4f37c4f57c911bf16984d32de73e45cebca3b4f0036c58943070a9460b9e02731d972166b61c2b642cc96d383a4d63462949b3f7c2f69985bee948d107747162d4506bae6b9dd5ea65", 0xcc}, {&(0x7f0000000000)="1955733cadaafaf405a763088c56409595a7597f4941927d17b3c18be6bcd255b7ca6e6ce7ce40c34f4e4dd54bc96a345e62f2ea39c14df546885ecb882877", 0x3f}, {&(0x7f0000000380)="cf83cc7bb09062cf2688dca26587ec4d509dd80a38ad87b2e4b20c8f5fda93eb331a993c424d151a6b3ac8c012a4f9ca097f85dd6b705e1731bf615abc4e3404a96a72c052c7dbe0235180560db47e211d777d936997afd66572e6e6bace4bb18ac8cceb599c7e641a9512188111ea66f363629316de6593671d4411ffc23b1ea593bc9b047915cedcacfbf9263d5b33fe5cabe67b6df122622afb482b76a454d3cf42d28ea7f24140d173bd4d220469ee7312110393383e443a5b565ba862cdb018d6788a6bf8a2c07e029c9155f22e61b338ec7a16a9d52d4ca7b8a42ebaa196e83fc755952ffa89ab03d2b4ddf93dd0e196dc6017e0ef", 0xf8}], 0x3}}], 0x1, 0x1) 10.076642232s ago: executing program 3 (id=2003): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000001900)={{0x0, 0x0, 0x80, {0x6000, 0x6000}}, "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", "2362b6072eb7dda483153dd5855f146bb6fce2f2b40a8b43bdfc7cbda84592ed472bff99a72d5856a0364e9df32bd1ed95e02ad91763504d3c92388d30933c8191b0d5b563fb7f98a4b0003e63916421435f75e887128a0bb2c08bed3ebb3324c4a5957de8cc6e6c229a97d72436d2765151873628ccece1713404aebe2f13cc92bff79e85d30b9345a70e959059b1ddba433bbb78b8a7ec67126d5e761b439b0b826ace96cd017186d3fe0bbd116eeb4752c4c01a0a389ba88c1d0b3ce4161e7264a9a023379d660746dd1384ae5e753451c2a8956cf83a433c1f3ae281917e765c42913ff5e16f5b4c5f0d2bac6e4647b8d645e97d8e98b7834720e3ec427280bf431cdd2dcc74780c6ef508327103cd996c5422b3c6ec089902e3c12cc9bb64c90c5e29e01a1c4262e9d2af073e2adac796c7e4ad3d3a45ce38ee656dbc5dab800e585f25f0201acf9a4af187ceb03e67045d8ddc881e390e181241768aa15b03ba4f5b03e8c9eca8125416831e52a0ecc3120a943639cb7bc19e79c747fd3ad23135334b0d70d920f5d0665f98050179370803cae19a1d295e7bf99f003cfd665a8b7b368720f4543c76b521299471ddc4a68370ec49383c344e1c0b7af9ba8bd14e3c1cbe6b43cc17070d5a23f666643fcc33bdc8827ddf3ca6e3a7fe19e459454ee616f06c31422605f09150d9c92df15d069dda1b7ffa25c856aa30e49a6c09138716424a8768a09cd6bd1a9d6cf61c7cb971580b1629890c402362eab348ec8649c26f2fd60a6591eb5a9835ca03988fe7f0e8183726fecb098c2a11070aa274978bdd239bc42d67182e4a79a09866f5bc5e829f33e90cbcf819faf213f46e32156a800c3476e39d7156e1409d3ef56e5ae746a6c56866bb9aa870667e9f856b4062ebd76f1a19b5c94bb4dcdd64ab499884984a0312ae2563a3e12ab5d72e9a038262854b1d68c10d5ec0439b724ee19e06413ae07f417b32e946ee3a075bad73f2dd0ee4cf135985ee81cb4b41c1fa1b28fd2f9f487ad6362126b5b65e03c59f3f510d298b75ccff9484b85d2015bd078e03587e9fa09c20332c5b5c34fb872b070e61ee7e06e3d9c59677365e2d231dbfb2ebd7a573dd81ecdb8c0216973fb456d75f51f43c0dbb9e99973c75f081f341fcb26bf54548137dd90e910c94d784c96044659633297877d372c9de4f8cf2252494a7e3e411545aa1cb38e4b4442288d3faaca2df14ee691dc88c7f4891e5db5788a5375aa5c93a11460aa99c1f4f75038808af3a15c2d9d34a2d15676a187e9d31a6a8087f2386a85f5decbc0b6f89a4b2199d5ca0ac32531f91b935bb778ca19b93642faa3797ff1b4755c1aae586cf2ee3f3d458fe503ce6dafe196542aa2ba98aa56e8d20ccecbc9e7c77f5452999d6509419e135cf26282fed67068f80da6e3787076e6b00d0811fb7ab91f48faff7adbb1556be4ac89e3921db7ff81751479d23cc22ef54bf510308ad693fdc2af6b8efac8137a4e342f141e2cafd7cd9543e8e9a20b4b9b87ef181c4d798e3ad2ef591fb35d96357a33b826a9b755ee4df3e8a5e8ad4a85b6dded3f2d6a23570acfd477fbace6ef80dc154606eb57a94ea2335af20385154d01078069153550a2d930bc845006170dc49a238840f388d3aaf077b44a2edeadb55d08afff5f6a139f5d40f21ae6dff49f8c4e17869f128d89c265955baa725671400eb4a26f798d5127702a00019d89c5a3cc41c912b2d94964aaf6e006eb6bb865f695ac72d819bc3a45b38d8d5a9c9204ac50f7ade739de9ffba7c8516f9db005d886b88f206268ca04914cc2c446cf46e99499736ca9077ee364840053802a595ce4e71d5263517b07c5111701f0a93c402c8923d0cca3e33c5e2a25d599aa0f406810a4e8a02e0b45a9ab43972159e073fcc669b3c2cce962e1c6805bfb3d7370a96a283c0d35e446d37506b2092cc0bf6109655204851702400a7aafbfa24589314c58cdae6de60436bbed1e9904601faf9d350087522d854dcc2d97001e9de7abc4d6f7cf2d0e231f3bb755fb4baa45c7c241a8b481cd9e5637c4f39382dad0803013decd47b7c3b48bfd86fb1e65c92d1257d803e0c6c1cccdb125fe245f65b139195b43644d15f7248d4b9e4d0edca82d8655e2743cc237fbe813506b6dd5534981f908c3a46a067afd9368b95351900f72a8e998abb4a81abcb488bc1b6197ed06664ad844b4735987deb1300bffa10f89d7eb0db853d9c1efd2dbe870aba48f12b135d5f5714fbb2c986898807fb9602e5bcc28ae722c69a85ba92cd4998335c1692e9e7e3eded6630a3f9d5b2b602aef3cb5df62a675c8b0fbc239a797435ecc14bd837fdf25ba48aecec3b062390919ee118747980f724774fda120bd892dd817ffd071e0d2d3f197cab84547af01b324fbb7d2e6d069c17e33d87ac7bffb195c688909b94b3d2745dfa8c8e1bbd7e9527100a2a9c739a14a97f2aedeee6262faa134ad5b11c2e4befa9857e7a6b4b1fd0643dbf16015f32af0fb45aecbf78799e54fb53edd1edbeca2dcb9756bf26c1f82cb3949b5a0ed5404a8c80803ff790ffa0118d5c4b9a8468a2c885d2aaaafdfbfbf733ba48a34e3872736a19c23e7a39425436bd1671c7c74d084c1a352664c8fd5c1ad49912aba587e611728488080b4862d4fbeff2dff2af006793306926a60ad81e2b2df29f33498ea30028d8d428e20e737c78cdab1a4fe89d410772f98c890bfce095b9fe258de142882ede1ca1c1cdcf133530978ceee151d83f2e19ad4d93363a7633fecd54e38eeb1d73dc06ad00ea66bd71bcaab0497dbc1254d2dd17f9b49c3b5dcd6e815320a2e14a587b05714d965b4483a5ef8024e6c2362ea5cdeb9eb174f69e4dd888003bc8dbc811a0466fb3d277bfe769b310d711da03c2ba2de1b7692126f6f8dad39b57fc139673a8eedd5b327e8727a71e52a5bd77ce0b0c2e59385dfa66ad99239964405f3340cc57a6021c5d3308603decf2279da27d0e78b67c97a7ce7d2b5d81b354b7f10343fc81847248373abcff116aae16a29604ac55a7bb3b6ab3651ae56497cdd42a551f53c4abdeb3340988b4f9c6568503684c109a76fa69a15aa3e633328656ebe020f8925e3f87ad94ddd88a139bde2ca9ef96aebbeb295a3779843455c10395318023a1a6d7f7a3069a9199103f39fdd86747f2cc2ddf4529beb3a9d39fab1415eb1041c54abaaa8877b034802c71f07ff145bad2945db7fb59b7c443b52cadebf9cbf08e734ad22d02f056fb2a848fcfb4754fe95bfd6e162f0f88a7a08c5256c1948ade7e208386f6911aec2323a09e4561776fdbfeb114960478d5688b19e1be4a87844ca3ec2c148fe58310c37100e3590535cc6ce7634dfd656bc5f19ed1fc49a33a62d49915811ca7744de4a598df578f5ab392c3bb3c3f08faaeb7b42361f7ef2b23dd323937c4906193c8cc5e1067f613e351269e234af273ff99da3a256282623d4872ee74d80c98fb83b306b5ba0a3e04c66ebe076160931fe44000a4df898ead9a2ac1cbaaee5bfbcbdbb35cae1641da20854607c2696e3921487055e0159ee77dc8e36bc526a25f28b711f680ca40ead79cec10a68f5022ee3ebf922776525e823f09d398e5ddf102bfe3266ffeef5cc72d60181f633201d8847a3671e60b940b46ecd241645b84b88507f3fdf2574c0074a329d7dc72682994ee34a0a6fa15cb7ed6fb583ba77b3576b792334126d2252cec67dc6aad95b10ae0b3b5d0c41c3620f83a5ed7682e801f7f89666ac9305aaf6db1d819ba0ac18c93753a890de1da3ae20de2fc80c9b9c4e27d9955ea92d17656d29c05f095d395240413845446ecb1638b15728f157ca752f0a2fa2930bb74d06f282dc48affc7af87392c52763e836ed072107736b5e9ed564c9ac4f9610044a72f41bb2f2621fa062159f4f40e2a0efb0189c0f33d899480f056100888d86bc99ff8adf84b09d70989df0ac8986b79c49bb92b2e4e972e5541e2627cb9bab88e08eda6e086334007c716d5e7ffcec7f1b230a26cfeb1ecc1293e14ebd935059f7b14030699ce711834c23c12f788ec545d5808e358a98634ef723a58cdc7d88dbf9cf0d32821708283c1b470a4532edcbed795312481be56029e2cc28b4c4f08c30578f481d6e1141344e9eab3e0a5ffcbc53ddeab5fd2f5ecaa650c93eed0e686b7640be29b822d051da28d7efd8be5b71f15b306d3787d0a4950c12d4ffe60f0813881b34ea49c94dc5cfdcad1f5ed179c7aa82f97a6071693e0e539fac0add86cbe2fead94ae54678bea12c9a38093891d484fc853162fd343d451aac4e59ed748859cd78aff7025294597a774d43d637f431ab51be9113c8e3d1365673db252fd90f6f4f3c0ddecf90fca77a86637c63e971bb3a90ee1d08f0f66c46d58a5b206ac4b46e07ccd7c72592b3bca0cac61e742cbdaac5f2e275ad14aee39892e4ae7af722183cadaa42d1bd97d69a71729d8ef3930c48df81721d7c9d046c4e40f0d96eb69eb72f3c0d333708771f916c1e8a317a88c9de076b91e95e57097ddb3e2d67739994729be7bf318b69ea28212e339a829a2db56e2befc7b96b65685065b4c6bee7862d4ecf6586e1258a5c3859afb8a033d70a075d0cb6ac3782cd06d2a63b35c30ce1912475ba1f1b08a3aa593678f3cd56e43a300a8f18826cd40f2826a719208945e6527b29f67e3863cb7d8a0501206951f22b834fcd4ae775719ac1f3f85bd8f8be663e2254a526e5eb9c658ff85ca688a8a2c8f1fdec21b5a438931092b640b24812fdfe217b41d7131b14a84e49eff823e7cfae6b1e863fc37316c03695b44ed1ec3d458027a7334c0fddc98e506e7d900cbe8a785064a35f187d1527d3130ff557591d4a65f61e7ee35dd720a260e06e51f80c6c0e179aa570242300eba1fea1447d88714bab67d5e4228610f9cd84e4d63f8df863f7a9c512025bbcf21cb077239b941ae8472340e597d8487c3d88cc7a91f1d3312e4d62b04e308e8147ea4ef047c09752364e9343b1519b07b8f98bf63008a9f0028e5b0e65191376fa5b02dcbd898da36824f324dc2d7b929d938e3613a879f5de28e404fe3e53a5bcfd2e4f294d20c237ff11eb42f18a9e62ef8c9e4c771c1552ff52a9cb50684341ec016644f58b35f55a4678bc8f95c4193ee7855717ab6fd42f4b9c74e221fd41f14bb7414a25b8625c77b7a4c211f527c816b5be749cf302cc63251f4c19cb5e4c4d20096505feb3e106488a394fb8c13118e64ec6631fef523ee9a71146276f37a893e4abc90dd8ddb81a9ce1cec5dd84744e582c6b0add8f1650db449f4ca777c6b694d66393d469465305956804d29e23959f39998736871319534d76ffac7a96ffb29a68f2c29a6bede2c8b958604e55dfd9a617a1cf128cc0ab24eb307954e04b28bb72931823bd8ea9e8b3412c6987f2a477f5f20cb889a8eb9a1401bfec63f3bdf5ce0352178194bc9f712bafc35b3b05d685a3903dd2b82777b4977ff31401596c9324b8fd598922bf1ebf277b1c0cf65d77f80904826d20d5b01e09ff9062ae4e95e3d2a0add6a275028a4f331dce070e940d2dd3f739aa9c1deaede52e55d81219c3d9ee69c8b418a8bf5406ef1611065127b3571999591cf0906a094316e56f41a4f7036d5391f65b351f931f78414fca504d9c50cfdad2778214af71b194d853133e299ef3196a950dca378485400c26c8363482c4682d697c14c8f67db2e99e90a5b56b70f073f0d6e01acb8e0c1ea87f"}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xffff1000, 0xeeee8000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) socket$inet(0x2, 0x3, 0x5) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.614366115s ago: executing program 4 (id=2004): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000220edf104c05c10687c2010203010902"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x3700000000000000, 0x0) 9.291945968s ago: executing program 1 (id=2005): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x601) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001880)={0x53, 0xfffffffffffffffd, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="4ac34ec4afa6", 0x0, 0xff, 0x2, 0x8000006, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.018994012s ago: executing program 2 (id=2006): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) (async) r2 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x3, 0xc, @mcast2, 0x2b}, 0x1c) (async) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @multicast1}, 0x10) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000)=0x8, 0x4) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000980)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYRES8=r7, @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x4000601}, 0x0) (async) r10 = dup(r3) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) landlock_restrict_self(r10, 0x4) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) 8.618976082s ago: executing program 0 (id=2007): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="00000111bdd7bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a3000000000090002"], 0x2c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.531382744s ago: executing program 2 (id=2008): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0xe2c, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000500000000000000740000001801000020696c2500000000002020207b1ad7ff00000000bfa100000000000007010000f837974fd76b540a8d000000b7030010a4160000850000000600000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x2d, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r0, 0x0, 0x0) 6.39539711s ago: executing program 1 (id=2009): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) recvmmsg(r1, &(0x7f0000000140), 0x0, 0x100, &(0x7f0000000200)={0x77359400}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xfec8}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x200008d}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000002c0)=[@uexit={0x0, 0x18}, @code={0x1, 0x71, {"b8010000000f01d9410f07643e660f38812166baf80cb82015a589ef66bafc0cb8a9f30000efb9800000c00f3235004000000f3042d36309f3430f09b8010000000f01d9b99a080000b800300000ba000000000f3042819a4400000000000000"}}, @uexit={0x0, 0x18, 0x4800000000}, @cpuid={0x2, 0x18, {0x2, 0x80000001}}, @cpuid={0x2, 0x18, {0x3, 0x4}}, @cpuid={0x2, 0x18, {0x3, 0xc}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0x3, 0x9}}, @cpuid={0x2, 0x18, {0x8, 0x3d}}, @code={0x1, 0x5d, {"f30f01e867400f79a50400000066b805010f00d8450f01c4ffa50000008064f20f1afaf242d90453c4a2099ef448b807000000000000000f23c00f21f83502000f000f23f80f0095b5000000"}}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x8e, {"440fc73748b8862e0000000000000f23d00f21f835000000010f23f8b805000000b9005000000f01d90fc71e660f76ac272c4b1717f00fbabf54f54a780ec744240076000000c74424020a000000ff2c2466baf80cb889050a8def66bafc0cb02eee0f790748b8d8c90000000000000f23c80f21f8350000c0000f23f8"}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x6, 0xa0f0}}, @cpuid={0x2, 0x18, {0x4735, 0x2}}, @code={0x1, 0x4f, {"0fc5d7000f0966baa10066ed420fc71a028229330000b900000040b801000000ba000000000f30640f009e8000c0fe0f01c966b829008ec066b835008ee0"}}, @cpuid={0x2, 0x18, {0x3, 0x4}}, @cpuid={0x2, 0x18, {0x0, 0xf99}}, @uexit={0x0, 0x18, 0x6}], 0x313}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) (async) recvmmsg(r1, &(0x7f0000000140), 0x0, 0x100, &(0x7f0000000200)={0x77359400}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async) accept$alg(r3, 0x0, 0x0) (async) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) (async) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xfec8}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x200008d}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000002c0)=[@uexit={0x0, 0x18}, @code={0x1, 0x71, {"b8010000000f01d9410f07643e660f38812166baf80cb82015a589ef66bafc0cb8a9f30000efb9800000c00f3235004000000f3042d36309f3430f09b8010000000f01d9b99a080000b800300000ba000000000f3042819a4400000000000000"}}, @uexit={0x0, 0x18, 0x4800000000}, @cpuid={0x2, 0x18, {0x2, 0x80000001}}, @cpuid={0x2, 0x18, {0x3, 0x4}}, @cpuid={0x2, 0x18, {0x3, 0xc}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0x3, 0x9}}, @cpuid={0x2, 0x18, {0x8, 0x3d}}, @code={0x1, 0x5d, {"f30f01e867400f79a50400000066b805010f00d8450f01c4ffa50000008064f20f1afaf242d90453c4a2099ef448b807000000000000000f23c00f21f83502000f000f23f80f0095b5000000"}}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x8e, {"440fc73748b8862e0000000000000f23d00f21f835000000010f23f8b805000000b9005000000f01d90fc71e660f76ac272c4b1717f00fbabf54f54a780ec744240076000000c74424020a000000ff2c2466baf80cb889050a8def66bafc0cb02eee0f790748b8d8c90000000000000f23c80f21f8350000c0000f23f8"}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x6, 0xa0f0}}, @cpuid={0x2, 0x18, {0x4735, 0x2}}, @code={0x1, 0x4f, {"0fc5d7000f0966baa10066ed420fc71a028229330000b900000040b801000000ba000000000f30640f009e8000c0fe0f01c966b829008ec066b835008ee0"}}, @cpuid={0x2, 0x18, {0x3, 0x4}}, @cpuid={0x2, 0x18, {0x0, 0xf99}}, @uexit={0x0, 0x18, 0x6}], 0x313}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 6.120346404s ago: executing program 4 (id=2010): socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040004) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="020000000400000008000000010000008000000007a961ea466f87f435112822ba816d9ba5884faf6a3fe4685a7585d6864f737150a45e8a1113e1", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="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"], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44008) syz_emit_ethernet(0xa3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r3 = socket$inet6(0xa, 0x5, 0x80000001) futex(&(0x7f0000000140)=0xfffffffb, 0x5, 0xffffffff, 0x0, &(0x7f00000001c0), 0xfffdffff) connect$inet6(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) socket$netlink(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) 5.987932207s ago: executing program 1 (id=2011): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000001c0)='./file0\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x4aa) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}}, 0x0) userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYRES64=r7], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) unshare(0x62040200) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x288302, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 5.765590006s ago: executing program 3 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x5}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0xfffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="c01f4fa1d77a3ecd0a065d6f301855fb07911eb36a8c15cb6ac39d77cd0af27a094d5ce9fa2c71b9963ca4915f4369fc6a0001e8327e718341071ff860c7fd7dc933929098ff1a54cab998cf235003aca2a8dd7f71a2096c9cbe708bd37e7a0e17fa576fb56d1595ccc29b70e94f96255c84d8ca0fc25173d03737ae655f1dcbfa67c1ab0b2997f9a2b8c6a03d7f1676ca2cbe19793c35f0aec3eb9ff9142f1aa9fa8f64afed2f1a7fda75aa67beb23bad90b0681f72bf23bbd08a2b900eddd8bd6e926b8dc3f8722d0772486c517a94631e114776656581bead0cb6585b8a4c9ee6f8ee8588133e", 0xe8}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}], 0x58, 0x40}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="94", 0x1}, {&(0x7f0000000540)="e01710c895d88cf2ba9b364fc1920d6ed349587e6c10dd99d12c5f5af2a3f83fa8b2f918c7cf8d8a1c407171d3b6fb745bd24cff2f5ae2fc49027a6d3371ca4257251cf089a809b3c2c7e4cf7ff593678be0c0558525100dbf922b107cbfc2801392c9262314b8082e8290c2c57566cd8216130a0d660de82f1d1dac5428c89403fced9bc81cf01f74781035112765e306781557cb8cf6d7e1dea1942175b04796d308252eb0202a2310d8c8c4e5", 0xae}, {&(0x7f0000000600)="e0feed3d334ecdbf41b3c55922fe9a64a3d1ede2241e2f6e523e70af3350d543909571f7b040bb2029159c0e15e6bc415c9fd52065ce3acfacfdce1a1c72a93a0b34556628e3f468283e", 0x4a}, {&(0x7f0000000680)="8b0a935a22924495dd7555ca8596151fc132cb2df558f9961f33bb01c3127e03252ad50429cac9a0607950e9a920b33e7a6dcf7944ed6bcd5b240725cf377e7c3f27f063e103699f0361542061bfe0c0d1e89cf13a086631a168965a", 0x5c}], 0x4, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff, r2, r3]}}], 0xc0, 0x8000}}], 0x2, 0x10048045) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x1000004fe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4.989918185s ago: executing program 0 (id=2013): syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r3, 0x541e, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x161340) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000480), 0x0, 0xaa, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000800000900020073797a3000000000240007800c00028008000140e00000020c00018008000140e0000002050014001f00000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x799bfd, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') epoll_create(0x4) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.861889152s ago: executing program 2 (id=2014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='(', 0x1, 0x24001850, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000200)={0x0, 0x9}, 0x8) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYBLOB="0000000000000100b706000014000000b703000000060000850000002f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x2000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.171979754s ago: executing program 3 (id=2017): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18, 0x6, 0x0, {0x84}}, 0x18) 3.12733566s ago: executing program 3 (id=2018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x5}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0xfffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="c01f4fa1d77a3ecd0a065d6f301855fb07911eb36a8c15cb6ac39d77cd0af27a094d5ce9fa2c71b9963ca4915f4369fc6a0001e8327e718341071ff860c7fd7dc933929098ff1a54cab998cf235003aca2a8dd7f71a2096c9cbe708bd37e7a0e17fa576fb56d1595ccc29b70e94f96255c84d8ca0fc25173d03737ae655f1dcbfa67c1ab0b2997f9a2b8c6a03d7f1676ca2cbe19793c35f0aec3eb9ff9142f1aa9fa8f64afed2f1a7fda75aa67beb23bad90b0681f72bf23bbd08a2b900eddd8bd6e926b8dc3f8722d0772486c517a94631e114776656581bead0cb6585b8a4c9ee6f8ee8588133e", 0xe8}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}], 0x58, 0x40}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="94", 0x1}, {&(0x7f0000000540)="e01710c895d88cf2ba9b364fc1920d6ed349587e6c10dd99d12c5f5af2a3f83fa8b2f918c7cf8d8a1c407171d3b6fb745bd24cff2f5ae2fc49027a6d3371ca4257251cf089a809b3c2c7e4cf7ff593678be0c0558525100dbf922b107cbfc2801392c9262314b8082e8290c2c57566cd8216130a0d660de82f1d1dac5428c89403fced9bc81cf01f74781035112765e306781557cb8cf6d7e1dea1942175b04796d308252eb0202a2310d8c8c4e5", 0xae}, {&(0x7f0000000600)="e0feed3d334ecdbf41b3c55922fe9a64a3d1ede2241e2f6e523e70af3350d543909571f7b040bb2029159c0e15e6bc415c9fd52065ce3acfacfdce1a1c72a93a0b34556628e3f468283e", 0x4a}, {&(0x7f0000000680)="8b0a935a22924495dd7555ca8596151fc132cb2df558f9961f33bb01c3127e03252ad50429cac9a0607950e9a920b33e7a6dcf7944ed6bcd5b240725cf377e7c3f27f063e103699f0361542061bfe0c0d1e89cf13a086631a168965a", 0x5c}], 0x4, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff, r2, r3]}}], 0xc0, 0x8000}}], 0x2, 0x10048045) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x1000004fe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.720799045s ago: executing program 4 (id=2019): r0 = memfd_create(&(0x7f0000000000)='-\x00', 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x380, 0xb, 0x8, 0x201, 0x70bd2c, 0x25dfdbfb, {0x5, 0x0, 0x5}, [@generic="5b1832097243469b406eb07ec9ee89a323b2c46d0c794995cae0debacfd50a960e53abae02e3e37144c392a72444ce51c0406e0ce8ef9391fb5c21ea482bf570ae525b78a94560d76a272f86b76f52d32d6c4b9e7251b6", @typed={0x8, 0xc0, 0x0, 0x0, @uid=r2}, @generic="8e4e5f40a677c233b1e4f98a5b8a6ae380f2c0fccae68b5a46161126c28ff57ae2e7a95d786473a649e2419cfd80a7cbe4a3f26b645cb3b6bc18963d1e93f14afd2b4553339f014b3252b7555871c1abd035ba8ca202b21a6cb33ea0af0d841d8cf8dfc522c5aeb0e58339b2152726e136fe97fb99acd5ce2c481c691e47e05267d4c73c7d3c7c25915f951a46f27b847c46861263ac07992f44d1062a64fd758440526bd00cdffe", @nested={0xbe, 0xf1, 0x0, 0x1, [@generic="492f9febfbe1ca9ec884da320009e06df1cd8be30253f1d31f4f070720081524ad6c40b520d068310943973e35390de6a38d8966631c4adeb1d24ec9dcce2e02eb256ff4cad3b6a124b1e5702a48e7f99d05c5b2c1deedf007556554dd6ee66854db707fe299abe630ef7f0bbddb4e5a022da0bead420d28e14301bd548b0e56bbcd521c09bd541693915464b8949192b03a7fed02694aa79b6f1898291163bdb9deae4c696b4ecbc11415422c618ff62eeb3be64c6f2a4a9a5d"]}, @nested={0x171, 0xc8, 0x0, 0x1, [@generic="0a2f47d281e386ed2eddc7adff247230fff0e6c406f582667f993cdb985424dc769fa44f5c95fe9e817c79c48d35985a3e6e2fe98df2376bd092eb5677a283c84597db0538194fc09ac353a215bc6a645487e06425e706d5f12c4ee37ca1c03ad01fdc10b4fa52786475f9d9c88027c44a3b4c0a827bd54e55530b5255ecc06e9075405a422564f9e3c9e03ecad46ac4f5cf60e7540eba2bbd30ade9f79030ae30", @nested={0x4, 0x13f}, @nested={0x4, 0x59}, @generic="8132b4582eff153a942de2740e0b2107e8e447b5d85e13fa2b105efe8858f07f447ef672754c6ef236eacf583fa0d3966f9dd839a7f3d6324bb3d5110c12ede93d44fc61a8dc64a42c820709f66c3370ef0510cc58fa927785ad22b337de963caa477405cc9316bc2e2a3639f8a5f6ce98d25091340916cfacac5a31f25e47190b35bb19739ab9b5e6364df40c53a0e85154cc9d6c9fc964fe432fd69ee5ee1eede2e0bdc15c9cbdcb284e1ce161642b6751c1682a6e1d45", @nested={0x4, 0xc}, @nested={0x4, 0x45}, @nested={0x4, 0xf2}]}, @generic="82b5db1f94733249d00260f0357bacf94913af3de8634ffe387c82565a94ad4e052be6891309139e", @typed={0x8, 0x11f, 0x0, 0x0, @str='\'*.\x00'}]}, 0x380}, 0x1, 0x0, 0x0, 0x4004}, 0x80) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/kexec_loaded', 0x1, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000940)={r0, 0x5, 0x9, 0x4}) mount$fuse(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x22802, &(0x7f0000000a00)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@default_permissions}], [{@context={'context', 0x3d, 'root'}}]}}) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000d40)=0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000d80)={0x0, 0x0}) read$FUSE(r4, &(0x7f0000000dc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000002e00)=0x0) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002e80)='./cgroup/syz0\x00', 0x200002, 0x0) r12 = syz_clone3(&(0x7f0000002ec0)={0x8100000, &(0x7f0000000b00)=0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000b80), {0x3d}, &(0x7f0000000bc0)=""/132, 0x84, &(0x7f0000000c80)=""/131, &(0x7f0000002e40)=[r6, r7, r9, r10, 0x0], 0x5, {r11}}, 0x58) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000003300)={0x0, 0x2, 0x0, &(0x7f0000002f40)=[{}, {}], 0x3, 0x0, &(0x7f0000003000)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000003180)=[{}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000003280)=[{}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000003440)={0x80000000, &(0x7f0000003380)=[{}, {0x80000000, 0x0}], &(0x7f00000033c0)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000003b00)={0x0, 0x6, 0x0, &(0x7f0000003480)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000036c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000003a40)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x3, 0x0, &(0x7f0000003a80)=[{}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000003b80)={{r14, r15, 0x1, [0x10, 0x400]}, {0x80000000, r16, 0x2, [0xb, 0x5]}, 0x4, [0x7, 0x1]}) (async) r17 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_generic(r17, &(0x7f0000003c80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x14, 0x21, 0x2, 0x70bd2b, 0x25dfdbfb, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20004815) (async) r18 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003f00), 0x2, 0x0) sendmmsg$unix(r4, &(0x7f0000003fc0)=[{{&(0x7f0000003cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003d40)="3f97a193914115fe97d8a699e72873aeaa1d028a4436425cb8e0a7d3d031e438ab03ba30c61fd9b5429050d42bc48054426500a9ae2058680eb2ce2e799e0d6f1af49dec9f948e5cb1908ded311b1bb4d1", 0x51}, {&(0x7f0000003dc0)="5e5879508fe616ebf56da64a042836b1164d2e9001fe9c10407e7ea8a3589754f94ec8d69f72b3154facd1d5e41d13ff4c7dda503ec5dc995481413121e1c7fa32b4de158188dc8660332f35e140eaee9aaae9b0aa999db3bc86d2b1f13e36bea7408c1b0f9ead58a9e7e092f6bc4db9a26f8ac266984698517d74db6ddf5d448b8922a69583feb21f6f6e1f6f40fbf660c52d2fd7e39d4a30d42fc59c6a61dd5bff616cf5924da5f055066c81a7f7df64dee7bc2eaa0c22e458775a8d75ff7a2ec47a5eb35c454243ab067c1f4719a18d4454362e056627997e059a58", 0xdd}], 0x2, &(0x7f0000003f40)=[@rights={{0x24, 0x1, 0x1, [r0, r18, r13, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, r2, r8}}}, @cred={{0x1c, 0x1, 0x2, {r12, r2, r8}}}], 0x68, 0x8000}}], 0x1, 0x1) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f00000040c0)={0x0, 0x7, &(0x7f0000004000)=[0xd0, 0x5, 0x0, 0x5, 0x8000, 0x8000, 0x5f2f], &(0x7f0000004040)=[0x9, 0x2], &(0x7f0000004080)=[0xf]}) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f00000054c0)=[{0x2, 0x1, 0x0, &(0x7f0000004280)=[{&(0x7f0000004100)=""/130, 0x82}, {&(0x7f00000041c0)=""/132, 0x84}], &(0x7f00000042c0)=[0x1, 0x5a1, 0xfffffffffffffffa, 0x7f141ccf, 0xff, 0x3, 0xbeb, 0x2d, 0xfff]}, {0x2, 0x1, 0x0, &(0x7f0000005440)=[{&(0x7f0000004340)=""/227, 0xe3}, {&(0x7f0000004440)=""/4096, 0x1000}], &(0x7f0000005480)=[0x1, 0x3, 0x0, 0xffffffff, 0x7, 0x0, 0x5, 0x4]}], 0x2) (async) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000005500)={0x0, @reserved}) openat$kvm(0xffffffffffffff9c, &(0x7f00000055c0), 0x2000, 0x0) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x338) (async) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000005600)={0x400, 0x3, 0x8, 0x200, 0x12, "7349f717302ed343"}) (async) write$cgroup_int(r4, &(0x7f0000005640)=0x2, 0x12) 1.643983968s ago: executing program 0 (id=2020): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x200, 0x3, 0x288}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r1, r2, 0x0) socket$inet6(0xa, 0x3, 0xff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, &(0x7f0000000040)) 800.559365ms ago: executing program 4 (id=2021): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000fe0100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 690.921193ms ago: executing program 0 (id=2022): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) socket$inet_tcp(0x2, 0x1, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x9, 0x1, 0x1000, 0x6, 0x6, "0d728d1c1bb23d469891ae65d4f4852768b9c0"}) 523.623667ms ago: executing program 1 (id=2023): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x20, 0x40eb8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xfffffffffffff3d9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x18, 0x22, 0x601, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x0) r7 = semget$private(0x0, 0x4, 0x9c) semctl$SEM_STAT(r7, 0x3, 0x12, &(0x7f0000000440)=""/40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x2, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x7808, 0xffffffff, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x80, 0x8, 0xff00000, 0x5, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast2, @local, {[@noop]}}}}}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400059000c08000240000000030900010073797a30"], 0xf8}}, 0x0) 506.703439ms ago: executing program 3 (id=2024): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d7af4b6", 0x14}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000001400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 374.913045ms ago: executing program 4 (id=2025): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000, @rand_addr, 0x8000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c", 0xa6, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x200100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r5 = getpid() syz_pidfd_open(r5, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002200)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0x5df080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) read$FUSE(r6, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004340)="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", 0x2000, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x8001, 0x1, 0x0, {0x1, 0xfffffffffffffffe, 0x4000000000003, 0x219, 0x2, 0xc, 0x1000, 0x0, 0x1, 0xc000, 0xbca4, r8, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = fsopen(&(0x7f00000021c0)='romfs\x00', 0x1) writev(r10, 0x0, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r14 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r15 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r14, r15, r15}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) getresuid(&(0x7f0000000140), &(0x7f0000000380), &(0x7f00000003c0)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000002c80)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000002540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002800)=[{&(0x7f00000025c0)="584d92e4f1d799645d0091cdd536ef0bf3d02ebb8c8b380e3582f92d0ca0b61ed7dc5c08c49eaa0af078f34ad92594e1b125605aeaf4220d06bc3a3d3d74bd75b7568cef7e5148e7be4b4bc815e31ada38183779", 0x54}, {&(0x7f0000002640)="a2383d75d4e93cb5cc31bf3ef58a14173604b997b6c9216a97e39e4f77f63d36e3ac638d4bc09c2ed42a52a7e27871256fadb4d32f4c65913bd754291276dcea0349f74bf1fd35c31a985f00c37d91e41b96e2860c42e9b670c00592d77494fe366f73c12f687276b816a015ca84fe37a7dd00eeb6e8e0228806aacc173eff42c63549a829a3538d0f169279723544eb8209efd281d8caf3e56fb4100934217bf7ea4fb76e6a9af1b08401ea7de404e981060a3807427c8de7463cbf30", 0xbd}, {&(0x7f0000002740)="ca38313d291c909ab86254231ebbecfb71fef3cd5fc21c2a947fd8328a08e0d72b0c2d4a1e1479f616d0352f16344bf892c6acba8c4ebfa7d77dd5fef6d3a04110fae6344198f71aaea6f193efe15c79a2a052deff9e8f2b21b4925a17e9c6708f932af7d3749250876a91fa8a6704212e6b9638b8f8241127fe73d062b7729d12d1d851da301d", 0x87}], 0x3, &(0x7f0000002d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r17, r16, r13}}}], 0x98, 0x4000080}, 0x40) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x4c8, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x4b0, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}, @typed={0x8, 0x3, 0x0, 0x0, @pid=r3}, @nested={0x49e, 0x144, 0x0, 0x1, [@typed={0xf8, 0x133, 0x0, 0x0, @binary="8202b9264b4e75a7680835e80dcd9bbe7867a787d3b547f67d78bc6262f414854cd22bd3fbb7d0c51e91d03f7f8d779408290d6e0887670c510e6005c3c6ff428623afa396fb041ed0b8f0d973ce6d122912877284177d56b9805c1c74d27ed06cf32717d045e50f73a3197ffd50406537ca9cc610ccd4128ab5a859a1fd657884bcc4c03a9e9b5f7b20d05d397715a376e63560109862a977eff74eeded2eca6cdb0dcb5fbf2ca3ffff7348acd0818b496cfc3b57730427480ab0a1715e1b23b2a2033bd71e7c4aa7c45aeb2bddf8de73c142b2e62303c19bf332f99565cb1801d3438d4b4753fe74c75293f931d22b40a87f47"}, @generic="27eb0f3eff07d0f72c5c63c6efdd3013db64dfd257811e97b75a2113d6d8d6a8f6ea700a7ff683f9c5f2935d82dc070c0f202f2e11aaa762572e21a34cfc84559e9a95d40c199c4d7d9783eb7a7ae45cadf9346d9054fc9aa3cefc9004e685ad49d78a59b7105d0bc441fbce4f421e02a4136efa18974d2f3c979bdc76e440eeaf9c8d9f4d3f763bc02784c3589059c12e5f7b042ae96ca62d5303b7af628146e369a536f0b9b970edf0bdeadeea79571e949772dafd0b222c2489c9990a88456534a83c2c512a3294ac866ac068895aeaf83ca91e945f0b1a6c2c19ce4fc9f0af4ac44fe9c1", @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0xdc, 0x14b, 0x0, 0x1, [@typed={0x8, 0xdb, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x92, 0x0, 0x0, @u32=0x8001}, @typed={0xac, 0xf5, 0x0, 0x0, @binary="63751907283232f5198fe35568501665aa5a02acae390a5d9817008182e0583c29381b1c00e80719a60a3f0fcdc6cb7075f300397f58bde5d3548e47cc67edc8d2009ff20acc308a3385b2226cdc64768907c07eef84b5d14cd327af7d233b60d36dc611a57747fa259feed19aa8bb0598497f78695266baf7a1f6b297df8a672e06f8398d0d628f3de42bff3c43ae5ffa29c43354988a8b128c385da1a9dd29c0de60ee37b47772"}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x12d}, @typed={0x8, 0x23, 0x0, 0x0, @uid=r16}, @typed={0x8, 0x14c, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x1ce, 0x128, 0x0, 0x1, [@nested={0x4, 0x34}, @generic="5141c843ce397f52ec838c9946d4773b462b6d0c6b6fc0e18379e5de704ce95c03adf981879a43772176593fd61ab64e974c5b5d86e4487aee6e9b0b4ec602bfe78c3eea9d3718336dbf224f3c9dba68ea6c493d937da16126c00c65d8b72adc8c259e200e1f46e181dc07fe23f33f8863f45592c42596a93835b29eb58e3d448d0ea43ed179f9f47479311618fb3dc2c7419d983df9494c77fd0972ee0fd00db972d7797f12dba16786e8f1f3743e0626d5241bc5eee745b40d", @nested={0x4, 0x124}, @typed={0x14, 0x130, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="9d643a617a2a1b3dd3fc46bbc08837e272d04f3c8bd77d517f2461096e3913336ff586b90126e44f2b88c730639b49dbdaeeac8fae2fbe4e254c49bc7af2c7df9dfda1e0927f04816daaad373c05d5bef57e99ceaa5fea54b0a63458984f4ae4c3fd3ec03d6a28b3c56418e714d1d0eeeb7fa1d942a5fd4f818072668d92cc409dfe254cefcb5c0bbda456f1c18520161e63b770c8765d3ec2d005a4cfd1f3d356ea39c06ecb7bd61dc53a2fd184dca83cc02d39ce1de8a371f91a7104685150abc14e3e4d0a273f5416cce27b8e9c1942d0cdc5a4000572fd0ce0388210656ef7b0f9888af66b0551316ebac9c55c41c1507bc7"]}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) 247.674048ms ago: executing program 0 (id=2026): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cef8bd08410e207569000102030109021b00010000000009040002016a2ff6000905010800020b0864dd61edf53e8057102d0d629eadea3e7a4bcd5ecd4733b103f9abe36b44b72c1507b84da611f200a39907e5c05b864f88c296b01a21f55a911b2e7a63aec5040000001721"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0022160000009b7f17a313870cbb7ab989832e08cd0f"], &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x15a}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="207b00f00000"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/397], &(0x7f0000000680)={0x20, 0x3, 0x1, 0x5}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000400)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="000ba90000008e099fee84b64bde36f9962690cf88fe409431d4430ba51d8505c0df1160dca80bf8ef7e7c9c1b557cc3839ffd4a0f9c80df570011284d5698f1999fbcb8f8a205f638aee6e40894b0bde0db41224002f6f79222d0c28755963e93c54de6660f8d619cb556c4e9b4483b193de415c39c663fd08361b7ab"], &(0x7f0000000300)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) 153.290074ms ago: executing program 1 (id=2027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x5}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0xfffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="c01f4fa1d77a3ecd0a065d6f301855fb07911eb36a8c15cb6ac39d77cd0af27a094d5ce9fa2c71b9963ca4915f4369fc6a0001e8327e718341071ff860c7fd7dc933929098ff1a54cab998cf235003aca2a8dd7f71a2096c9cbe708bd37e7a0e17fa576fb56d1595ccc29b70e94f96255c84d8ca0fc25173d03737ae655f1dcbfa67c1ab0b2997f9a2b8c6a03d7f1676ca2cbe19793c35f0aec3eb9ff9142f1aa9fa8f64afed2f1a7fda75aa67beb23bad90b0681f72bf23bbd08a2b900eddd8bd6e926b8dc3f8722d0772486c517a94631e114776656581bead0cb6585b8a4c9ee6f8ee8588133e", 0xe8}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}], 0x58, 0x40}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="94", 0x1}, {&(0x7f0000000540)="e01710c895d88cf2ba9b364fc1920d6ed349587e6c10dd99d12c5f5af2a3f83fa8b2f918c7cf8d8a1c407171d3b6fb745bd24cff2f5ae2fc49027a6d3371ca4257251cf089a809b3c2c7e4cf7ff593678be0c0558525100dbf922b107cbfc2801392c9262314b8082e8290c2c57566cd8216130a0d660de82f1d1dac5428c89403fced9bc81cf01f74781035112765e306781557cb8cf6d7e1dea1942175b04796d308252eb0202a2310d8c8c4e5", 0xae}, {&(0x7f0000000600)="e0feed3d334ecdbf41b3c55922fe9a64a3d1ede2241e2f6e523e70af3350d543909571f7b040bb2029159c0e15e6bc415c9fd52065ce3acfacfdce1a1c72a93a0b34556628e3f468283e", 0x4a}, {&(0x7f0000000680)="8b0a935a22924495dd7555ca8596151fc132cb2df558f9961f33bb01c3127e03252ad50429cac9a0607950e9a920b33e7a6dcf7944ed6bcd5b240725cf377e7c3f27f063e103699f0361542061bfe0c0d1e89cf13a086631a168965a", 0x5c}], 0x4, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff, r2, r3]}}], 0xc0, 0x8000}}], 0x2, 0x10048045) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x1000004fe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=2028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x5}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0xfffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="c01f4fa1d77a3ecd0a065d6f301855fb07911eb36a8c15cb6ac39d77cd0af27a094d5ce9fa2c71b9963ca4915f4369fc6a0001e8327e718341071ff860c7fd7dc933929098ff1a54cab998cf235003aca2a8dd7f71a2096c9cbe708bd37e7a0e17fa576fb56d1595ccc29b70e94f96255c84d8ca0fc25173d03737ae655f1dcbfa67c1ab0b2997f9a2b8c6a03d7f1676ca2cbe19793c35f0aec3eb9ff9142f1aa9fa8f64afed2f1a7fda75aa67beb23bad90b0681f72bf23bbd08a2b900eddd8bd6e926b8dc3f8722d0772486c517a94631e114776656581bead0cb6585b8a4c9ee6f8ee8588133e", 0xe8}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}], 0x58, 0x40}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="94", 0x1}, {&(0x7f0000000540)="e01710c895d88cf2ba9b364fc1920d6ed349587e6c10dd99d12c5f5af2a3f83fa8b2f918c7cf8d8a1c407171d3b6fb745bd24cff2f5ae2fc49027a6d3371ca4257251cf089a809b3c2c7e4cf7ff593678be0c0558525100dbf922b107cbfc2801392c9262314b8082e8290c2c57566cd8216130a0d660de82f1d1dac5428c89403fced9bc81cf01f74781035112765e306781557cb8cf6d7e1dea1942175b04796d308252eb0202a2310d8c8c4e5", 0xae}, {&(0x7f0000000600)="e0feed3d334ecdbf41b3c55922fe9a64a3d1ede2241e2f6e523e70af3350d543909571f7b040bb2029159c0e15e6bc415c9fd52065ce3acfacfdce1a1c72a93a0b34556628e3f468283e", 0x4a}, {&(0x7f0000000680)="8b0a935a22924495dd7555ca8596151fc132cb2df558f9961f33bb01c3127e03252ad50429cac9a0607950e9a920b33e7a6dcf7944ed6bcd5b240725cf377e7c3f27f063e103699f0361542061bfe0c0d1e89cf13a086631a168965a", 0x5c}], 0x4, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff, r2, r3]}}], 0xc0, 0x8000}}], 0x2, 0x10048045) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x1000004fe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): .042972][ T10] usb 2-1: config 0 descriptor?? [ 547.066800][T11684] vcan0: tx drop: invalid da for name 0x00000000000006f9 [ 547.258182][ T5913] usb 1-1: USB disconnect, device number 75 [ 548.395524][T11693] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.403055][T11693] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.459377][T11693] batman_adv: batadv0: Interface deactivated: dummy0 [ 548.541605][T11706] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 548.617084][T11693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.645746][T11693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.714302][T11718] futex_wake_op: syz.3.1639 tries to shift op by -33; fix this program [ 548.724224][T11706] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.837769][T11706] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 548.847487][T11706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 548.856623][T11706] usb 3-1: Product: syz [ 548.861536][T11706] usb 3-1: Manufacturer: syz [ 548.882913][T11706] usb 3-1: SerialNumber: syz [ 549.324416][T11693] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.368335][T11693] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.403809][T11693] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.430050][T11693] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.525274][T11718] netdevsim netdevsim3: Direct firmware load for . [ 549.525274][T11718] failed with error -2 [ 549.536408][T11718] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 549.536408][T11718] [ 549.990614][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 550.060756][T11706] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 550.104305][T11713] usb 2-1: USB disconnect, device number 79 [ 550.123553][T11693] syz.0.1637 (11693) used greatest stack depth: 19928 bytes left [ 550.185318][T11706] usb 3-1: USB disconnect, device number 67 [ 550.220845][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 550.228332][ T9] usb 5-1: config 0 has no interfaces? [ 550.268330][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 550.271000][T11706] usblp0: removed [ 550.320446][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.371340][ T9] usb 5-1: Product: syz [ 550.378696][ T9] usb 5-1: Manufacturer: syz [ 550.394725][ T9] usb 5-1: SerialNumber: syz [ 550.433569][ T9] usb 5-1: config 0 descriptor?? [ 550.478805][T11738] loop6: detected capacity change from 0 to 7 [ 550.504338][T11738] Dev loop6: unable to read RDB block 7 [ 550.513623][T11738] loop6: unable to read partition table [ 550.519640][T11738] loop6: partition table beyond EOD, truncated [ 550.535435][T11738] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 550.610321][T11725] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 551.106557][T11725] usb 1-1: Using ep0 maxpacket: 16 [ 551.118033][T11725] usb 1-1: config 0 has no interfaces? [ 551.129512][T11725] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 551.143334][T11725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.167634][T11725] usb 1-1: Product: syz [ 551.178556][T11725] usb 1-1: Manufacturer: syz [ 551.198988][T11725] usb 1-1: SerialNumber: syz [ 551.214543][T11696] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 551.241130][T11725] usb 1-1: config 0 descriptor?? [ 551.399855][T11696] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 551.449108][T11696] usb 4-1: config 0 has no interface number 0 [ 551.470840][T11696] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.533570][T11696] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 551.596455][T11696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.632718][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.677865][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.698037][T11696] usb 4-1: Product: syz [ 551.739373][T11696] usb 4-1: Manufacturer: syz [ 551.763371][T11696] usb 4-1: SerialNumber: syz [ 551.832481][T11696] usb 4-1: config 0 descriptor?? [ 551.864315][T11696] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 553.280372][T11713] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 553.318450][T11765] tty tty25: ldisc open failed (-12), clearing slot 24 [ 553.430543][T11713] usb 2-1: Using ep0 maxpacket: 32 [ 553.437921][T11713] usb 2-1: config 0 has an invalid interface number: 240 but max is 0 [ 553.451235][T11713] usb 2-1: config 0 has no interface number 0 [ 553.492928][T11713] usb 2-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=c5.cf [ 553.514183][T11713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.539672][ T9] usb 5-1: USB disconnect, device number 79 [ 553.581885][T11713] usb 2-1: Product: syz [ 553.586144][T11713] usb 2-1: Manufacturer: syz [ 553.650422][T11713] usb 2-1: SerialNumber: syz [ 553.678929][ T5914] usb 4-1: USB disconnect, device number 87 [ 553.693022][ T5914] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 553.720993][T11713] usb 2-1: config 0 descriptor?? [ 553.939722][T11775] loop6: detected capacity change from 0 to 7 [ 553.947283][T11775] Dev loop6: unable to read RDB block 7 [ 553.968209][T11775] loop6: unable to read partition table [ 553.976984][T11775] loop6: partition table beyond EOD, truncated [ 554.010619][T11775] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 554.060498][T11696] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 554.068260][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 554.205891][T11713] usb 2-1: Found UVC 0.00 device syz (05e3:0505) [ 554.220520][T11696] usb 3-1: device descriptor read/64, error -71 [ 554.230524][T11713] usb 2-1: No valid video chain found. [ 554.244753][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 554.257948][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.280618][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 554.280878][T11713] usb 2-1: USB disconnect, device number 80 [ 554.327651][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 554.379868][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 554.400785][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 554.410477][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.418272][T11716] usb 1-1: USB disconnect, device number 76 [ 554.467611][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 554.494357][T11696] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 554.504736][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 554.515408][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 554.528657][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 554.573099][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 554.587198][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 554.641067][T11696] usb 3-1: device descriptor read/64, error -71 [ 554.751755][T11696] usb usb3-port1: attempt power cycle [ 554.800348][T11713] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 554.928390][T11788] netlink: 'syz.1.1663': attribute type 6 has an invalid length. [ 554.940891][ T10] usb 5-1: USB disconnect, device number 80 [ 555.041722][T11713] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 555.057205][T11713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.071235][T11713] usb 4-1: Product: syz [ 555.075475][T11713] usb 4-1: Manufacturer: syz [ 555.082805][T11713] usb 4-1: SerialNumber: syz [ 555.097515][T11713] usb 4-1: config 0 descriptor?? [ 555.150497][T11696] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 555.172151][T11696] usb 3-1: device descriptor read/8, error -71 [ 555.178449][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c726000: rx timeout, send abort [ 555.220582][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 555.355253][T11713] usb 4-1: USB disconnect, device number 88 [ 555.425563][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 555.433862][T11696] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 555.450772][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 555.471547][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.486887][T11696] usb 3-1: device descriptor read/8, error -71 [ 555.496865][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 555.529903][ T9] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 555.544302][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.614401][T11696] usb usb3-port1: unable to enumerate USB device [ 555.650144][ T9] usb 1-1: config 0 descriptor?? [ 555.676929][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c725c00: rx timeout, send abort [ 555.685416][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c726000: abort rx timeout. Force session deactivation [ 555.920508][T11713] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 556.090512][T11713] usb 4-1: device descriptor read/64, error -71 [ 556.100537][T11716] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 556.134537][ T9] hid-alps 0003:044E:120C.000F: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.0-1/input0 [ 556.185312][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c725c00: abort rx timeout. Force session deactivation [ 556.273908][T11721] usb 1-1: USB disconnect, device number 77 [ 556.280084][T11716] usb 2-1: Using ep0 maxpacket: 16 [ 556.288892][T11716] usb 2-1: config 64 has an invalid interface number: 243 but max is 0 [ 556.298904][T11716] usb 2-1: config 64 has no interface number 0 [ 556.309494][T11716] usb 2-1: config 64 interface 243 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 556.340350][T11713] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 556.365498][T11716] usb 2-1: config 64 interface 243 has no altsetting 0 [ 556.418612][T11716] usb 2-1: New USB device found, idVendor=0403, idProduct=eeea, bcdDevice=1b.4f [ 556.450343][T11716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.482869][T11798] fido_id[11798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 556.497506][T11713] usb 4-1: device descriptor read/64, error -71 [ 556.520343][T11716] usb 2-1: Product: syz [ 556.530324][T11716] usb 2-1: Manufacturer: syz [ 556.545561][T11716] usb 2-1: SerialNumber: syz [ 556.630602][T11713] usb usb4-port1: attempt power cycle [ 557.033886][T11716] ftdi_sio 2-1:64.243: FTDI USB Serial Device converter detected [ 557.074079][T11716] ftdi_sio ttyUSB0: unknown device type: 0x1b4f [ 557.080641][T11713] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 557.133881][T11716] usb 2-1: USB disconnect, device number 81 [ 557.180040][T11716] ftdi_sio 2-1:64.243: device disconnected [ 557.214587][T11713] usb 4-1: device descriptor read/8, error -71 [ 557.234266][T11810] FAULT_INJECTION: forcing a failure. [ 557.234266][T11810] name failslab, interval 1, probability 0, space 0, times 0 [ 557.306316][T11810] CPU: 1 UID: 0 PID: 11810 Comm: syz.2.1669 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 557.306352][T11810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.306366][T11810] Call Trace: [ 557.306377][T11810] [ 557.306388][T11810] dump_stack_lvl+0x189/0x250 [ 557.306432][T11810] ? __pfx____ratelimit+0x10/0x10 [ 557.306468][T11810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.306503][T11810] ? __pfx__printk+0x10/0x10 [ 557.306534][T11810] ? __pfx___might_resched+0x10/0x10 [ 557.306574][T11810] should_fail_ex+0x414/0x560 [ 557.306610][T11810] ? traverse+0xd9/0x570 [ 557.306641][T11810] should_failslab+0xa8/0x100 [ 557.306668][T11810] __kvmalloc_node_noprof+0x161/0x5f0 [ 557.306693][T11810] ? traverse+0xd9/0x570 [ 557.306731][T11810] traverse+0xd9/0x570 [ 557.306778][T11810] seq_read_iter+0xcfe/0xe10 [ 557.306813][T11810] ? aa_file_perm+0x11f/0xed0 [ 557.306852][T11810] ? __asan_memset+0x22/0x50 [ 557.306896][T11810] seq_read+0x2e2/0x3d0 [ 557.306927][T11810] ? __lock_acquire+0xab9/0xd20 [ 557.306967][T11810] ? __pfx_seq_read+0x10/0x10 [ 557.307021][T11810] ? __pfx_seq_read+0x10/0x10 [ 557.307050][T11810] proc_reg_read+0x1e6/0x2e0 [ 557.307087][T11810] vfs_readv+0x5a7/0x850 [ 557.307115][T11810] ? __pfx_proc_reg_read+0x10/0x10 [ 557.307149][T11810] ? __pfx_vfs_readv+0x10/0x10 [ 557.307193][T11810] ? __fget_files+0x2a/0x420 [ 557.307223][T11810] ? __fget_files+0x3a0/0x420 [ 557.307247][T11810] ? __fget_files+0x2a/0x420 [ 557.307281][T11810] __x64_sys_preadv+0x197/0x2a0 [ 557.307309][T11810] ? __pfx___x64_sys_preadv+0x10/0x10 [ 557.307334][T11810] ? rcu_is_watching+0x15/0xb0 [ 557.307375][T11810] ? do_syscall_64+0xbe/0x3b0 [ 557.307402][T11810] do_syscall_64+0xfa/0x3b0 [ 557.307423][T11810] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.307456][T11810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.307478][T11810] ? clear_bhb_loop+0x60/0xb0 [ 557.307506][T11810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.307529][T11810] RIP: 0033:0x7f20d558e929 [ 557.307550][T11810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.307570][T11810] RSP: 002b:00007f20d6422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 557.307594][T11810] RAX: ffffffffffffffda RBX: 00007f20d57b5fa0 RCX: 00007f20d558e929 [ 557.307611][T11810] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 557.307627][T11810] RBP: 00007f20d6422090 R08: 0000000000000000 R09: 0000000000000000 [ 557.307640][T11810] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 557.307654][T11810] R13: 0000000000000000 R14: 00007f20d57b5fa0 R15: 00007f20d58dfa28 [ 557.307688][T11810] [ 557.900353][T11713] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 558.004805][T11713] usb 4-1: device descriptor read/8, error -71 [ 558.012882][T11819] ip6_tunnel: non-ECT from fd00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 558.180358][T11716] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 558.204893][T11713] usb usb4-port1: unable to enumerate USB device [ 558.702273][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1675'. [ 558.722552][T11716] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 558.737040][T11716] usb 1-1: config 0 interface 0 has no altsetting 0 [ 558.761418][T11716] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 558.778359][T11716] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 558.796716][T11716] usb 1-1: Product: syz [ 558.813815][T11716] usb 1-1: Manufacturer: syz [ 558.829366][T11716] usb 1-1: SerialNumber: syz [ 558.901331][T11716] usb 1-1: config 0 descriptor?? [ 558.944543][T11716] usb 1-1: selecting invalid altsetting 0 [ 559.147527][ T9] usb 1-1: USB disconnect, device number 78 [ 559.271808][T11840] FAULT_INJECTION: forcing a failure. [ 559.271808][T11840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.335702][T11840] CPU: 0 UID: 0 PID: 11840 Comm: syz.4.1681 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 559.335735][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.335749][T11840] Call Trace: [ 559.335759][T11840] [ 559.335768][T11840] dump_stack_lvl+0x189/0x250 [ 559.335810][T11840] ? __pfx____ratelimit+0x10/0x10 [ 559.335845][T11840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.335881][T11840] ? __pfx__printk+0x10/0x10 [ 559.335906][T11840] ? __might_fault+0xb0/0x130 [ 559.335940][T11840] should_fail_ex+0x414/0x560 [ 559.335976][T11840] _copy_to_iter+0x3f5/0x16f0 [ 559.336023][T11840] ? __pfx__copy_to_iter+0x10/0x10 [ 559.336058][T11840] ? traverse+0x53a/0x570 [ 559.336106][T11840] seq_read_iter+0x2e4/0xe10 [ 559.336151][T11840] ? __asan_memset+0x22/0x50 [ 559.336188][T11840] seq_read+0x2e2/0x3d0 [ 559.336218][T11840] ? __lock_acquire+0xab9/0xd20 [ 559.336260][T11840] ? __pfx_seq_read+0x10/0x10 [ 559.336312][T11840] ? __pfx_seq_read+0x10/0x10 [ 559.336354][T11840] proc_reg_read+0x1e6/0x2e0 [ 559.336391][T11840] vfs_readv+0x5a7/0x850 [ 559.336419][T11840] ? __pfx_proc_reg_read+0x10/0x10 [ 559.336453][T11840] ? __pfx_vfs_readv+0x10/0x10 [ 559.336504][T11840] ? __fget_files+0x2a/0x420 [ 559.336535][T11840] ? __fget_files+0x3a0/0x420 [ 559.336559][T11840] ? __fget_files+0x2a/0x420 [ 559.336595][T11840] __x64_sys_preadv+0x197/0x2a0 [ 559.336622][T11840] ? __pfx___x64_sys_preadv+0x10/0x10 [ 559.336643][T11840] ? rcu_is_watching+0x15/0xb0 [ 559.336685][T11840] ? do_syscall_64+0xbe/0x3b0 [ 559.336712][T11840] do_syscall_64+0xfa/0x3b0 [ 559.336732][T11840] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.336766][T11840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.336788][T11840] ? clear_bhb_loop+0x60/0xb0 [ 559.336814][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.336836][T11840] RIP: 0033:0x7fb6dc38e929 [ 559.336856][T11840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.336875][T11840] RSP: 002b:00007fb6dd1e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 559.336899][T11840] RAX: ffffffffffffffda RBX: 00007fb6dc5b5fa0 RCX: 00007fb6dc38e929 [ 559.336915][T11840] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 559.336929][T11840] RBP: 00007fb6dd1e9090 R08: 0000000000000000 R09: 0000000000000000 [ 559.336943][T11840] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 559.336956][T11840] R13: 0000000000000000 R14: 00007fb6dc5b5fa0 R15: 00007fb6dc6dfa28 [ 559.336989][T11840] [ 559.883172][T11853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1684'. [ 559.895497][T11853] fuse: Bad value for 'user_id' [ 559.900659][T11853] fuse: Bad value for 'user_id' [ 560.123792][T11716] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 560.302736][T11716] usb 4-1: config 0 has no interfaces? [ 560.327154][T11716] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 560.337645][T11716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.963624][T11716] usb 4-1: Product: syz [ 560.973164][T11716] usb 4-1: Manufacturer: syz [ 560.978995][T11716] usb 4-1: SerialNumber: syz [ 561.017202][T11716] usb 4-1: config 0 descriptor?? [ 561.406172][T11867] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71) [ 561.980172][T11875] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1689'. [ 562.758257][T11892] FAULT_INJECTION: forcing a failure. [ 562.758257][T11892] name failslab, interval 1, probability 0, space 0, times 0 [ 562.807262][T11892] CPU: 1 UID: 0 PID: 11892 Comm: syz.2.1694 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 562.807291][T11892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 562.807302][T11892] Call Trace: [ 562.807308][T11892] [ 562.807316][T11892] dump_stack_lvl+0x189/0x250 [ 562.807345][T11892] ? __pfx____ratelimit+0x10/0x10 [ 562.807370][T11892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.807395][T11892] ? __pfx__printk+0x10/0x10 [ 562.807415][T11892] ? __pfx___might_resched+0x10/0x10 [ 562.807439][T11892] ? fs_reclaim_acquire+0x7d/0x100 [ 562.807462][T11892] should_fail_ex+0x414/0x560 [ 562.807487][T11892] should_failslab+0xa8/0x100 [ 562.807507][T11892] kmem_cache_alloc_noprof+0x73/0x3c0 [ 562.807532][T11892] ? ima_inode_get+0xeb/0x4e0 [ 562.807556][T11892] ima_inode_get+0xeb/0x4e0 [ 562.807582][T11892] process_measurement+0x3f1/0x1a40 [ 562.807617][T11892] ? __pfx_process_measurement+0x10/0x10 [ 562.807676][T11892] ? end_current_label_crit_section+0x152/0x180 [ 562.807700][T11892] ima_file_mmap+0x1a2/0x1f0 [ 562.807722][T11892] ? __pfx_ima_file_mmap+0x10/0x10 [ 562.807744][T11892] ? end_current_label_crit_section+0x152/0x180 [ 562.807767][T11892] ? common_file_perm+0x199/0x200 [ 562.807790][T11892] security_mmap_file+0x7a4/0xa60 [ 562.807810][T11892] vm_mmap_pgoff+0x12c/0x4c0 [ 562.807837][T11892] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 562.807861][T11892] ? __fget_files+0x2a/0x420 [ 562.807891][T11892] ? __fget_files+0x3a0/0x420 [ 562.807915][T11892] ? __fget_files+0x2a/0x420 [ 562.807945][T11892] ksys_mmap_pgoff+0x51f/0x760 [ 562.807974][T11892] do_syscall_64+0xfa/0x3b0 [ 562.807995][T11892] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.808028][T11892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.808050][T11892] ? clear_bhb_loop+0x60/0xb0 [ 562.808077][T11892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.808098][T11892] RIP: 0033:0x7f20d558e929 [ 562.808117][T11892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.808136][T11892] RSP: 002b:00007f20d6422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 562.808159][T11892] RAX: ffffffffffffffda RBX: 00007f20d57b5fa0 RCX: 00007f20d558e929 [ 562.808176][T11892] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 562.808191][T11892] RBP: 00007f20d6422090 R08: 0000000000000006 R09: 0000000000000000 [ 562.808205][T11892] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 562.808220][T11892] R13: 0000000000000000 R14: 00007f20d57b5fa0 R15: 00007f20d58dfa28 [ 562.808268][T11892] [ 563.100967][T11895] loop6: detected capacity change from 0 to 7 [ 563.109185][T11895] Dev loop6: unable to read RDB block 7 [ 563.115090][T11895] loop6: unable to read partition table [ 563.134432][T11895] loop6: partition table beyond EOD, truncated [ 563.266644][T11895] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 563.589754][T11716] usb 4-1: USB disconnect, device number 93 [ 563.965833][T11905] loop2: detected capacity change from 0 to 7 [ 564.030597][T11905] Dev loop2: unable to read RDB block 7 [ 564.206243][T11905] loop2: unable to read partition table [ 564.363559][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1698'. [ 564.374785][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1698'. [ 564.435178][T11905] loop2: partition table beyond EOD, truncated [ 564.462468][T11905] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 564.798653][T11917] netlink: 'syz.1.1702': attribute type 5 has an invalid length. [ 565.795004][T11946] FAULT_INJECTION: forcing a failure. [ 565.795004][T11946] name failslab, interval 1, probability 0, space 0, times 0 [ 565.832362][T11946] CPU: 0 UID: 0 PID: 11946 Comm: syz.3.1711 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 565.832395][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 565.832409][T11946] Call Trace: [ 565.832419][T11946] [ 565.832429][T11946] dump_stack_lvl+0x189/0x250 [ 565.832469][T11946] ? __pfx____ratelimit+0x10/0x10 [ 565.832494][T11946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.832519][T11946] ? __pfx__printk+0x10/0x10 [ 565.832541][T11946] ? __pfx___might_resched+0x10/0x10 [ 565.832565][T11946] ? fs_reclaim_acquire+0x7d/0x100 [ 565.832588][T11946] should_fail_ex+0x414/0x560 [ 565.832613][T11946] should_failslab+0xa8/0x100 [ 565.832632][T11946] __kmalloc_cache_noprof+0x70/0x3d0 [ 565.832647][T11946] ? ima_calc_file_hash+0x820/0x16f0 [ 565.832674][T11946] ima_calc_file_hash+0x820/0x16f0 [ 565.832696][T11946] ? __lock_acquire+0xab9/0xd20 [ 565.832728][T11946] ? __lock_acquire+0xab9/0xd20 [ 565.832751][T11946] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 565.832806][T11946] ? fill_mg_cmtime+0x26c/0x4f0 [ 565.832828][T11946] ? shmem_huge_global_enabled+0x174/0x3a0 [ 565.832856][T11946] ? shmem_getattr+0x3c7/0x510 [ 565.832886][T11946] ima_collect_measurement+0x428/0x8d0 [ 565.832922][T11946] ? __pfx_ima_collect_measurement+0x10/0x10 [ 565.832946][T11946] ? __lock_acquire+0xab9/0xd20 [ 565.832973][T11946] ? simple_xattr_get+0x37/0x180 [ 565.833018][T11946] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 565.833051][T11946] process_measurement+0x1121/0x1a40 [ 565.833087][T11946] ? __pfx_process_measurement+0x10/0x10 [ 565.833146][T11946] ? end_current_label_crit_section+0x152/0x180 [ 565.833170][T11946] ima_file_mmap+0x1a2/0x1f0 [ 565.833192][T11946] ? __pfx_ima_file_mmap+0x10/0x10 [ 565.833214][T11946] ? end_current_label_crit_section+0x152/0x180 [ 565.833236][T11946] ? common_file_perm+0x199/0x200 [ 565.833260][T11946] security_mmap_file+0x7a4/0xa60 [ 565.833279][T11946] vm_mmap_pgoff+0x12c/0x4c0 [ 565.833304][T11946] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 565.833328][T11946] ? __fget_files+0x2a/0x420 [ 565.833348][T11946] ? __fget_files+0x3a0/0x420 [ 565.833365][T11946] ? __fget_files+0x2a/0x420 [ 565.833386][T11946] ksys_mmap_pgoff+0x51f/0x760 [ 565.833406][T11946] do_syscall_64+0xfa/0x3b0 [ 565.833420][T11946] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.833444][T11946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.833460][T11946] ? clear_bhb_loop+0x60/0xb0 [ 565.833479][T11946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.833495][T11946] RIP: 0033:0x7fc67fb8e929 [ 565.833510][T11946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.833524][T11946] RSP: 002b:00007fc680980038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 565.833541][T11946] RAX: ffffffffffffffda RBX: 00007fc67fdb5fa0 RCX: 00007fc67fb8e929 [ 565.833553][T11946] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 565.833564][T11946] RBP: 00007fc680980090 R08: 0000000000000006 R09: 0000000000000000 [ 565.833574][T11946] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 565.833584][T11946] R13: 0000000000000000 R14: 00007fc67fdb5fa0 R15: 00007fc67fedfa28 [ 565.833607][T11946] [ 566.170725][ T30] audit: type=1800 audit(1749877679.658:3701): pid=11946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1711" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1666 res=0 errno=0 [ 567.014925][T11965] FAULT_INJECTION: forcing a failure. [ 567.014925][T11965] name failslab, interval 1, probability 0, space 0, times 0 [ 567.040435][T11965] CPU: 1 UID: 0 PID: 11965 Comm: syz.4.1716 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 567.040470][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.040485][T11965] Call Trace: [ 567.040494][T11965] [ 567.040504][T11965] dump_stack_lvl+0x189/0x250 [ 567.040544][T11965] ? __pfx____ratelimit+0x10/0x10 [ 567.040579][T11965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.040615][T11965] ? __pfx__printk+0x10/0x10 [ 567.040656][T11965] should_fail_ex+0x414/0x560 [ 567.040692][T11965] should_failslab+0xa8/0x100 [ 567.040718][T11965] kmem_cache_alloc_noprof+0x73/0x3c0 [ 567.040753][T11965] ? skb_clone+0x212/0x3a0 [ 567.040789][T11965] skb_clone+0x212/0x3a0 [ 567.040823][T11965] __netlink_deliver_tap+0x404/0x850 [ 567.040865][T11965] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.040894][T11965] netlink_deliver_tap+0x19c/0x1b0 [ 567.040923][T11965] netlink_sendskb+0x68/0x140 [ 567.040949][T11965] netlink_rcv_skb+0x28c/0x470 [ 567.040978][T11965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.041013][T11965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.041060][T11965] ? down_read+0x1ad/0x2e0 [ 567.041087][T11965] genl_rcv+0x28/0x40 [ 567.041117][T11965] netlink_unicast+0x75b/0x8d0 [ 567.041155][T11965] netlink_sendmsg+0x805/0xb30 [ 567.041194][T11965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.041233][T11965] ? aa_sock_msg_perm+0x94/0x160 [ 567.041265][T11965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 567.041294][T11965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.041323][T11965] __sock_sendmsg+0x219/0x270 [ 567.041349][T11965] ____sys_sendmsg+0x505/0x830 [ 567.041385][T11965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.041426][T11965] ? import_iovec+0x74/0xa0 [ 567.041453][T11965] ___sys_sendmsg+0x21f/0x2a0 [ 567.041486][T11965] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.041558][T11965] ? __fget_files+0x2a/0x420 [ 567.041582][T11965] ? __fget_files+0x3a0/0x420 [ 567.041618][T11965] __x64_sys_sendmsg+0x19b/0x260 [ 567.041651][T11965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.041692][T11965] ? __pfx_ksys_write+0x10/0x10 [ 567.041710][T11965] ? rcu_is_watching+0x15/0xb0 [ 567.041750][T11965] ? do_syscall_64+0xbe/0x3b0 [ 567.041777][T11965] do_syscall_64+0xfa/0x3b0 [ 567.041797][T11965] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.041830][T11965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.041852][T11965] ? clear_bhb_loop+0x60/0xb0 [ 567.041880][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.041903][T11965] RIP: 0033:0x7fb6dc38e929 [ 567.041922][T11965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.041940][T11965] RSP: 002b:00007fb6dd1e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.041957][T11965] RAX: ffffffffffffffda RBX: 00007fb6dc5b5fa0 RCX: 00007fb6dc38e929 [ 567.041969][T11965] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 567.041979][T11965] RBP: 00007fb6dd1e9090 R08: 0000000000000000 R09: 0000000000000000 [ 567.041989][T11965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.041999][T11965] R13: 0000000000000000 R14: 00007fb6dc5b5fa0 R15: 00007fb6dc6dfa28 [ 567.042023][T11965] [ 567.946624][ T9] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 568.148730][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.162847][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1720'. [ 568.169584][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.175483][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1720'. [ 568.190101][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 568.245477][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.265234][ T9] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 568.628015][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.654561][ T9] usb 3-1: config 0 descriptor?? [ 568.840331][T11706] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 569.003815][T11706] usb 5-1: Using ep0 maxpacket: 16 [ 569.041275][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 569.244066][T11992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1719'. [ 569.254334][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 569.303039][ T30] audit: type=1800 audit(1749877683.048:3702): pid=11992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1719" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 569.331678][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.345170][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.374042][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 569.405522][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 569.420124][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.462567][ T10] usb 1-1: config 0 descriptor?? [ 569.898349][ T10] hid (null): unknown global tag 0x9a [ 569.925815][ T10] hid (null): bogus close delimiter [ 569.937913][ T10] hid (null): invalid report_count 1911026084 [ 569.986347][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0010/input/input29 [ 570.268525][T11991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.302402][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0010/input/input30 [ 570.361422][T11991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.844603][ T10] kye 0003:0458:5011.0010: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 570.982798][ T10] usb 1-1: USB disconnect, device number 79 [ 571.564685][T11997] fido_id[11997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 572.040453][T11716] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 572.299320][T11716] usb 4-1: config 0 has no interfaces? [ 572.328919][ T5914] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 572.409545][T11716] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 572.424001][T11716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.475806][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 572.490683][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 572.524665][T11716] usb 4-1: Product: syz [ 572.528893][T11716] usb 4-1: Manufacturer: syz [ 572.570313][T11706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 572.578471][ T9] usb 3-1: USB disconnect, device number 72 [ 572.611888][ T5914] usb 2-1: device descriptor read/64, error -71 [ 572.647264][T11716] usb 4-1: SerialNumber: syz [ 572.661377][T11706] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 572.673476][T12014] loop2: detected capacity change from 0 to 7 [ 572.725334][T11716] usb 4-1: config 0 descriptor?? [ 572.737155][ T5886] Dev loop2: unable to read RDB block 7 [ 572.743025][T11706] usb 5-1: can't read configurations, error -71 [ 572.753408][ T5886] loop2: unable to read partition table [ 572.794827][ T5886] loop2: partition table beyond EOD, truncated [ 572.819688][T12014] Dev loop2: unable to read RDB block 7 [ 572.848017][T12014] loop2: unable to read partition table [ 572.858290][ T5914] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 572.867251][T12014] loop2: partition table beyond EOD, truncated [ 572.880701][T12014] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 573.070585][ T5914] usb 2-1: device descriptor read/64, error -71 [ 573.219151][ T5914] usb usb2-port1: attempt power cycle [ 573.390533][T11716] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 573.520374][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 573.602953][ T5914] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 573.604325][T11706] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 573.635646][T11716] usb 1-1: config 0 has no interfaces? [ 573.656324][ T5914] usb 2-1: device descriptor read/8, error -71 [ 573.685825][T11716] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 573.695796][T11716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.713376][T11716] usb 1-1: Product: syz [ 573.715483][ T10] usb 3-1: config 0 has no interfaces? [ 573.717825][T11716] usb 1-1: Manufacturer: syz [ 573.730568][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 573.767439][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 573.802988][ T10] usb 3-1: Product: syz [ 573.836498][ T10] usb 3-1: Manufacturer: syz [ 573.842963][T11706] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.845911][ T10] usb 3-1: config 0 descriptor?? [ 573.875112][T11706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 573.895730][T11716] usb 1-1: SerialNumber: syz [ 573.928785][T11716] usb 1-1: config 0 descriptor?? [ 573.930622][ T5914] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 573.945506][T11706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 573.971114][ T5914] usb 2-1: device descriptor read/8, error -71 [ 574.009056][T11706] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.045657][T11706] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.055175][T11706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.067789][T11706] usb 5-1: config 0 descriptor?? [ 574.091280][ T5914] usb usb2-port1: unable to enumerate USB device [ 574.111050][T11696] usb 3-1: USB disconnect, device number 73 [ 574.217920][T12024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.229212][T12024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.501572][T11706] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 574.534497][T11706] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 574.770485][T11696] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 574.946020][T11696] usb 3-1: config 0 has no interfaces? [ 574.958072][T11696] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 574.970898][T11696] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 574.989721][T11696] usb 3-1: Product: syz [ 575.000575][T11696] usb 3-1: Manufacturer: syz [ 575.011828][T11696] usb 3-1: config 0 descriptor?? [ 575.020900][ T30] audit: type=1326 audit(1749877688.848:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.1.1736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19d278e929 code=0x0 [ 575.042728][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.164849][T11696] usb 5-1: USB disconnect, device number 82 [ 575.319073][ T30] audit: type=1326 audit(1749877689.138:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20d552ab19 code=0x7ffc0000 [ 575.377429][ T30] audit: type=1326 audit(1749877689.158:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20d552ab19 code=0x7ffc0000 [ 575.443866][ T30] audit: type=1326 audit(1749877689.158:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20d552ab19 code=0x7ffc0000 [ 575.563796][ T30] audit: type=1326 audit(1749877689.158:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20d552ab19 code=0x7ffc0000 [ 575.669468][ T30] audit: type=1326 audit(1749877689.158:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20d552ab19 code=0x7ffc0000 [ 575.949450][T11706] usb 4-1: USB disconnect, device number 94 [ 575.976926][ T30] audit: type=1326 audit(1749877689.158:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20d552ab19 code=0x7ffc0000 [ 576.070682][ T10] usb 1-1: USB disconnect, device number 80 [ 576.308520][ T30] audit: type=1326 audit(1749877689.168:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20d552ab19 code=0x7ffc0000 [ 576.331082][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.348063][T12049] fuse: Unknown parameter '' [ 576.410052][ T30] audit: type=1326 audit(1749877689.178:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20d552ab19 code=0x7ffc0000 [ 576.501296][ T30] audit: type=1326 audit(1749877689.178:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d558e929 code=0x7ffc0000 [ 576.937440][T11706] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 577.222116][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 577.234005][T11721] usb 3-1: USB disconnect, device number 74 [ 577.360341][ T10] usb 1-1: device descriptor read/64, error -71 [ 577.372491][T11706] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 577.382899][T11706] usb 5-1: config 0 interface 0 has no altsetting 0 [ 577.405185][T11706] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 577.417600][T11706] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 577.447080][T11706] usb 5-1: Product: syz [ 577.457919][T11706] usb 5-1: Manufacturer: syz [ 577.478291][T11706] usb 5-1: SerialNumber: syz [ 577.494386][T11706] usb 5-1: config 0 descriptor?? [ 577.515603][T11706] usb 5-1: selecting invalid altsetting 0 [ 577.602313][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 577.780768][T12058] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 577.792147][T12058] team0: Port device batadv1 added [ 577.931137][T12058] hub 9-0:1.0: USB hub found [ 577.936172][T12058] hub 9-0:1.0: 1 port detected [ 578.184263][T11696] usb 5-1: USB disconnect, device number 83 [ 578.190334][ T10] usb 1-1: device descriptor read/64, error -71 [ 578.320033][ T10] usb usb1-port1: attempt power cycle [ 578.454989][T12063] ip6tnl1: entered promiscuous mode [ 578.473130][T12063] ip6tnl1: entered allmulticast mode [ 578.690368][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 578.694900][T12066] usb usb8: usbfs: process 12066 (syz.3.1744) did not claim interface 0 before use [ 578.735961][ T10] usb 1-1: device descriptor read/8, error -71 [ 578.960389][T11721] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 578.990385][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 579.051051][ T10] usb 1-1: device descriptor read/8, error -71 [ 579.167035][T12072] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1745'. [ 579.170845][ T10] usb usb1-port1: unable to enumerate USB device [ 579.176224][T11721] usb 4-1: Using ep0 maxpacket: 32 [ 579.222537][T11721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.248883][T11721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.294800][T11721] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 579.351877][T11721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.400044][T11721] usb 4-1: config 0 descriptor?? [ 579.864462][T11721] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 579.888111][T12087] Cannot find del_set index 0 as target [ 580.064733][T11721] ft260 0003:0403:6030.0012: failed to retrieve chip version [ 580.089140][T11721] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -71 [ 580.130861][T11721] usb 4-1: USB disconnect, device number 95 [ 580.233517][T12097] trusted_key: syz.1.1753 sent an empty control message without MSG_MORE. [ 580.260328][ T5914] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 580.426220][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 580.483254][ T5914] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 580.493274][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.513418][ T5914] usb 3-1: Product: syz [ 580.523527][ T5914] usb 3-1: Manufacturer: syz [ 580.539924][ T5914] usb 3-1: SerialNumber: syz [ 580.575916][ T5914] usb 3-1: config 0 descriptor?? [ 581.547097][T12130] loop6: detected capacity change from 0 to 524287999 [ 581.720389][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 581.731554][T12131] Invalid logical block size (3) [ 581.820470][T12130] buffer_io_error: 3 callbacks suppressed [ 581.820493][T12130] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.881343][T12130] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.900345][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 581.909873][T12130] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.962312][T12130] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.980554][T12130] Buffer I/O error on dev loop6, logical block 0, async page read [ 582.004518][T12130] Buffer I/O error on dev loop6, logical block 0, async page read [ 582.161122][T12130] Buffer I/O error on dev loop6, logical block 0, async page read [ 582.189615][T12130] Buffer I/O error on dev loop6, logical block 0, async page read [ 582.205824][T12130] ldm_validate_partition_table(): Disk read failed. [ 582.227484][T12130] Buffer I/O error on dev loop6, logical block 0, async page read [ 582.290661][T12130] Buffer I/O error on dev loop6, logical block 0, async page read [ 582.333495][T12130] Dev loop6: unable to read RDB block 0 [ 582.367156][T12130] loop6: unable to read partition table [ 582.441516][T12130] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾³˜CÖ) failed (rc=-5) [ 582.603436][ T5914] usb 3-1: USB disconnect, device number 75 [ 583.320943][ T5900] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 583.497317][ T5900] usb 4-1: config 0 has an invalid interface number: 212 but max is 0 [ 583.524166][ T5900] usb 4-1: config 0 has no interface number 0 [ 583.563502][ T5900] usb 4-1: config 0 interface 212 has no altsetting 0 [ 583.631042][ T5900] usb 4-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 583.641947][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.674421][ T5900] usb 4-1: Product: syz [ 583.678652][ T5900] usb 4-1: Manufacturer: syz [ 583.700579][ T5900] usb 4-1: SerialNumber: syz [ 583.806407][ T5900] usb 4-1: config 0 descriptor?? [ 583.849011][ T5900] HFC-S_USB 4-1:0.212: probe with driver HFC-S_USB failed with error -5 [ 584.070165][ T5900] usb 4-1: USB disconnect, device number 96 [ 584.390465][ T5914] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 584.461244][T12153] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 584.468433][T12153] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 584.506076][T12153] vhci_hcd vhci_hcd.0: Device attached [ 584.547500][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 584.563261][ T5914] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 584.595376][ T5914] usb 1-1: config 179 has no interface number 0 [ 584.613450][ T5914] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 584.662937][ T5914] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 584.679923][ T5914] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 584.695759][ T5914] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 584.700498][T11713] vhci_hcd: vhci_device speed not set [ 584.708842][ T5914] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 584.740059][ T5914] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 584.755368][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.782085][T12149] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 584.940970][T11713] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 585.083395][T11721] usb 1-1: USB disconnect, device number 85 [ 585.083400][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 585.098640][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 585.258013][T12154] vhci_hcd: connection reset by peer [ 585.301966][ T6034] vhci_hcd: stop threads [ 585.348017][ T6034] vhci_hcd: release socket [ 585.369845][ T6034] vhci_hcd: disconnect device [ 585.427923][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 585.458629][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 585.484407][ T10] usb 2-1: can't read configurations, error -71 [ 585.571024][T12169] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1764'. [ 585.703082][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059b3d000: rx timeout, send abort [ 585.765943][T12171] xt_l2tp: invalid flags combination: 8 [ 586.203198][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058e5d800: rx timeout, send abort [ 586.220406][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059b3d000: abort rx timeout. Force session deactivation [ 586.232131][ T5914] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 586.420479][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 586.577793][T12182] dummy0: left allmulticast mode [ 586.590352][ T5914] usb 3-1: config 0 has no interfaces? [ 586.590660][T12182] bridge0: port 3(dummy0) entered disabled state [ 586.647544][ T5914] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 586.675962][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.711606][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058e5d800: abort rx timeout. Force session deactivation [ 586.754097][T12182] bridge_slave_0: left allmulticast mode [ 586.782544][ T5914] usb 3-1: Product: syz [ 586.786798][ T5914] usb 3-1: Manufacturer: syz [ 586.793019][T12182] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.820010][ T5914] usb 3-1: SerialNumber: syz [ 586.833624][ T5914] usb 3-1: config 0 descriptor?? [ 586.905450][T12182] bridge_slave_1: left allmulticast mode [ 586.911922][T12182] bridge_slave_1: left promiscuous mode [ 586.941731][T12182] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.070450][T12182] bond0: (slave bond_slave_0): Releasing backup interface [ 587.098308][T12182] bond0: (slave bond_slave_1): Releasing backup interface [ 587.272194][T12182] team0: Port device team_slave_0 removed [ 587.516736][T12182] team0: Port device team_slave_1 removed [ 587.680107][T12193] binder: 12192:12193 ioctl c0306201 2000000001c0 returned -22 [ 587.706829][T12182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.740484][T12182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.814890][T12182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.825627][T12182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.260375][T11721] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 588.470887][ T5914] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 588.495424][T11721] usb 4-1: config 0 has an invalid interface number: 37 but max is 0 [ 588.545915][T11721] usb 4-1: config 0 has no interface number 0 [ 588.595028][T11721] usb 4-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62 [ 588.620084][T11721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.627301][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 588.656614][T11721] usb 4-1: Product: syz [ 588.660871][ T5914] usb 2-1: config 5 has an invalid interface number: 159 but max is 3 [ 588.660902][ T5914] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 588.660924][ T5914] usb 2-1: config 5 has an invalid interface number: 67 but max is 3 [ 588.660948][ T5914] usb 2-1: config 5 has an invalid interface number: 19 but max is 3 [ 588.660972][ T5914] usb 2-1: config 5 has an invalid interface number: 254 but max is 3 [ 588.660997][ T5914] usb 2-1: config 5 has no interface number 0 [ 588.661015][ T5914] usb 2-1: config 5 has no interface number 1 [ 588.723634][T11721] usb 4-1: Manufacturer: syz [ 588.728407][T11721] usb 4-1: SerialNumber: syz [ 588.733450][ T5914] usb 2-1: config 5 has no interface number 2 [ 588.741141][ T5914] usb 2-1: config 5 has no interface number 3 [ 588.748509][ T5914] usb 2-1: config 5 interface 159 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 588.760458][ T5914] usb 2-1: config 5 interface 159 altsetting 6 endpoint 0x9 has invalid wMaxPacketSize 0 [ 588.771644][ T5914] usb 2-1: config 5 interface 67 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 588.784184][ T5914] usb 2-1: config 5 interface 19 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 588.797339][ T5914] usb 2-1: config 5 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 588.809337][ T5914] usb 2-1: config 5 interface 254 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 588.928097][T11721] usb 4-1: config 0 descriptor?? [ 588.953513][ T5914] usb 2-1: config 5 interface 254 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 589.022687][ T5914] usb 2-1: config 5 interface 254 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 589.115693][ T5914] usb 2-1: config 5 interface 254 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 589.177569][ T5914] usb 2-1: config 5 interface 254 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 589.220877][ T5914] usb 2-1: config 5 interface 159 has no altsetting 0 [ 589.234980][ T5914] usb 2-1: config 5 interface 67 has no altsetting 0 [ 589.243220][ T5914] usb 2-1: config 5 interface 254 has no altsetting 0 [ 589.255086][ T5914] usb 2-1: New USB device found, idVendor=0af0, idProduct=6721, bcdDevice=46.33 [ 589.266954][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.275940][ T5914] usb 2-1: Product: 厽쓗芃Ɡॱë¬ê®ƒë»‡ãšé§â®ºê‰‚郚৕櫌៱Æꥪç ê—ꗖ⡴鱖箦컢酠ዙ㈿ﮫ艀ê•îŸ¡à·§ä’„⓲뤽▯ἴé‚묨෭ç²é‹¸æº¾Ö£ç™ã¼°å‘—㞢ã¨ê¯†ç•­â—šá¢µäšè©—쥩缸迩뀎鲅⟘暬㜞Ⅶ⑆䱩斂놪Д㵦構틫翄싥뜢è„ä³ä˜”㘴绮黚ê§è—訛륺棈柵撣蘿鿼醫햸玌ꯟ顇꣜蜨⳼基溴㒅尿䞹₥ᒇïŸé†¾Ó­ [ 589.334827][ T5914] usb 2-1: Manufacturer: à § [ 589.349226][ T5914] usb 2-1: SerialNumber: ᭜鎿ä‘Ⓜ尳㨙㳎Üɤ椖ࠀঊ鮿蜼ï¶ï´”俜婸á´â©î«¢ï¦„釥é°äŒç’”匳列黦࿘用ã¨å–¦ë•»â»¶å’§ì¡‘î“æ„䘤㌽悡ë³à ¼è»šã•žç³„ꇳà½è¯”굄疾î²ê¤‘â€æ£‰ä‰¬æ±­â¤žåŸ¡ [ 589.615471][T12199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.629463][T12199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.666184][T12199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.702558][T12199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.772823][ T5914] option 2-1:5.159: GSM modem (1-port) converter detected [ 589.830041][ T5914] option 2-1:5.67: GSM modem (1-port) converter detected [ 589.856552][ T5914] option 2-1:5.19: GSM modem (1-port) converter detected [ 589.885552][ T5914] option 2-1:5.254: GSM modem (1-port) converter detected [ 589.939077][ T5914] usb 2-1: USB disconnect, device number 88 [ 589.959230][ T5914] option 2-1:5.159: device disconnected [ 589.973351][ T5914] option 2-1:5.67: device disconnected [ 590.004028][ T5914] option 2-1:5.19: device disconnected [ 590.026238][ T5914] option 2-1:5.254: device disconnected [ 590.200491][T11713] vhci_hcd: vhci_device speed not set [ 590.233755][ T5914] usb 3-1: USB disconnect, device number 76 [ 590.381903][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1780'. [ 590.392324][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1780'. [ 590.881297][T11721] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 591.057478][T11706] usb 4-1: USB disconnect, device number 97 [ 591.131993][T12237] loop2: detected capacity change from 0 to 7 [ 591.142754][T12237] Dev loop2: unable to read RDB block 7 [ 591.148368][T12237] loop2: unable to read partition table [ 591.174099][T11721] usb 2-1: Using ep0 maxpacket: 32 [ 591.188639][T11721] usb 2-1: config 7 has an invalid interface number: 123 but max is 0 [ 591.197331][T12237] loop2: partition table beyond EOD, truncated [ 591.201511][T11721] usb 2-1: config 7 has no interface number 0 [ 591.209789][T11721] usb 2-1: config 7 interface 123 altsetting 6 bulk endpoint 0xC has invalid maxpacket 8 [ 591.210873][ T5914] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 591.223773][T11721] usb 2-1: config 7 interface 123 has no altsetting 0 [ 591.235480][T12237] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 591.250503][T11721] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=b0.be [ 591.260177][T11721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.341176][T11721] usb 2-1: Product: syz [ 591.345428][T11721] usb 2-1: Manufacturer: syz [ 591.350067][T11721] usb 2-1: SerialNumber: syz [ 591.370060][T12226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 591.481527][ T5914] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 591.489880][ T5914] usb 5-1: config 0 has no interface number 0 [ 591.519378][T12243] Â: renamed from pim6reg1 [ 591.533159][T12243] fuse: Bad value for 'rootmode' [ 591.554498][ T5914] usb 5-1: New USB device found, idVendor=05ac, idProduct=9222, bcdDevice= f.a9 [ 591.591926][T12226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.595038][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.618808][ T5914] usb 5-1: Product: syz [ 591.619358][T12226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.630633][ T5914] usb 5-1: Manufacturer: syz [ 591.635534][ T5914] usb 5-1: SerialNumber: syz [ 591.667742][ T5914] usb 5-1: config 0 descriptor?? [ 591.670444][T11713] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 591.691144][T12226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.695758][ T5914] appledisplay 5-1:0.169: Could not find int-in endpoint [ 591.710780][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 591.736529][ T5914] usbhid 5-1:0.169: couldn't find an input interrupt endpoint [ 591.741015][T12226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.803081][T12246] kvm: user requested TSC rate below hardware speed [ 591.850751][T11721] kvaser_usb 2-1:7.123: error -ENODEV: Cannot get usb endpoint(s) [ 591.857460][T12246] syzkaller1: entered promiscuous mode [ 591.869236][T11721] usb 2-1: USB disconnect, device number 89 [ 591.874360][T12246] syzkaller1: entered allmulticast mode [ 591.882518][T11713] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 591.896960][T11713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.898783][ T10] usb 4-1: config 0 has no interfaces? [ 591.913007][T11713] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 591.913039][T11713] usb 3-1: config 1 has no interface number 1 [ 591.913093][T11713] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 591.916145][T11713] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.956354][T11713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.965327][T11713] usb 3-1: Product: syz [ 591.969649][T11713] usb 3-1: Manufacturer: syz [ 591.975272][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1790'. [ 591.984739][T12246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1790'. [ 592.003150][T11713] usb 3-1: SerialNumber: syz [ 592.020787][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 592.030154][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.038483][ T10] usb 4-1: Product: syz [ 592.054533][ T10] usb 4-1: Manufacturer: syz [ 592.059321][ T10] usb 4-1: SerialNumber: syz [ 592.075983][ T10] usb 4-1: config 0 descriptor?? [ 592.128195][T11721] usb 5-1: USB disconnect, device number 84 [ 592.254444][T11713] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 592.263296][T11713] usb 3-1: MIDIStreaming interface descriptor not found [ 592.352579][T11713] usb 3-1: USB disconnect, device number 77 [ 592.847555][ T7252] udevd[7252]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.980934][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1791'. [ 593.003364][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1791'. [ 593.515232][T12268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.712371][ T5914] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 593.720134][T12276] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 593.738655][T12276] syzkaller0: linktype set to 768 [ 593.872763][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short [ 593.882599][ T5914] usb 3-1: config 1 has an invalid interface number: 43 but max is 1 [ 593.903277][ T5914] usb 3-1: config 1 has no interface number 1 [ 593.938621][ T5914] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 594.060683][ T5914] usb 3-1: config 1 interface 0 has no altsetting 0 [ 594.070546][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 594.080647][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.088978][ T5914] usb 3-1: Product: syz [ 594.093443][ T5914] usb 3-1: Manufacturer: syz [ 594.098078][ T5914] usb 3-1: SerialNumber: syz [ 594.380276][T11713] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 594.382772][T12281] binder: 12280:12281 ioctl c0306201 2000000001c0 returned -22 [ 594.432522][ T5914] smsusb:smsusb_probe: board id=8, interface number 0 [ 594.514160][T11721] usb 4-1: USB disconnect, device number 98 [ 594.518855][ T5914] smsusb:smsusb_probe: board id=8, interface number 43 [ 594.550304][T11713] usb 2-1: Using ep0 maxpacket: 32 [ 594.585407][ T5914] usb 3-1: USB disconnect, device number 78 [ 594.612662][T11713] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 594.660510][T11713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.748050][T11713] usb 2-1: Product: syz [ 594.777679][T11713] usb 2-1: Manufacturer: syz [ 594.820956][T12291] loop6: detected capacity change from 0 to 7 [ 594.839047][T11713] usb 2-1: SerialNumber: syz [ 594.857249][T12291] Dev loop6: unable to read RDB block 7 [ 594.873016][T11713] usb 2-1: config 0 descriptor?? [ 594.891442][T12291] loop6: unable to read partition table [ 594.937651][T12291] loop6: partition table beyond EOD, truncated [ 595.000311][T11725] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 595.009117][T12291] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 595.038105][T11713] as10x_usb: device has been detected [ 595.311454][T11713] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 595.609845][T11725] usb 5-1: config 0 has an invalid interface number: 37 but max is 0 [ 595.641536][T11725] usb 5-1: config 0 has no interface number 0 [ 595.651942][T11713] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 595.704353][T11725] usb 5-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62 [ 595.729164][T11725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.743643][T11713] as10x_usb: error during firmware upload part1 [ 595.753102][T11713] Registered device Abilis Systems DVB-Titan [ 595.780491][T12296] support for the xor transformation has been removed. [ 595.800795][T11725] usb 5-1: Product: syz [ 595.805066][T11725] usb 5-1: Manufacturer: syz [ 595.810441][T11725] usb 5-1: SerialNumber: syz [ 595.881572][T11725] usb 5-1: config 0 descriptor?? [ 596.300614][T11713] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 596.460455][T11713] usb 3-1: Using ep0 maxpacket: 32 [ 596.480803][T11713] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 596.496950][T11713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.520336][T11713] usb 3-1: config 0 has no interface number 0 [ 596.544577][T11713] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 596.555194][T11713] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 596.579132][T11713] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 596.588514][T11713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.599141][T11713] usb 3-1: Product: syz [ 596.603596][T11713] usb 3-1: Manufacturer: syz [ 596.610475][T11713] usb 3-1: SerialNumber: syz [ 596.623353][T11713] usb 3-1: config 0 descriptor?? [ 596.688511][ T5914] usb 2-1: USB disconnect, device number 90 [ 596.703439][T12299] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 596.802438][ T5914] Unregistered device Abilis Systems DVB-Titan [ 596.804278][ T5914] as10x_usb: device has been disconnected [ 596.855834][T11713] usb-storage 3-1:0.231: USB Mass Storage device detected [ 597.137072][T11713] usb 3-1: USB disconnect, device number 79 [ 597.235242][T12310] fuse: Unknown parameter '`Ã9-úÁulFèGl5œ{ÁJú’pú9ÝjÆþ~' [ 597.417464][ T5914] usb 5-1: USB disconnect, device number 85 [ 597.930332][ T5914] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 598.140441][ T5914] usb 5-1: config index 0 descriptor too short (expected 30049, got 36) [ 598.160335][ T5914] usb 5-1: config 116 has too many interfaces: 108, using maximum allowed: 32 [ 598.214504][ T5914] usb 5-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 598.229413][ T5914] usb 5-1: config 116 has 0 interfaces, different from the descriptor's value: 108 [ 598.265095][ T5914] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 598.289056][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.317781][ T5914] usb 5-1: Product: syz [ 598.334784][ T5914] usb 5-1: Manufacturer: syz [ 598.345537][ T5914] usb 5-1: SerialNumber: syz [ 598.350594][T11713] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 598.520775][T11713] usb 3-1: Using ep0 maxpacket: 8 [ 598.541309][T11713] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 598.560358][T11713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.589047][T11713] usb 3-1: Product: syz [ 598.594529][T11713] usb 3-1: Manufacturer: syz [ 598.616724][T11713] usb 3-1: SerialNumber: syz [ 598.641067][T11713] usb 3-1: config 0 descriptor?? [ 598.653377][ T5914] usb 5-1: USB disconnect, device number 86 [ 598.779672][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1808'. [ 598.872328][T11713] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 599.060343][T11725] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 599.210355][T11725] usb 4-1: device descriptor read/64, error -71 [ 599.360850][T11696] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 599.450434][T11725] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 599.523294][T11696] usb 2-1: Using ep0 maxpacket: 16 [ 599.532398][T11696] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 599.550761][T11696] usb 2-1: config 0 has no interface number 0 [ 599.558222][T11696] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 599.578948][T11696] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 599.600506][T11725] usb 4-1: device descriptor read/64, error -71 [ 599.621444][T11696] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 599.630094][T11696] usb 2-1: Product: syz [ 599.635197][T11696] usb 2-1: SerialNumber: syz [ 599.651842][T11696] usb 2-1: config 0 descriptor?? [ 599.671361][T11696] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 599.684434][T11696] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input32 [ 599.710998][T11725] usb usb4-port1: attempt power cycle [ 600.082045][T11725] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 600.114965][T11725] usb 4-1: device descriptor read/8, error -71 [ 600.314315][T11713] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 600.350094][T11713] usb 3-1: USB disconnect, device number 80 [ 600.362942][T11725] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 600.412892][T11725] usb 4-1: device descriptor read/8, error -71 [ 600.516357][T12346] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 600.541961][T11725] usb usb4-port1: unable to enumerate USB device [ 601.321551][T12359] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 601.574169][ T5914] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 601.775234][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.802817][ T5914] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.843994][ T5914] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.873656][ T5914] usb 4-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 601.883381][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.893461][ T5914] usb 4-1: Product: syz [ 601.897985][ T5914] usb 4-1: Manufacturer: syz [ 601.903808][ T5914] usb 4-1: SerialNumber: syz [ 601.931875][ T5914] cdc_ncm 4-1:1.0: skipping garbage [ 602.232967][T12371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.277809][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 602.278106][T11713] usb 2-1: USB disconnect, device number 91 [ 602.284834][ C0] cm109 2-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 602.478776][T11713] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 602.613887][T12382] netlink: 'syz.1.1821': attribute type 8 has an invalid length. [ 602.633203][T12383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.863884][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 603.081984][ T5914] cdc_ncm 4-1:1.0: bind() failure [ 603.098432][ T5914] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 603.142094][ T5914] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 603.193732][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 603.213422][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 603.225793][ T5914] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 603.279605][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 603.291772][ T5914] usb 4-1: USB disconnect, device number 103 [ 603.301730][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.346104][T12381] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 603.362631][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.715359][T12390] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.722756][T12390] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.187430][T12390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.226628][T12390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.541104][T12390] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.550091][T12390] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.563417][T12390] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.570767][T11696] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 604.582074][T12390] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.730488][T11696] usb 4-1: Using ep0 maxpacket: 16 [ 605.726921][ T5900] usb 3-1: USB disconnect, device number 81 [ 606.587433][T12425] loop4: detected capacity change from 0 to 7 [ 606.600900][T12425] Dev loop4: unable to read RDB block 7 [ 606.610671][T12425] loop4: unable to read partition table [ 606.619679][T12425] loop4: partition table beyond EOD, truncated [ 606.629368][T12425] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 607.477557][T11696] usb 4-1: unable to get BOS descriptor or descriptor too short [ 607.499049][T11696] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 607.507240][T11696] usb 4-1: can't read configurations, error -71 [ 607.802210][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1840'. [ 608.091702][T12449] loop2: detected capacity change from 0 to 7 [ 608.118460][ T8150] Dev loop2: unable to read RDB block 7 [ 608.143546][ T8150] loop2: unable to read partition table [ 608.164169][ T8150] loop2: partition table beyond EOD, truncated [ 608.182796][T12449] Dev loop2: unable to read RDB block 7 [ 608.206585][T12449] loop2: unable to read partition table [ 608.223635][T12449] loop2: partition table beyond EOD, truncated [ 608.230060][T12449] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 608.325043][T12452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1845'. [ 608.520016][T12455] hsr0: entered promiscuous mode [ 608.528852][T12455] vlan0: entered promiscuous mode [ 608.727036][T12454] macsec0: entered promiscuous mode [ 608.733103][T12460] macsec0: left promiscuous mode [ 609.005521][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 609.126141][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805881f800: rx timeout, send abort [ 609.626222][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805881ec00: rx timeout, send abort [ 609.634825][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805881f800: abort rx timeout. Force session deactivation [ 609.642418][T12478] FAULT_INJECTION: forcing a failure. [ 609.642418][T12478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.723482][T12478] CPU: 1 UID: 0 PID: 12478 Comm: syz.2.1853 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 609.723516][T12478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.723530][T12478] Call Trace: [ 609.723540][T12478] [ 609.723549][T12478] dump_stack_lvl+0x189/0x250 [ 609.723590][T12478] ? __pfx____ratelimit+0x10/0x10 [ 609.723625][T12478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.723660][T12478] ? __pfx__printk+0x10/0x10 [ 609.723698][T12478] should_fail_ex+0x414/0x560 [ 609.723734][T12478] _copy_to_user+0x31/0xb0 [ 609.723761][T12478] simple_read_from_buffer+0xe1/0x170 [ 609.723790][T12478] proc_fail_nth_read+0x1df/0x250 [ 609.723821][T12478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.723852][T12478] ? rw_verify_area+0x258/0x650 [ 609.723885][T12478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.723914][T12478] vfs_read+0x1fd/0x980 [ 609.723954][T12478] ? __pfx___mutex_lock+0x10/0x10 [ 609.723985][T12478] ? __pfx_vfs_read+0x10/0x10 [ 609.724020][T12478] ? __fget_files+0x2a/0x420 [ 609.724050][T12478] ? __fget_files+0x3a0/0x420 [ 609.724073][T12478] ? __fget_files+0x2a/0x420 [ 609.724108][T12478] ksys_read+0x145/0x250 [ 609.724126][T12478] ? __fget_files+0x3a0/0x420 [ 609.724152][T12478] ? __pfx_ksys_read+0x10/0x10 [ 609.724192][T12478] ? do_syscall_64+0xbe/0x3b0 [ 609.724219][T12478] do_syscall_64+0xfa/0x3b0 [ 609.724239][T12478] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.724272][T12478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.724294][T12478] ? clear_bhb_loop+0x60/0xb0 [ 609.724322][T12478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.724344][T12478] RIP: 0033:0x7f20d558d33c [ 609.724363][T12478] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 609.724384][T12478] RSP: 002b:00007f20d6422030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.724407][T12478] RAX: ffffffffffffffda RBX: 00007f20d57b5fa0 RCX: 00007f20d558d33c [ 609.724425][T12478] RDX: 000000000000000f RSI: 00007f20d64220a0 RDI: 000000000000000b [ 609.724439][T12478] RBP: 00007f20d6422090 R08: 0000000000000000 R09: 0000000000000000 [ 609.724454][T12478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.724467][T12478] R13: 0000000000000000 R14: 00007f20d57b5fa0 R15: 00007f20d58dfa28 [ 609.724500][T12478] [ 609.961867][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.134708][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805881ec00: abort rx timeout. Force session deactivation [ 610.231149][T12483] batman_adv: batadv0: Adding interface: ip6gretap1 [ 610.238177][T12483] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.264647][T12483] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 610.292148][T12483] batman_adv: batadv0: Removing interface: dummy0 [ 610.302529][T12483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.345971][T12491] futex_wake_op: syz.1.1851 tries to shift op by -33; fix this program [ 610.366630][T12483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.381057][T12493] loop2: detected capacity change from 0 to 7 [ 610.388455][T12483] batman_adv: batadv0: Removing interface: ip6gretap1 [ 610.400698][T12493] Dev loop2: unable to read RDB block 7 [ 610.406582][T12493] loop2: unable to read partition table [ 610.420591][T12493] loop2: partition table beyond EOD, truncated [ 610.434573][T12493] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 610.461532][T12491] netdevsim netdevsim1: Direct firmware load for . [ 610.461532][T12491] failed with error -2 [ 610.472451][T11696] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 610.472643][T12491] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 610.472643][T12491] [ 610.660901][T11696] usb 5-1: Using ep0 maxpacket: 32 [ 610.668197][T11696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 610.682465][T11696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 610.705273][T11696] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 610.724771][T11696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.772914][T11696] usb 5-1: Product: syz [ 610.788612][T11696] usb 5-1: Manufacturer: syz [ 610.810329][T11696] usb 5-1: SerialNumber: syz [ 610.833641][T11696] usb 5-1: config 0 descriptor?? [ 610.847821][T11696] ati_remote 5-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 610.930496][T12499] loop6: detected capacity change from 0 to 7 [ 610.958965][T12499] Dev loop6: unable to read RDB block 7 [ 610.964909][T12499] loop6: unable to read partition table [ 610.982279][T12499] loop6: partition table beyond EOD, truncated [ 611.023838][T12499] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 611.921200][T12506] ipip0: entered promiscuous mode [ 611.926337][T12506] ipip0: entered allmulticast mode [ 611.970712][T12510] futex_wake_op: syz.3.1860 tries to shift op by -33; fix this program [ 611.981454][T12510] netdevsim netdevsim3: Direct firmware load for . [ 611.981454][T12510] failed with error -2 [ 611.992189][T12510] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 611.992189][T12510] [ 612.039985][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 612.040008][ T30] audit: type=1326 audit(1749877725.858:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d278e929 code=0x7ffc0000 [ 612.430301][ T5914] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 612.583520][ T30] audit: type=1326 audit(1749877725.858:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d278e929 code=0x7ffc0000 [ 612.610788][ T30] audit: type=1326 audit(1749877725.858:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f19d278e929 code=0x7ffc0000 [ 612.634472][ T30] audit: type=1326 audit(1749877725.858:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d278e929 code=0x7ffc0000 [ 612.660681][ T30] audit: type=1326 audit(1749877725.858:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f19d278e929 code=0x7ffc0000 [ 612.683735][ T30] audit: type=1326 audit(1749877725.858:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d278e929 code=0x7ffc0000 [ 612.707495][ T30] audit: type=1326 audit(1749877725.858:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f19d278e929 code=0x7ffc0000 [ 612.730236][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 612.749014][ T5914] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 612.757441][ T5914] usb 2-1: config 0 has no interface number 1 [ 612.764029][ T5914] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 612.777874][ T5914] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 612.800353][ T5914] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 612.819420][ T5914] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 612.829781][ T5914] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.843092][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 612.854727][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 612.864675][ T5914] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 612.914935][ T5914] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 612.971584][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.979710][ T5914] usb 2-1: Product: syz [ 612.987232][ T5914] usb 2-1: Manufacturer: syz [ 612.992083][ T5914] usb 2-1: SerialNumber: syz [ 613.008731][ T5914] usb 2-1: config 0 descriptor?? [ 613.015967][T12512] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 613.033331][ T5914] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 613.053319][ T5914] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 613.162678][ T5914] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 613.490312][ T5914] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 613.501025][T11713] usb 5-1: USB disconnect, device number 88 [ 613.717664][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.739523][ T30] audit: type=1326 audit(1749877727.558:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d278e929 code=0x7ffc0000 [ 613.799771][ T5914] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 613.895714][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.918018][ T30] audit: type=1326 audit(1749877727.558:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d278e929 code=0x7ffc0000 [ 613.941847][ T5914] usb 3-1: config 0 descriptor?? [ 613.957317][ T5914] comedi comedi0: Wrong number of endpoints [ 613.997978][ T5914] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device. [ 614.681566][T12529] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 614.735036][T12529] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 615.123339][T11721] usb 2-1: USB disconnect, device number 92 [ 615.688587][T12537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1865'. [ 616.026359][ T5914] usb 3-1: USB disconnect, device number 82 [ 616.180622][ T5900] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 616.294837][T12542] loop2: detected capacity change from 0 to 7 [ 616.352230][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 616.352613][T12542] Dev loop2: unable to read RDB block 7 [ 616.378633][T12542] loop2: unable to read partition table [ 616.380341][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 616.410691][T12542] loop2: partition table beyond EOD, truncated [ 616.430377][T12542] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 616.444166][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 616.511444][ T5900] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 616.528919][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.537892][ T5900] usb 2-1: Product: syz [ 616.557829][ T5900] usb 2-1: Manufacturer: syz [ 616.567934][ T5900] usb 2-1: SerialNumber: syz [ 616.592992][ T5900] usb 2-1: config 0 descriptor?? [ 616.618811][ T5900] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 616.660103][ T5900] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 617.030288][T11721] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 617.180418][T11721] usb 5-1: Using ep0 maxpacket: 8 [ 617.189146][T11721] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.202595][T11721] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 617.212286][ T5900] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 617.219215][ T5900] em28xx 2-1:0.0: Config register raw data: 0x41 [ 617.226058][T11721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.234517][T11721] usb 5-1: Product: syz [ 617.238924][T11721] usb 5-1: Manufacturer: syz [ 617.258429][T12553] futex_wake_op: syz.3.1872 tries to shift op by -33; fix this program [ 617.271484][T12553] netdevsim netdevsim3: Direct firmware load for . [ 617.271484][T12553] failed with error -2 [ 617.282373][T12553] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 617.282373][T12553] [ 617.397182][T11721] usb 5-1: SerialNumber: syz [ 617.483580][T11721] usb 5-1: config 0 descriptor?? [ 617.956376][T12558] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1873'. [ 618.393162][T12569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1875'. [ 618.563914][ T5900] usb 5-1: USB disconnect, device number 89 [ 618.612815][T11713] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 618.648157][ T5914] usb 2-1: USB disconnect, device number 93 [ 618.666090][ T5914] em28xx 2-1:0.0: Disconnecting em28xx [ 618.675915][ T5914] em28xx 2-1:0.0: Freeing device [ 618.700672][T11721] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 618.770504][T11713] usb 3-1: Using ep0 maxpacket: 32 [ 618.786780][T11713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.804719][T11713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.816144][T11713] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 618.828427][T11713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.839043][T11713] usb 3-1: config 0 descriptor?? [ 618.870453][T11721] usb 4-1: Using ep0 maxpacket: 16 [ 618.882092][T11721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.895978][T11721] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 618.906723][T11721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.915212][T11721] usb 4-1: Product: syz [ 618.919538][T11721] usb 4-1: Manufacturer: syz [ 618.924596][T11721] usb 4-1: SerialNumber: syz [ 618.941327][T11721] usb 4-1: config 0 descriptor?? [ 618.961433][T11721] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 618.968009][T11721] gspca_stv06xx: st6422 sensor detected [ 619.049780][T12580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1876'. [ 619.075140][T12580] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1876'. [ 619.130452][T11713] usbhid 3-1:0.0: can't add hid device: -71 [ 619.160155][T11713] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 619.211307][T11713] usb 3-1: USB disconnect, device number 83 [ 619.614926][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1882'. [ 619.633739][T11721] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 619.673670][T11721] usb 4-1: USB disconnect, device number 106 [ 620.343958][T12608] futex_wake_op: syz.1.1886 tries to shift op by -33; fix this program [ 620.357795][T12608] netdevsim netdevsim1: Direct firmware load for . [ 620.357795][T12608] failed with error -2 [ 620.368758][T12608] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 620.368758][T12608] [ 620.601159][T11721] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 620.770409][T11721] usb 4-1: Using ep0 maxpacket: 32 [ 620.977902][T12620] FAULT_INJECTION: forcing a failure. [ 620.977902][T12620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.004165][T11721] usb 4-1: config 0 has an invalid interface number: 250 but max is 1 [ 621.030609][T12620] CPU: 1 UID: 0 PID: 12620 Comm: syz.2.1892 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 621.030634][T12620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.030644][T12620] Call Trace: [ 621.030651][T12620] [ 621.030658][T12620] dump_stack_lvl+0x189/0x250 [ 621.030688][T12620] ? __pfx____ratelimit+0x10/0x10 [ 621.030714][T12620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.030739][T12620] ? __pfx__printk+0x10/0x10 [ 621.030765][T12620] should_fail_ex+0x414/0x560 [ 621.030790][T12620] _copy_to_user+0x31/0xb0 [ 621.030808][T12620] simple_read_from_buffer+0xe1/0x170 [ 621.030829][T12620] proc_fail_nth_read+0x1df/0x250 [ 621.030851][T12620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 621.030873][T12620] ? rw_verify_area+0x258/0x650 [ 621.030896][T12620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 621.030916][T12620] vfs_read+0x1fd/0x980 [ 621.030945][T12620] ? __pfx___mutex_lock+0x10/0x10 [ 621.030978][T12620] ? __pfx_vfs_read+0x10/0x10 [ 621.031014][T12620] ? __fget_files+0x2a/0x420 [ 621.031042][T12620] ? __fget_files+0x3a0/0x420 [ 621.031059][T12620] ? __fget_files+0x2a/0x420 [ 621.031083][T12620] ksys_read+0x145/0x250 [ 621.031097][T12620] ? __fget_files+0x3a0/0x420 [ 621.031116][T12620] ? __pfx_ksys_read+0x10/0x10 [ 621.031144][T12620] ? do_syscall_64+0xbe/0x3b0 [ 621.031162][T12620] do_syscall_64+0xfa/0x3b0 [ 621.031176][T12620] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.031200][T12620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.031216][T12620] ? clear_bhb_loop+0x60/0xb0 [ 621.031235][T12620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.031250][T12620] RIP: 0033:0x7f20d558d33c [ 621.031264][T12620] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 621.031278][T12620] RSP: 002b:00007f20d6422030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 621.031295][T12620] RAX: ffffffffffffffda RBX: 00007f20d57b5fa0 RCX: 00007f20d558d33c [ 621.031307][T12620] RDX: 000000000000000f RSI: 00007f20d64220a0 RDI: 0000000000000005 [ 621.031317][T12620] RBP: 00007f20d6422090 R08: 0000000000000000 R09: 0000000000000000 [ 621.031328][T12620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.031337][T12620] R13: 0000000000000000 R14: 00007f20d57b5fa0 R15: 00007f20d58dfa28 [ 621.031360][T12620] [ 621.320582][T11721] usb 4-1: config 0 has no interface number 1 [ 621.326831][T11721] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 621.345601][T11721] usb 4-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 621.354766][T11721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.362839][T11721] usb 4-1: Product: syz [ 621.367007][T11721] usb 4-1: Manufacturer: syz [ 621.371722][T11721] usb 4-1: SerialNumber: syz [ 621.379169][T11721] usb 4-1: config 0 descriptor?? [ 621.394742][T11721] usb 4-1: Found UVC 0.00 device syz (0408:3090) [ 621.401586][T11721] usb 4-1: No valid video chain found. [ 621.459951][T12621] netlink: 'syz.4.1891': attribute type 2 has an invalid length. [ 621.920647][T11721] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 622.270337][T11721] usb 3-1: Using ep0 maxpacket: 8 [ 622.330514][T11721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 622.339561][T11721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 622.359287][T11721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 622.420952][T12630] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1895'. [ 622.450739][T11721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 622.483622][T11721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 622.892577][T11721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 622.947907][T11721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 623.122627][T11721] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 623.132249][T11721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.159693][T11721] usb 3-1: Product: syz [ 623.169778][T11721] usb 3-1: Manufacturer: syz [ 623.174933][T11721] usb 3-1: SerialNumber: syz [ 623.185608][T11721] usb 3-1: config 0 descriptor?? [ 623.201670][T11721] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 623.226407][T12636] program syz.4.1896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 623.338258][T11721] usb 4-1: USB disconnect, device number 107 [ 623.387453][ T7252] udevd[7252]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.478527][T11716] usb 3-1: USB disconnect, device number 84 [ 623.964074][T12643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1897'. [ 624.201325][T12641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.306398][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 625.426793][T12659] No such timeout policy "syz0" [ 625.543381][T12668] netlink: 'syz.3.1902': attribute type 12 has an invalid length. [ 625.619350][T12671] input: syz1 as /devices/virtual/input/input33 [ 625.690827][ T5914] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 625.880293][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 625.891840][ T5914] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 625.919756][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.960493][ T5900] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 625.986517][ T5914] usb 5-1: config 0 descriptor?? [ 626.017112][ T5914] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 626.141196][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 626.196369][ T5900] usb 4-1: config 2 has no interfaces? [ 626.209427][ T5900] usb 4-1: New USB device found, idVendor=12d1, idProduct=2d09, bcdDevice=b0.ca [ 626.272549][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.350652][ T5900] usb 4-1: Product: syz [ 626.380517][ T5900] usb 4-1: Manufacturer: syz [ 626.393235][ T5900] usb 4-1: SerialNumber: syz [ 627.608763][ T5900] usb 5-1: USB disconnect, device number 90 [ 628.621964][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1915'. [ 628.632006][T12700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.405858][T12668] syz.3.1902 (12668): drop_caches: 2 [ 629.427244][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1920'. [ 629.476333][T11721] usb 4-1: USB disconnect, device number 108 [ 629.480480][ T5900] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 629.516901][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.523466][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.597992][T12720] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1921'. [ 629.620357][ T5900] usb 3-1: device descriptor read/64, error -71 [ 629.870358][ T5900] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 630.083115][ T5900] usb 3-1: device descriptor read/64, error -71 [ 630.195045][ T5900] usb usb3-port1: attempt power cycle [ 630.580428][ T5900] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 630.610954][ T5900] usb 3-1: device descriptor read/8, error -71 [ 630.870671][ T5900] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 630.902497][ T5900] usb 3-1: device descriptor read/8, error -71 [ 631.025763][ T5900] usb usb3-port1: unable to enumerate USB device [ 631.234431][ T5914] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 631.402331][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 631.436486][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 631.476774][ T5914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 631.486166][ T30] audit: type=1326 audit(1749877745.298:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412a98e929 code=0x7ffc0000 [ 631.510151][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 631.518758][ T5914] usb 4-1: SerialNumber: syz [ 631.526004][ T30] audit: type=1326 audit(1749877745.308:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412a98e929 code=0x7ffc0000 [ 631.549028][T12746] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 631.549882][ T30] audit: type=1326 audit(1749877745.308:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f412a98e929 code=0x7ffc0000 [ 631.582541][ T5914] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 631.599610][ T30] audit: type=1326 audit(1749877745.308:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412a98e929 code=0x7ffc0000 [ 631.622581][ T5914] usb-storage 4-1:1.0: USB Mass Storage device detected [ 631.634165][T12746] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 631.643289][ T30] audit: type=1326 audit(1749877745.308:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f412a98d290 code=0x7ffc0000 [ 631.679415][ T5914] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 631.690000][ T30] audit: type=1326 audit(1749877745.308:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412a98e929 code=0x7ffc0000 [ 631.713178][ T5914] scsi host1: usb-storage 4-1:1.0 [ 631.739650][ T30] audit: type=1326 audit(1749877745.318:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f412a98e929 code=0x7ffc0000 [ 631.763962][ T30] audit: type=1326 audit(1749877745.318:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412a98e929 code=0x7ffc0000 [ 631.788067][ T30] audit: type=1326 audit(1749877745.338:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f412a98e929 code=0x7ffc0000 [ 631.812359][ T30] audit: type=1326 audit(1749877745.338:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412a98e929 code=0x7ffc0000 [ 632.067275][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 632.126015][T12757] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 632.138164][T12757] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 632.361606][T12767] netlink: 'syz.2.1935': attribute type 21 has an invalid length. [ 632.369596][T12767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1935'. [ 632.563800][T11716] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 632.703659][T11721] usb 4-1: USB disconnect, device number 109 [ 632.780647][T11716] usb 2-1: config 0 has no interfaces? [ 632.791700][T11716] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 632.801659][T11716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.809660][T11716] usb 2-1: Product: syz [ 632.908431][T11716] usb 2-1: Manufacturer: syz [ 632.940127][T11716] usb 2-1: SerialNumber: syz [ 632.985643][T11716] usb 2-1: config 0 descriptor?? [ 633.637429][T11716] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 633.840387][T11716] usb 3-1: Using ep0 maxpacket: 32 [ 633.875963][T11716] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 634.014621][T11716] usb 3-1: config 0 has no interface number 0 [ 634.083932][T11716] usb 3-1: config 0 interface 29 has no altsetting 0 [ 634.113893][T11716] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 634.144412][T11716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.236460][T11716] usb 3-1: Product: syz [ 634.257620][T11716] usb 3-1: Manufacturer: syz [ 634.355985][T11716] usb 3-1: SerialNumber: syz [ 634.408398][T11716] usb 3-1: config 0 descriptor?? [ 634.663753][T11716] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 634.877062][T11716] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 634.907327][T11716] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 634.958609][T11716] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 635.261634][T11716] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -8 [ 635.315850][T11716] usb 3-1: USB disconnect, device number 89 [ 635.759638][T11716] usb 2-1: USB disconnect, device number 94 [ 635.878707][T12810] loop9: detected capacity change from 0 to 8 [ 635.913314][ T5943] Dev loop9: unable to read RDB block 8 [ 635.936150][ T5943] loop9: unable to read partition table [ 635.951213][T12812] netlink: 'syz.4.1948': attribute type 1 has an invalid length. [ 635.961592][ T5943] loop9: partition table beyond EOD, truncated [ 635.971306][T12810] Dev loop9: unable to read RDB block 8 [ 635.977120][T12810] loop9: unable to read partition table [ 635.990819][T12810] loop9: partition table beyond EOD, truncated [ 635.999093][T12810] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 636.059883][T12812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 636.216836][T12815] ip6erspan0: entered promiscuous mode [ 636.251265][T12815] bond2: (slave ip6erspan0): making interface the new active one [ 636.262386][T12815] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 637.789850][T12852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.235362][T12858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.247847][T12858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.841198][T11721] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 639.073045][T11721] usb 5-1: config 0 has an invalid interface number: 81 but max is 2 [ 639.081967][T12866] netlink: 'syz.1.1957': attribute type 1 has an invalid length. [ 639.091742][T11721] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.121690][T11721] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 639.140518][T11721] usb 5-1: config 0 has no interface number 0 [ 639.158236][T11721] usb 5-1: config 0 interface 81 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.190141][T11721] usb 5-1: config 0 interface 81 has no altsetting 0 [ 639.207575][T11721] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a [ 639.216777][T11721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.233612][T11721] usb 5-1: config 0 descriptor?? [ 639.456196][T11721] usb 5-1: string descriptor 0 read error: -71 [ 639.502399][T11721] cdc_ether 5-1:0.81: skipping garbage [ 639.507983][T11721] cdc_ether 5-1:0.81: skipping garbage [ 639.514973][T11721] usb 5-1: bad CDC descriptors [ 639.521707][T11721] usb 5-1: unsupported MDLM descriptors [ 639.571172][T11721] usb 5-1: USB disconnect, device number 91 [ 640.091979][T12868] bond1: (slave gretap1): making interface the new active one [ 640.250886][T12868] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 640.540266][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 640.540289][ T30] audit: type=1326 audit(1749877754.318:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12878 comm="syz.4.1959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6dc38e929 code=0x0 [ 640.710372][T11721] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 640.882925][T11721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.900098][T11721] usb 4-1: config 0 has no interfaces? [ 640.916836][T11721] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 640.948441][T11721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.992117][T11721] usb 4-1: Product: syz [ 640.996341][T11721] usb 4-1: Manufacturer: syz [ 641.019042][T11721] usb 4-1: SerialNumber: syz [ 641.095453][T11721] usb 4-1: config 0 descriptor?? [ 641.559555][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1962'. [ 641.757657][T12883] netlink: 1060 bytes leftover after parsing attributes in process `syz.1.1960'. [ 642.697306][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'. [ 642.830944][T12910] sctp: [Deprecated]: syz.2.1966 (pid 12910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.830944][T12910] Use struct sctp_sack_info instead [ 643.140433][ T5900] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 643.396774][ T5900] usb 3-1: config index 0 descriptor too short (expected 8192, got 441) [ 643.420290][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.495817][ T5900] usb 3-1: config 0 has no interfaces? [ 643.610020][ T5900] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 643.924209][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.051360][ T5900] usb 3-1: config 0 descriptor?? [ 644.198132][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1969'. [ 644.371222][ T10] usb 4-1: USB disconnect, device number 110 [ 644.927833][T12926] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1972'. [ 645.070435][T11706] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 645.290489][T11706] usb 4-1: device descriptor read/64, error -71 [ 645.370423][ T5900] usb 3-1: string descriptor 0 read error: -71 [ 645.450626][ T5900] usb 3-1: USB disconnect, device number 90 [ 645.582252][T11706] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 645.773363][T11706] usb 4-1: device descriptor read/64, error -71 [ 645.890856][T11706] usb usb4-port1: attempt power cycle [ 646.260317][T11706] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 646.316059][T11706] usb 4-1: device descriptor read/8, error -71 [ 646.590408][T11706] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 646.640002][T12950] futex_wake_op: syz.4.1975 tries to shift op by -33; fix this program [ 646.657745][T12950] netdevsim netdevsim4: Direct firmware load for . [ 646.657745][T12950] failed with error -2 [ 646.668771][T12950] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 646.668771][T12950] [ 646.681664][T11706] usb 4-1: device descriptor read/8, error -71 [ 646.796362][T11706] usb usb4-port1: unable to enumerate USB device [ 647.004190][T12955] futex_wake_op: syz.2.1976 tries to shift op by -33; fix this program [ 647.044926][T12955] netdevsim netdevsim2: Direct firmware load for . [ 647.044926][T12955] failed with error -2 [ 647.064320][T12955] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 647.064320][T12955] [ 648.312929][T11716] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 648.420635][ T5914] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 648.470312][T11716] usb 2-1: device descriptor read/64, error -71 [ 648.572955][T12980] netlink: 'syz.2.1985': attribute type 2 has an invalid length. [ 648.590386][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 648.601524][ T5914] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 648.615391][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 648.634169][ T5914] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 648.643383][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.651551][ T5914] usb 4-1: Product: у [ 648.655748][ T5914] usb 4-1: Manufacturer: à°‡ [ 648.674953][ T5914] usb 4-1: SerialNumber: І [ 648.720344][T11716] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 648.860616][T11716] usb 2-1: device descriptor read/64, error -71 [ 649.033397][T11716] usb usb2-port1: attempt power cycle [ 649.181169][T12983] FAULT_INJECTION: forcing a failure. [ 649.181169][T12983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.201540][T12983] CPU: 1 UID: 0 PID: 12983 Comm: syz.4.1986 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 649.201573][T12983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 649.201588][T12983] Call Trace: [ 649.201598][T12983] [ 649.201608][T12983] dump_stack_lvl+0x189/0x250 [ 649.201651][T12983] ? __pfx____ratelimit+0x10/0x10 [ 649.201685][T12983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.201719][T12983] ? __pfx__printk+0x10/0x10 [ 649.201751][T12983] should_fail_ex+0x414/0x560 [ 649.201784][T12983] _copy_to_user+0x31/0xb0 [ 649.201811][T12983] simple_read_from_buffer+0xe1/0x170 [ 649.201845][T12983] proc_fail_nth_read+0x1df/0x250 [ 649.201882][T12983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.201904][T12983] ? rw_verify_area+0x258/0x650 [ 649.201929][T12983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.201959][T12983] vfs_read+0x1fd/0x980 [ 649.201999][T12983] ? __pfx___mutex_lock+0x10/0x10 [ 649.202020][T12983] ? __pfx_vfs_read+0x10/0x10 [ 649.202051][T12983] ? __fget_files+0x2a/0x420 [ 649.202073][T12983] ? __fget_files+0x3a0/0x420 [ 649.202091][T12983] ? __fget_files+0x2a/0x420 [ 649.202129][T12983] ksys_read+0x145/0x250 [ 649.202147][T12983] ? __fget_files+0x3a0/0x420 [ 649.202172][T12983] ? __pfx_ksys_read+0x10/0x10 [ 649.202207][T12983] ? do_syscall_64+0xbe/0x3b0 [ 649.202225][T12983] do_syscall_64+0xfa/0x3b0 [ 649.202241][T12983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.202262][T12983] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 649.202284][T12983] ? clear_bhb_loop+0x60/0xb0 [ 649.202311][T12983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.202331][T12983] RIP: 0033:0x7fb6dc38d33c [ 649.202353][T12983] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 649.202367][T12983] RSP: 002b:00007fb6dd1e9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 649.202385][T12983] RAX: ffffffffffffffda RBX: 00007fb6dc5b5fa0 RCX: 00007fb6dc38d33c [ 649.202397][T12983] RDX: 000000000000000f RSI: 00007fb6dd1e90a0 RDI: 0000000000000006 [ 649.202412][T12983] RBP: 00007fb6dd1e9090 R08: 0000000000000000 R09: 0000000000000000 [ 649.202426][T12983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.202440][T12983] R13: 0000000000000000 R14: 00007fb6dc5b5fa0 R15: 00007fb6dc6dfa28 [ 649.202474][T12983] [ 649.442243][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.467855][ T5914] usb 4-1: 0:2 : does not exist [ 649.510284][T11716] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 649.573297][T11716] usb 2-1: device descriptor read/8, error -71 [ 649.712150][ T5914] usb 4-1: USB disconnect, device number 115 [ 649.805149][ T8150] udevd[8150]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.811303][T11716] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 649.861973][T11716] usb 2-1: device descriptor read/8, error -71 [ 649.971228][T11716] usb usb2-port1: unable to enumerate USB device [ 650.051841][ T5914] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 650.294195][ T5914] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 650.310303][ T5914] usb 4-1: config 0 has no interface number 0 [ 650.334652][ T5914] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 650.344821][ T5914] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 650.355449][ T5914] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 650.368392][ T5914] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 650.423052][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.434890][ T5914] usb 4-1: Product: syz [ 650.452534][ T5914] usb 4-1: Manufacturer: syz [ 650.458137][ T5914] usb 4-1: SerialNumber: syz [ 650.504176][T13004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.541439][ T5914] usb 4-1: config 0 descriptor?? [ 650.547303][T12987] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 650.773090][ T5914] usb 4-1: probing VID:PID(2201:012C) [ 650.783351][ T5914] usb 4-1: vub300 testing BULK OUT EndPoint(0) 02 [ 650.810930][ T5914] usb 4-1: vub300 testing BULK IN EndPoint(1) 82 [ 650.832212][ T5914] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 650.917350][ T5914] vub300 4-1:0.239: probe with driver vub300 failed with error -22 [ 651.041031][ T5914] usb 4-1: USB disconnect, device number 116 [ 651.301606][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1993'. [ 651.538598][T13009] futex_wake_op: syz.0.1992 tries to shift op by -33; fix this program [ 651.554703][T13009] netdevsim netdevsim0: Direct firmware load for . [ 651.554703][T13009] failed with error -2 [ 651.566304][T13009] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 651.566304][T13009] [ 651.723141][T11721] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 651.968336][T11721] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 652.033802][T11721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.134373][T11721] usb 2-1: config 0 descriptor?? [ 652.384248][T11721] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 652.650123][T11721] [drm:udl_init] *ERROR* Selecting channel failed [ 652.718152][T11721] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 652.744142][T11721] [drm] Initialized udl on minor 2 [ 652.771249][T11721] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 652.802641][T11721] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 652.891804][T11721] usb 2-1: USB disconnect, device number 99 [ 652.913783][T11716] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 652.971921][T11716] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 653.420584][ T5900] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 653.611016][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 653.983946][ T30] audit: type=1326 audit(1749877767.798:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13025 comm="syz.1.1998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19d278e929 code=0x0 [ 654.005946][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.232609][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'. [ 655.428182][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'. [ 657.497112][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 657.551450][ T5900] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 657.571119][ T5900] usb 5-1: can't read configurations, error -71 [ 657.990505][ T5900] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 658.170490][T11721] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 658.184361][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 658.208826][ T5900] usb 5-1: config 0 has no interfaces? [ 658.228460][ T5900] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 658.244156][T13064] netlink: 'syz.2.2006': attribute type 1 has an invalid length. [ 658.252187][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.275167][ T5900] usb 5-1: Product: syz [ 658.290591][T11716] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 658.312936][T13065] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2006'. [ 658.322065][ T5900] usb 5-1: Manufacturer: syz [ 658.328884][ T5900] usb 5-1: SerialNumber: syz [ 658.383623][ T5900] usb 5-1: config 0 descriptor?? [ 658.413970][T11721] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 658.438151][T13064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 658.461937][T11721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.469976][T11721] usb 2-1: Product: syz [ 658.479977][T11716] usb 4-1: config 0 has no interfaces? [ 658.505484][T11721] usb 2-1: Manufacturer: syz [ 658.550477][T11721] usb 2-1: SerialNumber: syz [ 658.566370][T11716] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 658.595274][T11721] usb 2-1: config 0 descriptor?? [ 658.605824][T11716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.679673][T11716] usb 4-1: Product: syz [ 658.689579][T11716] usb 4-1: Manufacturer: syz [ 658.703961][T11716] usb 4-1: SerialNumber: syz [ 658.725248][T11716] usb 4-1: config 0 descriptor?? [ 659.000273][ T5900] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 659.078483][T11721] airspy 2-1:0.0: Board ID: 00 [ 659.083715][T11721] airspy 2-1:0.0: Firmware version: [ 659.437443][ T5900] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 659.550380][ T5900] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 659.823661][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 659.848547][ T5900] usb 3-1: config 1 has no interface number 0 [ 659.860366][ T5900] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 659.894142][ T5900] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 659.949856][ T5900] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 659.987340][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.009569][T11721] airspy 2-1:0.0: usb_control_msg() failed -71 request 0f [ 660.029311][T11721] airspy 2-1:0.0: Registered as swradio24 [ 660.036343][T11721] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 660.276707][ T5900] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 660.305857][T11721] usb 2-1: USB disconnect, device number 100 [ 660.338456][ T5943] udevd[5943]: setting owner of /dev/bus/usb/002/100 to uid=0, gid=0 failed: No such file or directory [ 660.489538][T13072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.498579][T13072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.877713][ T5900] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 660.950676][ T5900] usb 5-1: USB disconnect, device number 93 [ 660.966339][T13080] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2009'. [ 660.976283][T13080] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 661.098203][T11721] usb 3-1: USB disconnect, device number 91 [ 661.123221][T11721] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 661.661984][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2012'. [ 662.059177][T13100] futex_wake_op: syz.4.2010 tries to shift op by -33; fix this program [ 662.253535][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 662.314667][T13103] loop8: detected capacity change from 0 to 16384 [ 662.326608][T13106] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 662.422940][T11696] usb 4-1: USB disconnect, device number 117 [ 662.576706][T13109] binder: 13102:13109 unknown command 28 [ 662.576907][T13103] loop8: detected capacity change from 16384 to 16320 [ 662.609877][T13109] binder: 13102:13109 ioctl c0306201 200000000080 returned -22 [ 662.791672][T13107] binder: BINDER_SET_CONTEXT_MGR already set [ 662.797701][T13107] binder: 13102:13107 ioctl 4018620d 200000000040 returned -16 [ 663.188647][T13104] netdevsim netdevsim4: Direct firmware load for . [ 663.188647][T13104] failed with error -2 [ 663.242442][T13104] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 663.242442][T13104] [ 664.648085][T13126] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2015'. [ 665.680558][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2018'. [ 666.502020][T13139] loop6: detected capacity change from 0 to 7 [ 666.540436][T13139] Dev loop6: unable to read RDB block 7 [ 666.546099][T13139] loop6: unable to read partition table [ 666.604628][T13139] loop6: partition table beyond EOD, truncated [ 666.634999][T13139] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 666.702671][T13146] loop2: detected capacity change from 0 to 7 [ 666.731823][ T5885] Dev loop2: unable to read RDB block 7 [ 666.783997][ T5885] loop2: unable to read partition table [ 666.825603][ T5885] loop2: partition table beyond EOD, truncated [ 666.863461][T13146] Dev loop2: unable to read RDB block 7 [ 666.902404][T13146] loop2: unable to read partition table [ 666.922772][T13146] loop2: partition table beyond EOD, truncated [ 666.946433][T13146] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 667.596426][T13160] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 668.219452][T13119] loop8: detected capacity change from 16320 to 0 [ 668.272281][T13119] [ 668.274691][T13119] ====================================================== [ 668.281710][T13119] WARNING: possible circular locking dependency detected [ 668.288745][T13119] 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 Not tainted [ 668.295938][T13119] ------------------------------------------------------ [ 668.302956][T13119] syz.2.2015/13119 is trying to acquire lock: [ 668.309035][T13119] ffffffff8f87ab28 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 668.319594][T13119] [ 668.319594][T13119] but task is already holding lock: [ 668.326972][T13119] ffff888024d9ec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 668.337178][T13119] [ 668.337178][T13119] which lock already depends on the new lock. [ 668.337178][T13119] [ 668.347584][T13119] [ 668.347584][T13119] the existing dependency chain (in reverse order) is: [ 668.356603][T13119] [ 668.356603][T13119] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 668.365227][T13119] lock_acquire+0x120/0x360 [ 668.370277][T13119] blk_alloc_queue+0x538/0x620 [ 668.375588][T13119] __blk_mq_alloc_disk+0x162/0x340 [ 668.381235][T13119] loop_add+0x41b/0xad0 [ 668.385931][T13119] loop_init+0x173/0x230 [ 668.390703][T13119] do_one_initcall+0x233/0x820 [ 668.395991][T13119] do_initcall_level+0x137/0x1f0 [ 668.401479][T13119] do_initcalls+0x69/0xd0 [ 668.406365][T13119] kernel_init_freeable+0x3d9/0x570 [ 668.412120][T13119] kernel_init+0x1d/0x1d0 [ 668.417007][T13119] ret_from_fork+0x3fc/0x770 [ 668.422156][T13119] ret_from_fork_asm+0x1a/0x30 [ 668.427480][T13119] [ 668.427480][T13119] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 668.434747][T13119] lock_acquire+0x120/0x360 [ 668.439820][T13119] fs_reclaim_acquire+0x72/0x100 [ 668.445316][T13119] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 668.451677][T13119] __alloc_skb+0x112/0x2d0 [ 668.456646][T13119] alloc_uevent_skb+0x7d/0x230 [ 668.461966][T13119] kobject_uevent_net_broadcast+0x2fa/0x560 [ 668.468415][T13119] kobject_uevent_env+0x55b/0x8c0 [ 668.473998][T13119] kobject_synth_uevent+0x527/0xb00 [ 668.479746][T13119] bus_uevent_store+0x115/0x170 [ 668.485147][T13119] kernfs_fop_write_iter+0x378/0x4f0 [ 668.490996][T13119] vfs_write+0x548/0xa90 [ 668.495797][T13119] ksys_write+0x145/0x250 [ 668.500672][T13119] do_syscall_64+0xfa/0x3b0 [ 668.505731][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.512262][T13119] [ 668.512262][T13119] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 668.520130][T13119] validate_chain+0xb9b/0x2140 [ 668.525445][T13119] __lock_acquire+0xab9/0xd20 [ 668.530686][T13119] lock_acquire+0x120/0x360 [ 668.535746][T13119] __mutex_lock+0x182/0xe80 [ 668.540787][T13119] kobject_uevent_net_broadcast+0x27e/0x560 [ 668.547208][T13119] kobject_uevent_env+0x55b/0x8c0 [ 668.552759][T13119] loop_set_status+0x4d3/0xaf0 [ 668.558053][T13119] lo_ioctl+0xa5e/0x2410 [ 668.562821][T13119] blkdev_ioctl+0x5a8/0x6d0 [ 668.567858][T13119] __se_sys_ioctl+0xf9/0x170 [ 668.572977][T13119] do_syscall_64+0xfa/0x3b0 [ 668.578002][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.584422][T13119] [ 668.584422][T13119] other info that might help us debug this: [ 668.584422][T13119] [ 668.594650][T13119] Chain exists of: [ 668.594650][T13119] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 668.594650][T13119] [ 668.608398][T13119] Possible unsafe locking scenario: [ 668.608398][T13119] [ 668.615847][T13119] CPU0 CPU1 [ 668.621212][T13119] ---- ---- [ 668.626590][T13119] lock(&q->q_usage_counter(io)#25); [ 668.631975][T13119] lock(fs_reclaim); [ 668.638490][T13119] lock(&q->q_usage_counter(io)#25); [ 668.646392][T13119] lock(uevent_sock_mutex); [ 668.651001][T13119] [ 668.651001][T13119] *** DEADLOCK *** [ 668.651001][T13119] [ 668.659230][T13119] 3 locks held by syz.2.2015/13119: [ 668.664425][T13119] #0: ffff888142f30400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xaf0 [ 668.673858][T13119] #1: ffff888024d9ec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 668.684499][T13119] #2: ffff888024d9ec78 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 668.695486][T13119] [ 668.695486][T13119] stack backtrace: [ 668.701394][T13119] CPU: 1 UID: 0 PID: 13119 Comm: syz.2.2015 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 668.701415][T13119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 668.701427][T13119] Call Trace: [ 668.701435][T13119] [ 668.701447][T13119] dump_stack_lvl+0x189/0x250 [ 668.701476][T13119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.701502][T13119] ? __pfx__printk+0x10/0x10 [ 668.701520][T13119] ? print_lock_name+0xde/0x100 [ 668.701537][T13119] print_circular_bug+0x2ee/0x310 [ 668.701555][T13119] check_noncircular+0x134/0x160 [ 668.701573][T13119] validate_chain+0xb9b/0x2140 [ 668.701597][T13119] __lock_acquire+0xab9/0xd20 [ 668.701622][T13119] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 668.701642][T13119] lock_acquire+0x120/0x360 [ 668.701664][T13119] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 668.701688][T13119] __mutex_lock+0x182/0xe80 [ 668.701704][T13119] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 668.701724][T13119] ? vsnprintf+0xe11/0xf00 [ 668.701746][T13119] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 668.701766][T13119] ? __pfx___mutex_lock+0x10/0x10 [ 668.701780][T13119] ? add_uevent_var+0x278/0x450 [ 668.701800][T13119] ? kobject_uevent_env+0x50a/0x8c0 [ 668.701819][T13119] ? __pfx_add_uevent_var+0x10/0x10 [ 668.701838][T13119] kobject_uevent_net_broadcast+0x27e/0x560 [ 668.701860][T13119] kobject_uevent_env+0x55b/0x8c0 [ 668.701881][T13119] loop_set_status+0x4d3/0xaf0 [ 668.701908][T13119] lo_ioctl+0xa5e/0x2410 [ 668.701928][T13119] ? is_bpf_text_address+0x26/0x2b0 [ 668.701955][T13119] ? is_bpf_text_address+0x292/0x2b0 [ 668.701979][T13119] ? is_bpf_text_address+0x26/0x2b0 [ 668.702003][T13119] ? __pfx_lo_ioctl+0x10/0x10 [ 668.702022][T13119] ? kernel_text_address+0xa5/0xe0 [ 668.702043][T13119] ? __kernel_text_address+0xd/0x40 [ 668.702063][T13119] ? unwind_get_return_address+0x4d/0x90 [ 668.702088][T13119] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.702107][T13119] ? arch_stack_walk+0xfc/0x150 [ 668.702127][T13119] ? __lock_acquire+0xab9/0xd20 [ 668.702152][T13119] ? __lock_acquire+0xab9/0xd20 [ 668.702175][T13119] ? __lock_acquire+0xab9/0xd20 [ 668.702201][T13119] ? __lock_acquire+0xab9/0xd20 [ 668.702234][T13119] ? __lock_acquire+0xab9/0xd20 [ 668.702263][T13119] ? is_bpf_text_address+0x26/0x2b0 [ 668.702289][T13119] ? is_bpf_text_address+0x292/0x2b0 [ 668.702313][T13119] ? is_bpf_text_address+0x26/0x2b0 [ 668.702338][T13119] ? kernel_text_address+0xa5/0xe0 [ 668.702359][T13119] ? __kernel_text_address+0xd/0x40 [ 668.702379][T13119] ? unwind_get_return_address+0x4d/0x90 [ 668.702404][T13119] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.702422][T13119] ? arch_stack_walk+0xfc/0x150 [ 668.702444][T13119] ? stack_trace_save+0x9c/0xe0 [ 668.702467][T13119] ? kasan_save_track+0x4f/0x80 [ 668.702490][T13119] ? kasan_save_track+0x3e/0x80 [ 668.702513][T13119] ? kasan_save_free_info+0x46/0x50 [ 668.702533][T13119] ? __kasan_slab_free+0x62/0x70 [ 668.702546][T13119] ? kfree+0x18e/0x440 [ 668.702569][T13119] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 668.702588][T13119] ? security_file_ioctl+0xcb/0x2d0 [ 668.702605][T13119] ? __se_sys_ioctl+0x47/0x170 [ 668.702627][T13119] ? do_syscall_64+0xfa/0x3b0 [ 668.702651][T13119] ? do_vfs_ioctl+0xf37/0x1990 [ 668.702675][T13119] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 668.702700][T13119] ? kasan_quarantine_put+0xdd/0x220 [ 668.702727][T13119] ? blkdev_common_ioctl+0xfc3/0x2450 [ 668.702751][T13119] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 668.702771][T13119] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 668.702789][T13119] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 668.702812][T13119] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 668.702831][T13119] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 668.702850][T13119] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 668.702874][T13119] ? __lock_acquire+0xab9/0xd20 [ 668.702903][T13119] ? __pfx_lo_ioctl+0x10/0x10 [ 668.702923][T13119] blkdev_ioctl+0x5a8/0x6d0 [ 668.702947][T13119] ? __pfx_blkdev_ioctl+0x10/0x10 [ 668.702969][T13119] ? __fget_files+0x2a/0x420 [ 668.702988][T13119] ? bpf_lsm_file_ioctl+0x9/0x20 [ 668.703012][T13119] ? __pfx_blkdev_ioctl+0x10/0x10 [ 668.703035][T13119] __se_sys_ioctl+0xf9/0x170 [ 668.703059][T13119] do_syscall_64+0xfa/0x3b0 [ 668.703073][T13119] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.703097][T13119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.703114][T13119] ? clear_bhb_loop+0x60/0xb0 [ 668.703131][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.703148][T13119] RIP: 0033:0x7f20d558e929 [ 668.703163][T13119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.703178][T13119] RSP: 002b:00007f20d6401038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.703194][T13119] RAX: ffffffffffffffda RBX: 00007f20d57b6080 RCX: 00007f20d558e929 [ 668.703207][T13119] RDX: 00002000000001c0 RSI: 0000000000004c02 RDI: 0000000000000006 [ 668.703217][T13119] RBP: 00007f20d5610b39 R08: 0000000000000000 R09: 0000000000000000 [ 668.703227][T13119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.703237][T13119] R13: 0000000000000001 R14: 00007f20d57b6080 R15: 00007f20d58dfa28 [ 668.703254][T13119] [ 668.703269][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.211807][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.343371][ C0] I/O error, dev loop8, sector 4624 op 0x0:(READ) flags 0x80700 phys_seg 6 prio class 2 [ 669.391848][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2028'. [ 669.822880][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'. [ 669.845524][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'.