last executing test programs: 25m44.973626199s ago: executing program 3 (id=691): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) 25m44.934994475s ago: executing program 3 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 25m44.793328775s ago: executing program 3 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x8, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2}) 25m44.585541794s ago: executing program 3 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xffff}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 25m44.417660315s ago: executing program 3 (id=699): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) 25m44.360677837s ago: executing program 3 (id=701): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, &(0x7f0000000000), 0x4003) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 25m29.02767455s ago: executing program 32 (id=701): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, &(0x7f0000000000), 0x4003) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 23m12.948734395s ago: executing program 5 (id=1488): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r0, &(0x7f0000000040), 0x0, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) clock_getres(0x2, &(0x7f0000000100)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="9b017ba3dac43f1cc4d8c892f4880b8d25b6", @ANYBLOB="1709000000000000000001000000080009000200000014001f00ffe40b000000000000000000000000011400200000000000000000000000ffffe00000020500070000000000060002000100000008000a"], 0x5c}}, 0x800) 23m12.861765692s ago: executing program 5 (id=1489): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x8a002) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (fail_nth: 2) 23m11.964508457s ago: executing program 5 (id=1493): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000500)={{0x8, 0x1, 0x7, 0x8b44, '\x00', 0x10}, 0x0, [0x2, 0x3, 0x7ff, 0x7, 0x5, 0x1, 0x8, 0x1, 0xe, 0x6, 0x5, 0x80, 0x6, 0x4, 0x80000001, 0x8, 0xfffffffffffff5bc, 0x7, 0x7, 0x5, 0x2, 0x100, 0x0, 0x1, 0x4, 0x6, 0xe5, 0x4, 0x0, 0x2, 0x1, 0x6, 0x2, 0x0, 0x7, 0xffffffffffffffff, 0x2, 0x0, 0xb, 0x5, 0x200, 0x4, 0xffffffffffffffb9, 0x1, 0x1, 0x2, 0x8, 0xfffffffffffffffb, 0x40, 0x1, 0x4, 0xfffffffffffffffd, 0x0, 0x7, 0x100, 0x8, 0x80000001, 0xffffffffffffffff, 0xfffffffffffffffe, 0x1, 0x100, 0x0, 0xcb9, 0x2, 0x80000001, 0xffffffffffffffff, 0x3, 0x6, 0x99, 0x2, 0x9, 0x7, 0x4, 0x81, 0x1, 0x94d6, 0x8, 0x6, 0x2, 0x2b726ae3, 0xf9, 0x1000, 0x8, 0x7f, 0x0, 0x1ff, 0x2, 0x1, 0x2, 0x2, 0x3, 0x1, 0x3, 0x1000, 0xfffffffffffffffd, 0x3, 0x2, 0x1ff, 0xd93, 0xfff, 0x8, 0x81, 0x8000, 0x80000000, 0x2, 0x6f, 0xffffffffa2929441, 0xff, 0x4, 0xe63, 0x3ff, 0x7f0, 0x8, 0xb444, 0x8000000000000000, 0x0, 0xc, 0xfffffffffffffb20, 0x3, 0xe7, 0x2, 0x3ff, 0x3, 0x7f, 0x2, 0x2cf5, 0xf90, 0x5]}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000008d0400000000000097"]) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 23m10.981470698s ago: executing program 5 (id=1504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r1, &(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00', 0x0) r3 = dup(r0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a32000000000500010007000000140007800800134000000000080012"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 23m10.970015022s ago: executing program 5 (id=1505): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3631564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf2481808000000000040000000008000f0001800000140001"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x884) syz_usb_connect(0x2, 0x5c, &(0x7f0000000800)=ANY=[@ANYBLOB="12010102c05f560882052001cd9c0102030109024a00020b0b6009090b100900800c4c03090403"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) 23m10.701289718s ago: executing program 5 (id=1507): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = open(0x0, 0x1e3042, 0x9c) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockname(r0, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f00000004c0)={0x1, 0x4, [{0x408, 0x0, 0xfffffffffffeffff}, {0xfffff3e8}, {0x8, 0x0, 0x100}, {0xffffffff}, {0x800, 0x0, 0x9}, {0x101, 0x0, 0x8000}, {0x4, 0x0, 0x4}, {0x7fff, 0x0, 0x9}, {0x9, 0x0, 0x8}, {0x65fe, 0x0, 0x5}, {0xc26e, 0x0, 0xd48}, {0x1620000, 0x0, 0xfffffffffffffffe}, {0x7, 0x0, 0x2}, {0x99a, 0x0, 0x7}, {0x8, 0x0, 0x7fffffff}, {0x1, 0x0, 0x8}]}) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="17000000000000000000bebc2c2872a000000000f6a19199fd8a0eb9494870c8d39a1780c8626df1f16381320fe1c62a579baaa99835bad55bb380e4dabf783273a614a08bed4522cae451218db86a8dd036fed0283b24b4d1f6eb20a8aed4ffc8d65e57310eb4c40200ca70c7a8f36ef496e65bb174cf75d51b39e4b30506d491923ecf23950ce846f7a2c59cbad10819f8f06dc56ca53a2596fce48c85d9f9a70ea8025c3307917e9fb3070cfbe9a2b93bc30ddae8d38531a99ada99c4c4c583d65a31413c3ac64023e3abeb0adb8d0995e523984c1fc7ec5c8f49c95cd6", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x2, 0x8, &(0x7f00000002c0)="b800", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty20(0xc, 0x4, 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) setpriority(0x1, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) 23m10.145304621s ago: executing program 33 (id=1507): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = open(0x0, 0x1e3042, 0x9c) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockname(r0, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f00000004c0)={0x1, 0x4, [{0x408, 0x0, 0xfffffffffffeffff}, {0xfffff3e8}, {0x8, 0x0, 0x100}, {0xffffffff}, {0x800, 0x0, 0x9}, {0x101, 0x0, 0x8000}, {0x4, 0x0, 0x4}, {0x7fff, 0x0, 0x9}, {0x9, 0x0, 0x8}, {0x65fe, 0x0, 0x5}, {0xc26e, 0x0, 0xd48}, {0x1620000, 0x0, 0xfffffffffffffffe}, {0x7, 0x0, 0x2}, {0x99a, 0x0, 0x7}, {0x8, 0x0, 0x7fffffff}, {0x1, 0x0, 0x8}]}) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="17000000000000000000bebc2c2872a000000000f6a19199fd8a0eb9494870c8d39a1780c8626df1f16381320fe1c62a579baaa99835bad55bb380e4dabf783273a614a08bed4522cae451218db86a8dd036fed0283b24b4d1f6eb20a8aed4ffc8d65e57310eb4c40200ca70c7a8f36ef496e65bb174cf75d51b39e4b30506d491923ecf23950ce846f7a2c59cbad10819f8f06dc56ca53a2596fce48c85d9f9a70ea8025c3307917e9fb3070cfbe9a2b93bc30ddae8d38531a99ada99c4c4c583d65a31413c3ac64023e3abeb0adb8d0995e523984c1fc7ec5c8f49c95cd6", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x2, 0x8, &(0x7f00000002c0)="b800", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty20(0xc, 0x4, 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) setpriority(0x1, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) 6m40.369352751s ago: executing program 1 (id=5420): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0x10000) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5}, 0x0) (async) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000280)) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000070a010200000000000000000000000508000940000b000108000a4000000002a9fd7ee161df106fdee8152ce84921e114704706fb845f8e88877551d20583ccfe862a41c5e5dea1ef86b77b32c5efeef6b9ea20f865edab985e8d0b55f3a45483e40766801e8fe8cb15131b6edcdbab0969e15a78b2135a2bd0f2d2d6b768c1a804e4fc51e5696661d21d77c153f544acaf604d1a427a8866fcb1a2085803fc00"/177], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1}) (async, rerun: 32) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) (rerun: 32) 6m40.252488654s ago: executing program 1 (id=5422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810dff"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_FLAGS={0xfffffffffffffff4, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) 6m39.706741978s ago: executing program 1 (id=5423): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pipe2(&(0x7f0000000300), 0x40) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0x0, 0x6}}, 0x28) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000040)={0x1002, 0x0, 0x1ff, 0x4, 0xd, 'T\x00'}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20004000}, 0x0) listen(0xffffffffffffffff, 0x0) 6m37.634997273s ago: executing program 1 (id=5431): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000001540)=0xffffff51, 0x4) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x17) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000029c0)={0x0, 0xc, 0x5, 0x4}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) io_setup(0x4, &(0x7f0000000180)=0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000640)={'batadv0\x00', @multicast}) io_submit(r7, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r8, 0x0, 0x0, 0x3}]) io_getevents(r7, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x2008804}, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00') syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m36.728316572s ago: executing program 1 (id=5440): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0982, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0xfffffffffffff47a, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x4, {0x8, 0x2, 0x5}}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000380)={0x281, 0x1}) 6m36.301263205s ago: executing program 1 (id=5441): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f00000002c0)) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xdb) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000040)) close(r3) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ffffff}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000180)) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x9, [0x5, 0x3, 0x1, 0x4061, 0x7, 0x6, 0x4, 0x2, 0x8dd]}, 0x16) 6m35.623265147s ago: executing program 34 (id=5441): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f00000002c0)) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xdb) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000040)) close(r3) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ffffff}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000180)) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x9, [0x5, 0x3, 0x1, 0x4061, 0x7, 0x6, 0x4, 0x2, 0x8dd]}, 0x16) 7.869817504s ago: executing program 2 (id=7028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x3) ppoll(&(0x7f0000000100)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipmr_delroute={0x1c, 0x19, 0xebe48fc0839884a9, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x90, 0x0, 0x0, 0x4, 0x190, 0x5, 0x5100}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000004) 7.7649765s ago: executing program 2 (id=7029): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r3 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000001c0)={0xc, @win={{0x0, 0xb, 0x8, 0x4ad2}, 0x2, 0x7fffffff, 0x0, 0x2, 0x0, 0x1}}) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) r5 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x7, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r7, 0x560f, 0x0) (async) ioctl$SG_IO(r6, 0x2285, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x2) (async, rerun: 64) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) (rerun: 64) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, 0x14) (async, rerun: 64) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x0, 0x80000000000, 0x0, 0xfffffffffffffffe, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x20000000000, 0x9, 0x0, 0x9}, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1b) 7.257688312s ago: executing program 2 (id=7031): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000001100)=ANY=[], 0x40}, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef) 6.353555325s ago: executing program 2 (id=7037): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) fsync(r0) 6.344829328s ago: executing program 2 (id=7038): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000380), 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x300b, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) listen(r5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r8, &(0x7f0000006480)={0x2020}, 0xfffffffffffffeb9) close(r5) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYBLOB="4c69414f55033cd673c685411647fd7e"], 0x0, 0x0, 0x0}, 0x0) read$FUSE(r7, &(0x7f0000004440)={0x2020}, 0x2020) io_setup(0x603, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) recvmsg$unix(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee00}}, './bus\x00'}) r13 = eventfd(0x0) io_submit(r10, 0x4, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x8, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x51, r12, &(0x7f00000001c0)="9199409c49cc6b974989593396627211df5e5fbee8ab3fe39fca0eaf02e1fc9d7312", 0x22, 0x9, 0x0, 0x3, r13}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000380)="a35bd2394ed8876294828b457075ed08ee2f36aefb4f7adb3e8060275095f474f1776539e3ece126a17dca5a7ac8a9d72762206189296c733be65fabbfc5745bde10cdbbbc9fea4b1834321822e40afa627dcb34c63a5cd724fc7cb0e6774d40c93031585817f512a7b9ab70304b4401703f0f13157109fd55d3f3b789e55b21b7a02889c526fa88d0b781fd196e1a2fc2af6b4f963334d1a6ea1ac4e12af88b84c1fe", 0xa3, 0x2ccefb14, 0x0, 0x2, r13}]) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000007c0)=r1, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000280)=0x2) 6.006608336s ago: executing program 6 (id=7040): socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000056abffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 5.895484144s ago: executing program 6 (id=7041): syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd64fde9e200180000fc01000000000000000000000000000000000000000000000000ffffac1414aa3b02010300004e"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xc73ebdfa468265f4, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x5, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x7ff, 0x6, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x3, 0xea}}}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="050f0f00010a1003"], 0x1, [{0x0, 0x0}]}) 4.581162761s ago: executing program 6 (id=7046): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) r6 = eventfd2(0x67653c4c, 0xa1079f15a8f65d1c) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r6, 0x4, 0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x2, 0x388b}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x1, 0x0, 0x3}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000021c0), 0x8000000000000000, 0x100) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) syz_usb_disconnect(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=@newtfilter={0xa0, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x70, 0x2, [@TCA_BASIC_EMATCHES={0x6c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}, {0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1b}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x2}, {0x8ca, 0x7, 0x9, 0x4, 0x8, 0x1}}}, @TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x6, 0x3}, {0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) 4.461625924s ago: executing program 0 (id=7047): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000140)="cb", 0x1}], 0x2) 4.316182509s ago: executing program 0 (id=7050): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000082647306e53f870c0000002a9000938a435a"], 0x0}, 0x0) 4.288113148s ago: executing program 7 (id=7051): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff8000edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="a001000000000000f9ffffffffffffff05000000000000000200000000000000030000000000000002000000000000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000300000000400000ff030000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="04000000fcffffff00000000010000000000000037050000000000002b000000090000003a2d285cc980000000c30000f3397dd86d4d928d24d3a461b60245898556c60000000000002b133b000000000000000005000000000000000200000000000000ff010000000000109100000000000000ff7f00009e0e000000000000000000007f000000000021000000000000000000ffffff0101ffff7f06000000800300000005000000004000000300000000000000000000000000000000000080e32d09780582da282ce2af417c8d53cbb506cf0434c31291551b0b4f18d8", @ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="ffffffff03000000000000000500000000000000ce03000000000000290000007f0000003a2d285cc980000000c30000f3397dd86d4d928d24d3a461b60245898556c60000000000002b133b0000000000000000"], 0x0, 0x0, 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FIOCLEX(r4, 0x5451) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xc, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, 0x0, 0x0, 0x30, 0x0, [{@remote}, {@loopback}, {@private}]}}) getdents64(r3, &(0x7f0000000100)=""/132, 0x84) 4.118264762s ago: executing program 7 (id=7052): socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000dabeffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 3.725476454s ago: executing program 7 (id=7053): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bc25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x44c20, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4020014) (fail_nth: 10) 3.65994276s ago: executing program 7 (id=7054): semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0xc, 0x101, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x75, 0x2e1}) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4b23}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x7167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.24315891s ago: executing program 2 (id=7055): syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb0000000000000000000007000000000024206558"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x6ad, @mcast1, 0x3}], 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="c033", 0x2, 0x800, &(0x7f00000002c0)={0xa, 0x4e24, 0xa132, @private0, 0x8}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x801) r2 = dup(r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x259, 0x5425, 0x7, 0x200, 0xdd}, &(0x7f0000000180)=0x98) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="08007f411de5dbadf30300c05e88f0be09000000bcdd78829ed67b5fc54b02b3ce39c1cdcf53eb6bc1e4d4c23adfe8da90c3e4a20000000066676a3d854ea659e632f290265d8eb7f67bf57b7a9cf768dd9593cbdd4126badcb8c4c973dd105234d405", @ANYRES64=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYRES64=r1], 0x44}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80001, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) socket$nl_route(0x10, 0x3, 0x0) 3.065912866s ago: executing program 6 (id=7056): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x80f6}, {0x20, 0x0, 0x2, 0xfffff038}, {0x6, 0xfc, 0x0, 0xb}]}, 0x10) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xfdef) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="20140d1f00005e6424818327b2369deca65eb2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002200)=ANY=[@ANYBLOB="4c0000001000010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100100000626f6e6400000018001980140001000000000000000e4fb5a9f1738bf94ec200"/52], 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26ff", 0x30) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000002340), 0x2}}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000002280)={0x7fffffffffffffff, r0, 'id0\x00'}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r10, 0x330f, 0x10001) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYRESHEX=r11], 0x4c}}, 0x0) 2.709463883s ago: executing program 7 (id=7057): unshare(0x6a040000) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x42, 0x21, 0x20}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xe14fe1afe8ab4915, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) fanotify_mark(0xffffffffffffffff, 0x1, 0x2, r0, &(0x7f0000000080)='./file0\x00') 2.614376524s ago: executing program 7 (id=7058): syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a962da204020014977470102030109022b0001000000000904000002308e72000905000000000000000705db224370bf09050b020000000000a52b309178de221825386443beb12a074c886d7e45220600cff359b5a84d46cb48eea09469d2ff63bf7c0ab3ec8a74038ac97fccfcc796b0ae4b474f879c6916f0"], 0x0) 1.920035566s ago: executing program 4 (id=7059): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x80200, 0x0) fsync(r0) 1.847686592s ago: executing program 4 (id=7060): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000040)=[{}, {&(0x7f0000000140)="cb", 0x1}], 0x2) 1.793324726s ago: executing program 4 (id=7061): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0001, 0x0) fcntl$addseals(r0, 0x409, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x204387a86db9886b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x281d, &(0x7f0000010400)={0x0, 0x86e8, 0x2, 0x3, 0x800008f}, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r6, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0x80184132, &(0x7f00000003c0)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}, {}, 0xc}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 1.422842396s ago: executing program 6 (id=7062): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200080, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000400)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00'], 0x8) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0xa0, 0xbbba, 0xfffffffe, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0x8}, {0x1000001, 0x9, 0x8}, 0x0, 0x3f0, 0x1, 0x100003, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 1.288701674s ago: executing program 0 (id=7063): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c000480289fefc3ae3057a9a323c03f5d06072b5d15f7e9f6"], 0xc8}}, 0x400000c) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c000480289fefc3ae3057a9a323c03f5d06072b5d15f7e9f6"], 0xc8}}, 0x400000c) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async) 997.424532ms ago: executing program 0 (id=7064): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15", 0x4) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) sendmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)='&\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x20000040) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r2, &(0x7f0000000080)='=', 0x11}]) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001040)=""/2, &(0x7f0000001080)=""/26, &(0x7f00000010c0)=""/133, 0x10000}) semget$private(0x0, 0x604c8ed3e356f6e2, 0x42) 590.69216ms ago: executing program 4 (id=7065): socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) socket(0x1e, 0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 394.4948ms ago: executing program 4 (id=7066): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000140)={{0xe566c797b7515b9, 0x2, 0x10, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x8, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0xe, 0x4, 0xe, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0x7, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0xffff1000, 0xf000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000002, 0x0, 0x6000, 0x21, 0x5, 0xa800, 0x8000900, 0x1, [0x200006, 0x2, 0x3, 0x3]}) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) read$fb(r5, &(0x7f00000002c0)=""/132, 0x84) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)="1084041b4480715de6204e2a90942977bb32eae573cb6ff79b6aba979ed73ab51007df6f2144d9703a165fec8c7395320cb8ac2929b7bc82b9d9191a805500b465ec06bc37efc2b872c0acad32f7292f683157c40731ce9a6607474761dea8be473218998db476360f7a19a8aca3f719b1", 0x71}, {&(0x7f0000000280)="3b209c8a7a9893c711167b6aee1ac4a8cc59d92a394f690700001b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x37}], 0x2}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000580)=0xe, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 281.425844ms ago: executing program 0 (id=7067): r0 = io_uring_setup(0x4822, &(0x7f0000000180)) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x7, 0xf, 0x0, 0x7}, 0x0, 0x6e6bb9, 0x1, 0x0, 0x3}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0x4}}, 0xe8) (async) connect$pppl2tp(r1, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x103100, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (rerun: 64) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x4, 0x10, 0xfffff004}, {0x6, 0x0, 0xd}]}, 0x10) (async) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800483a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0100907800000000603571a60000330000000000000000000000ffffe0000001fe88000000000000000000001800000100000002000000006c007330660000008700000800000000"], 0x0) (async, rerun: 32) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0', [{0x20, '.'}, {0x20, '#+++%,\\^'}], 0xa, "a52adec85d8a4057b0bdf36923"}, 0x23) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 50.317046ms ago: executing program 6 (id=7068): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x810) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) r7 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r8, 0x1000000, 0x0) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000040)={0x4, {0x2, 0x2, 0x4, 0x9}}) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x2, 0xff, 0xa8fe8ad4eea2351f}, 0x3}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socket$nl_route(0x10, 0x3, 0x0) 606.756µs ago: executing program 0 (id=7069): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000080)={{0x3, 0x6}, {0x8, 0x51f67027}, 0x2, 0x1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf25380000000c009900060000000d00e8ff0c00580044000000000000000c0058002a00000000000000ff07000000000000000000000c0058001200000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x804) close(r0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f0064a5", @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="290000000200"], 0x29) syz_usb_control_io(r3, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="200616"], 0x0, 0x0}) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x828420, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x400000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 0s ago: executing program 4 (id=7070): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, 0x0) io_uring_setup(0x11d8, &(0x7f0000000380)={0x0, 0x9e3b, 0x10000, 0x2, 0x103}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="100804001a0804001c002b80080003001508"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004000) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000000)=""/73, 0x49) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) landlock_create_ruleset(&(0x7f0000000180)={0x30, 0x1, 0x2}, 0x18, 0x2) bind$netlink(r9, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) fstat(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in=@multicast2, 0x4e21, 0x5, 0x4e22, 0xb8d0, 0xa, 0xa0, 0x20, 0x2b, r10, r11}, {0x4, 0x7, 0x1, 0x4, 0x396c, 0x49a39b98, 0x4, 0x3}, {0x5, 0x400, 0x4, 0x4}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2}, {{@in6=@private0, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x3500, 0x2, 0x0, 0x1, 0xf, 0x7, 0x6}}, 0xe8) kernel console output (not intermixed with test programs): 0 descriptor?? [ 1676.616916][T21382] loop2: detected capacity change from 0 to 7 [ 1676.626262][T21382] Dev loop2: unable to read RDB block 7 [ 1676.631843][T21382] loop2: AHDI p1 p2 p3 [ 1676.637530][T21382] loop2: partition table partially beyond EOD, truncated [ 1676.646288][T21382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1676.653386][T21382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1676.677146][T11606] r8152-cfgselector 7-1: USB disconnect, device number 3 [ 1678.313746][T11606] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1678.475519][T11606] usb 3-1: Using ep0 maxpacket: 8 [ 1678.544280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.553014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.587752][T11606] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1678.598208][T11606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.608075][T11606] usb 3-1: Product: syz [ 1678.612446][T11606] usb 3-1: Manufacturer: syz [ 1678.617702][T11606] usb 3-1: SerialNumber: syz [ 1678.628359][T11606] usb 3-1: config 0 descriptor?? [ 1678.846215][T11606] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1679.049918][T11606] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1679.067928][T11606] usb 3-1: USB disconnect, device number 110 [ 1679.144168][T11585] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1679.284561][T11585] usb 7-1: device descriptor read/64, error -71 [ 1679.517626][T21510] loop9: detected capacity change from 0 to 7 [ 1679.524874][T11585] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1679.526362][T21510] Dev loop9: unable to read RDB block 7 [ 1679.540017][T21510] loop9: AHDI p3 p4 [ 1679.544159][T21510] loop9: partition table partially beyond EOD, truncated [ 1679.551369][T21510] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1679.630139][T14900] udevd[14900]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1679.673839][T11585] usb 7-1: device descriptor read/64, error -71 [ 1679.784131][T11585] usb usb7-port1: attempt power cycle [ 1680.123763][T11585] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1680.144479][T11585] usb 7-1: device descriptor read/8, error -71 [ 1680.400974][T11585] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1680.435472][T11585] usb 7-1: device descriptor read/8, error -71 [ 1680.546921][T11585] usb usb7-port1: unable to enumerate USB device [ 1681.227167][T21547] sit1: entered allmulticast mode [ 1681.353186][T21551] loop2: detected capacity change from 0 to 7 [ 1681.371987][T14900] Dev loop2: unable to read RDB block 7 [ 1681.380247][T14900] loop2: AHDI p1 p2 [ 1681.384330][T14900] loop2: partition table partially beyond EOD, truncated [ 1681.392533][T14900] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1681.410691][T21551] Dev loop2: unable to read RDB block 7 [ 1681.418402][T21551] loop2: AHDI p1 p2 [ 1681.422713][T21551] loop2: partition table partially beyond EOD, truncated [ 1681.433308][T21551] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1681.743787][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.752192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.760554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.333960][ T43] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1682.341554][T11608] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1682.494023][T11608] usb 3-1: Using ep0 maxpacket: 8 [ 1682.501255][T11608] usb 3-1: config index 0 descriptor too short (expected 548, got 36) [ 1682.510113][T11608] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1682.518515][T11608] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1682.527842][T11608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 173, changing to 11 [ 1682.539360][T11608] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1682.548675][T11608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.556997][ T43] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1682.567446][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.576528][T11608] usb 3-1: config 0 descriptor?? [ 1682.581770][ T43] usb 7-1: Product: syz [ 1682.586676][ T43] usb 7-1: Manufacturer: syz [ 1682.594147][ T43] usb 7-1: SerialNumber: syz [ 1682.691542][T21586] netlink: 3672 bytes leftover after parsing attributes in process `syz.4.6505'. [ 1682.803497][T21592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1682.829641][T21592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1682.931167][T11608] usbhid 3-1:0.0: can't add hid device: -71 [ 1682.949208][T11608] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1682.966481][ T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1683.009378][T11608] usb 3-1: USB disconnect, device number 111 [ 1683.029229][ T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1683.074625][ T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1683.126922][T21627] loop2: detected capacity change from 0 to 7 [ 1683.128554][ T43] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1683.159985][ T43] usb 7-1: USB disconnect, device number 8 [ 1683.165951][T21631] netlink: 'syz.0.6512': attribute type 1 has an invalid length. [ 1683.178545][T21627] Dev loop2: unable to read RDB block 7 [ 1683.184638][T21627] loop2: AHDI p1 p2 [ 1683.188700][T21627] loop2: partition table partially beyond EOD, truncated [ 1683.196670][T21627] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1683.298579][T21631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1683.357552][T21683] loop2: detected capacity change from 0 to 7 [ 1683.367951][T14900] Dev loop2: unable to read RDB block 7 [ 1683.373537][T14900] loop2: unable to read partition table [ 1683.387858][T14900] loop2: partition table beyond EOD, truncated [ 1683.398523][T21683] Dev loop2: unable to read RDB block 7 [ 1683.411327][T21666] bond2: (slave geneve2): making interface the new active one [ 1683.438007][T21683] loop2: unable to read partition table [ 1683.474327][T21683] loop2: partition table beyond EOD, truncated [ 1683.475138][T21666] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1683.491871][T21683] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1683.747365][T26199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.763841][T11608] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1683.915007][T21713] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.6516'. [ 1683.965760][T11608] usb 7-1: Using ep0 maxpacket: 16 [ 1684.046140][T11608] usb 7-1: config 0 has no interfaces? [ 1684.075980][T11608] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1684.114263][T11585] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1684.136383][T11608] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1684.194195][T11608] usb 7-1: Manufacturer: syz [ 1684.230588][T11608] usb 7-1: config 0 descriptor?? [ 1684.376601][T11585] usb 3-1: Using ep0 maxpacket: 16 [ 1684.403717][T11585] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.457360][T11585] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1684.479463][T11585] usb 3-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 1684.587887][T21741] syzkaller0: entered promiscuous mode [ 1684.593563][T21741] syzkaller0: entered allmulticast mode [ 1684.632355][T11585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.685965][T21688] gre1: entered promiscuous mode [ 1684.694993][T11585] usb 3-1: config 0 descriptor?? [ 1684.721730][T21688] gre1: entered allmulticast mode [ 1684.970178][T11585] usb 3-1: string descriptor 0 read error: -71 [ 1684.995126][T11585] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input135 [ 1685.071717][ T5193] bcm5974 3-1:0.0: could not read from device [ 1685.136960][ T5193] bcm5974 3-1:0.0: could not read from device [ 1685.169748][T11585] usb 3-1: USB disconnect, device number 112 [ 1685.215647][ T5193] bcm5974 3-1:0.0: could not read from device [ 1685.267304][T14896] bcm5974 3-1:0.0: could not read from device [ 1685.583850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.592121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.481733][T21789] ptrace attach of "./syz-executor exec"[10784] was attempted by "./syz-executor exec"[21789] [ 1686.911417][T11608] usb 7-1: USB disconnect, device number 9 [ 1688.786606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.794924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.803116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.410149][T21888] loop9: detected capacity change from 0 to 7 [ 1691.422501][T14900] Dev loop9: unable to read RDB block 7 [ 1691.446773][T14900] loop9: unable to read partition table [ 1691.473440][T14900] loop9: partition table beyond EOD, truncated [ 1691.553860][T21888] Dev loop9: unable to read RDB block 7 [ 1691.569702][T21888] loop9: unable to read partition table [ 1691.580171][T21888] loop9: partition table beyond EOD, truncated [ 1691.597123][T21888] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1691.684937][T21892] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6533'. [ 1691.737296][T21892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6533'. [ 1691.784807][T21892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6533'. [ 1691.903897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.912279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.284076][T11606] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1692.496154][T11606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.503764][T26198] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1692.513637][T11606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1692.538927][T11606] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1692.581474][T11606] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 1692.591046][T11606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.608876][T11606] usb 3-1: config 0 descriptor?? [ 1692.664261][T26198] usb 7-1: Using ep0 maxpacket: 16 [ 1692.671362][T26198] usb 7-1: config 0 has no interfaces? [ 1692.679006][T26198] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1692.701703][T26198] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1692.725654][T26198] usb 7-1: Manufacturer: syz [ 1692.790790][T26198] usb 7-1: config 0 descriptor?? [ 1692.819381][T21906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.841739][T21906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.852491][T21906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.869555][T21906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.881369][T21906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.894678][T21906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.906650][T21906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.917780][T21906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.930474][T21906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.942426][T21906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.972641][T11606] usbhid 3-1:0.0: can't add hid device: -32 [ 1692.979895][T11606] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1693.146144][T21904] gre1: entered promiscuous mode [ 1693.153145][T21904] gre1: entered allmulticast mode [ 1693.345866][T26198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.389184][ T4430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.397903][T26198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.430253][T26199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.059163][T21982] ptrace attach of "./syz-executor exec"[1561] was attempted by "./syz-executor exec"[21982] [ 1694.457151][T21986] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.6542'. [ 1694.613324][ T30] audit: type=1326 audit(1759602447.390:9972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21991 comm="syz.4.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1694.655140][ T30] audit: type=1326 audit(1759602447.390:9973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21991 comm="syz.4.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1694.681975][ T30] audit: type=1326 audit(1759602447.390:9974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21991 comm="syz.4.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1694.707695][ T30] audit: type=1326 audit(1759602447.390:9975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21991 comm="syz.4.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1694.730900][ T30] audit: type=1326 audit(1759602447.390:9976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21991 comm="syz.4.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1694.757956][ T30] audit: type=1326 audit(1759602447.390:9977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21991 comm="syz.4.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1694.784629][ T30] audit: type=1326 audit(1759602447.390:9978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21991 comm="syz.4.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1694.811957][ T30] audit: type=1326 audit(1759602447.390:9979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21991 comm="syz.4.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1694.834274][ C0] vkms_vblank_simulate: vblank timer overrun [ 1694.841333][ T30] audit: type=1326 audit(1759602447.390:9980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21991 comm="syz.4.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1694.869769][ T30] audit: type=1326 audit(1759602447.390:9981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21991 comm="syz.4.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1695.041024][T26199] usb 7-1: USB disconnect, device number 10 [ 1695.085251][T26198] usb 3-1: USB disconnect, device number 113 [ 1695.604075][T11606] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1695.617716][T22028] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6548'. [ 1695.743788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.752119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.758179][T22030] syzkaller1: entered promiscuous mode [ 1695.760476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.766621][T22030] syzkaller1: entered allmulticast mode [ 1695.814058][T11606] usb 7-1: Using ep0 maxpacket: 16 [ 1695.864159][T11606] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1695.887683][T11606] usb 7-1: config 1 has an invalid interface number: 130 but max is 1 [ 1695.922558][T11606] usb 7-1: config 1 has an invalid interface number: 12 but max is 1 [ 1696.095072][T11606] usb 7-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 1696.156730][T11606] usb 7-1: config 1 has no interface number 0 [ 1696.162976][T11606] usb 7-1: config 1 has no interface number 1 [ 1696.169877][T11606] usb 7-1: config 1 interface 130 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023 [ 1696.181211][T11606] usb 7-1: config 1 interface 130 altsetting 213 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1696.192830][T11606] usb 7-1: config 1 interface 130 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8 [ 1696.205138][T11606] usb 7-1: config 1 interface 130 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1696.216690][T11606] usb 7-1: config 1 interface 130 altsetting 213 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1696.230575][T11606] usb 7-1: config 1 interface 12 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1696.244236][T11606] usb 7-1: config 1 interface 130 has no altsetting 0 [ 1696.251198][T11606] usb 7-1: config 1 interface 12 has no altsetting 0 [ 1696.271586][T11606] usb 7-1: New USB device found, idVendor=12d1, idProduct=0609, bcdDevice=70.ff [ 1696.280884][T11606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.298657][T11606] usb 7-1: Product: syz [ 1696.313193][T11606] usb 7-1: Manufacturer: syz [ 1696.326083][T11606] usb 7-1: SerialNumber: syz [ 1696.342502][T22021] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1696.362095][T22021] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1696.673557][T11606] option 7-1:1.130: GSM modem (1-port) converter detected [ 1696.755398][T11606] usb 7-1: USB disconnect, device number 11 [ 1696.785128][T11606] option 7-1:1.130: device disconnected [ 1696.938920][T22054] xt_socket: unknown flags 0x50 [ 1696.989439][T22059] loop9: detected capacity change from 0 to 7 [ 1696.996540][T22059] Dev loop9: unable to read RDB block 7 [ 1697.002876][T22059] loop9: AHDI p3 p4 [ 1697.008696][T22059] loop9: partition table partially beyond EOD, truncated [ 1697.019760][T22059] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1697.090140][T14900] udevd[14900]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1697.238290][T22072] netlink: 'syz.0.6549': attribute type 3 has an invalid length. [ 1697.553704][T11608] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1697.741880][T11608] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1697.750809][T11608] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1697.778680][T11608] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1697.846147][T11608] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1697.930453][T11608] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1697.959845][T11608] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1697.984164][T11608] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1698.000355][T11608] usb 7-1: Product: syz [ 1698.023877][T11608] usb 7-1: Manufacturer: syz [ 1698.037179][T11608] cdc_wdm 7-1:1.0: skipping garbage [ 1698.049135][T11608] cdc_wdm 7-1:1.0: skipping garbage [ 1698.107375][T11608] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1698.118315][T11608] cdc_wdm 7-1:1.0: Unknown control protocol [ 1698.658581][T22093] netlink: 3672 bytes leftover after parsing attributes in process `syz.4.6555'. [ 1698.771566][T22104] loop9: detected capacity change from 0 to 7 [ 1698.782987][T22104] Dev loop9: unable to read RDB block 7 [ 1698.789467][T22104] loop9: unable to read partition table [ 1698.796579][T22104] loop9: partition table beyond EOD, truncated [ 1698.813367][T22104] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1698.913809][T11608] usb 7-1: USB disconnect, device number 12 [ 1698.932655][T22108] sctp: [Deprecated]: syz.4.6557 (pid 22108) Use of int in max_burst socket option. [ 1698.932655][T22108] Use struct sctp_assoc_value instead [ 1699.105451][T14175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.114139][T11606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.122886][T26198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.935704][T22143] loop2: detected capacity change from 0 to 7 [ 1699.952258][T22143] Dev loop2: unable to read RDB block 7 [ 1699.962912][T22143] loop2: unable to read partition table [ 1699.982777][T22143] loop2: partition table beyond EOD, truncated [ 1700.023298][T22143] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1700.088165][ T5208] Dev loop2: unable to read RDB block 7 [ 1700.108284][T22145] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6559'. [ 1700.168050][ T5208] loop2: unable to read partition table [ 1700.177628][ T5208] loop2: partition table beyond EOD, truncated [ 1700.313824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.322268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.330693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.414125][T26198] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1701.683877][T26198] usb 7-1: Using ep0 maxpacket: 32 [ 1701.718893][T26198] usb 7-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1701.731360][T26198] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1701.918262][T22174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6565'. [ 1701.929313][T22174] fuse: Unknown parameter '0x00000000000000030x0000000000000008' [ 1702.124844][T26198] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1702.161814][T26198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.173069][T22189] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.6568'. [ 1702.182617][T26198] usb 7-1: Product: syz [ 1702.190564][T26198] usb 7-1: Manufacturer: syz [ 1702.196409][T26198] usb 7-1: SerialNumber: syz [ 1702.220968][T26198] usb 7-1: config 0 descriptor?? [ 1702.258806][T22198] netlink: 'syz.7.6567': attribute type 6 has an invalid length. [ 1702.680508][T22205] netlink: 'syz.0.6569': attribute type 4 has an invalid length. [ 1702.801023][T22206] netlink: 'syz.0.6569': attribute type 4 has an invalid length. [ 1702.908611][T26198] usb 7-1: can't set config #0, error -71 [ 1702.964366][T26198] usb 7-1: USB disconnect, device number 13 [ 1703.504172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.512488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.520734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.106590][T22226] loop2: detected capacity change from 0 to 7 [ 1704.114754][T14900] Dev loop2: unable to read RDB block 7 [ 1704.120401][T14900] loop2: unable to read partition table [ 1704.139699][T14900] loop2: partition table beyond EOD, truncated [ 1704.154303][T22229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1704.180973][T22226] Dev loop2: unable to read RDB block 7 [ 1704.191640][T22229] netlink: 'syz.7.6572': attribute type 3 has an invalid length. [ 1704.203436][T22229] netlink: 'syz.7.6572': attribute type 22 has an invalid length. [ 1704.212311][T22226] loop2: unable to read partition table [ 1704.219800][T22226] loop2: partition table beyond EOD, truncated [ 1704.240848][T22226] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1704.252507][T22229] netlink: 'syz.7.6572': attribute type 23 has an invalid length. [ 1704.275718][T22229] netlink: 'syz.7.6572': attribute type 26 has an invalid length. [ 1704.291724][T22229] netlink: 'syz.7.6572': attribute type 28 has an invalid length. [ 1704.311993][T22229] netlink: 'syz.7.6572': attribute type 29 has an invalid length. [ 1704.320399][T22229] netlink: 'syz.7.6572': attribute type 31 has an invalid length. [ 1704.534875][T22243] veth0_to_team: entered promiscuous mode [ 1704.865348][ T4430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.874272][T26198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.894255][T11606] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1704.924806][T26198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.076206][T11606] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.165695][T11606] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1705.245494][T11606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.257885][T11606] usb 3-1: config 0 descriptor?? [ 1705.281280][T11606] pwc: Askey VC010 type 2 USB webcam detected. [ 1705.472491][T22190] delete_channel: no stack [ 1705.727418][T11606] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1705.945379][T11606] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1705.962251][T11606] pwc: recv_control_msg error -32 req 04 val 1000 [ 1705.984930][T11606] pwc: recv_control_msg error -32 req 04 val 1300 [ 1706.009464][T11606] pwc: recv_control_msg error -32 req 04 val 1400 [ 1706.027031][T11606] pwc: recv_control_msg error -32 req 02 val 2000 [ 1706.047577][T11606] pwc: recv_control_msg error -32 req 02 val 2100 [ 1706.064135][T11606] pwc: recv_control_msg error -32 req 04 val 1500 [ 1706.091569][T11606] pwc: recv_control_msg error -32 req 02 val 2500 [ 1706.305397][T11606] pwc: recv_control_msg error -71 req 02 val 2600 [ 1706.317981][T11606] pwc: recv_control_msg error -71 req 02 val 2900 [ 1706.325648][T11606] pwc: recv_control_msg error -71 req 02 val 2800 [ 1706.334233][T11606] pwc: recv_control_msg error -71 req 04 val 1100 [ 1706.344431][T11606] pwc: recv_control_msg error -71 req 04 val 1200 [ 1706.352631][T11606] pwc: Registered as video103. [ 1706.366109][T11606] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input136 [ 1706.398050][T11606] usb 3-1: USB disconnect, device number 114 [ 1706.436813][T26198] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1706.614748][T26198] usb 7-1: Using ep0 maxpacket: 16 [ 1706.622318][T26198] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.633810][T26198] usb 7-1: config 0 has no interfaces? [ 1706.639450][T26198] usb 7-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1706.651602][T26198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.661996][T26198] usb 7-1: config 0 descriptor?? [ 1706.999861][T22341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.009462][T22341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.188793][T22344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.204165][T22344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.993946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.002206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.395665][T26198] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1708.544720][T26198] usb 3-1: device descriptor read/64, error -71 [ 1708.794762][T26198] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1708.983698][T26198] usb 3-1: device descriptor read/64, error -71 [ 1709.124435][T26198] usb usb3-port1: attempt power cycle [ 1709.278999][T22395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6590'. [ 1709.484315][T26198] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1709.516244][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1709.516263][ T30] audit: type=1800 audit(1759602462.290:10003): pid=22402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6591" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=146028 res=0 errno=0 [ 1709.567425][T26198] usb 3-1: device descriptor read/8, error -71 [ 1709.810055][T26195] usb 7-1: USB disconnect, device number 14 [ 1709.834172][T26198] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1709.882545][T26198] usb 3-1: device descriptor read/8, error -71 [ 1710.005916][T26198] usb usb3-port1: unable to enumerate USB device [ 1711.183774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.192118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.200523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.234902][T26198] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1711.534867][T26198] usb 7-1: Using ep0 maxpacket: 16 [ 1711.550898][T26198] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.654124][T26198] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.699001][T26198] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1711.735815][T26198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.804107][T26198] usb 7-1: config 0 descriptor?? [ 1712.740647][T26198] usbhid 7-1:0.0: can't add hid device: -71 [ 1712.747768][T26198] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1712.781602][T26198] usb 7-1: USB disconnect, device number 15 [ 1713.105499][T22530] netlink: 'syz.0.6602': attribute type 2 has an invalid length. [ 1713.259456][T22540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1713.294896][T22540] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1714.303865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.312098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.482861][T26195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.768678][T22556] ptrace attach of "./syz-executor exec"[1392] was attempted by "./syz-executor exec"[22556] [ 1715.680917][T22587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1715.715601][ T30] audit: type=1326 audit(1759602468.500:10004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22583 comm="syz.4.6607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa13fb8eec9 code=0x0 [ 1715.830818][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6608'. [ 1716.144187][T11606] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1716.215269][T22620] loop2: detected capacity change from 0 to 7 [ 1716.227463][T22620] Dev loop2: unable to read RDB block 7 [ 1716.265283][T22620] loop2: AHDI p1 p2 [ 1716.269262][T22620] loop2: partition table partially beyond EOD, truncated [ 1716.299018][T22620] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1716.327754][T11606] usb 7-1: Using ep0 maxpacket: 16 [ 1716.371807][T22628] netlink: 'syz.7.6610': attribute type 10 has an invalid length. [ 1716.382324][T22628] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6610'. [ 1716.410023][T11606] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.457072][T11606] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1716.498015][T11606] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.550275][T11606] usb 7-1: config 0 descriptor?? [ 1716.613663][T22638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6614'. [ 1716.684617][T26199] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1716.724462][T22656] loop9: detected capacity change from 0 to 7 [ 1716.735612][T22656] Dev loop9: unable to read RDB block 7 [ 1716.752128][T22656] loop9: unable to read partition table [ 1716.760537][T22656] loop9: partition table beyond EOD, truncated [ 1716.792299][T22656] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1716.863932][T26199] usb 3-1: Using ep0 maxpacket: 16 [ 1716.955939][T26199] usb 3-1: config 0 has no interfaces? [ 1716.963172][T26199] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1716.974991][T26199] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1717.013811][T26199] usb 3-1: Manufacturer: syz [ 1717.102895][T26199] usb 3-1: config 0 descriptor?? [ 1717.161605][T11606] mcp2221 0003:04D8:00DD.005E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1717.313846][T22671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6616'. [ 1717.313912][T22672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6616'. [ 1717.437950][T22625] gre1: entered promiscuous mode [ 1717.442953][T22625] gre1: entered allmulticast mode [ 1717.560554][T22604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1717.584391][T26199] usb 7-1: USB disconnect, device number 16 [ 1718.224421][T22697] netlink: 3672 bytes leftover after parsing attributes in process `syz.7.6617'. [ 1719.278413][T22730] program syz.6.6622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1719.410639][T26199] usb 3-1: USB disconnect, device number 119 [ 1719.503838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.512126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.520370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.528660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.809721][T22756] bridge2: entered allmulticast mode [ 1719.823431][T22756] netdevsim netdevsim7: loading /lib/firmware// failed with error -22 [ 1719.844085][T22756] netdevsim netdevsim7: Direct firmware load for / failed with error -22 [ 1719.862721][T22756] netdevsim netdevsim7: Falling back to sysfs fallback for: / [ 1719.963748][T11606] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1720.123689][T11606] usb 3-1: Using ep0 maxpacket: 8 [ 1720.137778][T11606] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.159284][T11606] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1720.190757][T11606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1720.231711][T11606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1720.261672][T11606] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1720.307280][T11606] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1720.316949][T11606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1720.327564][T11606] usb 3-1: Product: syz [ 1720.334369][T11606] usb 3-1: Manufacturer: syz [ 1720.347443][T11606] usb 3-1: SerialNumber: syz [ 1720.364563][T11606] usb 3-1: config 0 descriptor?? [ 1720.583055][T11606] radio-si470x 3-1:0.0: DeviceID=0x4fe2 ChipID=0x667b [ 1720.770348][T22772] ptrace attach of "./syz-executor exec"[1561] was attempted by "./syz-executor exec"[22772] [ 1720.906441][T11606] radio-si470x 3-1:0.0: software version 79, hardware version 226 [ 1721.076564][T11606] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1721.124385][T11606] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1721.150227][T11606] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1721.180344][T11606] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1721.227421][T11606] usb 3-1: USB disconnect, device number 120 [ 1721.637952][T22795] loop2: detected capacity change from 0 to 7 [ 1721.647331][T22795] Dev loop2: unable to read RDB block 7 [ 1721.662883][T22795] loop2: unable to read partition table [ 1721.697619][T22795] loop2: partition table beyond EOD, truncated [ 1721.718104][T22795] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1721.868322][T22807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1722.504149][T26195] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1722.673678][T26195] usb 7-1: Using ep0 maxpacket: 8 [ 1722.686329][T26195] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.725006][T26195] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1722.782541][T26195] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.829683][T26195] usb 7-1: config 0 descriptor?? [ 1722.864619][T26195] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 1723.078277][T22842] fuse: Bad value for 'fd' [ 1723.156349][T26195] usb 7-1: USB disconnect, device number 17 [ 1724.066686][T26195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.543806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.552165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.583187][T22878] loop2: detected capacity change from 0 to 7 [ 1724.604589][T14900] Dev loop2: unable to read RDB block 7 [ 1724.623311][T14900] loop2: unable to read partition table [ 1724.629573][T14900] loop2: partition table beyond EOD, truncated [ 1724.642411][T22878] Dev loop2: unable to read RDB block 7 [ 1724.648894][T22878] loop2: unable to read partition table [ 1724.658646][T22878] loop2: partition table beyond EOD, truncated [ 1724.670854][T22878] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1724.723898][T11606] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1724.883730][T11606] usb 7-1: device descriptor read/64, error -71 [ 1725.123961][T11606] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1725.205250][ T30] audit: type=1326 audit(1759602477.980:10005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22898 comm="syz.0.6647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57458eec9 code=0x7ffc0000 [ 1725.227785][ C0] vkms_vblank_simulate: vblank timer overrun [ 1725.251775][ T30] audit: type=1326 audit(1759602477.990:10006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22898 comm="syz.0.6647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57458eec9 code=0x7ffc0000 [ 1725.276220][ T30] audit: type=1326 audit(1759602477.990:10007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22898 comm="syz.0.6647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe57458eec9 code=0x7ffc0000 [ 1725.300579][T11606] usb 7-1: device descriptor read/64, error -71 [ 1725.342946][ T30] audit: type=1326 audit(1759602477.990:10008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22898 comm="syz.0.6647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57458eec9 code=0x7ffc0000 [ 1725.366549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.376139][ T43] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1725.418753][T11606] usb usb7-port1: attempt power cycle [ 1725.479233][ T30] audit: type=1326 audit(1759602477.990:10009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22898 comm="syz.0.6647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57458eec9 code=0x7ffc0000 [ 1725.553795][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1725.568957][ T43] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 1725.603667][ T43] usb 3-1: config 0 has no interface number 0 [ 1725.623269][ T30] audit: type=1326 audit(1759602477.990:10010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22898 comm="syz.0.6647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe57458eec9 code=0x7ffc0000 [ 1725.664179][ T43] usb 3-1: too many endpoints for config 0 interface 246 altsetting 11: 229, using maximum allowed: 30 [ 1725.691125][ T43] usb 3-1: config 0 interface 246 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 1725.725113][ T30] audit: type=1326 audit(1759602477.990:10011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22898 comm="syz.0.6647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57458eec9 code=0x7ffc0000 [ 1725.747616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1725.804429][ T43] usb 3-1: config 0 interface 246 has no altsetting 0 [ 1725.813748][T11606] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1725.877048][ T30] audit: type=1326 audit(1759602477.990:10012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22898 comm="syz.0.6647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe57458eec9 code=0x7ffc0000 [ 1725.904150][ T43] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1725.925830][T11606] usb 7-1: device descriptor read/8, error -71 [ 1725.933784][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.978173][T22919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1726.002859][ T43] usb 3-1: config 0 descriptor?? [ 1726.062426][ T30] audit: type=1326 audit(1759602477.990:10013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22898 comm="syz.0.6647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57458eec9 code=0x7ffc0000 [ 1726.104736][ T30] audit: type=1326 audit(1759602477.990:10014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22898 comm="syz.0.6647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe57458eec9 code=0x7ffc0000 [ 1726.127303][ C0] vkms_vblank_simulate: vblank timer overrun [ 1726.253685][T11606] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1726.376407][T11606] usb 7-1: device descriptor read/8, error -71 [ 1726.446219][ T43] usb 3-1: string descriptor 0 read error: -32 [ 1726.504392][T11606] usb usb7-port1: unable to enumerate USB device [ 1726.728103][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1726.755699][ T43] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1726.785031][ T43] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1727.097062][T22975] loop2: detected capacity change from 0 to 7 [ 1727.132024][T22975] Dev loop2: unable to read RDB block 7 [ 1727.147258][T22975] loop2: unable to read partition table [ 1727.188965][T22975] loop2: partition table beyond EOD, truncated [ 1727.195648][T22975] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1727.424431][T22987] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1727.454524][T22986] binder: 22984:22986 ioctl c018620c 200000000380 returned -22 [ 1727.674095][T22995] loop9: detected capacity change from 0 to 7 [ 1727.714288][T22995] Dev loop9: unable to read RDB block 7 [ 1727.720046][T22995] loop9: unable to read partition table [ 1727.737138][T22995] loop9: partition table beyond EOD, truncated [ 1727.745884][T22995] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1727.823816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.832208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.840602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.848958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.224812][T11606] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1728.363274][T23058] loop2: detected capacity change from 0 to 7 [ 1728.376313][T14900] Dev loop2: unable to read RDB block 7 [ 1728.382250][T14900] loop2: unable to read partition table [ 1728.389541][T14900] loop2: partition table beyond EOD, truncated [ 1728.397885][T23058] Dev loop2: unable to read RDB block 7 [ 1728.406928][T23058] loop2: unable to read partition table [ 1728.416731][T23058] loop2: partition table beyond EOD, truncated [ 1728.425490][T23058] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1728.435184][T11606] usb 7-1: Using ep0 maxpacket: 16 [ 1728.519176][T11606] usb 7-1: config 0 has no interfaces? [ 1728.532868][T11606] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1728.571761][T11606] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1728.592218][T11606] usb 7-1: Manufacturer: syz [ 1728.613441][T11606] usb 7-1: config 0 descriptor?? [ 1729.225239][T11606] usb 7-1: USB disconnect, device number 22 [ 1729.346391][T23085] netlink: 3672 bytes leftover after parsing attributes in process `syz.2.6669'. [ 1729.716887][T23095] loop9: detected capacity change from 0 to 7 [ 1729.722626][T23094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1729.734270][T14900] Dev loop9: unable to read RDB block 7 [ 1729.757255][T14900] loop9: unable to read partition table [ 1729.770545][T14900] loop9: partition table beyond EOD, truncated [ 1729.787944][T23095] Dev loop9: unable to read RDB block 7 [ 1729.801878][T23095] loop9: unable to read partition table [ 1729.814713][T23095] loop9: partition table beyond EOD, truncated [ 1729.849891][T23095] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1730.017021][T23099] loop9: detected capacity change from 0 to 7 [ 1730.050991][T14900] Dev loop9: unable to read RDB block 7 [ 1730.087865][T14900] loop9: unable to read partition table [ 1730.124120][T14900] loop9: partition table beyond EOD, truncated [ 1730.164072][T23099] Dev loop9: unable to read RDB block 7 [ 1730.170137][T23099] loop9: unable to read partition table [ 1730.193350][T23099] loop9: partition table beyond EOD, truncated [ 1730.216716][T23099] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1730.415938][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1730.415955][ T30] audit: type=1326 audit(1759602483.190:10033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1730.476418][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.483886][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.484044][T26198] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1730.502754][ T9] kworker/0:0 (9) used greatest stack depth: 15576 bytes left [ 1730.521511][ T30] audit: type=1326 audit(1759602483.190:10034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1730.559818][ T30] audit: type=1326 audit(1759602483.190:10035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1730.592460][T23133] loop2: detected capacity change from 0 to 7 [ 1730.602028][ T5863] kworker/1:3 (5863) used greatest stack depth: 14632 bytes left [ 1730.603039][ T30] audit: type=1326 audit(1759602483.190:10036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1730.616810][T14900] Dev loop2: unable to read RDB block 7 [ 1730.637320][ T30] audit: type=1326 audit(1759602483.190:10037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1730.660903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1730.682238][ T30] audit: type=1326 audit(1759602483.190:10038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1730.691409][T14900] loop2: AHDI p1 p2 p3 [ 1730.706071][ T30] audit: type=1326 audit(1759602483.190:10039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1730.717827][T14900] loop2: partition table partially beyond EOD, truncated [ 1730.736655][ T30] audit: type=1326 audit(1759602483.190:10040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1730.762419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1730.772478][T26198] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1730.786731][T26198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.798638][T14900] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1730.811555][T14900] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1730.825471][T26198] usb 7-1: config 0 descriptor?? [ 1730.849716][ T30] audit: type=1326 audit(1759602483.190:10041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1730.857098][T23133] Dev loop2: unable to read RDB block 7 [ 1730.873963][ T30] audit: type=1326 audit(1759602483.190:10042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fa13fb8eec9 code=0x7ffc0000 [ 1730.891192][T23133] loop2: AHDI p1 p2 p3 [ 1730.913956][T23133] loop2: partition table partially beyond EOD, truncated [ 1730.921912][T23133] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1730.930793][T23133] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1731.045131][T23111] batadv_slave_0: entered promiscuous mode [ 1731.209565][T23169] loop9: detected capacity change from 0 to 7 [ 1731.217061][T23171] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1731.217061][T23171] The task syz.7.6688 (23171) triggered the difference, watch for misbehavior. [ 1731.249290][T23169] Dev loop9: unable to read RDB block 7 [ 1731.257602][T23169] loop9: unable to read partition table [ 1731.275063][T23169] loop9: partition table beyond EOD, truncated [ 1731.294281][T23169] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1731.324242][T23110] batadv_slave_0: left promiscuous mode [ 1731.360091][T26198] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1731.405568][T26198] [drm:udl_init] *ERROR* Selecting channel failed [ 1731.498122][T26198] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1731.531900][T26198] [drm] Initialized udl on minor 2 [ 1731.569597][T26198] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1731.606275][T26198] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1731.618075][T26195] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1731.655987][T26198] usb 7-1: USB disconnect, device number 23 [ 1731.662274][T26195] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1731.681083][T26195] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1732.594933][T23261] loop2: detected capacity change from 0 to 7 [ 1732.602951][T14900] Dev loop2: unable to read RDB block 7 [ 1732.609114][T14900] loop2: AHDI p1 p2 p3 [ 1732.618889][T14900] loop2: partition table partially beyond EOD, truncated [ 1732.632161][T14900] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1732.640432][T14900] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1732.653045][T23261] Dev loop2: unable to read RDB block 7 [ 1732.660159][T23261] loop2: AHDI p1 p2 p3 [ 1732.667039][T23261] loop2: partition table partially beyond EOD, truncated [ 1732.676039][T23261] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1732.683051][T23261] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1732.758602][T23268] loop2: detected capacity change from 0 to 7 [ 1732.772181][T14900] Dev loop2: unable to read RDB block 7 [ 1732.779092][T14900] loop2: AHDI p1 p2 p3 [ 1732.784184][T14900] loop2: partition table partially beyond EOD, truncated [ 1732.805835][T14900] loop2: p1 start 4284557286 is beyond EOD, truncated [ 1732.830356][T14900] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1732.851568][T23268] Dev loop2: unable to read RDB block 7 [ 1732.867449][T23268] loop2: AHDI p1 p2 p3 [ 1732.873129][T23268] loop2: partition table partially beyond EOD, truncated [ 1732.881768][T23268] loop2: p1 start 4284557286 is beyond EOD, truncated [ 1732.889383][T23268] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1733.234145][T11608] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1733.383793][T11608] usb 7-1: Using ep0 maxpacket: 16 [ 1733.395541][T11608] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.420893][T11608] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1733.444252][T11608] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.465528][T11608] usb 7-1: config 0 descriptor?? [ 1733.583786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.592201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.600593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.608935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.664986][T26199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.932145][T11608] mcp2221 0003:04D8:00DD.005F: unknown main item tag 0x0 [ 1733.953991][T11608] mcp2221 0003:04D8:00DD.005F: unknown main item tag 0x0 [ 1733.961084][T11608] mcp2221 0003:04D8:00DD.005F: unknown main item tag 0x0 [ 1733.986281][T11608] mcp2221 0003:04D8:00DD.005F: unknown main item tag 0x0 [ 1733.993360][T11608] mcp2221 0003:04D8:00DD.005F: unknown main item tag 0x0 [ 1734.034906][T11608] mcp2221 0003:04D8:00DD.005F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1734.380404][T11608] usb 7-1: USB disconnect, device number 24 [ 1734.831212][T23351] loop2: detected capacity change from 0 to 7 [ 1734.839702][T23351] Dev loop2: unable to read RDB block 7 [ 1734.845849][T23351] loop2: AHDI p1 p2 [ 1734.850003][T23351] loop2: partition table partially beyond EOD, truncated [ 1734.858315][T23351] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1735.776245][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1735.776259][ T30] audit: type=1326 audit(1759602488.530:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23375 comm="syz.6.6718" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73c318eec9 code=0x0 [ 1736.924138][T23430] loop9: detected capacity change from 0 to 7 [ 1736.931548][T23430] Dev loop9: unable to read RDB block 7 [ 1736.938275][T23430] loop9: unable to read partition table [ 1736.945697][T23430] loop9: partition table beyond EOD, truncated [ 1736.951875][T23430] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1737.383965][T26198] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1737.553671][T26198] usb 7-1: Using ep0 maxpacket: 16 [ 1737.560982][T26198] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.572006][T26198] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1737.585319][T26198] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1737.594474][T26198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.605796][T26198] usb 7-1: config 0 descriptor?? [ 1738.029304][T26198] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 1738.037051][T26198] microsoft 0003:045E:07DA.0060: ignoring exceeding usage max [ 1738.047256][T26198] microsoft 0003:045E:07DA.0060: unknown main item tag 0x5 [ 1738.055620][T26198] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 1738.063063][T26198] microsoft 0003:045E:07DA.0060: item fetching failed at offset 33/34 [ 1738.075507][T26198] microsoft 0003:045E:07DA.0060: parse failed [ 1738.081806][T26198] microsoft 0003:045E:07DA.0060: probe with driver microsoft failed with error -22 [ 1738.703806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.712149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.720469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.727714][T23471] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6734'. [ 1739.853962][T23479] loop2: detected capacity change from 0 to 7 [ 1739.883261][T23479] Dev loop2: unable to read RDB block 7 [ 1739.896870][T23479] loop2: unable to read partition table [ 1739.913288][T23479] loop2: partition table beyond EOD, truncated [ 1739.924581][T23479] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1740.258811][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6738'. [ 1740.700476][T23510] loop9: detected capacity change from 0 to 7 [ 1740.708641][T23510] Dev loop9: unable to read RDB block 7 [ 1740.714408][T23510] loop9: unable to read partition table [ 1740.721557][T23510] loop9: partition table beyond EOD, truncated [ 1740.728666][T23510] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1741.000449][T23517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6742'. [ 1741.181715][T23522] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6743'. [ 1741.331777][T11608] usb 7-1: USB disconnect, device number 25 [ 1741.452851][T23548] loop2: detected capacity change from 0 to 7 [ 1741.468915][T23548] Dev loop2: unable to read RDB block 7 [ 1741.475823][T23548] loop2: AHDI p1 p2 [ 1741.479751][T23548] loop2: partition table partially beyond EOD, truncated [ 1741.488560][T23548] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1741.857165][T11595] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1741.903781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.912018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.920299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.023800][T11595] usb 7-1: Using ep0 maxpacket: 16 [ 1742.031247][T11595] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1742.052507][T11595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1742.079452][T11595] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1742.089100][T11595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.098624][T11595] usb 7-1: Product: syz [ 1742.103016][T11595] usb 7-1: Manufacturer: syz [ 1742.108172][T11595] usb 7-1: SerialNumber: syz [ 1742.131222][T11595] usb 7-1: config 0 descriptor?? [ 1742.156188][T11595] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1742.165973][T11595] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1742.594280][T11595] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1742.604805][T23632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.637873][T23632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.646375][T23636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.660166][T23636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.669766][T11595] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1742.679942][T11595] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1742.689655][T11595] em28xx 7-1:0.0: No AC97 audio processor [ 1743.264205][T26198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.401372][T26198] usb 7-1: USB disconnect, device number 26 [ 1743.442221][T26198] em28xx 7-1:0.0: Disconnecting em28xx [ 1743.461291][T26198] em28xx 7-1:0.0: Freeing device [ 1743.633086][ T30] audit: type=1800 audit(1759602496.410:10090): pid=23677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6756" name="bus" dev="ramfs" ino=160230 res=0 errno=0 [ 1744.187214][T23683] bond_slave_0: entered promiscuous mode [ 1744.192909][T23683] bond_slave_1: entered promiscuous mode [ 1744.200491][T23683] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1744.211566][T23683] bond_slave_0: left promiscuous mode [ 1744.217035][T23683] bond_slave_1: left promiscuous mode [ 1744.352462][T23689] loop2: detected capacity change from 0 to 7 [ 1744.363011][T23689] Dev loop2: unable to read RDB block 7 [ 1744.371665][T23689] loop2: AHDI p1 p2 [ 1744.379252][T23689] loop2: partition table partially beyond EOD, truncated [ 1744.393798][T23689] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1744.692403][T23708] ptrace attach of "./syz-executor exec"[20143] was attempted by "./syz-executor exec"[23708] [ 1744.906038][T23729] veth9: entered promiscuous mode [ 1744.929230][T23729] bond0: (slave veth9): Enslaving as an active interface with an up link [ 1744.980661][T23744] ip6gretap1: entered promiscuous mode [ 1744.996593][T23744] ip6gretap1: entered allmulticast mode [ 1745.743944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.752196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.165139][ T30] audit: type=1326 audit(1759602498.950:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23770 comm="syz.7.6768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee73b8eec9 code=0x0 [ 1746.900860][T23787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6769'. [ 1746.916981][T23789] overlayfs: missing 'lowerdir' [ 1747.993564][T23812] loop2: detected capacity change from 0 to 7 [ 1748.005446][T14900] Dev loop2: unable to read RDB block 7 [ 1748.011103][T14900] loop2: unable to read partition table [ 1748.020229][T14900] loop2: partition table beyond EOD, truncated [ 1748.030367][T23812] Dev loop2: unable to read RDB block 7 [ 1748.042353][T23812] loop2: unable to read partition table [ 1748.069130][T23812] loop2: partition table beyond EOD, truncated [ 1748.099232][T23812] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1748.544812][T23831] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6776'. [ 1748.971645][T23840] loop2: detected capacity change from 0 to 7 [ 1748.981041][T23840] Dev loop2: unable to read RDB block 7 [ 1748.988406][T23840] loop2: AHDI p1 p2 p3 [ 1748.992706][T23840] loop2: partition table partially beyond EOD, truncated [ 1749.000362][T23840] loop2: p1 start 4284557286 is beyond EOD, truncated [ 1749.008130][T23840] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1749.584294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.592694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.601025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.609275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.923733][T26198] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1750.084336][T26198] usb 7-1: Using ep0 maxpacket: 16 [ 1750.101983][T26198] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1750.172126][T26198] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1750.211831][T26198] usb 7-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1750.221808][T26198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.248362][T26198] usb 7-1: config 0 descriptor?? [ 1751.127052][T23883] loop2: detected capacity change from 0 to 7 [ 1751.148662][T23883] Dev loop2: unable to read RDB block 7 [ 1751.161864][T23883] loop2: unable to read partition table [ 1751.183284][T23883] loop2: partition table beyond EOD, truncated [ 1751.203235][T23883] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1751.828340][T23911] loop2: detected capacity change from 0 to 7 [ 1751.837229][T23911] Dev loop2: unable to read RDB block 7 [ 1751.843036][T23911] loop2: AHDI p1 p2 [ 1751.848647][T23911] loop2: partition table partially beyond EOD, truncated [ 1751.856845][T23911] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1752.685301][T26198] usbhid 7-1:0.0: can't add hid device: -71 [ 1752.691298][T26198] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1752.726964][T26198] usb 7-1: USB disconnect, device number 27 [ 1752.865046][T26199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.589535][T23962] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6797'. [ 1754.487858][T23978] netlink: 'syz.4.6800': attribute type 1 has an invalid length. [ 1754.779262][T23978] netlink: 'syz.4.6800': attribute type 1 has an invalid length. [ 1755.343813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.352217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.360583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.368886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.937387][T24012] fuse: Unknown parameter '000000000000000000000160000000000000000000000300000000000000000000' [ 1755.960927][T24012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1756.091214][T24021] loop9: detected capacity change from 0 to 7 [ 1756.099301][T14900] Dev loop9: unable to read RDB block 7 [ 1756.120320][T14900] loop9: unable to read partition table [ 1756.132169][T14900] loop9: partition table beyond EOD, truncated [ 1756.194528][T24021] Dev loop9: unable to read RDB block 7 [ 1756.200172][T24021] loop9: unable to read partition table [ 1756.206668][T24021] loop9: partition table beyond EOD, truncated [ 1756.218072][T24021] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1756.357886][T24027] loop9: detected capacity change from 0 to 7 [ 1756.384035][T14900] Dev loop9: unable to read RDB block 7 [ 1756.389628][T14900] loop9: AHDI p3 p4 [ 1756.404228][T14900] loop9: partition table partially beyond EOD, truncated [ 1756.428648][T14900] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1756.653723][T24027] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-16) [ 1757.168076][T24058] binder: 24053:24058 ioctl c0306201 200000000080 returned -14 [ 1757.415083][T24088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1757.425148][T24088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1757.663823][T11585] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1757.815201][T11585] usb 7-1: config 0 has an invalid interface number: 92 but max is 0 [ 1757.823295][T11585] usb 7-1: config 0 has no interface number 0 [ 1757.830264][T11585] usb 7-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1757.841137][T11585] usb 7-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1757.852769][T11585] usb 7-1: config 0 interface 92 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1757.863921][T11585] usb 7-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 49879, setting to 1024 [ 1757.875318][T11585] usb 7-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1757.888342][T11585] usb 7-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 1757.897734][T11585] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.910457][T11585] usb 7-1: config 0 descriptor?? [ 1757.916306][T24087] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1757.932239][T11585] em28xx 7-1:0.92: New device @ 480 Mbps (093b:a005, interface 92, class 92) [ 1757.941358][T11585] em28xx 7-1:0.92: DVB interface 92 found: isoc [ 1758.068489][T24099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.078695][T24099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.139224][T24115] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6820'. [ 1758.195403][T11585] em28xx 7-1:0.92: unknown em28xx chip ID (0) [ 1758.283890][T11585] em28xx 7-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 1758.301312][T11585] em28xx 7-1:0.92: board has no eeprom [ 1758.373760][T11585] em28xx 7-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 1758.382184][T11585] em28xx 7-1:0.92: dvb set to isoc mode. [ 1758.389236][T11606] em28xx 7-1:0.92: Remote control support is not available for this card. [ 1758.412250][T11585] usb 7-1: USB disconnect, device number 28 [ 1758.420291][T11585] em28xx 7-1:0.92: Disconnecting em28xx [ 1758.426378][T11585] em28xx 7-1:0.92: Closing input extension [ 1758.456149][T11585] em28xx 7-1:0.92: Freeing device [ 1758.690995][T24135] loop9: detected capacity change from 0 to 7 [ 1758.702085][T14900] Dev loop9: unable to read RDB block 7 [ 1758.712773][T14900] loop9: AHDI p3 p4 [ 1758.721590][T14900] loop9: partition table partially beyond EOD, truncated [ 1758.729665][T14900] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1758.743542][T24135] Dev loop9: unable to read RDB block 7 [ 1758.750390][T24135] loop9: AHDI p3 p4 [ 1758.754892][T24135] loop9: partition table partially beyond EOD, truncated [ 1758.765178][T24135] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1758.877163][T14900] udevd[14900]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1759.034401][T14900] udevd[14900]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1759.886801][T24161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6826'. [ 1760.049742][T24173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6827'. [ 1760.383788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.392067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.028840][T24214] loop2: detected capacity change from 0 to 7 [ 1761.061038][T14900] Dev loop2: unable to read RDB block 7 [ 1761.093801][T14900] loop2: AHDI p1 p2 [ 1761.132243][T14900] loop2: partition table partially beyond EOD, truncated [ 1761.140703][T14900] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1761.154969][T24214] Dev loop2: unable to read RDB block 7 [ 1761.162335][T24214] loop2: AHDI p1 p2 [ 1761.185021][T24214] loop2: partition table partially beyond EOD, truncated [ 1761.197785][T24214] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1761.348372][T24227] loop2: detected capacity change from 0 to 7 [ 1761.373413][T14900] Dev loop2: unable to read RDB block 7 [ 1761.384467][T14900] loop2: AHDI p1 p2 p3 [ 1761.393315][T14900] loop2: partition table partially beyond EOD, truncated [ 1761.404343][T14900] loop2: p1 start 4284557286 is beyond EOD, truncated [ 1761.412229][T14900] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1761.425426][T24227] Dev loop2: unable to read RDB block 7 [ 1761.441281][T24227] loop2: AHDI p1 p2 p3 [ 1761.461369][T24227] loop2: partition table partially beyond EOD, truncated [ 1761.501288][T24227] loop2: p1 start 4284557286 is beyond EOD, truncated [ 1761.536896][T24227] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1761.690482][T24234] ptrace attach of "./syz-executor exec"[10784] was attempted by "./syz-executor exec"[24234] [ 1761.983880][T11606] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1762.160071][T11606] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1762.180427][T11606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.200670][T11606] usb 7-1: Product: syz [ 1762.205381][T11606] usb 7-1: Manufacturer: syz [ 1762.210051][T11606] usb 7-1: SerialNumber: syz [ 1762.254021][T11606] usb 7-1: config 0 descriptor?? [ 1762.464066][T11595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.481348][T11606] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1763.580282][T11606] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1763.663804][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.672135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.745575][T11606] usb 7-1: USB disconnect, device number 29 [ 1763.845814][T24336] tipc: Enabled bearer , priority 0 [ 1763.852955][T24336] syzkaller0: entered promiscuous mode [ 1763.858532][T24336] syzkaller0: entered allmulticast mode [ 1763.952316][T24336] tipc: Resetting bearer [ 1763.971426][T24336] tipc: Resetting bearer [ 1764.023171][T24336] tipc: Disabling bearer [ 1764.292005][T24356] netlink: 'syz.6.6850': attribute type 4 has an invalid length. [ 1764.309659][T24356] netlink: 'syz.6.6850': attribute type 4 has an invalid length. [ 1764.584346][ T24] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1764.745530][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1764.764004][ T24] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1764.793757][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1764.802860][ T30] audit: type=1326 audit(1759602517.580:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24361 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d61d8eec9 code=0x7ffc0000 [ 1764.852376][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1764.902541][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1764.913989][ T30] audit: type=1326 audit(1759602517.580:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24361 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d61d8eec9 code=0x7ffc0000 [ 1764.963218][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1765.013779][ T30] audit: type=1326 audit(1759602517.580:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24361 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f9d61d8eec9 code=0x7ffc0000 [ 1765.058961][ T30] audit: type=1326 audit(1759602517.580:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24361 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d61d8eec9 code=0x7ffc0000 [ 1765.082923][ T30] audit: type=1326 audit(1759602517.580:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24361 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d61d8eec9 code=0x7ffc0000 [ 1765.107171][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1765.143720][ T24] usb 7-1: Product: syz [ 1765.153985][ T30] audit: type=1326 audit(1759602517.580:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24361 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9d61d8eec9 code=0x7ffc0000 [ 1765.180087][ T24] usb 7-1: Manufacturer: syz [ 1765.203935][ T30] audit: type=1326 audit(1759602517.580:10098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24361 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d61d8eec9 code=0x7ffc0000 [ 1765.266369][ T30] audit: type=1326 audit(1759602517.580:10099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24361 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d61d8eec9 code=0x7ffc0000 [ 1765.291986][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 1765.301531][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 1765.315232][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1765.339674][ T30] audit: type=1326 audit(1759602517.620:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24361 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f9d61d8eec9 code=0x7ffc0000 [ 1765.363687][ T30] audit: type=1326 audit(1759602517.620:10101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24361 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d61d8eec9 code=0x7ffc0000 [ 1765.388852][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 1766.028620][T24428] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1767.295606][T11595] usb 7-1: USB disconnect, device number 30 [ 1767.503871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.512249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.393978][T11606] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1768.556402][T11606] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 1768.564730][T11606] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.575285][T11606] usb 7-1: config 0 has no interface number 0 [ 1768.581592][T11606] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 3942, setting to 64 [ 1768.592802][T11606] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1768.605918][T11606] usb 7-1: config 0 interface 52 has no altsetting 0 [ 1768.614601][T11606] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1768.623967][T11606] usb 7-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1768.632213][T11606] usb 7-1: Product: syz [ 1768.636579][T11606] usb 7-1: SerialNumber: syz [ 1768.643256][T11606] usb 7-1: config 0 descriptor?? [ 1768.827374][T24524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.838824][T24524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.849159][T24532] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6872'. [ 1768.870719][T11606] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input140 [ 1769.091704][T26199] usb 7-1: USB disconnect, device number 31 [ 1769.091831][ C1] synaptics_usb 7-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1769.485882][T24580] loop2: detected capacity change from 0 to 7 [ 1769.493548][T24580] Dev loop2: unable to read RDB block 7 [ 1769.500366][T24580] loop2: unable to read partition table [ 1769.506792][T24580] loop2: partition table beyond EOD, truncated [ 1769.513015][T24580] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1771.343798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.352215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.360559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.064925][T26199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.157444][T11606] hid-generic 007F:00D5:0003.0061: item fetching failed at offset 7/8 [ 1772.173550][T11606] hid-generic 007F:00D5:0003.0061: probe with driver hid-generic failed with error -22 [ 1773.058222][T24655] kvm: pic: non byte read [ 1773.067757][T24655] kvm: pic: level sensitive irq not supported [ 1773.068229][T24655] kvm: pic: non byte read [ 1773.092999][T24655] kvm: pic: level sensitive irq not supported [ 1773.095035][T24655] kvm: pic: non byte read [ 1773.126690][T24655] kvm: pic: level sensitive irq not supported [ 1773.126755][T24655] kvm: pic: non byte read [ 1773.144058][T24655] kvm: pic: level sensitive irq not supported [ 1773.144146][T24655] kvm: pic: non byte read [ 1773.157500][T24655] kvm: pic: level sensitive irq not supported [ 1773.157560][T24655] kvm: pic: non byte read [ 1773.169698][T24655] kvm: pic: level sensitive irq not supported [ 1773.169757][T24655] kvm: pic: non byte read [ 1773.182005][T24655] kvm: pic: level sensitive irq not supported [ 1773.182067][T24655] kvm: pic: non byte read [ 1773.194370][T24655] kvm: pic: level sensitive irq not supported [ 1773.194431][T24655] kvm: pic: non byte read [ 1773.551162][T14052] Bluetooth: hci1: command 0x0406 tx timeout [ 1774.563469][T24681] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6889'. [ 1774.625701][T24683] ptrace attach of "./syz-executor exec"[1392] was attempted by "./syz-executor exec"[24683] [ 1774.642312][T24685] syz_tun: entered allmulticast mode [ 1774.662365][T24685] syz_tun: left allmulticast mode [ 1774.716386][T24691] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6891'. [ 1775.183794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.192091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.200387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.148046][T24726] veth1_to_batadv: entered promiscuous mode [ 1777.183179][T24745] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6902'. [ 1777.688141][T24745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1777.740904][T24745] bond_slave_0: left promiscuous mode [ 1777.793254][T24745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1777.826922][T24745] bond_slave_1: left promiscuous mode [ 1777.869975][T24745] bond0 (unregistering): (slave veth9): Releasing backup interface [ 1777.890631][T24745] bond0 (unregistering): Released all slaves [ 1778.120254][T24790] loop9: detected capacity change from 0 to 7 [ 1778.136431][T14900] Dev loop9: unable to read RDB block 7 [ 1778.149417][T14900] loop9: unable to read partition table [ 1778.155812][T14900] loop9: partition table beyond EOD, truncated [ 1778.165686][T24790] Dev loop9: unable to read RDB block 7 [ 1778.176991][T24790] loop9: unable to read partition table [ 1778.190514][T24790] loop9: partition table beyond EOD, truncated [ 1778.205253][T24790] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1778.705211][T24796] ptrace attach of "./syz-executor exec"[10784] was attempted by "./syz-executor exec"[24796] [ 1779.003717][T26199] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1779.023985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.032252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.164668][T26199] usb 7-1: Using ep0 maxpacket: 16 [ 1779.181514][T26199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1779.235458][T26199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1779.245519][T26199] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1779.256236][T26199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.270075][T26199] usb 7-1: config 0 descriptor?? [ 1779.700220][T26199] mcp2221 0003:04D8:00DD.0062: unknown main item tag 0x0 [ 1779.727086][T26199] mcp2221 0003:04D8:00DD.0062: unknown main item tag 0x0 [ 1779.739665][T26199] mcp2221 0003:04D8:00DD.0062: unknown main item tag 0x0 [ 1779.754516][T26199] mcp2221 0003:04D8:00DD.0062: unknown main item tag 0x0 [ 1779.761891][T26199] mcp2221 0003:04D8:00DD.0062: unknown main item tag 0x0 [ 1779.770439][T26199] mcp2221 0003:04D8:00DD.0062: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1779.843449][T24830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6912'. [ 1779.867895][T24830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6912'. [ 1779.900005][T24810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.930563][T24810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.941836][ T24] usb 7-1: USB disconnect, device number 32 [ 1780.902715][T24887] loop9: detected capacity change from 0 to 7 [ 1780.911804][T14896] Dev loop9: unable to read RDB block 7 [ 1780.924462][T14896] loop9: unable to read partition table [ 1780.937466][T14896] loop9: partition table beyond EOD, truncated [ 1781.222584][T24887] Dev loop9: unable to read RDB block 7 [ 1781.241696][T24887] loop9: unable to read partition table [ 1781.292579][T24887] loop9: partition table beyond EOD, truncated [ 1781.310486][T24887] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1781.357092][T24899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6915'. [ 1781.502193][T24905] loop2: detected capacity change from 0 to 7 [ 1781.570463][T14896] Dev loop2: unable to read RDB block 7 [ 1781.585028][T14896] loop2: AHDI p1 p2 [ 1781.606592][T14896] loop2: partition table partially beyond EOD, truncated [ 1781.640254][T24915] loop9: detected capacity change from 0 to 7 [ 1781.643983][T14896] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1781.659569][T14900] Dev loop9: unable to read RDB block 7 [ 1781.668002][T11595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.671792][T14900] loop9: unable to read partition table [ 1781.690816][T14900] loop9: partition table beyond EOD, truncated [ 1781.694511][T24905] Dev loop2: unable to read RDB block 7 [ 1781.716546][T24915] Dev loop9: unable to read RDB block 7 [ 1781.728958][T24915] loop9: unable to read partition table [ 1781.738342][T24905] loop2: AHDI p1 p2 [ 1781.746526][T24915] loop9: partition table beyond EOD, truncated [ 1781.771631][T24915] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1781.783334][T24905] loop2: partition table partially beyond EOD, truncated [ 1781.893366][T24905] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1782.873845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.882235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.890581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.024756][T24964] loop9: detected capacity change from 0 to 7 [ 1783.045100][T24964] Dev loop9: unable to read RDB block 7 [ 1783.088601][T24964] loop9: unable to read partition table [ 1783.119464][T24964] loop9: partition table beyond EOD, truncated [ 1783.154841][T24964] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1783.545301][T24986] input: syz1 as /devices/virtual/input/input141 [ 1783.643755][ T24] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1783.796666][ T24] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 1783.831035][ T24] usb 7-1: config 0 has an invalid interface number: 66 but max is 0 [ 1783.873908][ T24] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1783.885647][T24992] loop9: detected capacity change from 0 to 7 [ 1783.896679][T14900] Dev loop9: unable to read RDB block 7 [ 1783.904809][T14900] loop9: unable to read partition table [ 1783.911104][T14900] loop9: partition table beyond EOD, truncated [ 1783.919317][T24992] Dev loop9: unable to read RDB block 7 [ 1783.929401][T24992] loop9: unable to read partition table [ 1783.941532][T24992] loop9: partition table beyond EOD, truncated [ 1783.952583][ T24] usb 7-1: config 0 has no interface number 0 [ 1783.953995][T24992] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1783.976628][ T24] usb 7-1: config 0 has no interface number 1 [ 1783.982779][ T24] usb 7-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 1784.047008][ T24] usb 7-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1784.067281][ T24] usb 7-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 1784.079073][ T24] usb 7-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 1784.091284][ T24] usb 7-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 1784.103923][ T24] usb 7-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 1784.134958][ T24] usb 7-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 1784.194036][ T24] usb 7-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1784.215928][ T24] usb 7-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 1784.294896][ T24] usb 7-1: config 0 interface 66 has no altsetting 0 [ 1784.355317][ T24] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1784.379363][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.438953][ T24] usb 7-1: Product: syz [ 1784.454460][ T24] usb 7-1: Manufacturer: syz [ 1784.459088][ T24] usb 7-1: SerialNumber: syz [ 1784.469573][ T24] usb 7-1: config 0 descriptor?? [ 1784.477386][ T24] ljca 7-1:0.84: bulk endpoints not found [ 1784.621535][T25006] loop2: detected capacity change from 0 to 7 [ 1784.632601][T14896] Dev loop2: unable to read RDB block 7 [ 1784.639436][T14896] loop2: AHDI p1 p2 [ 1784.643372][T14896] loop2: partition table partially beyond EOD, truncated [ 1784.653795][T14896] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1784.661828][T25006] Dev loop2: unable to read RDB block 7 [ 1784.671987][T25006] loop2: AHDI p1 p2 [ 1784.678855][T25006] loop2: partition table partially beyond EOD, truncated [ 1784.688100][T25006] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1784.913917][T25021] loop2: detected capacity change from 0 to 7 [ 1784.926929][T14896] Dev loop2: unable to read RDB block 7 [ 1784.930664][T25023] loop9: detected capacity change from 0 to 7 [ 1784.951797][T25023] Dev loop9: unable to read RDB block 7 [ 1784.957619][T14896] loop2: AHDI p1 p2 p3 [ 1784.957642][T25023] loop9: AHDI p3 p4 [ 1784.961835][T14896] loop2: partition table partially beyond EOD, [ 1784.968494][T25023] loop9: partition table partially beyond EOD, [ 1784.975088][T14896] truncated [ 1784.975712][T14896] loop2: p1 start 4284557286 is beyond EOD, [ 1784.982768][T25023] truncated [ 1784.996550][T25023] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1785.037264][T14896] truncated [ 1785.048641][T14896] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1785.090073][T25021] Dev loop2: unable to read RDB block 7 [ 1785.119316][ T7207] udevd[7207]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1785.142049][T25021] loop2: AHDI p1 p2 p3 [ 1785.174614][T25021] loop2: partition table partially beyond EOD, truncated [ 1785.209190][T25021] loop2: p1 start 4284557286 is beyond EOD, truncated [ 1785.228854][T25021] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1785.259111][T25037] loop9: detected capacity change from 0 to 7 [ 1785.271783][ T7207] Dev loop9: unable to read RDB block 7 [ 1785.283025][ T7207] loop9: unable to read partition table [ 1785.291217][ T7207] loop9: partition table beyond EOD, truncated [ 1785.301876][T25037] Dev loop9: unable to read RDB block 7 [ 1785.308790][T25037] loop9: unable to read partition table [ 1785.316365][T25037] loop9: partition table beyond EOD, truncated [ 1785.326701][T25037] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1785.404742][T25036] ptrace attach of "./syz-executor exec"[10784] was attempted by "./syz-executor exec"[25036] [ 1785.749905][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1785.750730][ T30] audit: type=1800 audit(1759602538.530:10108): pid=25067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6955" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=163618 res=0 errno=0 [ 1786.073785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.082155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.090446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.287741][ T24] ljca 7-1:0.66: probe with driver ljca failed with error -71 [ 1786.315640][ T24] usb 7-1: USB disconnect, device number 33 [ 1786.412094][T25126] loop9: detected capacity change from 0 to 7 [ 1786.420962][T25126] Dev loop9: unable to read RDB block 7 [ 1786.427545][T25126] loop9: AHDI p3 p4 [ 1786.431541][T25126] loop9: partition table partially beyond EOD, truncated [ 1786.439338][T25126] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1786.536555][T14900] udevd[14900]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1786.559683][T25137] loop2: detected capacity change from 0 to 7 [ 1786.571194][T25137] Dev loop2: unable to read RDB block 7 [ 1786.579576][T25137] loop2: AHDI p1 p2 p3 [ 1786.584093][T25137] loop2: partition table partially beyond EOD, truncated [ 1786.591511][T25137] loop2: p1 start 4284557286 is beyond EOD, truncated [ 1786.599018][T25137] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1786.765891][T25151] loop9: detected capacity change from 0 to 7 [ 1786.777904][T25151] Dev loop9: unable to read RDB block 7 [ 1786.788373][T25151] loop9: unable to read partition table [ 1786.795427][T25151] loop9: partition table beyond EOD, truncated [ 1786.811409][T25151] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1787.043705][ T24] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1787.193670][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1787.200162][ T24] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1787.208579][ T24] usb 7-1: config 179 has no interface number 0 [ 1787.214905][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1787.226032][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1787.237417][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1787.248757][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1787.260426][ T24] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1787.273872][ T24] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1787.283015][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.295163][T25155] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1787.542566][T11585] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input142 [ 1787.719544][T25155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.729255][T25155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.946872][T11606] usb 7-1: USB disconnect, device number 34 [ 1787.952860][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1787.952909][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1788.946268][T26199] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1789.016138][T25231] loop9: detected capacity change from 0 to 7 [ 1789.035741][T25231] Dev loop9: unable to read RDB block 7 [ 1789.052742][T25231] loop9: AHDI p3 p4 [ 1789.062690][T25231] loop9: partition table partially beyond EOD, truncated [ 1789.081592][T25231] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1789.134149][T26199] usb 7-1: Using ep0 maxpacket: 8 [ 1789.171262][T26199] usb 7-1: config 0 has an invalid interface number: 155 but max is 1 [ 1789.227606][T26199] usb 7-1: config 0 has an invalid interface number: 245 but max is 1 [ 1789.249857][T14900] udevd[14900]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1789.279058][T26199] usb 7-1: config 0 has no interface number 0 [ 1789.299144][T26199] usb 7-1: config 0 has no interface number 1 [ 1789.388227][T26199] usb 7-1: config 0 interface 155 has no altsetting 0 [ 1789.464881][T25244] loop2: detected capacity change from 0 to 7 [ 1789.479442][T25242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6972'. [ 1789.500274][T25244] Dev loop2: unable to read RDB block 7 [ 1789.500282][T26199] usb 7-1: config 0 interface 245 has no altsetting 0 [ 1789.500328][T26199] usb 7-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b8.b6 [ 1789.524957][T25242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6972'. [ 1789.543917][T25244] loop2: AHDI p1 p2 p3 [ 1789.548368][T25244] loop2: partition table partially beyond EOD, truncated [ 1789.571592][T25244] loop2: p1 start 4284557286 is beyond EOD, truncated [ 1789.601589][T26199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.656759][T25244] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1789.678146][T26199] usb 7-1: config 0 descriptor?? [ 1789.823794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.832167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.901244][T25212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6969'. [ 1790.021741][T25261] loop9: detected capacity change from 0 to 7 [ 1790.059391][T26199] usb 7-1: string descriptor 0 read error: -71 [ 1790.110670][T25261] Dev loop9: unable to read RDB block 7 [ 1790.131079][T25261] loop9: unable to read partition table [ 1790.137442][T25261] loop9: partition table beyond EOD, truncated [ 1790.148867][T25261] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1790.244930][T26199] usb 7-1: USB disconnect, device number 35 [ 1790.624929][T26199] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1790.758327][T25324] FAULT_INJECTION: forcing a failure. [ 1790.758327][T25324] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.807062][T25324] CPU: 0 UID: 0 PID: 25324 Comm: syz.0.6979 Not tainted syzkaller #0 PREEMPT(full) [ 1790.807087][T25324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1790.807105][T25324] Call Trace: [ 1790.807114][T25324] [ 1790.807122][T25324] dump_stack_lvl+0x189/0x250 [ 1790.807142][T25324] ? __pfx____ratelimit+0x10/0x10 [ 1790.807157][T25324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1790.807168][T25324] ? __pfx__printk+0x10/0x10 [ 1790.807185][T25324] ? __pfx___might_resched+0x10/0x10 [ 1790.807198][T25324] ? fs_reclaim_acquire+0x7d/0x100 [ 1790.807215][T25324] should_fail_ex+0x414/0x560 [ 1790.807230][T25324] should_failslab+0xa8/0x100 [ 1790.807247][T25324] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1790.807260][T25324] ? rtnl_newlink+0xfb/0x1c80 [ 1790.807276][T25324] ? kasan_save_track+0x4f/0x80 [ 1790.807291][T25324] rtnl_newlink+0xfb/0x1c80 [ 1790.807304][T25324] ? netlink_deliver_tap+0x19c/0x1b0 [ 1790.807312][T25324] ? netlink_unicast+0x7fa/0x9e0 [ 1790.807325][T25324] ? netlink_sendmsg+0x805/0xb30 [ 1790.807333][T25324] ? __sock_sendmsg+0x21c/0x270 [ 1790.807345][T25324] ? ____sys_sendmsg+0x505/0x830 [ 1790.807354][T25324] ? ___sys_sendmsg+0x21f/0x2a0 [ 1790.807362][T25324] ? __x64_sys_sendmsg+0x19b/0x260 [ 1790.807372][T25324] ? do_syscall_64+0xfa/0x3b0 [ 1790.807379][T25324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.807392][T25324] ? __pfx_rtnl_newlink+0x10/0x10 [ 1790.807419][T25324] ? kasan_quarantine_put+0xdd/0x220 [ 1790.807431][T25324] ? lockdep_hardirqs_on+0x9c/0x150 [ 1790.807448][T25324] ? nlmon_xmit+0xb0/0x100 [ 1790.807459][T25324] ? kmem_cache_free+0x19b/0x690 [ 1790.807477][T25324] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1790.807488][T25324] ? lockdep_hardirqs_on+0x9c/0x150 [ 1790.807502][T25324] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1790.807512][T25324] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1790.807524][T25324] ? __dev_queue_xmit+0x27b/0x3b50 [ 1790.807536][T25324] ? __dev_queue_xmit+0x27b/0x3b50 [ 1790.807546][T25324] ? __dev_queue_xmit+0x27b/0x3b50 [ 1790.807557][T25324] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1790.807573][T25324] ? kasan_save_track+0x3e/0x80 [ 1790.807590][T25324] ? __kasan_slab_alloc+0x6c/0x80 [ 1790.807614][T25324] ? __lock_acquire+0xab9/0xd20 [ 1790.807652][T25324] ? __pfx_rtnl_newlink+0x10/0x10 [ 1790.807670][T25324] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1790.807686][T25324] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1790.807700][T25324] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1790.807713][T25324] ? ref_tracker_free+0x63a/0x7d0 [ 1790.807726][T25324] ? __asan_memcpy+0x40/0x70 [ 1790.807738][T25324] ? __pfx_ref_tracker_free+0x10/0x10 [ 1790.807755][T25324] netlink_rcv_skb+0x205/0x470 [ 1790.807771][T25324] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1790.807786][T25324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1790.807806][T25324] ? netlink_deliver_tap+0x2e/0x1b0 [ 1790.807819][T25324] netlink_unicast+0x82f/0x9e0 [ 1790.807837][T25324] ? __pfx_netlink_unicast+0x10/0x10 [ 1790.807851][T25324] ? netlink_sendmsg+0x642/0xb30 [ 1790.807859][T25324] ? skb_put+0x11b/0x210 [ 1790.807870][T25324] netlink_sendmsg+0x805/0xb30 [ 1790.807884][T25324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1790.807895][T25324] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1790.807909][T25324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1790.807918][T25324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1790.807927][T25324] __sock_sendmsg+0x21c/0x270 [ 1790.807951][T25324] ____sys_sendmsg+0x505/0x830 [ 1790.807965][T25324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1790.807980][T25324] ? import_iovec+0x74/0xa0 [ 1790.807992][T25324] ___sys_sendmsg+0x21f/0x2a0 [ 1790.808004][T25324] ? __pfx____sys_sendmsg+0x10/0x10 [ 1790.808033][T25324] ? __fget_files+0x2a/0x420 [ 1790.808047][T25324] ? __fget_files+0x3a0/0x420 [ 1790.808066][T25324] __x64_sys_sendmsg+0x19b/0x260 [ 1790.808078][T25324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1790.808093][T25324] ? __pfx_ksys_write+0x10/0x10 [ 1790.808105][T25324] ? rcu_is_watching+0x15/0xb0 [ 1790.808119][T25324] ? do_syscall_64+0xbe/0x3b0 [ 1790.808130][T25324] do_syscall_64+0xfa/0x3b0 [ 1790.808138][T25324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.808147][T25324] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1790.808156][T25324] ? clear_bhb_loop+0x60/0xb0 [ 1790.808168][T25324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.808177][T25324] RIP: 0033:0x7fe57458eec9 [ 1790.808189][T25324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1790.808198][T25324] RSP: 002b:00007fe575389038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1790.808210][T25324] RAX: ffffffffffffffda RBX: 00007fe5747e5fa0 RCX: 00007fe57458eec9 [ 1790.808217][T25324] RDX: 0000000004020014 RSI: 0000200000000200 RDI: 0000000000000003 [ 1790.808224][T25324] RBP: 00007fe575389090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.808230][T25324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.808235][T25324] R13: 00007fe5747e6038 R14: 00007fe5747e5fa0 R15: 00007fe57490fa28 [ 1790.808250][T25324] [ 1791.297890][T26198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.311690][T26199] usb 7-1: Using ep0 maxpacket: 8 [ 1791.339065][T26199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1791.350244][T26199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1791.360118][T26199] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1791.369710][T26199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.396517][T26199] usb 7-1: config 0 descriptor?? [ 1791.868032][T26199] usbhid 7-1:0.0: can't add hid device: -71 [ 1791.874491][T26199] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1791.885580][T26199] usb 7-1: USB disconnect, device number 36 [ 1791.910341][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.916828][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.924570][ T43] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1791.947686][ T43] dvb_usb_az6027 3-1:0.246: probe with driver dvb_usb_az6027 failed with error -110 [ 1791.962805][ T43] usb 3-1: USB disconnect, device number 121 [ 1792.408102][T26199] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1792.596307][T26199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1792.607218][T26199] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1792.617406][T26199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.644054][T26199] usb 7-1: config 0 descriptor?? [ 1793.679174][T25376] loop9: detected capacity change from 0 to 7 [ 1793.776581][T25376] Dev loop9: unable to read RDB block 7 [ 1793.833145][T25376] loop9: unable to read partition table [ 1793.852995][T25376] loop9: partition table beyond EOD, truncated [ 1793.880040][T25376] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1794.150578][T26199] usbhid 7-1:0.0: can't add hid device: -71 [ 1794.174091][T26199] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1794.383978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.392238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.400504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.410971][T26199] usb 7-1: USB disconnect, device number 37 [ 1794.728440][T25394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6987'. [ 1794.897423][T25409] FAULT_INJECTION: forcing a failure. [ 1794.897423][T25409] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.917450][T25409] CPU: 0 UID: 0 PID: 25409 Comm: syz.4.6990 Not tainted syzkaller #0 PREEMPT(full) [ 1794.917473][T25409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1794.917480][T25409] Call Trace: [ 1794.917485][T25409] [ 1794.917490][T25409] dump_stack_lvl+0x189/0x250 [ 1794.917514][T25409] ? __pfx____ratelimit+0x10/0x10 [ 1794.917530][T25409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1794.917541][T25409] ? __pfx__printk+0x10/0x10 [ 1794.917557][T25409] ? __pfx___might_resched+0x10/0x10 [ 1794.917569][T25409] ? fs_reclaim_acquire+0x7d/0x100 [ 1794.917586][T25409] should_fail_ex+0x414/0x560 [ 1794.917601][T25409] should_failslab+0xa8/0x100 [ 1794.917618][T25409] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1794.917632][T25409] ? rtnl_newlink+0xfb/0x1c80 [ 1794.917647][T25409] ? kasan_save_track+0x4f/0x80 [ 1794.917662][T25409] rtnl_newlink+0xfb/0x1c80 [ 1794.917675][T25409] ? netlink_deliver_tap+0x19c/0x1b0 [ 1794.917683][T25409] ? netlink_unicast+0x7fa/0x9e0 [ 1794.917696][T25409] ? netlink_sendmsg+0x805/0xb30 [ 1794.917704][T25409] ? __sock_sendmsg+0x21c/0x270 [ 1794.917715][T25409] ? ____sys_sendmsg+0x505/0x830 [ 1794.917724][T25409] ? ___sys_sendmsg+0x21f/0x2a0 [ 1794.917733][T25409] ? __x64_sys_sendmsg+0x19b/0x260 [ 1794.917742][T25409] ? do_syscall_64+0xfa/0x3b0 [ 1794.917750][T25409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.917763][T25409] ? __pfx_rtnl_newlink+0x10/0x10 [ 1794.917789][T25409] ? kasan_quarantine_put+0xdd/0x220 [ 1794.917801][T25409] ? lockdep_hardirqs_on+0x9c/0x150 [ 1794.917818][T25409] ? nlmon_xmit+0xb0/0x100 [ 1794.917829][T25409] ? kmem_cache_free+0x19b/0x690 [ 1794.917846][T25409] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1794.917857][T25409] ? lockdep_hardirqs_on+0x9c/0x150 [ 1794.917871][T25409] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1794.917881][T25409] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1794.917893][T25409] ? __dev_queue_xmit+0x27b/0x3b50 [ 1794.917905][T25409] ? __dev_queue_xmit+0x27b/0x3b50 [ 1794.917915][T25409] ? __dev_queue_xmit+0x27b/0x3b50 [ 1794.917926][T25409] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1794.917936][T25409] ? kasan_save_track+0x3e/0x80 [ 1794.917948][T25409] ? __kasan_slab_alloc+0x6c/0x80 [ 1794.917963][T25409] ? __lock_acquire+0xab9/0xd20 [ 1794.917989][T25409] ? __pfx_rtnl_newlink+0x10/0x10 [ 1794.918003][T25409] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1794.918019][T25409] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1794.918033][T25409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1794.918046][T25409] ? ref_tracker_free+0x63a/0x7d0 [ 1794.918059][T25409] ? __asan_memcpy+0x40/0x70 [ 1794.918070][T25409] ? __pfx_ref_tracker_free+0x10/0x10 [ 1794.918088][T25409] netlink_rcv_skb+0x205/0x470 [ 1794.918104][T25409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1794.918119][T25409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1794.918140][T25409] ? netlink_deliver_tap+0x2e/0x1b0 [ 1794.918153][T25409] netlink_unicast+0x82f/0x9e0 [ 1794.918170][T25409] ? __pfx_netlink_unicast+0x10/0x10 [ 1794.918185][T25409] ? netlink_sendmsg+0x642/0xb30 [ 1794.918193][T25409] ? skb_put+0x11b/0x210 [ 1794.918204][T25409] netlink_sendmsg+0x805/0xb30 [ 1794.918218][T25409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1794.918229][T25409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1794.918243][T25409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1794.918252][T25409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1794.918261][T25409] __sock_sendmsg+0x21c/0x270 [ 1794.918276][T25409] ____sys_sendmsg+0x505/0x830 [ 1794.918289][T25409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1794.918304][T25409] ? import_iovec+0x74/0xa0 [ 1794.918315][T25409] ___sys_sendmsg+0x21f/0x2a0 [ 1794.918327][T25409] ? __pfx____sys_sendmsg+0x10/0x10 [ 1794.918355][T25409] ? __fget_files+0x2a/0x420 [ 1794.918370][T25409] ? __fget_files+0x3a0/0x420 [ 1794.918392][T25409] __x64_sys_sendmsg+0x19b/0x260 [ 1794.918404][T25409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1794.918419][T25409] ? __pfx_ksys_write+0x10/0x10 [ 1794.918431][T25409] ? rcu_is_watching+0x15/0xb0 [ 1794.918445][T25409] ? do_syscall_64+0xbe/0x3b0 [ 1794.918455][T25409] do_syscall_64+0xfa/0x3b0 [ 1794.918463][T25409] ? lockdep_hardirqs_on+0x9c/0x150 [ 1794.918476][T25409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.918485][T25409] ? clear_bhb_loop+0x60/0xb0 [ 1794.918497][T25409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.918511][T25409] RIP: 0033:0x7fa13fb8eec9 [ 1794.918521][T25409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1794.918529][T25409] RSP: 002b:00007fa140af0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1794.918540][T25409] RAX: ffffffffffffffda RBX: 00007fa13fde5fa0 RCX: 00007fa13fb8eec9 [ 1794.918547][T25409] RDX: 0000000004020014 RSI: 0000200000000200 RDI: 0000000000000003 [ 1794.918553][T25409] RBP: 00007fa140af0090 R08: 0000000000000000 R09: 0000000000000000 [ 1794.918559][T25409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1794.918565][T25409] R13: 00007fa13fde6038 R14: 00007fa13fde5fa0 R15: 00007fa13ff0fa28 [ 1794.918580][T25409] [ 1796.067350][T25394] team0 (unregistering): Port device team_slave_0 removed [ 1796.091880][T25394] team0 (unregistering): Port device team_slave_1 removed [ 1796.318627][T25456] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6993'. [ 1796.798652][T25479] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6998'. [ 1796.808168][T25480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6998'. [ 1796.834099][T11585] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1796.999860][T11585] usb 7-1: config 39 has an invalid interface number: 201 but max is 0 [ 1797.048801][T11585] usb 7-1: config 39 has no interface number 0 [ 1797.081779][T11585] usb 7-1: New USB device found, idVendor=1b3d, idProduct=930e, bcdDevice=4d.05 [ 1797.152372][T11585] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.197536][T11585] usb 7-1: Product: syz [ 1797.201768][T11585] usb 7-1: Manufacturer: syz [ 1797.228051][T11585] usb 7-1: SerialNumber: syz [ 1797.583816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.592145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.600430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.608690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.721977][T11585] ftdi_sio 7-1:39.201: FTDI USB Serial Device converter detected [ 1797.746856][T11585] ftdi_sio ttyUSB0: unknown device type: 0x4d05 [ 1798.036599][T11585] usb 7-1: USB disconnect, device number 38 [ 1798.073496][T11585] ftdi_sio 7-1:39.201: device disconnected [ 1798.577738][T25520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7002'. [ 1798.669199][T25534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.680608][T25534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.310805][T25591] loop9: detected capacity change from 0 to 7 [ 1800.330493][T25591] Dev loop9: unable to read RDB block 7 [ 1800.342623][T25591] loop9: unable to read partition table [ 1800.375177][T25591] loop9: partition table beyond EOD, truncated [ 1800.390984][T25591] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1800.793790][T26199] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1800.864609][T11595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.943895][T26199] usb 7-1: device descriptor read/64, error -71 [ 1801.183871][T26199] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1801.356311][T25607] : renamed from bridge_slave_0 (while UP) [ 1801.413723][T26199] usb 7-1: device descriptor read/64, error -71 [ 1801.534220][T26199] usb usb7-port1: attempt power cycle [ 1801.969507][T25620] loop2: detected capacity change from 0 to 7 [ 1801.974224][T26199] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1801.979015][T14900] Dev loop2: unable to read RDB block 7 [ 1801.990890][T14900] loop2: AHDI p1 p2 p3 [ 1801.997483][T14900] loop2: partition table partially beyond EOD, truncated [ 1802.005956][T14900] loop2: p1 start 4284557286 is beyond EOD, truncated [ 1802.012790][T14900] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1802.052649][T25620] Dev loop2: unable to read RDB block 7 [ 1802.062974][T25620] loop2: AHDI p1 p2 p3 [ 1802.067850][T26199] usb 7-1: device descriptor read/8, error -71 [ 1802.086652][T25620] loop2: partition table partially beyond EOD, truncated [ 1802.124666][T25620] loop2: p1 start 4284557286 is beyond EOD, truncated [ 1802.145006][T25620] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1802.323686][T26199] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1802.436227][T26199] usb 7-1: device descriptor read/8, error -71 [ 1802.544562][T26199] usb usb7-port1: unable to enumerate USB device [ 1803.155091][T25647] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7024'. [ 1803.343816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.352178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.360599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.369122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.918233][T25661] fuse: Bad value for 'user_id' [ 1803.923128][T25661] fuse: Bad value for 'user_id' [ 1803.993752][T11585] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1804.152360][T11585] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1804.166670][T11585] usb 7-1: not running at top speed; connect to a high speed hub [ 1804.177217][T11585] usb 7-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 1804.188198][T11585] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1804.200730][T25690] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7032'. [ 1804.201843][T11585] usb 7-1: language id specifier not provided by device, defaulting to English [ 1804.211098][T25690] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7032'. [ 1804.229212][T25690] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7032'. [ 1804.231217][T25675] QAT: failed to copy from user. [ 1804.245771][T25690] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7032'. [ 1804.250143][T11585] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1804.293758][T11585] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.316690][T11585] usb 7-1: can't set config #1, error -71 [ 1804.330365][T25696] netlink: 3672 bytes leftover after parsing attributes in process `syz.7.7033'. [ 1804.339900][T11585] usb 7-1: USB disconnect, device number 43 [ 1804.778890][T25715] netlink: 'syz.7.7036': attribute type 3 has an invalid length. [ 1804.801834][T25715] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.7036'. [ 1804.994558][T25744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.009696][T25744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.175100][T25769] loop9: detected capacity change from 0 to 7 [ 1805.184892][T26199] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1805.197399][T25769] Dev loop9: unable to read RDB block 7 [ 1805.214736][T25769] loop9: unable to read partition table [ 1805.220543][T25769] loop9: partition table beyond EOD, truncated [ 1805.245601][T25769] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1805.374080][T26199] usb 3-1: device descriptor read/64, error -71 [ 1805.553785][ T43] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 1805.623730][T26199] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1805.670943][T25794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1805.725993][ T43] usb 7-1: LPM exit latency is zeroed, disabling LPM. [ 1805.736254][ T43] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 1805.749651][ T43] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 1805.760174][ T43] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1805.763731][T26199] usb 3-1: device descriptor read/64, error -71 [ 1805.770560][T25798] ptrace attach of "./syz-executor exec"[10784] was attempted by "./syz-executor exec"[25798] [ 1805.787855][ T43] usb 7-1: string descriptor 0 read error: -22 [ 1805.794914][ T43] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1805.806240][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.827267][T25774] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1805.839012][T25774] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1805.857520][ T43] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1805.995221][T26199] usb usb3-port1: attempt power cycle [ 1806.053928][ T43] usb 7-1: USB disconnect, device number 44 [ 1806.353998][T26199] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1806.403983][T26199] usb 3-1: device descriptor read/8, error -71 [ 1806.694268][T26199] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1806.729138][T26199] usb 3-1: device descriptor read/8, error -71 [ 1806.866333][T26199] usb usb3-port1: unable to enumerate USB device [ 1807.103253][T25848] loop9: detected capacity change from 0 to 7 [ 1807.118522][T25848] Dev loop9: unable to read RDB block 7 [ 1807.124775][T25848] loop9: unable to read partition table [ 1807.130661][T25848] loop9: partition table beyond EOD, truncated [ 1807.141556][T25848] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1807.207742][T25853] FAULT_INJECTION: forcing a failure. [ 1807.207742][T25853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1807.222876][T25853] CPU: 0 UID: 0 PID: 25853 Comm: syz.7.7053 Not tainted syzkaller #0 PREEMPT(full) [ 1807.222899][T25853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1807.222910][T25853] Call Trace: [ 1807.222918][T25853] [ 1807.222926][T25853] dump_stack_lvl+0x189/0x250 [ 1807.222952][T25853] ? __pfx____ratelimit+0x10/0x10 [ 1807.222977][T25853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1807.222998][T25853] ? __pfx__printk+0x10/0x10 [ 1807.223035][T25853] should_fail_ex+0x414/0x560 [ 1807.223061][T25853] _copy_to_user+0x31/0xb0 [ 1807.223081][T25853] simple_read_from_buffer+0xe1/0x170 [ 1807.223110][T25853] proc_fail_nth_read+0x1b3/0x220 [ 1807.223134][T25853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1807.223158][T25853] ? rw_verify_area+0x2a6/0x4d0 [ 1807.223178][T25853] ? __lock_acquire+0xab9/0xd20 [ 1807.223200][T25853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1807.223222][T25853] vfs_read+0x200/0xa30 [ 1807.223242][T25853] ? fdget_pos+0x247/0x320 [ 1807.223267][T25853] ? __pfx___mutex_lock+0x10/0x10 [ 1807.223292][T25853] ? __pfx_vfs_read+0x10/0x10 [ 1807.223316][T25853] ? __fget_files+0x2a/0x420 [ 1807.223344][T25853] ? __fget_files+0x3a0/0x420 [ 1807.223366][T25853] ? __fget_files+0x2a/0x420 [ 1807.223400][T25853] ksys_read+0x145/0x250 [ 1807.223424][T25853] ? __pfx_ksys_read+0x10/0x10 [ 1807.223442][T25853] ? rcu_is_watching+0x15/0xb0 [ 1807.223467][T25853] ? do_syscall_64+0xbe/0x3b0 [ 1807.223486][T25853] do_syscall_64+0xfa/0x3b0 [ 1807.223500][T25853] ? lockdep_hardirqs_on+0x9c/0x150 [ 1807.223521][T25853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.223538][T25853] ? clear_bhb_loop+0x60/0xb0 [ 1807.223559][T25853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.223579][T25853] RIP: 0033:0x7fee73b8d8dc [ 1807.223593][T25853] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1807.223606][T25853] RSP: 002b:00007fee74957030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1807.223624][T25853] RAX: ffffffffffffffda RBX: 00007fee73de5fa0 RCX: 00007fee73b8d8dc [ 1807.223636][T25853] RDX: 000000000000000f RSI: 00007fee749570a0 RDI: 0000000000000004 [ 1807.223645][T25853] RBP: 00007fee74957090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.223654][T25853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1807.223664][T25853] R13: 00007fee73de6038 R14: 00007fee73de5fa0 R15: 00007fee73f0fa28 [ 1807.223691][T25853] [ 1808.323730][ T43] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1808.424026][T26195] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1808.503751][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1808.514327][ T43] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1808.522360][ T43] usb 3-1: config 0 has no interface number 0 [ 1808.528771][ T43] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 1808.541033][ T43] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 1808.556188][ T43] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1808.567956][ T43] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1808.581104][ T43] usb 3-1: Product: syz [ 1808.586719][ T43] usb 3-1: SerialNumber: syz [ 1808.595681][ T43] usb 3-1: config 0 descriptor?? [ 1808.596257][T26195] usb 7-1: Using ep0 maxpacket: 32 [ 1808.613094][ T43] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 1808.634849][T26195] usb 7-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1808.637533][ T43] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input143 [ 1808.653680][T26195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.661979][T26195] usb 7-1: Product: syz [ 1808.671160][T26195] usb 7-1: Manufacturer: syz [ 1808.690211][T26195] usb 7-1: SerialNumber: syz [ 1808.909402][T25873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.922158][T25873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.932623][T26195] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 1808.943993][T26195] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1808.955904][T26195] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1809.141621][T25873] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7056'. [ 1809.158434][T25873] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7056'. [ 1809.169159][T26195] usb 7-1: USB disconnect, device number 45 [ 1809.185677][T26195] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1809.202165][T26195] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1809.217389][T26195] visor 7-1:1.0: device disconnected [ 1809.662611][T25955] ptrace attach of "./syz-executor exec"[20143] was attempted by "./syz-executor exec"[25955] [ 1810.002779][T25965] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7063'. [ 1810.383855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.384040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.384208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.384368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.474038][T26195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.669601][T25977] loop9: detected capacity change from 0 to 7 [ 1810.675525][T25977] Dev loop9: unable to read RDB block 7 [ 1810.675570][T25977] loop9: unable to read partition table [ 1810.675844][T25977] loop9: partition table beyond EOD, truncated [ 1810.675876][T25977] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1811.248920][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1811.255919][ C1] ------------[ cut here ]------------ [ 1811.261527][T26199] usb 3-1: USB disconnect, device number 126 [ 1811.261981][ C1] URB ffff88805a760900 submitted while active [ 1811.274700][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfc1/0x1830 [ 1811.284037][ C1] Modules linked in: [ 1811.288470][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1811.297391][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1811.307439][ C1] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 1811.312982][ C1] Code: 44 89 f2 e8 01 28 3f fa e9 13 fc ff ff e8 c7 b6 d1 fa c6 05 9b 2a 59 08 01 90 48 c7 c7 80 e1 ef 8b 48 89 de e8 70 26 95 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 a1 b6 d1 fa eb 11 e8 9a b6 d1 fa bd [ 1811.332576][ C1] RSP: 0018:ffffc90000a08868 EFLAGS: 00010046 [ 1811.338638][ C1] RAX: 87510ce34eb7f700 RBX: ffff88805a760900 RCX: 0000000000040000 [ 1811.346598][ C1] RDX: ffffc900023a2000 RSI: 00000000000379db RDI: 00000000000379dc [ 1811.354565][ C1] RBP: 000000000000000f R08: ffff8880b8924293 R09: 1ffff11017124852 [ 1811.362549][ C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: dffffc0000000000 [ 1811.370514][ C1] R13: ffff8880292f0030 R14: ffff88805a760908 R15: 0000000000000820 [ 1811.378476][ C1] FS: 0000000000000000(0000) GS:ffff88812648a000(0000) knlGS:0000000000000000 [ 1811.387393][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1811.393962][ C1] CR2: 00002000000bd038 CR3: 000000007f336000 CR4: 00000000003526f0 [ 1811.401921][ C1] Call Trace: [ 1811.405192][ C1] [ 1811.408025][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1811.414005][ C1] ? kcov_remote_start+0x97/0x7f0 [ 1811.419021][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 1811.424390][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 1811.429768][ C1] dummy_timer+0x862/0x4550 [ 1811.434273][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1811.439650][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1811.444577][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1811.449496][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1811.454425][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1811.459650][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1811.465354][ C1] ? read_tsc+0x9/0x20 [ 1811.469442][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1811.475236][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1811.480337][ C1] handle_softirqs+0x283/0x870 [ 1811.485093][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1811.489856][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1811.495140][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1811.500359][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1811.504945][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1811.510183][ C1] irq_exit_rcu+0x9/0x30 [ 1811.514422][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1811.520046][ C1] [ 1811.522968][ C1] [ 1811.525886][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1811.531852][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1811.537555][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 5a 13 00 f3 0f 1e fa fb f4 88 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1811.557152][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 1811.563313][ C1] RAX: 87510ce34eb7f700 RBX: ffffffff81954a27 RCX: 87510ce34eb7f700 [ 1811.571275][ C1] RDX: 0000000000000001 RSI: ffffffff8d512c0f RDI: ffffffff8b9eea60 [ 1811.579230][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1811.587190][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f5bed30 [ 1811.595148][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dab58 [ 1811.603129][ C1] ? do_idle+0x1e7/0x510 [ 1811.607372][ C1] default_idle+0x13/0x20 [ 1811.611784][ C1] default_idle_call+0x73/0xb0 [ 1811.616532][ C1] do_idle+0x1e7/0x510 [ 1811.620591][ C1] ? __pfx_do_idle+0x10/0x10 [ 1811.625200][ C1] cpu_startup_entry+0x44/0x60 [ 1811.629950][ C1] start_secondary+0x101/0x110 [ 1811.634790][ C1] common_startup_64+0x13e/0x147 [ 1811.639729][ C1] [ 1811.642918][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1811.650204][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1811.659122][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1811.669165][ C1] Call Trace: [ 1811.672441][ C1] [ 1811.675294][ C1] dump_stack_lvl+0x99/0x250 [ 1811.679872][ C1] ? __asan_memcpy+0x40/0x70 [ 1811.684465][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1811.689652][ C1] ? __pfx__printk+0x10/0x10 [ 1811.694235][ C1] vpanic+0x237/0x6d0 [ 1811.698205][ C1] ? __pfx_vpanic+0x10/0x10 [ 1811.702694][ C1] panic+0xb9/0xc0 [ 1811.706404][ C1] ? __pfx_panic+0x10/0x10 [ 1811.710821][ C1] __warn+0x31b/0x4b0 [ 1811.714796][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 1811.719823][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 1811.724749][ C1] report_bug+0x2be/0x4f0 [ 1811.729072][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 1811.734006][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 1811.739111][ C1] ? usb_submit_urb+0xfc3/0x1830 [ 1811.744036][ C1] handle_bug+0x84/0x160 [ 1811.748262][ C1] exc_invalid_op+0x1a/0x50 [ 1811.752781][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1811.757620][ C1] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 1811.763183][ C1] Code: 44 89 f2 e8 01 28 3f fa e9 13 fc ff ff e8 c7 b6 d1 fa c6 05 9b 2a 59 08 01 90 48 c7 c7 80 e1 ef 8b 48 89 de e8 70 26 95 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 a1 b6 d1 fa eb 11 e8 9a b6 d1 fa bd [ 1811.783210][ C1] RSP: 0018:ffffc90000a08868 EFLAGS: 00010046 [ 1811.789267][ C1] RAX: 87510ce34eb7f700 RBX: ffff88805a760900 RCX: 0000000000040000 [ 1811.797245][ C1] RDX: ffffc900023a2000 RSI: 00000000000379db RDI: 00000000000379dc [ 1811.805208][ C1] RBP: 000000000000000f R08: ffff8880b8924293 R09: 1ffff11017124852 [ 1811.813191][ C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: dffffc0000000000 [ 1811.821236][ C1] R13: ffff8880292f0030 R14: ffff88805a760908 R15: 0000000000000820 [ 1811.829208][ C1] ? usb_submit_urb+0xfc0/0x1830 [ 1811.834136][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1811.840018][ C1] ? kcov_remote_start+0x97/0x7f0 [ 1811.845032][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 1811.850397][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 1811.855759][ C1] dummy_timer+0x862/0x4550 [ 1811.860265][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1811.865639][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1811.870564][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1811.875487][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1811.880406][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1811.885600][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1811.891303][ C1] ? read_tsc+0x9/0x20 [ 1811.895362][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1811.901156][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1811.906265][ C1] handle_softirqs+0x283/0x870 [ 1811.911043][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1811.915799][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1811.921073][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1811.926281][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1811.930860][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1811.936051][ C1] irq_exit_rcu+0x9/0x30 [ 1811.940284][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1811.945918][ C1] [ 1811.948834][ C1] [ 1811.951750][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1811.957718][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1811.963435][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 5a 13 00 f3 0f 1e fa fb f4 88 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1811.983118][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 1811.989176][ C1] RAX: 87510ce34eb7f700 RBX: ffffffff81954a27 RCX: 87510ce34eb7f700 [ 1811.997137][ C1] RDX: 0000000000000001 RSI: ffffffff8d512c0f RDI: ffffffff8b9eea60 [ 1812.005103][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1812.013062][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f5bed30 [ 1812.021040][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dab58 [ 1812.029012][ C1] ? do_idle+0x1e7/0x510 [ 1812.033251][ C1] default_idle+0x13/0x20 [ 1812.037562][ C1] default_idle_call+0x73/0xb0 [ 1812.042307][ C1] do_idle+0x1e7/0x510 [ 1812.046368][ C1] ? __pfx_do_idle+0x10/0x10 [ 1812.050977][ C1] cpu_startup_entry+0x44/0x60 [ 1812.055737][ C1] start_secondary+0x101/0x110 [ 1812.060523][ C1] common_startup_64+0x13e/0x147 [ 1812.065459][ C1] [ 1812.068614][ C1] Kernel Offset: disabled [ 1812.072921][ C1] Rebooting in 86400 seconds..