last executing test programs: 3m21.98886782s ago: executing program 0 (id=2329): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) connect(r0, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x3, 0x2, {0xa, 0x4e24, 0xdb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc}}}, 0x80) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x3, @win={{0x40, 0xb, 0x0, 0x7fffffff}, 0x9, 0x484, &(0x7f00000001c0)={{0x0, 0x7, 0x4, 0x9}, &(0x7f0000000180)={{0x800, 0x64, 0x2, 0xb}, &(0x7f0000000140)={{0x0, 0x7, 0x10, 0x4476cbb6}}}}, 0x7e7, &(0x7f0000000280)="abe05a6cce99fad3e18a02d6fd44aa27937f27e2f85f51a2f0286f8f108c682775aaa933b900f5df15f2c3718c704fbb13b141b06d7532d8ad4740d0d6b025c4c154d31f37eff0f493058c6c28667656384e5faaccbc5b5a24a1fb308968a7be342529336bc60ad2edaba643dd11a97e25a60ecd8fe2ccc6121b4822b3182c4cd36c370f602289b31c00d4eb1c45288deaf68a9950750c0d1ba00cf8c922ba2b12346ee5e7cebde7fcdd278a0877ea981147ff7a7941b90adb79c53eac67a8daf5ac3c7319d5d80ffa380e79c8707a073c", 0x8}}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000480)=0x3, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) 3m21.953215587s ago: executing program 0 (id=2330): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x60, 0x0) (async) write$sequencer(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="04000000000000008108"], 0x10) 3m21.843930713s ago: executing program 0 (id=2331): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x6, 0x1c, 0x65, 0x0, 0xd9, 0x11, 0x0, @private=0xa010102, @multicast2}, "b2b9045ceffd737b"}}}}}, 0x2e) write$input_event(0xffffffffffffffff, &(0x7f0000000100)={{}, 0x15, 0x9, 0x7}, 0x18) syz_usb_connect$cdc_ecm(0x2, 0x59, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4, 0x24, 0x13, 0x9}, @acm={0x3, 0x24, 0x2, 0x2}, @mdlm_detail={0x0, 0x24, 0x13, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x8c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0xfffffffffffffe00, 0x8000) ioctl$BLKFINISHZONE(r2, 0x40101288, &(0x7f00000000c0)={0x4, 0xf}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000002c0)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x6, 0x1c, 0x65, 0x0, 0xd9, 0x11, 0x0, @private=0xa010102, @multicast2}, "b2b9045ceffd737b"}}}}}, 0x2e) (async) write$input_event(0xffffffffffffffff, &(0x7f0000000100)={{}, 0x15, 0x9, 0x7}, 0x18) (async) syz_usb_connect$cdc_ecm(0x2, 0x59, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4, 0x24, 0x13, 0x9}, @acm={0x3, 0x24, 0x2, 0x2}, @mdlm_detail={0x0, 0x24, 0x13, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x8c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0xfffffffffffffe00, 0x8000) (async) ioctl$BLKFINISHZONE(r2, 0x40101288, &(0x7f00000000c0)={0x4, 0xf}) (async) 3m21.76319791s ago: executing program 0 (id=2332): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0422"], 0x13) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x110, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r1, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000182, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x400, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) fremovexattr(r4, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f00000005c0)="f257a8ea7bc273dfaeab968508069d205e545c1a182ab21b86cf553ee66aca279db0e7aea4ec53062e89", 0x2a, 0x24000040, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) open_tree(r3, &(0x7f0000000100)='./file1\x00', 0xa101) syz_clone(0x2c9a4080, 0x0, 0x5f5, 0x0, 0x0, 0xfffffffffffffffc) 3m21.490781512s ago: executing program 0 (id=2335): syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x9, 0xb2, {0xb2, 0x2, "bf82ad5553067f278d925c0a180658893d744156c2cf2e0ff3e71963431d6268a75dec4a5eb1cd0ffbab1ed470210492f2614c8b15df753e346b06841111d30c168adbba35b769d1832fd2fa7ab1b401dd3bd1196ce951615c69ac0b25d8a7da35d98b5ce59454384b5517dd9b86b7833f7c59db48d96ea237be7d4e7509db8da065b9a767841d8c2c7fbdc890a0e286137b0f9ffc7164e33582d84dcde9905f1a900730824c00033edea639844efa21"}}, &(0x7f0000000180)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "17778cb21040174a276702baf6c06828b85ea2812bab74abdb7087482bdfdb7826a4a44baba040f6e031e56b2026b957aa1ff1155c864ceca68fe8419ccf0ea710dc326475ec041f9bfc03b5192e1d9aea3cf8e1ba45307e1f1df404c07ecdc088d70a2a11f9eb2b3d779509d14d0ad170ace6e19a06a0c62de3e30101278feb041d1d29d002ed3d4628248edd928c141831a3374470da2eaa2a01c729014c6ca126c8f0c05d332caa8f33e811540b327e2a222d287be9a10934f37787"}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000100)={0x20, 0xc, 0x26, "c7fdc6dd9abe8fa8aeaf0315d8d16958a171ea7d000332a6b3b64304842cfb84c3db486fa193"}, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000dabeffff00"}}) 3m21.182773377s ago: executing program 0 (id=2338): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "94c408213d36be01d7000000000000e1100ad985544600", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, 0xd, &(0x7f0000000180)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000340)=ANY=[], 0x18}, 0x2000c8d0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) read$dsp(r4, &(0x7f0000000000)=""/110, 0x6e) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000080)=""/130) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x54000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$802154_dgram(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000240)={&(0x7f0000000480)="a6f657ba44c99047b2afe2a65a747a8104dda93327e1dcc4229edb4747d18a63947c49e3044b062c1cec00c6a13ded1d188d043d33a5d1c9065065042b8183ba8d4bdda561bd22bb51c894c28dc7517674d80d03dfa008668d5fc2f53d68da00f906674c404a4af4282487345aef9cac9b6b9a1ab4c4fe577ecdd3ade61354b21bd5e86706e6dec0d6c97bf3ae971974", 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x4000) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000040) r7 = syz_usb_connect(0x2, 0x137, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f470a040b40a11004800010203010902250101070c20000904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r8 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000680)={0x24, &(0x7f0000000540)={0x8e1d8e6135ef0ffe, 0x2, 0xf1, {0xf1, 0x24, "c065b189043c869aad6553f5ffe39d9fb7614c8ebeb69e4b56e41005e0e3d42446983a86ce9a064be25b3b973e4470b63dafc47ab6d986068a46050accedc459a537ae8a184865e132aa618fd9e8597d5733857db5007a5a0ef7401c207b00ac9502a4051aac03a21b334d51f8b766f6c36511bac4e49af9512597a2f1ef5752cf2db6cc2d1bc7282811c04cfccd6d92f7574276007698aad83b3786f2b6dbcf9f2b9f0891dd93e12d52a9b3f9c34536eacfca2639fc4dec79070ea45f46440e67e7d88cbc6cfaa398b97fb542394dc666c8ec304c65d93f487826f9ea9a16ebdaa8c7d189b6c121924703512064a4"}}, &(0x7f0000000780)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "d0fb4d7f1518ba565adc51df2a04654cea638ee7dc555e91fca22c6da16127ab1d7ace0216a1f288af753ad7a2c86c9bf4a3a83cd8aa3bac069b3ab197237b1ba054ac960d4bf5e4a6db70a60aec24d359a66494143990fda57ad59a7fdf3299b8b5f792aa1831c58458ea46dc785bb1eb1d836255a66b5a074693a00a85792566d32907ba6a0b4a0ba24694c5882fbd2afb15e8d7f9e964032f1281a7b9d447722472816df2a207ffacaf14ed6bd1c37bde1fccd2ba18fba89191221671b5029d0d2677e57858d6cfe6c30bd827bde83ec7018a1f1ed9d7abb0ac483ae86b921a07499f0455db3a070ace10532e1963a425"}}, &(0x7f0000000300)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x3, "4283"}, @global=@item_012={0x2, 0x1, 0x6, 'zD'}, @main=@item_012={0x1, 0x0, 0xc, 'g'}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xf1, 0x1, {0x22, 0x889}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x40, 0x8, 0x48, "109d414e60b47101f73980e5cd39178ba99e9517bec929e9caae0b4ef402a665524c8a6e4b155f2e7e4daa74c2c39891bec83ae31b529500306936d63f4fa4f8fe0e31a822f7a2a7"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x7a}, &(0x7f0000000980)={0x20, 0x1, 0xe8, "48c06d1f0c63f601498e7c5983448902e596b0029f2edc04b552c789b8b95543ec8fd705a42ccf827bf05829074873e986c3f5382dc412d73877a93d2725bb77cfaea0b041aa33ca508d35dd8770e9e282ccd9c152b0b6c1cbc702027c76f0b598aee13072b1c4a2d707759dc56795a51ad93dd04b18566e73436218fd36c84b14a55e724b5f0b908bbbbf7bd5a8f7ef46ec2c280f6f417e7658183616e79eca15846263e4ae6c797558b68b84e70869c7006cf7df2ea40987db644c8e1ac8c8c337a6efcb5f8efabef9bb90a2992d0e7f069c7418bf1fa8a666c02a406493ca370e02a9a0edef50"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x4}}) fallocate(r8, 0x0, 0x400000000000000, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[], 0x0) 3m20.888490521s ago: executing program 32 (id=2338): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "94c408213d36be01d7000000000000e1100ad985544600", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, 0xd, &(0x7f0000000180)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000340)=ANY=[], 0x18}, 0x2000c8d0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) read$dsp(r4, &(0x7f0000000000)=""/110, 0x6e) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000080)=""/130) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x54000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$802154_dgram(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000240)={&(0x7f0000000480)="a6f657ba44c99047b2afe2a65a747a8104dda93327e1dcc4229edb4747d18a63947c49e3044b062c1cec00c6a13ded1d188d043d33a5d1c9065065042b8183ba8d4bdda561bd22bb51c894c28dc7517674d80d03dfa008668d5fc2f53d68da00f906674c404a4af4282487345aef9cac9b6b9a1ab4c4fe577ecdd3ade61354b21bd5e86706e6dec0d6c97bf3ae971974", 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x4000) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000040) r7 = syz_usb_connect(0x2, 0x137, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f470a040b40a11004800010203010902250101070c20000904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r8 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000680)={0x24, &(0x7f0000000540)={0x8e1d8e6135ef0ffe, 0x2, 0xf1, {0xf1, 0x24, "c065b189043c869aad6553f5ffe39d9fb7614c8ebeb69e4b56e41005e0e3d42446983a86ce9a064be25b3b973e4470b63dafc47ab6d986068a46050accedc459a537ae8a184865e132aa618fd9e8597d5733857db5007a5a0ef7401c207b00ac9502a4051aac03a21b334d51f8b766f6c36511bac4e49af9512597a2f1ef5752cf2db6cc2d1bc7282811c04cfccd6d92f7574276007698aad83b3786f2b6dbcf9f2b9f0891dd93e12d52a9b3f9c34536eacfca2639fc4dec79070ea45f46440e67e7d88cbc6cfaa398b97fb542394dc666c8ec304c65d93f487826f9ea9a16ebdaa8c7d189b6c121924703512064a4"}}, &(0x7f0000000780)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "d0fb4d7f1518ba565adc51df2a04654cea638ee7dc555e91fca22c6da16127ab1d7ace0216a1f288af753ad7a2c86c9bf4a3a83cd8aa3bac069b3ab197237b1ba054ac960d4bf5e4a6db70a60aec24d359a66494143990fda57ad59a7fdf3299b8b5f792aa1831c58458ea46dc785bb1eb1d836255a66b5a074693a00a85792566d32907ba6a0b4a0ba24694c5882fbd2afb15e8d7f9e964032f1281a7b9d447722472816df2a207ffacaf14ed6bd1c37bde1fccd2ba18fba89191221671b5029d0d2677e57858d6cfe6c30bd827bde83ec7018a1f1ed9d7abb0ac483ae86b921a07499f0455db3a070ace10532e1963a425"}}, &(0x7f0000000300)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x3, "4283"}, @global=@item_012={0x2, 0x1, 0x6, 'zD'}, @main=@item_012={0x1, 0x0, 0xc, 'g'}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xf1, 0x1, {0x22, 0x889}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x40, 0x8, 0x48, "109d414e60b47101f73980e5cd39178ba99e9517bec929e9caae0b4ef402a665524c8a6e4b155f2e7e4daa74c2c39891bec83ae31b529500306936d63f4fa4f8fe0e31a822f7a2a7"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x7a}, &(0x7f0000000980)={0x20, 0x1, 0xe8, "48c06d1f0c63f601498e7c5983448902e596b0029f2edc04b552c789b8b95543ec8fd705a42ccf827bf05829074873e986c3f5382dc412d73877a93d2725bb77cfaea0b041aa33ca508d35dd8770e9e282ccd9c152b0b6c1cbc702027c76f0b598aee13072b1c4a2d707759dc56795a51ad93dd04b18566e73436218fd36c84b14a55e724b5f0b908bbbbf7bd5a8f7ef46ec2c280f6f417e7658183616e79eca15846263e4ae6c797558b68b84e70869c7006cf7df2ea40987db644c8e1ac8c8c337a6efcb5f8efabef9bb90a2992d0e7f069c7418bf1fa8a666c02a406493ca370e02a9a0edef50"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x4}}) fallocate(r8, 0x0, 0x400000000000000, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[], 0x0) 11.289487196s ago: executing program 1 (id=2997): r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_pidfd_open(r0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='decodes m'], 0xf) setns(r2, 0x24020000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x25) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r6, 0xffffffff}, 0x8) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x8000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a2104000000000000000000000009046f0000aad823000904"], 0x0) 10.482671861s ago: executing program 1 (id=3001): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000000081ff000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 8.149728032s ago: executing program 1 (id=3003): socket$alg(0x26, 0x5, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001880)={'ip6tnl0\x00', 0x0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x16, '\x00', @b}) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r2, 0x80284504, &(0x7f0000000000)=""/56) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_MCE_KILL(0x29, 0x0, 0x2) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e1c, @remote}, 0x10) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) syz_clone(0x40000, 0x0, 0xfffffffffffffe57, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x150, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x1, 0x1, 0x0, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x285, 0x4}, [@mdlm_detail={0x103, 0x24, 0x13, 0xa, "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"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x6, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x9, 0x7}}}}}]}}]}}, 0x0) 7.464698764s ago: executing program 1 (id=3008): syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYRES16=0x0], 0x0) 5.212627892s ago: executing program 4 (id=3014): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000300)=0x8, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x7) unshare(0x6a040000) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000300)=0x8, 0x4) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$netlink(0x10, 0x3, 0x7) (async) 5.041030738s ago: executing program 4 (id=3015): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x20, 0xb, 0x15, {0x15, 0x30, "7b3a8c51dc575c516d111862e562053f5d4102"}}, &(0x7f0000000080)={0x0, 0x3, 0x34, @string={0x34, 0x3, "e29e9a5cad870cc3f8ca6cc4ebd485ca652b3ce7bed072e00b56d626e9ffd5fb92dc5a55cbd4511569e650f3502a2e57daa3"}}, &(0x7f0000000100)={0x0, 0x22, 0x4, {[@local=@item_012={0x0, 0x2, 0x7}, @global=@item_012={0x2, 0x1, 0xb, "6481"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x41d, 0xd3, 0x1, {0x22, 0x2f8}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000200)={0x20, 0x5, 0x78, "5cfbf4451ac65a3b99f81d278149b1b7320a3db6ef2755d0d392ad4d939ff8244a33e1442805c783ce98e728f445907ba1f2a72b92f7ef6e47d8ed804938a93c2e3944a316f6f9213d2b0d7841bc0d2dd6008de97c09d18dede2a7dafbd9c87f1c32ecde4a2c4f3fceb51477d901b1b9da88165beda846cb"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x1, 0x78, "a8c14928f2ebab61bafa2f0785312f42f258401232e4cadb9c6c99b560d2711a6b5e9b9a6a274dec2bf41b8e19b510ef1654ff370bc4d8252ee31f60a1000fef75432f683cb5d12b820faf0d832530348f05d188e3e0f18ec14cf33cecc8b4228c822dafcc6996eb26f8f384dfa4b8bfcaeb6ab8976f0678"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x80}}) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x0, 0x10, 0x2f, "00ea377312fe79d222504f885cd8a79da93a79b949c161615e72ad0d92e8ee41f7a155b91fcf661ba71c99c86bff7d"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000440)={0x20, 0x1, 0xda, "865447f70b435d7c99f9cdc363fad31df70d17961feae714ba485ad3f8b3734de262362de2d2b9254c9bb9162d2283900aff9f1b86c5e9fba8bb8481dd47f0660da054c94af1f6d929ddc9b560d656a1ee0d70786268379d964cdfaf66f91b45c760cca23ac1674a472042e515ce16891ef2384e576e09325ce775ba7681b3b9e92908ea924b3434aab4d0907c1f4e2d17b5c509bdc95e7cc4beacad09da723236670ac7aaa14dbb76667b88e051adc15931f3a64d719a969d0a4382c74402d96122e087256e9cc53519981e07c1e5d1561e01bf136fdbd9a735"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x5}}) 4.130931628s ago: executing program 1 (id=3016): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = fsopen(&(0x7f0000000080)='ext4\x00', 0x1) dup3(r0, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="121a1001e3b4b120b113450006960102030109021b0001f90708a70904e52001ffffff0809050b00424b0408f99b4b72"], 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async) socket(0x2, 0x1, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) fsopen(&(0x7f0000000080)='ext4\x00', 0x1) (async) dup3(r0, r3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="121a1001e3b4b120b113450006960102030109021b0001f90708a70904e52001ffffff0809050b00424b0408f99b4b72"], 0x0) (async) 4.063878716s ago: executing program 2 (id=3017): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x3fffffffffffffe, 0x120445) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="aefdda7f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a0000000000000000", 0x2a}, {&(0x7f0000000440)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689ff", 0x24}], 0x2) (async, rerun: 64) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x9e, 0xdc, 0x17, 0x40, 0x1286, 0x2046, 0x7e5f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xca, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0x71, 0x9, 0x0, 0xff, 0x4, 0x1, 0x4}}]}}]}}, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x801, 0x0) mmap$binder(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xffffffffffffff7f) 3.76397857s ago: executing program 3 (id=3018): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) (async) sendto$inet(r0, &(0x7f0000000480)="0c00433b8c0f3bedf6ba82cc8bce6eee4f00e360", 0x14, 0x814, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 3.67032628s ago: executing program 3 (id=3019): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) read$snddsp(r0, &(0x7f0000000080)=""/191, 0xbf) (async, rerun: 64) write$P9_RWSTAT(r0, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001180)={r1, 0x8}) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000002180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x27f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x10, 0xb8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x797}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x37, 0xfe}}}}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x250, 0x8, 0x8, 0x9, 0x10, 0x6}, 0x5, &(0x7f0000002200)={0x5, 0xf, 0x5}, 0x4, [{0x60, &(0x7f0000002240)=@string={0x60, 0x3, "8accab3f45b439d28efcf0e174acb0320e052ddf0e37a7bd114e6dd92fe9916aba1c8cc754a3d07f98006a215fa25a4577705eb40de5af493e3bd68170467cd761e59ecd9314056092891f6f54356dc480fdf21bc9a40f73ec5aee3e4a13"}}, {0xcf, &(0x7f00000022c0)=@string={0xcf, 0x3, "a53d81a6e82502241d89f4d807d526aef58d42f217ce015869145ca710a8775ff55da93d867348b09838adbe85bf02439a74b3f2a34c266eef21d04a80ef82b97458329b81f5fdb652c0d6768070f07eb3e490698b14a3090e279d7c0b7433fb82da5031f960e6404d5f79efc8a608018c5f538b1aa34aa8c3b0154025344c9bf0aa9decde510cc65b1f2fc37b3b1922a9280f1f120b8bd5b9d47ab3b4bc91f6fd8c59cf88c067d92ee141562c5257ea13f78725415c859e7a2045681a5ee5e030456da9d3f829b8e657601674"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4}}, {0x4, &(0x7f0000002400)=@lang_id={0x4}}]}) (async) write$vhost_msg(r0, &(0x7f0000002600)={0x1, {&(0x7f00000024c0)=""/227, 0xe3, &(0x7f00000025c0)=""/26, 0x2, 0x4}}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002680)={'batadv0\x00'}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000026c0)={0x5, 0x0, 0x3, 0x0, 0x1, [0x2, 0xf023, 0x6, 0x4d0]}) (async) r2 = openat$cgroup_ro(r0, &(0x7f0000002700)='cgroup.stat\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000002740)) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000002780), 0x2, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000029c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002980)={&(0x7f0000002800)={0x144, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb583}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) (async) mount$bind(&(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80), 0x290041, 0x0) (async) r3 = accept4$netrom(r0, &(0x7f0000002ac0)={{0x3, @null}, [@remote, @rose, @null, @default, @null, @bcast, @default, @bcast]}, &(0x7f0000002b40)=0x48, 0xc0800) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000002b80)=0x910, &(0x7f0000002bc0)=0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000002c00), 0x10, 0x10300) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000002c40)=0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000002cc0)={&(0x7f0000002c80)=[0x0, 0x0, 0x0], 0x3}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002d00)=[0x0, 0x0]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002d80)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000002e40)={r5, r6, r7, 0x0, 0x0, 0x3, &(0x7f0000002e00)=[0x0, 0x0, 0x0]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000002f80)={&(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002f40)=[0x0, 0x0], 0x8, 0xa, 0x6, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000030c0)={&(0x7f0000002fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003000)=[0x0, 0x0, 0x0], &(0x7f0000003040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x3, 0x6, 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000003200)={&(0x7f0000003100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003180)=[0x0], &(0x7f00000031c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000003280)={0x1, 0x0, &(0x7f0000003240)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000033c0)={&(0x7f00000032c0)=[0x0], &(0x7f0000003300)=[0x0, 0x0], &(0x7f0000003340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x7, 0x8}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000003500)={&(0x7f0000003400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000034c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000003600)={&(0x7f0000003540)=[r9, r10, r11, r12, r13, r14], 0x6, 0x0, r8, 0x3, 0xffffffd0, 0x5, 0xffff7ace, {0x29f8, 0xfe53, 0x7, 0x5, 0x200, 0x0, 0x6, 0x5a, 0x6, 0xf70, 0x9, 0x10, 0x9, 0x0, "21a53091482d1796a37740094f65261d82186e829e8c0816076b4bdccea87207"}}) 3.669095178s ago: executing program 3 (id=3020): syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x9, 0xb2, {0xb2, 0x2, "bf82ad5553067f278d925c0a180658893d744156c2cf2e0ff3e71963431d6268a75dec4a5eb1cd0ffbab1ed470210492f2614c8b15df753e346b06841111d30c168adbba35b769d1832fd2fa7ab1b401dd3bd1196ce951615c69ac0b25d8a7da35d98b5ce59454384b5517dd9b86b7833f7c59db48d96ea237be7d4e7509db8da065b9a767841d8c2c7fbdc890a0e286137b0f9ffc7164e33582d84dcde9905f1a900730824c00033edea639844efa21"}}, &(0x7f0000000180)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "17778cb21040174a276702baf6c06828b85ea2812bab74abdb7087482bdfdb7826a4a44baba040f6e031e56b2026b957aa1ff1155c864ceca68fe8419ccf0ea710dc326475ec041f9bfc03b5192e1d9aea3cf8e1ba45307e1f1df404c07ecdc088d70a2a11f9eb2b3d779509d14d0ad170ace6e19a06a0c62de3e30101278feb041d1d29d002ed3d4628248edd928c141831a3374470da2eaa2a01c729014c6ca126c8f0c05d332caa8f33e811540b327e2a222d287be9a10934f37787"}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000100)={0x20, 0xc, 0x26, "c7fdc6dd9abe8fa8aeaf0315d8d16958a171ea7d000332a6b3b64304842cfb84c3db486fa193"}, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000dabeffff00"}}) 3.011083127s ago: executing program 3 (id=3021): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000000086ff000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.855695818s ago: executing program 3 (id=3022): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1107}, {r6, 0x1400}, {0xffffffffffffffff, 0x1f3}], 0x20000000000000e0, 0x41) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0xfffffffffffffffd, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffdf9]}, 0x0, 0x0, 0x8) sendmmsg$inet(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000b00)="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", 0x24c}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5c", 0x58}, {&(0x7f0000000180)="217d2556de2d741fc8afe76da4a437b50e0a523c0871b29602720c35f2d4dc8278dbd6fd7dbd", 0x26}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="a09d13da71b91ecc1784906c00d3b3c0a67733c48975debe3cab56ad5347c867a8499d3c292948e86c9dd4163827f8180100872a232fe336ce7b73e13922a5a5515b15a0f9ff8342fe5578bcc64d9289d7cc64ba54c6b7cc8c1815908d77e81bd531f3afb5e435995f757d28eb4db0c2f40fd8b416467dd4ffcb9661512debbc202bf712edce295bab70d8cda77edc89cad63d666211370cfe9f0f78d8f6d9d23d9111d0ac054c59472880f9f80a3f546be766e36cdf37dcc9bb3525941b41c6129a082989520fc3a147c2e150ae28ab624f9789803d43349982f18170cf6e1e4235f6f203bba9f2c371f2ba2dc0fe764a7649390ca90bf3e2a96fdb4cf6486dd15b262635b5616353e7897684cd02ce8052c489c7deaf12788e2c68c01ac1acae914b05a5d6e2", @ANYRES16=r10, @ANYBLOB="010000000000fddbdf2507000000080001004d00000008000300", @ANYRES32=r11, @ANYBLOB="0c00990051ffffff7c000000140004006e69637666300000000000000000000008000500060000001c00e70019dcbe94732ad6730651d6fdab2bd56e3ed1000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf250ad800800c0002"], 0x114}], 0x1}, 0x0) 2.763050954s ago: executing program 3 (id=3023): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) syz_usb_connect(0x3, 0x73, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0x0) 2.542979166s ago: executing program 2 (id=3024): syz_usb_connect(0x3, 0x73, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) r0 = fsopen(&(0x7f0000000000)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1fffffffffffffd, 0x0, 0x3, 0x0) socket$inet(0x2, 0x1, 0x2b3f1) 1.640005689s ago: executing program 4 (id=3025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfe, 0x85, 0x71, 0x8, 0xb48, 0x3007, 0x4f64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x23, 0x52, 0x26}}]}}]}}, 0x0) 1.165133555s ago: executing program 2 (id=3026): r0 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x7, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000002b80)={'geneve1\x00', @local}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000c40)={0xf, 0x1, 0x0, "7deb91d437e2dd6fc1432eea703c0bf501ac5a36ff3c7829c2779640450064eb", 0x38303553}) r2 = signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x800) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$sg(&(0x7f0000000100), 0x80, 0x628882) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x7, 0x9, 0x7, 0x0, 0x2, "ca8b0c7c7e31382a92cfa3e2d5ae9cbba8539b"}) 970.933908ms ago: executing program 2 (id=3027): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x1}) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r7, &(0x7f0000000000), 0x12) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000300)={0x8, r6}) r8 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000180)={0x0, 0x0, 0xfffffff8}) (async, rerun: 64) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000180081054e81f782db0cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5b277470703152b414f872766247a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x800) 879.181517ms ago: executing program 1 (id=3028): request_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x14, r1, 0x300, 0x0, 0x25dfdbfd, {0x23}}, 0x14}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201810000000040580414500902240001000050070904000002038f0f4a776eaa00010009210101000122050009058103ff030c0200000000000000"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x6, 0x2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x0, 0x7, 0x9, 0x2}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xf9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000040)={0xff, 0x10}, 0x2) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r5, 0x8b32, &(0x7f0000000040)) syz_usb_control_io(r2, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/28, 0x1c}], 0x1, &(0x7f0000000840)=""/4096, 0x1000}, 0x43) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e070039ec072200f4000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 750.793444ms ago: executing program 2 (id=3029): syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x9, 0xb2, {0xb2, 0x2, "bf82ad5553067f278d925c0a180658893d744156c2cf2e0ff3e71963431d6268a75dec4a5eb1cd0ffbab1ed470210492f2614c8b15df753e346b06841111d30c168adbba35b769d1832fd2fa7ab1b401dd3bd1196ce951615c69ac0b25d8a7da35d98b5ce59454384b5517dd9b86b7833f7c59db48d96ea237be7d4e7509db8da065b9a767841d8c2c7fbdc890a0e286137b0f9ffc7164e33582d84dcde9905f1a900730824c00033edea639844efa21"}}, &(0x7f0000000180)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "17778cb21040174a276702baf6c06828b85ea2812bab74abdb7087482bdfdb7826a4a44baba040f6e031e56b2026b957aa1ff1155c864ceca68fe8419ccf0ea710dc326475ec041f9bfc03b5192e1d9aea3cf8e1ba45307e1f1df404c07ecdc088d70a2a11f9eb2b3d779509d14d0ad170ace6e19a06a0c62de3e30101278feb041d1d29d002ed3d4628248edd928c141831a3374470da2eaa2a01c729014c6ca126c8f0c05d332caa8f33e811540b327e2a222d287be9a10934f37787"}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000100)={0x20, 0xc, 0x26, "c7fdc6dd9abe8fa8aeaf0315d8d16958a171ea7d000332a6b3b64304842cfb84c3db486fa193"}, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000dabeffff00"}}) 258.258945ms ago: executing program 4 (id=3030): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000000088ff000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 136.187511ms ago: executing program 2 (id=3031): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="810cac7d486dae6ca0", 0x9}], 0x1, 0x0, 0xf}], 0x1, 0x4004004) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES32, @ANYBLOB="010009bd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="0600cd00000000005200330080200900ffffffffffff0802110000005050505050505f0004000000000000006400001001000301"], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) read(r2, &(0x7f00000000c0)=""/177, 0xb1) syz_clone(0x1100011, 0x0, 0x0, 0x0, 0x0, 0x0) 42.794124ms ago: executing program 4 (id=3032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250118000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 0s ago: executing program 4 (id=3033): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x4d, 0x0, "9850aefd374fa3fc96567405ccb772853e8109351ec3c12b48638e2f762b40660780cb75ff882832d6a1c6c20a4cb282ea619fda84db39d95685779f5e954229f79180bbeeb9939d81af21c28840e280"}, 0xd8) (async) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000006d0001", @ANYRESHEX], 0x28}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 00000000002 [ 694.155953][T15126] R13: 00007f5aec7e6038 R14: 00007f5aec7e5fa0 R15: 00007fff080e6738 [ 694.155978][T15126] [ 696.683091][T15142] loop6: detected capacity change from 0 to 7 [ 696.690354][T15142] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 696.695823][T15142] loop6: p1 start 3644185255 is beyond EOD, truncated [ 696.702907][T15142] loop6: p2 size 1310720 extends beyond EOD, truncated [ 696.711893][T15142] loop6: p3 start 352518144 is beyond EOD, truncated [ 696.718735][T15142] loop6: p4 start 1635021614 is beyond EOD, truncated [ 696.725966][T15142] loop6: p5 start 50331648 is beyond EOD, truncated [ 696.760213][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 696.832795][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.839349][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.381694][T15161] openvswitch: netlink: Flow actions attr not present in new flow. [ 700.028557][T15179] loop6: detected capacity change from 0 to 7 [ 700.048708][T15179] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 700.058285][T15179] loop6: p1 start 3644185255 is beyond EOD, truncated [ 700.072384][T15179] loop6: p2 size 1310720 extends beyond EOD, truncated [ 700.090917][T15179] loop6: p3 start 352518144 is beyond EOD, truncated [ 700.097690][T15179] loop6: p4 start 1635021614 is beyond EOD, truncated [ 700.104801][T15179] loop6: p5 start 50331648 is beyond EOD, truncated [ 700.148675][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 700.580489][T15185] netlink: 'syz.2.2731': attribute type 10 has an invalid length. [ 700.588543][T15185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2731'. [ 700.607876][T15185] team0: Port device geneve0 added [ 700.665906][T15187] FAULT_INJECTION: forcing a failure. [ 700.665906][T15187] name failslab, interval 1, probability 0, space 0, times 0 [ 700.684439][T15187] CPU: 0 UID: 0 PID: 15187 Comm: syz.2.2732 Not tainted syzkaller #0 PREEMPT(full) [ 700.684469][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 700.684483][T15187] Call Trace: [ 700.684492][T15187] [ 700.684502][T15187] dump_stack_lvl+0x189/0x250 [ 700.684542][T15187] ? __pfx____ratelimit+0x10/0x10 [ 700.684567][T15187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.684602][T15187] ? __pfx__printk+0x10/0x10 [ 700.684634][T15187] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 700.684677][T15187] should_fail_ex+0x414/0x560 [ 700.684716][T15187] should_failslab+0xa8/0x100 [ 700.684742][T15187] kmem_cache_alloc_noprof+0x74/0x6e0 [ 700.684775][T15187] ? skb_clone+0x212/0x3a0 [ 700.684808][T15187] skb_clone+0x212/0x3a0 [ 700.684839][T15187] __netlink_deliver_tap+0x424/0x8b0 [ 700.684880][T15187] ? netlink_deliver_tap+0x2e/0x1b0 [ 700.684906][T15187] netlink_deliver_tap+0x19c/0x1b0 [ 700.684932][T15187] __netlink_sendskb+0x47/0x90 [ 700.684955][T15187] netlink_dump+0xa84/0xe90 [ 700.684993][T15187] ? __pfx_netlink_dump+0x10/0x10 [ 700.685045][T15187] netlink_recvmsg+0x676/0xa30 [ 700.685092][T15187] ? __pfx_netlink_recvmsg+0x10/0x10 [ 700.685116][T15187] ? irqentry_exit+0x74/0x90 [ 700.685141][T15187] ? exc_page_fault+0xab/0x100 [ 700.685178][T15187] ? __pfx_netlink_recvmsg+0x10/0x10 [ 700.685206][T15187] sock_recvmsg_nosec+0x186/0x1c0 [ 700.685246][T15187] ____sys_recvmsg+0x3aa/0x460 [ 700.685285][T15187] ? __pfx_____sys_recvmsg+0x10/0x10 [ 700.685333][T15187] ? import_iovec+0x74/0xa0 [ 700.685365][T15187] ___sys_recvmsg+0x1b5/0x510 [ 700.685401][T15187] ? __pfx____sys_recvmsg+0x10/0x10 [ 700.685465][T15187] ? __might_fault+0xb0/0x130 [ 700.685503][T15187] do_recvmmsg+0x307/0x770 [ 700.685542][T15187] ? __pfx_do_recvmmsg+0x10/0x10 [ 700.685587][T15187] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 700.685637][T15187] __x64_sys_recvmmsg+0x190/0x240 [ 700.685671][T15187] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 700.685707][T15187] ? do_syscall_64+0xbe/0xfa0 [ 700.685738][T15187] do_syscall_64+0xfa/0xfa0 [ 700.685770][T15187] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.685795][T15187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.685817][T15187] ? clear_bhb_loop+0x60/0xb0 [ 700.685844][T15187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.685865][T15187] RIP: 0033:0x7fd26998eec9 [ 700.685885][T15187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.685905][T15187] RSP: 002b:00007fd26a8e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 700.685930][T15187] RAX: ffffffffffffffda RBX: 00007fd269be5fa0 RCX: 00007fd26998eec9 [ 700.685947][T15187] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 700.685962][T15187] RBP: 00007fd26a8e4090 R08: 0000000000000000 R09: 0000000000000000 [ 700.685976][T15187] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 700.685990][T15187] R13: 00007fd269be6038 R14: 00007fd269be5fa0 R15: 00007ffdca799d28 [ 700.686028][T15187] [ 701.097269][T15192] overlayfs: missing 'lowerdir' [ 701.127027][T15192] sctp: [Deprecated]: syz.2.2734 (pid 15192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 701.127027][T15192] Use struct sctp_sack_info instead [ 701.196384][T15193] 9pnet_fd: Insufficient options for proto=fd [ 701.659189][T15208] usb usb8: usbfs: process 15208 (syz.3.2739) did not claim interface 0 before use [ 701.751306][T15210] loop6: detected capacity change from 0 to 2560 [ 701.759281][T13664] buffer_io_error: 5 callbacks suppressed [ 701.759299][T13664] Buffer I/O error on dev loop6, logical block 0, async page read [ 701.773173][T13664] Buffer I/O error on dev loop6, logical block 0, async page read [ 701.781545][T13664] Buffer I/O error on dev loop6, logical block 0, async page read [ 701.789568][T13664] Buffer I/O error on dev loop6, logical block 0, async page read [ 701.797548][T13664] Buffer I/O error on dev loop6, logical block 0, async page read [ 701.806468][T13664] Buffer I/O error on dev loop6, logical block 0, async page read [ 701.815037][T13664] Buffer I/O error on dev loop6, logical block 0, async page read [ 701.824681][T13664] Buffer I/O error on dev loop6, logical block 0, async page read [ 701.832884][T13664] ldm_validate_partition_table(): Disk read failed. [ 701.839863][T13664] Buffer I/O error on dev loop6, logical block 0, async page read [ 701.849893][T13664] Buffer I/O error on dev loop6, logical block 0, async page read [ 701.858263][T13664] Dev loop6: unable to read RDB block 0 [ 701.864413][T13664] loop6: unable to read partition table [ 701.871854][T15210] ldm_validate_partition_table(): Disk read failed. [ 701.898270][T15210] Dev loop6: unable to read RDB block 0 [ 701.904966][T15210] loop6: unable to read partition table [ 701.928572][T15210] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 702.046794][T15213] loop6: detected capacity change from 0 to 7 [ 702.054547][T15213] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 702.065956][T15213] loop6: p1 start 3644185255 is beyond EOD, truncated [ 702.075502][T15213] loop6: p2 size 1310720 extends beyond EOD, truncated [ 702.085237][T15213] loop6: p3 start 352518144 is beyond EOD, truncated [ 702.092123][T15213] loop6: p4 start 1635021614 is beyond EOD, truncated [ 702.098940][T15213] loop6: p5 start 50331648 is beyond EOD, truncated [ 702.143053][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 702.696672][T15215] FAULT_INJECTION: forcing a failure. [ 702.696672][T15215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.709952][T15215] CPU: 1 UID: 0 PID: 15215 Comm: syz.3.2742 Not tainted syzkaller #0 PREEMPT(full) [ 702.709983][T15215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 702.709998][T15215] Call Trace: [ 702.710009][T15215] [ 702.710018][T15215] dump_stack_lvl+0x189/0x250 [ 702.710047][T15215] ? __pfx____ratelimit+0x10/0x10 [ 702.710066][T15215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.710090][T15215] ? __pfx__printk+0x10/0x10 [ 702.710112][T15215] ? __might_fault+0xb0/0x130 [ 702.710144][T15215] should_fail_ex+0x414/0x560 [ 702.710173][T15215] _copy_from_user+0x2d/0xb0 [ 702.710195][T15215] ___sys_recvmsg+0x12e/0x510 [ 702.710222][T15215] ? __pfx____sys_recvmsg+0x10/0x10 [ 702.710265][T15215] ? __might_fault+0xb0/0x130 [ 702.710291][T15215] do_recvmmsg+0x307/0x770 [ 702.710318][T15215] ? __pfx_do_recvmmsg+0x10/0x10 [ 702.710347][T15215] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 702.710381][T15215] __x64_sys_recvmmsg+0x190/0x240 [ 702.710405][T15215] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 702.710429][T15215] ? do_syscall_64+0xbe/0xfa0 [ 702.710450][T15215] do_syscall_64+0xfa/0xfa0 [ 702.710468][T15215] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.710486][T15215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.710502][T15215] ? clear_bhb_loop+0x60/0xb0 [ 702.710521][T15215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.710537][T15215] RIP: 0033:0x7f5aec58eec9 [ 702.710552][T15215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.710566][T15215] RSP: 002b:00007f5aed419038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 702.710583][T15215] RAX: ffffffffffffffda RBX: 00007f5aec7e5fa0 RCX: 00007f5aec58eec9 [ 702.710595][T15215] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 702.710606][T15215] RBP: 00007f5aed419090 R08: 0000000000000000 R09: 0000000000000000 [ 702.710617][T15215] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 702.710626][T15215] R13: 00007f5aec7e6038 R14: 00007f5aec7e5fa0 R15: 00007fff080e6738 [ 702.710651][T15215] [ 704.863504][T15207] block nbd2: shutting down sockets [ 705.317744][ T5980] libceph: connect (1)[c::]:6789 error -101 [ 705.325445][ T5980] libceph: mon0 (1)[c::]:6789 connect error [ 705.366593][T15239] ceph: No mds server is up or the cluster is laggy [ 706.208860][T15244] loop6: detected capacity change from 0 to 7 [ 706.216394][T15244] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 706.222039][T15244] loop6: p1 start 3644185255 is beyond EOD, truncated [ 706.231276][T15244] loop6: p2 size 1310720 extends beyond EOD, truncated [ 706.240307][T15244] loop6: p3 start 352518144 is beyond EOD, truncated [ 706.247339][T15244] loop6: p4 start 1635021614 is beyond EOD, truncated [ 706.254452][T15244] loop6: p5 start 50331648 is beyond EOD, truncated [ 706.288831][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 706.927639][T15253] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 710.265519][T15270] loop6: detected capacity change from 0 to 7 [ 710.273323][T15270] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 710.278771][T15270] loop6: p1 start 3644185255 is beyond EOD, truncated [ 710.285681][T15270] loop6: p2 size 1310720 extends beyond EOD, truncated [ 710.294318][T15270] loop6: p3 start 352518144 is beyond EOD, truncated [ 710.301042][T15270] loop6: p4 start 1635021614 is beyond EOD, truncated [ 710.308023][T15270] loop6: p5 start 50331648 is beyond EOD, truncated [ 710.340612][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 711.097991][T15276] FAULT_INJECTION: forcing a failure. [ 711.097991][T15276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.112643][T15276] CPU: 0 UID: 0 PID: 15276 Comm: syz.4.2764 Not tainted syzkaller #0 PREEMPT(full) [ 711.112672][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 711.112682][T15276] Call Trace: [ 711.112688][T15276] [ 711.112695][T15276] dump_stack_lvl+0x189/0x250 [ 711.112725][T15276] ? __pfx____ratelimit+0x10/0x10 [ 711.112744][T15276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.112769][T15276] ? __pfx__printk+0x10/0x10 [ 711.112791][T15276] ? __might_fault+0xb0/0x130 [ 711.112823][T15276] should_fail_ex+0x414/0x560 [ 711.112851][T15276] _copy_from_user+0x2d/0xb0 [ 711.112874][T15276] ___sys_recvmsg+0x12e/0x510 [ 711.112900][T15276] ? __pfx____sys_recvmsg+0x10/0x10 [ 711.112944][T15276] ? __might_fault+0xb0/0x130 [ 711.112970][T15276] do_recvmmsg+0x307/0x770 [ 711.112997][T15276] ? __pfx_do_recvmmsg+0x10/0x10 [ 711.113027][T15276] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 711.113061][T15276] __x64_sys_recvmmsg+0x190/0x240 [ 711.113085][T15276] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 711.113109][T15276] ? do_syscall_64+0xbe/0xfa0 [ 711.113131][T15276] do_syscall_64+0xfa/0xfa0 [ 711.113149][T15276] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.113168][T15276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.113183][T15276] ? clear_bhb_loop+0x60/0xb0 [ 711.113202][T15276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.113218][T15276] RIP: 0033:0x7fe60a78eec9 [ 711.113233][T15276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.113247][T15276] RSP: 002b:00007fe60b545038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 711.113264][T15276] RAX: ffffffffffffffda RBX: 00007fe60a9e5fa0 RCX: 00007fe60a78eec9 [ 711.113275][T15276] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 711.113286][T15276] RBP: 00007fe60b545090 R08: 0000000000000000 R09: 0000000000000000 [ 711.113296][T15276] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 711.113305][T15276] R13: 00007fe60a9e6038 R14: 00007fe60a9e5fa0 R15: 00007ffc33a46b58 [ 711.113330][T15276] [ 711.996287][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2768'. [ 713.455562][T15289] netlink: 'syz.3.2769': attribute type 3 has an invalid length. [ 713.463448][T15289] netlink: 'syz.3.2769': attribute type 4 has an invalid length. [ 713.471343][T15289] netlink: 'syz.3.2769': attribute type 5 has an invalid length. [ 713.479148][T15289] netlink: 'syz.3.2769': attribute type 6 has an invalid length. [ 713.486893][T15289] netlink: 'syz.3.2769': attribute type 7 has an invalid length. [ 713.496898][T15289] netlink: 'syz.3.2769': attribute type 7 has an invalid length. [ 713.504879][T15289] netlink: 13014 bytes leftover after parsing attributes in process `syz.3.2769'. [ 713.556613][T15292] loop6: detected capacity change from 0 to 7 [ 713.564072][T15292] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 713.569497][T15292] loop6: p1 start 3644185255 is beyond EOD, truncated [ 713.576702][T15292] loop6: p2 size 1310720 extends beyond EOD, truncated [ 713.586088][T15292] loop6: p3 start 352518144 is beyond EOD, truncated [ 713.593272][T15292] loop6: p4 start 1635021614 is beyond EOD, truncated [ 713.600583][T15292] loop6: p5 start 50331648 is beyond EOD, truncated [ 713.634152][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 714.199849][T15294] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2771'. [ 714.246564][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'. [ 714.334759][T15304] FAULT_INJECTION: forcing a failure. [ 714.334759][T15304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.348008][T15304] CPU: 0 UID: 0 PID: 15304 Comm: syz.1.2773 Not tainted syzkaller #0 PREEMPT(full) [ 714.348035][T15304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 714.348047][T15304] Call Trace: [ 714.348056][T15304] [ 714.348064][T15304] dump_stack_lvl+0x189/0x250 [ 714.348096][T15304] ? __pfx____ratelimit+0x10/0x10 [ 714.348117][T15304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.348145][T15304] ? __pfx__printk+0x10/0x10 [ 714.348170][T15304] ? __might_fault+0xb0/0x130 [ 714.348205][T15304] should_fail_ex+0x414/0x560 [ 714.348237][T15304] _copy_from_user+0x2d/0xb0 [ 714.348262][T15304] ___sys_recvmsg+0x12e/0x510 [ 714.348293][T15304] ? __pfx____sys_recvmsg+0x10/0x10 [ 714.348343][T15304] ? __might_fault+0xb0/0x130 [ 714.348373][T15304] do_recvmmsg+0x307/0x770 [ 714.348404][T15304] ? __pfx_do_recvmmsg+0x10/0x10 [ 714.348438][T15304] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 714.348475][T15304] __x64_sys_recvmmsg+0x190/0x240 [ 714.348502][T15304] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 714.348530][T15304] ? do_syscall_64+0xbe/0xfa0 [ 714.348562][T15304] do_syscall_64+0xfa/0xfa0 [ 714.348582][T15304] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.348603][T15304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.348621][T15304] ? clear_bhb_loop+0x60/0xb0 [ 714.348642][T15304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.348660][T15304] RIP: 0033:0x7f92c918eec9 [ 714.348676][T15304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.348692][T15304] RSP: 002b:00007f92c9fdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 714.348711][T15304] RAX: ffffffffffffffda RBX: 00007f92c93e5fa0 RCX: 00007f92c918eec9 [ 714.348725][T15304] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 714.348736][T15304] RBP: 00007f92c9fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 714.348748][T15304] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 714.348759][T15304] R13: 00007f92c93e6038 R14: 00007f92c93e5fa0 R15: 00007ffee27aa4f8 [ 714.348787][T15304] [ 715.243520][T15322] loop6: detected capacity change from 0 to 7 [ 715.250662][T15322] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 715.257221][T15322] loop6: p1 start 3644185255 is beyond EOD, truncated [ 715.265492][T15322] loop6: p2 size 1310720 extends beyond EOD, truncated [ 715.273706][T15322] loop6: p3 start 352518144 is beyond EOD, truncated [ 715.280619][T15322] loop6: p4 start 1635021614 is beyond EOD, truncated [ 715.289988][T15322] loop6: p5 start 50331648 is beyond EOD, truncated [ 715.322994][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 718.099748][T15329] FAULT_INJECTION: forcing a failure. [ 718.099748][T15329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.113738][T15329] CPU: 1 UID: 0 PID: 15329 Comm: syz.1.2782 Not tainted syzkaller #0 PREEMPT(full) [ 718.113767][T15329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 718.113781][T15329] Call Trace: [ 718.113792][T15329] [ 718.113801][T15329] dump_stack_lvl+0x189/0x250 [ 718.113840][T15329] ? __pfx____ratelimit+0x10/0x10 [ 718.113866][T15329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.113900][T15329] ? __pfx__printk+0x10/0x10 [ 718.113931][T15329] ? __might_fault+0xb0/0x130 [ 718.113977][T15329] should_fail_ex+0x414/0x560 [ 718.114016][T15329] _copy_from_user+0x2d/0xb0 [ 718.114048][T15329] ___sys_recvmsg+0x12e/0x510 [ 718.114085][T15329] ? __pfx____sys_recvmsg+0x10/0x10 [ 718.114160][T15329] ? __might_fault+0xb0/0x130 [ 718.114196][T15329] do_recvmmsg+0x307/0x770 [ 718.114235][T15329] ? __pfx_do_recvmmsg+0x10/0x10 [ 718.114278][T15329] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 718.114326][T15329] __x64_sys_recvmmsg+0x190/0x240 [ 718.114360][T15329] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 718.114395][T15329] ? do_syscall_64+0xbe/0xfa0 [ 718.114426][T15329] do_syscall_64+0xfa/0xfa0 [ 718.114451][T15329] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.114476][T15329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.114499][T15329] ? clear_bhb_loop+0x60/0xb0 [ 718.114527][T15329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.114548][T15329] RIP: 0033:0x7f92c918eec9 [ 718.114569][T15329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.114589][T15329] RSP: 002b:00007f92c9fdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 718.114612][T15329] RAX: ffffffffffffffda RBX: 00007f92c93e5fa0 RCX: 00007f92c918eec9 [ 718.114629][T15329] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 718.114644][T15329] RBP: 00007f92c9fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 718.114658][T15329] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 718.114672][T15329] R13: 00007f92c93e6038 R14: 00007f92c93e5fa0 R15: 00007ffee27aa4f8 [ 718.114706][T15329] [ 720.701529][T15346] delete_channel: no stack [ 720.706075][T15346] delete_channel: no stack [ 720.714589][T15346] delete_channel: no stack [ 720.720208][T15346] delete_channel: no stack [ 720.810656][T15350] loop6: detected capacity change from 0 to 7 [ 720.818654][T13664] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 720.824114][T13664] loop6: p1 start 3644185255 is beyond EOD, truncated [ 720.831068][T13664] loop6: p2 size 1310720 extends beyond EOD, truncated [ 720.841652][T13664] loop6: p3 start 352518144 is beyond EOD, truncated [ 720.849133][T13664] loop6: p4 start 1635021614 is beyond EOD, truncated [ 720.856003][T13664] loop6: p5 start 50331648 is beyond EOD, truncated [ 720.868365][T15350] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 720.874585][T15350] loop6: p1 start 3644185255 is beyond EOD, truncated [ 720.881705][T15350] loop6: p2 size 1310720 extends beyond EOD, truncated [ 720.890636][T15350] loop6: p3 start 352518144 is beyond EOD, truncated [ 720.897353][T15350] loop6: p4 start 1635021614 is beyond EOD, truncated [ 720.904260][T15350] loop6: p5 start 50331648 is beyond EOD, truncated [ 720.932344][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 720.956872][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 721.677367][T15359] FAULT_INJECTION: forcing a failure. [ 721.677367][T15359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.691742][T15359] CPU: 0 UID: 0 PID: 15359 Comm: syz.1.2792 Not tainted syzkaller #0 PREEMPT(full) [ 721.691773][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 721.691788][T15359] Call Trace: [ 721.691797][T15359] [ 721.691807][T15359] dump_stack_lvl+0x189/0x250 [ 721.691846][T15359] ? __pfx____ratelimit+0x10/0x10 [ 721.691872][T15359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.691906][T15359] ? __pfx__printk+0x10/0x10 [ 721.691937][T15359] ? __might_fault+0xb0/0x130 [ 721.691995][T15359] should_fail_ex+0x414/0x560 [ 721.692033][T15359] _copy_from_user+0x2d/0xb0 [ 721.692064][T15359] ___sys_recvmsg+0x12e/0x510 [ 721.692099][T15359] ? __pfx____sys_recvmsg+0x10/0x10 [ 721.692159][T15359] ? __might_fault+0xb0/0x130 [ 721.692194][T15359] do_recvmmsg+0x307/0x770 [ 721.692232][T15359] ? __pfx_do_recvmmsg+0x10/0x10 [ 721.692274][T15359] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 721.692321][T15359] __x64_sys_recvmmsg+0x190/0x240 [ 721.692353][T15359] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 721.692387][T15359] ? do_syscall_64+0xbe/0xfa0 [ 721.692417][T15359] do_syscall_64+0xfa/0xfa0 [ 721.692444][T15359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.692465][T15359] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 721.692495][T15359] ? clear_bhb_loop+0x60/0xb0 [ 721.692522][T15359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.692562][T15359] RIP: 0033:0x7f92c918eec9 [ 721.692581][T15359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.692601][T15359] RSP: 002b:00007f92c9fdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 721.692626][T15359] RAX: ffffffffffffffda RBX: 00007f92c93e5fa0 RCX: 00007f92c918eec9 [ 721.692643][T15359] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 721.692670][T15359] RBP: 00007f92c9fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 721.692684][T15359] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 721.692698][T15359] R13: 00007f92c93e6038 R14: 00007f92c93e5fa0 R15: 00007ffee27aa4f8 [ 721.692732][T15359] [ 722.562336][T15379] loop6: detected capacity change from 0 to 7 [ 722.570571][T13666] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 722.576085][T13666] loop6: p1 start 3644185255 is beyond EOD, truncated [ 722.601603][T13666] loop6: p2 size 1310720 extends beyond EOD, truncated [ 722.611418][T13666] loop6: p3 start 352518144 is beyond EOD, truncated [ 722.618408][T13666] loop6: p4 start 1635021614 is beyond EOD, truncated [ 722.626570][T13666] loop6: p5 start 50331648 is beyond EOD, truncated [ 722.640934][T15379] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 722.648022][T15379] loop6: p1 start 3644185255 is beyond EOD, truncated [ 722.655350][T15379] loop6: p2 size 1310720 extends beyond EOD, truncated [ 722.665192][T15379] loop6: p3 start 352518144 is beyond EOD, truncated [ 722.672005][T15379] loop6: p4 start 1635021614 is beyond EOD, truncated [ 722.679620][T15379] loop6: p5 start 50331648 is beyond EOD, truncated [ 722.720224][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 722.753339][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 724.792283][T15383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.239611][T15387] FAULT_INJECTION: forcing a failure. [ 725.239611][T15387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.253728][T15387] CPU: 1 UID: 0 PID: 15387 Comm: syz.4.2802 Not tainted syzkaller #0 PREEMPT(full) [ 725.253759][T15387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 725.253774][T15387] Call Trace: [ 725.253784][T15387] [ 725.253793][T15387] dump_stack_lvl+0x189/0x250 [ 725.253834][T15387] ? __pfx____ratelimit+0x10/0x10 [ 725.253860][T15387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.253895][T15387] ? __pfx__printk+0x10/0x10 [ 725.253926][T15387] ? __might_fault+0xb0/0x130 [ 725.253971][T15387] should_fail_ex+0x414/0x560 [ 725.254010][T15387] _copy_from_user+0x2d/0xb0 [ 725.254042][T15387] ___sys_recvmsg+0x12e/0x510 [ 725.254113][T15387] ? __pfx____sys_recvmsg+0x10/0x10 [ 725.254174][T15387] ? __might_fault+0xb0/0x130 [ 725.254210][T15387] do_recvmmsg+0x307/0x770 [ 725.254249][T15387] ? __pfx_do_recvmmsg+0x10/0x10 [ 725.254281][T15387] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 725.254314][T15387] __x64_sys_recvmmsg+0x190/0x240 [ 725.254338][T15387] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 725.254365][T15387] ? do_syscall_64+0xbe/0xfa0 [ 725.254387][T15387] do_syscall_64+0xfa/0xfa0 [ 725.254404][T15387] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.254423][T15387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.254439][T15387] ? clear_bhb_loop+0x60/0xb0 [ 725.254458][T15387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.254473][T15387] RIP: 0033:0x7fe60a78eec9 [ 725.254488][T15387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.254502][T15387] RSP: 002b:00007fe60b545038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 725.254519][T15387] RAX: ffffffffffffffda RBX: 00007fe60a9e5fa0 RCX: 00007fe60a78eec9 [ 725.254531][T15387] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 725.254541][T15387] RBP: 00007fe60b545090 R08: 0000000000000000 R09: 0000000000000000 [ 725.254551][T15387] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 725.254561][T15387] R13: 00007fe60a9e6038 R14: 00007fe60a9e5fa0 R15: 00007ffc33a46b58 [ 725.254586][T15387] [ 725.838323][T15408] loop6: detected capacity change from 0 to 7 [ 725.846100][T15408] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 725.852290][T15408] loop6: p1 start 3644185255 is beyond EOD, truncated [ 725.859150][T15408] loop6: p2 size 1310720 extends beyond EOD, truncated [ 725.867631][T15408] loop6: p3 start 352518144 is beyond EOD, truncated [ 725.874487][T15408] loop6: p4 start 1635021614 is beyond EOD, truncated [ 725.881393][T15408] loop6: p5 start 50331648 is beyond EOD, truncated [ 725.912791][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 726.529191][T15412] Sensor A: ================= START STATUS ================= [ 726.538801][T15412] Sensor A: Test Pattern: 75% Colorbar [ 726.545299][T15412] Sensor A: Show Information: All [ 726.551877][T15412] Sensor A: Vertical Flip: false [ 726.557368][T15412] Sensor A: Horizontal Flip: false [ 726.562619][T15412] Sensor A: Brightness: 128 [ 726.569434][T15412] Sensor A: Contrast: 128 [ 726.573829][T15412] Sensor A: Hue: 0 [ 726.578064][T15412] Sensor A: Saturation: 128 [ 726.582748][T15412] Sensor A: ================== END STATUS ================== [ 728.046754][T15415] FAULT_INJECTION: forcing a failure. [ 728.046754][T15415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.060091][T15415] CPU: 1 UID: 0 PID: 15415 Comm: syz.3.2811 Not tainted syzkaller #0 PREEMPT(full) [ 728.060120][T15415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 728.060134][T15415] Call Trace: [ 728.060143][T15415] [ 728.060153][T15415] dump_stack_lvl+0x189/0x250 [ 728.060189][T15415] ? __pfx____ratelimit+0x10/0x10 [ 728.060208][T15415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.060232][T15415] ? __pfx__printk+0x10/0x10 [ 728.060254][T15415] ? __might_fault+0xb0/0x130 [ 728.060286][T15415] should_fail_ex+0x414/0x560 [ 728.060315][T15415] _copy_from_user+0x2d/0xb0 [ 728.060338][T15415] ___sys_recvmsg+0x12e/0x510 [ 728.060364][T15415] ? __pfx____sys_recvmsg+0x10/0x10 [ 728.060407][T15415] ? __might_fault+0xb0/0x130 [ 728.060433][T15415] do_recvmmsg+0x307/0x770 [ 728.060460][T15415] ? __pfx_do_recvmmsg+0x10/0x10 [ 728.060490][T15415] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 728.060524][T15415] __x64_sys_recvmmsg+0x190/0x240 [ 728.060548][T15415] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 728.060572][T15415] ? do_syscall_64+0xbe/0xfa0 [ 728.060594][T15415] do_syscall_64+0xfa/0xfa0 [ 728.060612][T15415] ? lockdep_hardirqs_on+0x9c/0x150 [ 728.060631][T15415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.060646][T15415] ? clear_bhb_loop+0x60/0xb0 [ 728.060665][T15415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.060681][T15415] RIP: 0033:0x7f5aec58eec9 [ 728.060695][T15415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.060710][T15415] RSP: 002b:00007f5aed419038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 728.060727][T15415] RAX: ffffffffffffffda RBX: 00007f5aec7e5fa0 RCX: 00007f5aec58eec9 [ 728.060741][T15415] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 728.060752][T15415] RBP: 00007f5aed419090 R08: 0000000000000000 R09: 0000000000000000 [ 728.060762][T15415] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 728.060772][T15415] R13: 00007f5aec7e6038 R14: 00007f5aec7e5fa0 R15: 00007fff080e6738 [ 728.060797][T15415] [ 729.713869][T15432] loop6: detected capacity change from 0 to 7 [ 729.720933][T15432] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 729.727428][T15432] loop6: p1 start 3644185255 is beyond EOD, truncated [ 729.734599][T15432] loop6: p2 size 1310720 extends beyond EOD, truncated [ 729.744942][T15432] loop6: p3 start 352518144 is beyond EOD, truncated [ 729.751771][T15432] loop6: p4 start 1635021614 is beyond EOD, truncated [ 729.759222][T15432] loop6: p5 start 50331648 is beyond EOD, truncated [ 729.821866][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 731.115636][T15441] FAULT_INJECTION: forcing a failure. [ 731.115636][T15441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.128822][T15441] CPU: 0 UID: 0 PID: 15441 Comm: syz.4.2821 Not tainted syzkaller #0 PREEMPT(full) [ 731.128852][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 731.128867][T15441] Call Trace: [ 731.128876][T15441] [ 731.128887][T15441] dump_stack_lvl+0x189/0x250 [ 731.128923][T15441] ? __pfx____ratelimit+0x10/0x10 [ 731.128943][T15441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.128967][T15441] ? __pfx__printk+0x10/0x10 [ 731.128989][T15441] ? __might_fault+0xb0/0x130 [ 731.129021][T15441] should_fail_ex+0x414/0x560 [ 731.129050][T15441] _copy_from_user+0x2d/0xb0 [ 731.129072][T15441] ___sys_recvmsg+0x12e/0x510 [ 731.129099][T15441] ? __pfx____sys_recvmsg+0x10/0x10 [ 731.129142][T15441] ? __might_fault+0xb0/0x130 [ 731.129168][T15441] do_recvmmsg+0x307/0x770 [ 731.129196][T15441] ? __pfx_do_recvmmsg+0x10/0x10 [ 731.129226][T15441] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 731.129259][T15441] __x64_sys_recvmmsg+0x190/0x240 [ 731.129283][T15441] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 731.129307][T15441] ? do_syscall_64+0xbe/0xfa0 [ 731.129329][T15441] do_syscall_64+0xfa/0xfa0 [ 731.129347][T15441] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.129366][T15441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.129381][T15441] ? clear_bhb_loop+0x60/0xb0 [ 731.129400][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.129416][T15441] RIP: 0033:0x7fe60a78eec9 [ 731.129438][T15441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.129452][T15441] RSP: 002b:00007fe60b545038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 731.129469][T15441] RAX: ffffffffffffffda RBX: 00007fe60a9e5fa0 RCX: 00007fe60a78eec9 [ 731.129481][T15441] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 731.129492][T15441] RBP: 00007fe60b545090 R08: 0000000000000000 R09: 0000000000000000 [ 731.129502][T15441] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 731.129512][T15441] R13: 00007fe60a9e6038 R14: 00007fe60a9e5fa0 R15: 00007ffc33a46b58 [ 731.129537][T15441] [ 733.117498][T15457] loop6: detected capacity change from 0 to 7 [ 733.128392][T13664] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 733.134913][T13664] loop6: p1 start 3644185255 is beyond EOD, truncated [ 733.142141][T13664] loop6: p2 size 1310720 extends beyond EOD, truncated [ 733.151703][T13664] loop6: p3 start 352518144 is beyond EOD, truncated [ 733.158676][T13664] loop6: p4 start 1635021614 is beyond EOD, truncated [ 733.165513][T13664] loop6: p5 start 50331648 is beyond EOD, truncated [ 733.174960][T15457] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 733.181367][T15457] loop6: p1 start 3644185255 is beyond EOD, truncated [ 733.188536][T15457] loop6: p2 size 1310720 extends beyond EOD, truncated [ 733.196902][T15457] loop6: p3 start 352518144 is beyond EOD, truncated [ 733.203784][T15457] loop6: p4 start 1635021614 is beyond EOD, truncated [ 733.210916][T15457] loop6: p5 start 50331648 is beyond EOD, truncated [ 733.240262][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 733.266317][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 734.885235][T15463] FAULT_INJECTION: forcing a failure. [ 734.885235][T15463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.899455][T15463] CPU: 0 UID: 0 PID: 15463 Comm: syz.3.2830 Not tainted syzkaller #0 PREEMPT(full) [ 734.899486][T15463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 734.899501][T15463] Call Trace: [ 734.899508][T15463] [ 734.899515][T15463] dump_stack_lvl+0x189/0x250 [ 734.899544][T15463] ? __pfx____ratelimit+0x10/0x10 [ 734.899562][T15463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.899587][T15463] ? __pfx__printk+0x10/0x10 [ 734.899609][T15463] ? __might_fault+0xb0/0x130 [ 734.899641][T15463] should_fail_ex+0x414/0x560 [ 734.899669][T15463] _copy_from_user+0x2d/0xb0 [ 734.899691][T15463] ___sys_recvmsg+0x12e/0x510 [ 734.899718][T15463] ? __pfx____sys_recvmsg+0x10/0x10 [ 734.899761][T15463] ? __might_fault+0xb0/0x130 [ 734.899787][T15463] do_recvmmsg+0x307/0x770 [ 734.899814][T15463] ? __pfx_do_recvmmsg+0x10/0x10 [ 734.899844][T15463] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 734.899878][T15463] __x64_sys_recvmmsg+0x190/0x240 [ 734.899901][T15463] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 734.899926][T15463] ? do_syscall_64+0xbe/0xfa0 [ 734.899948][T15463] do_syscall_64+0xfa/0xfa0 [ 734.899965][T15463] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.899991][T15463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.900007][T15463] ? clear_bhb_loop+0x60/0xb0 [ 734.900026][T15463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.900041][T15463] RIP: 0033:0x7f5aec58eec9 [ 734.900056][T15463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.900070][T15463] RSP: 002b:00007f5aed419038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 734.900087][T15463] RAX: ffffffffffffffda RBX: 00007f5aec7e5fa0 RCX: 00007f5aec58eec9 [ 734.900099][T15463] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 734.900110][T15463] RBP: 00007f5aed419090 R08: 0000000000000000 R09: 0000000000000000 [ 734.900120][T15463] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 734.900130][T15463] R13: 00007f5aec7e6038 R14: 00007f5aec7e5fa0 R15: 00007fff080e6738 [ 734.900154][T15463] [ 736.268490][T15480] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2835'. [ 737.058177][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 737.114531][T15486] loop6: detected capacity change from 0 to 7 [ 737.121682][T15486] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 737.128280][T15486] loop6: p1 start 3644185255 is beyond EOD, truncated [ 737.135255][T15486] loop6: p2 size 1310720 extends beyond EOD, truncated [ 737.146216][T15486] loop6: p3 start 352518144 is beyond EOD, truncated [ 737.152963][T15486] loop6: p4 start 1635021614 is beyond EOD, truncated [ 737.159980][T15486] loop6: p5 start 50331648 is beyond EOD, truncated [ 737.192929][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 737.964501][T15493] FAULT_INJECTION: forcing a failure. [ 737.964501][T15493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.978733][T15493] CPU: 1 UID: 0 PID: 15493 Comm: syz.4.2840 Not tainted syzkaller #0 PREEMPT(full) [ 737.978763][T15493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 737.978777][T15493] Call Trace: [ 737.978785][T15493] [ 737.978795][T15493] dump_stack_lvl+0x189/0x250 [ 737.978834][T15493] ? __pfx____ratelimit+0x10/0x10 [ 737.978860][T15493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 737.978893][T15493] ? __pfx__printk+0x10/0x10 [ 737.978918][T15493] ? __might_fault+0xb0/0x130 [ 737.978955][T15493] should_fail_ex+0x414/0x560 [ 737.978987][T15493] _copy_from_user+0x2d/0xb0 [ 737.979012][T15493] ___sys_recvmsg+0x12e/0x510 [ 737.979041][T15493] ? __pfx____sys_recvmsg+0x10/0x10 [ 737.979090][T15493] ? __might_fault+0xb0/0x130 [ 737.979119][T15493] do_recvmmsg+0x307/0x770 [ 737.979150][T15493] ? __pfx_do_recvmmsg+0x10/0x10 [ 737.979183][T15493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 737.979221][T15493] __x64_sys_recvmmsg+0x190/0x240 [ 737.979247][T15493] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 737.979274][T15493] ? do_syscall_64+0xbe/0xfa0 [ 737.979298][T15493] do_syscall_64+0xfa/0xfa0 [ 737.979318][T15493] ? lockdep_hardirqs_on+0x9c/0x150 [ 737.979339][T15493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.979357][T15493] ? clear_bhb_loop+0x60/0xb0 [ 737.979379][T15493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.979396][T15493] RIP: 0033:0x7fe60a78eec9 [ 737.979412][T15493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.979427][T15493] RSP: 002b:00007fe60b545038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 737.979447][T15493] RAX: ffffffffffffffda RBX: 00007fe60a9e5fa0 RCX: 00007fe60a78eec9 [ 737.979460][T15493] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 737.979471][T15493] RBP: 00007fe60b545090 R08: 0000000000000000 R09: 0000000000000000 [ 737.979482][T15493] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 737.979493][T15493] R13: 00007fe60a9e6038 R14: 00007fe60a9e5fa0 R15: 00007ffc33a46b58 [ 737.979521][T15493] [ 739.441853][T15498] netlink: 'syz.3.2842': attribute type 39 has an invalid length. [ 739.734271][T15507] netlink: 'syz.3.2845': attribute type 29 has an invalid length. [ 739.743613][T15507] netlink: 'syz.3.2845': attribute type 29 has an invalid length. [ 739.752282][T15507] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2845'. [ 739.762167][T15507] unsupported nla_type 58 [ 739.860086][T15509] loop6: detected capacity change from 0 to 7 [ 739.867250][T15509] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 739.873343][T15509] loop6: p1 start 3644185255 is beyond EOD, truncated [ 739.880245][T15509] loop6: p2 size 1310720 extends beyond EOD, truncated [ 739.888622][T15509] loop6: p3 start 352518144 is beyond EOD, truncated [ 739.895463][T15509] loop6: p4 start 1635021614 is beyond EOD, truncated [ 739.902396][T15509] loop6: p5 start 50331648 is beyond EOD, truncated [ 739.937293][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 740.677289][T15515] FAULT_INJECTION: forcing a failure. [ 740.677289][T15515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.691190][T15515] CPU: 0 UID: 0 PID: 15515 Comm: syz.3.2849 Not tainted syzkaller #0 PREEMPT(full) [ 740.691212][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 740.691223][T15515] Call Trace: [ 740.691229][T15515] [ 740.691236][T15515] dump_stack_lvl+0x189/0x250 [ 740.691266][T15515] ? __pfx____ratelimit+0x10/0x10 [ 740.691284][T15515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.691309][T15515] ? __pfx__printk+0x10/0x10 [ 740.691332][T15515] ? __might_fault+0xb0/0x130 [ 740.691372][T15515] should_fail_ex+0x414/0x560 [ 740.691401][T15515] _copy_from_user+0x2d/0xb0 [ 740.691423][T15515] ___sys_recvmsg+0x12e/0x510 [ 740.691449][T15515] ? __pfx____sys_recvmsg+0x10/0x10 [ 740.691509][T15515] ? __might_fault+0xb0/0x130 [ 740.691540][T15515] do_recvmmsg+0x307/0x770 [ 740.691578][T15515] ? __pfx_do_recvmmsg+0x10/0x10 [ 740.691619][T15515] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 740.691667][T15515] __x64_sys_recvmmsg+0x190/0x240 [ 740.691700][T15515] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 740.691734][T15515] ? do_syscall_64+0xbe/0xfa0 [ 740.691764][T15515] do_syscall_64+0xfa/0xfa0 [ 740.691790][T15515] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.691816][T15515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.691839][T15515] ? clear_bhb_loop+0x60/0xb0 [ 740.691866][T15515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.691887][T15515] RIP: 0033:0x7f5aec58eec9 [ 740.691908][T15515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.691927][T15515] RSP: 002b:00007f5aed419038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 740.691951][T15515] RAX: ffffffffffffffda RBX: 00007f5aec7e5fa0 RCX: 00007f5aec58eec9 [ 740.691966][T15515] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 740.691981][T15515] RBP: 00007f5aed419090 R08: 0000000000000000 R09: 0000000000000000 [ 740.691994][T15515] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 740.692008][T15515] R13: 00007f5aec7e6038 R14: 00007f5aec7e5fa0 R15: 00007fff080e6738 [ 740.692042][T15515] [ 741.415821][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2854'. [ 741.518204][T15535] loop6: detected capacity change from 0 to 7 [ 741.525388][T15535] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 741.531254][T15535] loop6: p1 start 3644185255 is beyond EOD, truncated [ 741.538211][T15529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.549265][T15535] loop6: p2 size 1310720 extends beyond EOD, truncated [ 741.557638][T15535] loop6: p3 start 352518144 is beyond EOD, truncated [ 741.571732][T15535] loop6: p4 start 1635021614 is beyond EOD, truncated [ 741.578886][T15535] loop6: p5 start 50331648 is beyond EOD, truncated [ 741.609441][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 742.765404][T15544] FAULT_INJECTION: forcing a failure. [ 742.765404][T15544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.779670][T15544] CPU: 0 UID: 0 PID: 15544 Comm: syz.1.2859 Not tainted syzkaller #0 PREEMPT(full) [ 742.779701][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 742.779717][T15544] Call Trace: [ 742.779726][T15544] [ 742.779736][T15544] dump_stack_lvl+0x189/0x250 [ 742.779775][T15544] ? __pfx____ratelimit+0x10/0x10 [ 742.779802][T15544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 742.779836][T15544] ? __pfx__printk+0x10/0x10 [ 742.779868][T15544] ? __might_fault+0xb0/0x130 [ 742.779913][T15544] should_fail_ex+0x414/0x560 [ 742.779954][T15544] _copy_from_user+0x2d/0xb0 [ 742.779984][T15544] ___sys_recvmsg+0x12e/0x510 [ 742.780020][T15544] ? __pfx____sys_recvmsg+0x10/0x10 [ 742.780079][T15544] ? __might_fault+0xb0/0x130 [ 742.780126][T15544] do_recvmmsg+0x307/0x770 [ 742.780154][T15544] ? __pfx_do_recvmmsg+0x10/0x10 [ 742.780184][T15544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 742.780218][T15544] __x64_sys_recvmmsg+0x190/0x240 [ 742.780242][T15544] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 742.780267][T15544] ? do_syscall_64+0xbe/0xfa0 [ 742.780288][T15544] do_syscall_64+0xfa/0xfa0 [ 742.780307][T15544] ? lockdep_hardirqs_on+0x9c/0x150 [ 742.780325][T15544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.780341][T15544] ? clear_bhb_loop+0x60/0xb0 [ 742.780359][T15544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.780375][T15544] RIP: 0033:0x7f92c918eec9 [ 742.780389][T15544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.780403][T15544] RSP: 002b:00007f92c9fdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 742.780421][T15544] RAX: ffffffffffffffda RBX: 00007f92c93e5fa0 RCX: 00007f92c918eec9 [ 742.780433][T15544] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 742.780443][T15544] RBP: 00007f92c9fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 742.780453][T15544] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 742.780463][T15544] R13: 00007f92c93e6038 R14: 00007f92c93e5fa0 R15: 00007ffee27aa4f8 [ 742.780488][T15544] [ 745.504473][T15559] loop6: detected capacity change from 0 to 7 [ 745.514359][T15559] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 745.520478][T15559] loop6: p1 start 3644185255 is beyond EOD, truncated [ 745.527606][T15559] loop6: p2 size 1310720 extends beyond EOD, truncated [ 745.535771][T15559] loop6: p3 start 352518144 is beyond EOD, truncated [ 745.543844][T15559] loop6: p4 start 1635021614 is beyond EOD, truncated [ 745.551237][T15559] loop6: p5 start 50331648 is beyond EOD, truncated [ 745.581559][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 746.333710][T15571] FAULT_INJECTION: forcing a failure. [ 746.333710][T15571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.346943][T15571] CPU: 0 UID: 0 PID: 15571 Comm: syz.2.2869 Not tainted syzkaller #0 PREEMPT(full) [ 746.346972][T15571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 746.346985][T15571] Call Trace: [ 746.346992][T15571] [ 746.346999][T15571] dump_stack_lvl+0x189/0x250 [ 746.347029][T15571] ? __pfx____ratelimit+0x10/0x10 [ 746.347048][T15571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 746.347072][T15571] ? __pfx__printk+0x10/0x10 [ 746.347095][T15571] ? __might_fault+0xb0/0x130 [ 746.347126][T15571] should_fail_ex+0x414/0x560 [ 746.347155][T15571] _copy_from_user+0x2d/0xb0 [ 746.347178][T15571] ___sys_recvmsg+0x12e/0x510 [ 746.347204][T15571] ? __pfx____sys_recvmsg+0x10/0x10 [ 746.347248][T15571] ? __might_fault+0xb0/0x130 [ 746.347273][T15571] do_recvmmsg+0x307/0x770 [ 746.347301][T15571] ? __pfx_do_recvmmsg+0x10/0x10 [ 746.347330][T15571] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 746.347364][T15571] __x64_sys_recvmmsg+0x190/0x240 [ 746.347388][T15571] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 746.347413][T15571] ? do_syscall_64+0xbe/0xfa0 [ 746.347434][T15571] do_syscall_64+0xfa/0xfa0 [ 746.347452][T15571] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.347470][T15571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.347486][T15571] ? clear_bhb_loop+0x60/0xb0 [ 746.347505][T15571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.347520][T15571] RIP: 0033:0x7fd26998eec9 [ 746.347534][T15571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.347548][T15571] RSP: 002b:00007fd26a8e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 746.347565][T15571] RAX: ffffffffffffffda RBX: 00007fd269be5fa0 RCX: 00007fd26998eec9 [ 746.347577][T15571] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 746.347587][T15571] RBP: 00007fd26a8e4090 R08: 0000000000000000 R09: 0000000000000000 [ 746.347598][T15571] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 746.347608][T15571] R13: 00007fd269be6038 R14: 00007fd269be5fa0 R15: 00007ffdca799d28 [ 746.347632][T15571] [ 749.703902][T15588] loop6: detected capacity change from 0 to 7 [ 749.719193][T15588] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 749.730013][T15588] loop6: p1 start 3644185255 is beyond EOD, truncated [ 749.748118][T15588] loop6: p2 size 1310720 extends beyond EOD, truncated [ 749.761258][T15588] loop6: p3 start 352518144 is beyond EOD, truncated [ 749.776696][T15588] loop6: p4 start 1635021614 is beyond EOD, truncated [ 749.794148][T15588] loop6: p5 start 50331648 is beyond EOD, truncated [ 749.925665][T13664] udevd[13664]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 750.404174][T15595] FAULT_INJECTION: forcing a failure. [ 750.404174][T15595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.417835][T15595] CPU: 1 UID: 0 PID: 15595 Comm: syz.4.2878 Not tainted syzkaller #0 PREEMPT(full) [ 750.417866][T15595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 750.417882][T15595] Call Trace: [ 750.417891][T15595] [ 750.417901][T15595] dump_stack_lvl+0x189/0x250 [ 750.417942][T15595] ? __pfx____ratelimit+0x10/0x10 [ 750.417968][T15595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.418004][T15595] ? __pfx__printk+0x10/0x10 [ 750.418034][T15595] ? __might_fault+0xb0/0x130 [ 750.418079][T15595] should_fail_ex+0x414/0x560 [ 750.418120][T15595] _copy_from_user+0x2d/0xb0 [ 750.418151][T15595] ___sys_recvmsg+0x12e/0x510 [ 750.418186][T15595] ? __pfx____sys_recvmsg+0x10/0x10 [ 750.418247][T15595] ? __might_fault+0xb0/0x130 [ 750.418284][T15595] do_recvmmsg+0x307/0x770 [ 750.418354][T15595] ? __pfx_do_recvmmsg+0x10/0x10 [ 750.418396][T15595] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 750.418445][T15595] __x64_sys_recvmmsg+0x190/0x240 [ 750.418477][T15595] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 750.418512][T15595] ? do_syscall_64+0xbe/0xfa0 [ 750.418542][T15595] do_syscall_64+0xfa/0xfa0 [ 750.418567][T15595] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.418593][T15595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.418616][T15595] ? clear_bhb_loop+0x60/0xb0 [ 750.418644][T15595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.418666][T15595] RIP: 0033:0x7fe60a78eec9 [ 750.418687][T15595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.418707][T15595] RSP: 002b:00007fe60b545038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 750.418731][T15595] RAX: ffffffffffffffda RBX: 00007fe60a9e5fa0 RCX: 00007fe60a78eec9 [ 750.418748][T15595] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 750.418764][T15595] RBP: 00007fe60b545090 R08: 0000000000000000 R09: 0000000000000000 [ 750.418779][T15595] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 750.418793][T15595] R13: 00007fe60a9e6038 R14: 00007fe60a9e5fa0 R15: 00007ffc33a46b58 [ 750.418830][T15595] [ 751.250677][T15601] program syz.4.2881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 751.574247][ T5984] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 751.576097][ T918] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 751.604886][ T5972] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 751.620596][ T10] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 751.627053][ T5984] usb 2-1: USB disconnect, device number 124 [ 751.649642][ T5972] usb 5-1: USB disconnect, device number 71 [ 751.666720][ T10] usb 3-1: USB disconnect, device number 2 [ 751.686059][ T918] usb 4-1: USB disconnect, device number 113 [ 751.954296][ T5984] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 752.018442][ T5972] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 752.026176][ T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 752.050449][ T918] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 752.116514][ T5984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.126802][ T5984] usb 2-1: config 0 interface 0 has no altsetting 0 [ 752.135755][ T5984] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 752.144999][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.153105][ T5984] usb 2-1: Product: syz [ 752.157735][ T5984] usb 2-1: Manufacturer: syz [ 752.162374][ T5984] usb 2-1: SerialNumber: syz [ 752.170155][ T5984] usb 2-1: config 0 descriptor?? [ 752.178259][ T5984] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 752.188999][ T5984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 752.203869][ T5984] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 752.207037][ T5972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.224535][ T918] usb 4-1: Using ep0 maxpacket: 32 [ 752.234254][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 752.242201][ T5972] usb 5-1: config 0 interface 0 has no altsetting 0 [ 752.249147][ T918] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.261562][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 752.273609][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.285476][ T918] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.295797][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 752.308336][ T918] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 752.323029][ T5972] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 752.332370][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.340646][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 752.351783][ T918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 752.358435][ T918] usb 4-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 752.367532][ T5972] usb 5-1: Product: syz [ 752.371825][ T5972] usb 5-1: Manufacturer: syz [ 752.376488][ T5972] usb 5-1: SerialNumber: syz [ 752.381335][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.391389][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 752.399912][ T5984] usb 2-1: USB disconnect, device number 125 [ 752.402175][ T5972] usb 5-1: config 0 descriptor?? [ 752.412994][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 752.425393][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.437797][ T918] usb 4-1: config 0 descriptor?? [ 752.445513][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 752.460580][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 752.472030][ T5972] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 752.487560][ T5972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 752.499273][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 752.508878][ T5972] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 752.520985][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 752.533091][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.547608][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 752.558909][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 752.575483][ T10] usb 3-1: string descriptor 0 read error: -22 [ 752.581792][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 752.591309][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.610206][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 752.675260][ T5984] usb 5-1: USB disconnect, device number 72 [ 752.827812][T15593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.836746][T15593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.905400][ T918] lenovo 0003:04B3:3109.0045: reserved main item tag 0xd [ 752.914992][ T918] lenovo 0003:04B3:3109.0045: hidraw0: USB HID v5f.b2 Device [HID 04b3:3109] on usb-dummy_hcd.3-1/input0 [ 753.117038][T15599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.125847][T15599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.151422][ T918] usb 4-1: USB disconnect, device number 114 [ 753.194579][T15609] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 753.201142][T15609] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 753.213605][T15609] vhci_hcd vhci_hcd.0: Device attached [ 753.221649][T15610] vhci_hcd: connection closed [ 753.222996][ T1091] vhci_hcd: stop threads [ 753.232910][ T1091] vhci_hcd: release socket [ 753.238575][ T1091] vhci_hcd: disconnect device [ 753.567745][T15620] loop6: detected capacity change from 0 to 7 [ 753.574850][T15620] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 753.580486][T15620] loop6: p1 start 3644185255 is beyond EOD, truncated [ 753.587291][T15620] loop6: p2 size 1310720 extends beyond EOD, truncated [ 753.597080][T15620] loop6: p3 start 352518144 is beyond EOD, truncated [ 753.604095][T15620] loop6: p4 start 1635021614 is beyond EOD, truncated [ 753.611009][T15620] loop6: p5 start 50331648 is beyond EOD, truncated [ 753.644972][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 753.655351][ T44] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 753.827765][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.839859][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 753.851587][ T44] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 753.861201][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.869468][ T44] usb 5-1: Product: syz [ 753.873925][ T44] usb 5-1: Manufacturer: syz [ 753.879087][ T44] usb 5-1: SerialNumber: syz [ 753.889272][ T44] usb 5-1: config 0 descriptor?? [ 753.898060][T15624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2887'. [ 753.918472][ T44] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 753.931031][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 753.947715][ T44] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 754.021620][T15626] FAULT_INJECTION: forcing a failure. [ 754.021620][T15626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.034757][T15626] CPU: 0 UID: 0 PID: 15626 Comm: syz.3.2888 Not tainted syzkaller #0 PREEMPT(full) [ 754.034779][T15626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 754.034789][T15626] Call Trace: [ 754.034796][T15626] [ 754.034804][T15626] dump_stack_lvl+0x189/0x250 [ 754.034833][T15626] ? __pfx____ratelimit+0x10/0x10 [ 754.034852][T15626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.034876][T15626] ? __pfx__printk+0x10/0x10 [ 754.034898][T15626] ? __might_fault+0xb0/0x130 [ 754.034930][T15626] should_fail_ex+0x414/0x560 [ 754.034963][T15626] _copy_from_user+0x2d/0xb0 [ 754.034985][T15626] ___sys_recvmsg+0x12e/0x510 [ 754.035012][T15626] ? __pfx____sys_recvmsg+0x10/0x10 [ 754.035056][T15626] ? __might_fault+0xb0/0x130 [ 754.035082][T15626] do_recvmmsg+0x307/0x770 [ 754.035109][T15626] ? __pfx_do_recvmmsg+0x10/0x10 [ 754.035139][T15626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 754.035173][T15626] __x64_sys_recvmmsg+0x190/0x240 [ 754.035198][T15626] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 754.035222][T15626] ? do_syscall_64+0xbe/0xfa0 [ 754.035244][T15626] do_syscall_64+0xfa/0xfa0 [ 754.035262][T15626] ? lockdep_hardirqs_on+0x9c/0x150 [ 754.035280][T15626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.035296][T15626] ? clear_bhb_loop+0x60/0xb0 [ 754.035315][T15626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.035331][T15626] RIP: 0033:0x7f5aec58eec9 [ 754.035345][T15626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.035359][T15626] RSP: 002b:00007f5aed419038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 754.035377][T15626] RAX: ffffffffffffffda RBX: 00007f5aec7e5fa0 RCX: 00007f5aec58eec9 [ 754.035389][T15626] RDX: 000000000000001b RSI: 0000200000005c80 RDI: 0000000000000003 [ 754.035399][T15626] RBP: 00007f5aed419090 R08: 0000000000000000 R09: 0000000000000000 [ 754.035409][T15626] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 754.035419][T15626] R13: 00007f5aec7e6038 R14: 00007f5aec7e5fa0 R15: 00007fff080e6738 [ 754.035444][T15626] [ 754.713292][ T44] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 754.724077][ T10] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 754.875417][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.885693][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 754.894683][ T44] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 754.895041][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 754.904346][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.917293][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 754.917728][ T44] usb 2-1: Product: syz [ 754.929085][ T44] usb 2-1: Manufacturer: syz [ 754.931852][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 754.933717][ T44] usb 2-1: SerialNumber: syz [ 754.946689][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.951128][ T44] usb 2-1: config 0 descriptor?? [ 754.956122][ T10] usb 4-1: Product: syz [ 754.970549][ T10] usb 4-1: Manufacturer: syz [ 754.970816][ T44] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 754.975197][ T10] usb 4-1: SerialNumber: syz [ 754.987967][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 754.998305][ T10] usb 4-1: config 0 descriptor?? [ 755.006492][ T5915] usb 3-1: USB disconnect, device number 3 [ 755.049303][ T44] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 755.190367][ T5980] usb 2-1: USB disconnect, device number 126 [ 755.222132][ T10] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 755.230772][ T10] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 755.252000][ T10] usb 4-1: USB disconnect, device number 115 [ 755.622234][ T5972] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 755.794359][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.824640][T15659] FAULT_INJECTION: forcing a failure. [ 755.824640][T15659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.825506][ T5972] usb 3-1: config 0 interface 0 has no altsetting 0 [ 755.840897][T15659] CPU: 1 UID: 0 PID: 15659 Comm: syz.1.2897 Not tainted syzkaller #0 PREEMPT(full) [ 755.840930][T15659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 755.840948][T15659] Call Trace: [ 755.840958][T15659] [ 755.840971][T15659] dump_stack_lvl+0x189/0x250 [ 755.841016][T15659] ? __pfx____ratelimit+0x10/0x10 [ 755.841047][T15659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.841086][T15659] ? __pfx__printk+0x10/0x10 [ 755.841136][T15659] should_fail_ex+0x414/0x560 [ 755.841182][T15659] _copy_to_user+0x31/0xb0 [ 755.841220][T15659] simple_read_from_buffer+0xe1/0x170 [ 755.841255][T15659] proc_fail_nth_read+0x1b3/0x220 [ 755.841299][T15659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.841341][T15659] ? rw_verify_area+0x2a6/0x4d0 [ 755.841365][T15659] ? __lock_acquire+0xab9/0xd20 [ 755.841393][T15659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.841434][T15659] vfs_read+0x200/0xa30 [ 755.841457][T15659] ? fdget_pos+0x247/0x320 [ 755.841494][T15659] ? __pfx___mutex_lock+0x10/0x10 [ 755.841528][T15659] ? __pfx_vfs_read+0x10/0x10 [ 755.841555][T15659] ? __fget_files+0x2a/0x420 [ 755.841592][T15659] ? __fget_files+0x3a0/0x420 [ 755.841621][T15659] ? __fget_files+0x2a/0x420 [ 755.841671][T15659] ksys_read+0x145/0x250 [ 755.841700][T15659] ? __pfx_ksys_read+0x10/0x10 [ 755.841733][T15659] ? do_syscall_64+0xbe/0xfa0 [ 755.841769][T15659] do_syscall_64+0xfa/0xfa0 [ 755.841797][T15659] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.841826][T15659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.841851][T15659] ? clear_bhb_loop+0x60/0xb0 [ 755.841881][T15659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.841906][T15659] RIP: 0033:0x7f92c918d8dc [ 755.841929][T15659] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 755.841952][T15659] RSP: 002b:00007f92c9fdb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 755.841979][T15659] RAX: ffffffffffffffda RBX: 00007f92c93e5fa0 RCX: 00007f92c918d8dc [ 755.841998][T15659] RDX: 000000000000000f RSI: 00007f92c9fdb0a0 RDI: 0000000000000004 [ 755.842013][T15659] RBP: 00007f92c9fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 755.842029][T15659] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 755.842045][T15659] R13: 00007f92c93e6038 R14: 00007f92c93e5fa0 R15: 00007ffee27aa4f8 [ 755.842085][T15659] [ 756.098005][ T5972] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 756.108911][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.119513][ T5972] usb 3-1: Product: syz [ 756.123730][ T5972] usb 3-1: Manufacturer: syz [ 756.128470][ T5972] usb 3-1: SerialNumber: syz [ 756.148500][ T5972] usb 3-1: config 0 descriptor?? [ 756.161613][ T5972] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 756.190951][ T5972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 756.208730][ T5972] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 756.342198][T15666] loop6: detected capacity change from 0 to 7 [ 756.349715][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 756.350479][T15666] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 756.364334][T15666] loop6: p1 start 3644185255 is beyond EOD, truncated [ 756.371278][T15666] loop6: p2 size 1310720 extends beyond EOD, truncated [ 756.379887][T15666] loop6: p3 start 352518144 is beyond EOD, truncated [ 756.386867][T15666] loop6: p4 start 1635021614 is beyond EOD, truncated [ 756.394080][T15666] loop6: p5 start 50331648 is beyond EOD, truncated [ 756.428742][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 756.520464][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 756.527733][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 756.535962][ T10] usb 4-1: config 0 has no interface number 0 [ 756.542264][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 756.551368][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 756.560506][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.568592][ T10] usb 4-1: Product: syz [ 756.574145][ T10] usb 4-1: Manufacturer: syz [ 756.578773][ T10] usb 4-1: SerialNumber: syz [ 756.586079][ T10] usb 4-1: config 0 descriptor?? [ 756.811052][T15663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.820390][T15663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.884596][ T5972] usb 5-1: USB disconnect, device number 73 [ 757.077788][T15677] program syz.4.2904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 757.280436][ T10] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 757.288092][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 757.297692][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 757.307171][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 757.326315][ T10] usb 4-1: USB disconnect, device number 116 [ 757.750357][ T5972] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 757.863137][T15698] loop6: detected capacity change from 0 to 7 [ 757.870515][T15698] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 757.875941][T15698] loop6: p1 start 3644185255 is beyond EOD, truncated [ 757.882887][T15698] loop6: p2 size 1310720 extends beyond EOD, truncated [ 757.890934][ T5972] usb 5-1: device descriptor read/64, error -71 [ 757.893727][T15698] loop6: p3 start 352518144 is beyond EOD, truncated [ 757.904574][T15698] loop6: p4 start 1635021614 is beyond EOD, truncated [ 757.911602][T15698] loop6: p5 start 50331648 is beyond EOD, truncated [ 757.950115][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 758.071120][ T5980] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 758.178119][ T5972] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 758.233258][ T5980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.243656][ T5980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 758.252891][ T5980] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 758.262154][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.270229][ T5980] usb 2-1: Product: syz [ 758.274725][ T5980] usb 2-1: Manufacturer: syz [ 758.279341][ T5980] usb 2-1: SerialNumber: syz [ 758.288195][ T5980] usb 2-1: config 0 descriptor?? [ 758.296559][ T5980] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 758.308456][ T5980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 758.321097][ T5980] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 758.328166][ T5972] usb 5-1: device descriptor read/64, error -71 [ 758.456496][ T5972] usb usb5-port1: attempt power cycle [ 758.576948][ T5915] usb 3-1: USB disconnect, device number 4 [ 758.755605][ T10] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 758.819690][ T5972] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 758.849294][ T5972] usb 5-1: device descriptor read/8, error -71 [ 758.926603][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 758.934080][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 758.943585][ T10] usb 4-1: config 0 has no interface number 0 [ 758.949808][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.960830][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 758.970715][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 758.981642][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 758.990944][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.998941][ T10] usb 4-1: Product: syz [ 759.003284][ T10] usb 4-1: Manufacturer: syz [ 759.007976][ T10] usb 4-1: SerialNumber: syz [ 759.017503][ T10] usb 4-1: config 0 descriptor?? [ 759.129857][ T5972] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 759.151774][ T5972] usb 5-1: device descriptor read/8, error -71 [ 759.242926][T15700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.252421][T15700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.262021][ T10] appletouch 4-1:0.85: Failed to read mode from device. [ 759.269667][ T5915] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 759.270955][ T5972] usb usb5-port1: unable to enumerate USB device [ 759.283920][ T10] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 759.296886][ T10] usb 4-1: USB disconnect, device number 117 [ 759.450582][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 759.457937][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 759.466980][ T5915] usb 3-1: config 13 has an invalid interface number: 147 but max is 0 [ 759.475339][ T5915] usb 3-1: config 13 has no interface number 0 [ 759.481626][ T5915] usb 3-1: config 13 interface 147 has no altsetting 0 [ 759.491416][ T5915] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=96.a8 [ 759.500625][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.508715][ T5915] usb 3-1: Product: syz [ 759.512970][ T5915] usb 3-1: Manufacturer: syz [ 759.517726][ T5915] usb 3-1: SerialNumber: syz [ 759.753225][T15711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.763314][T15711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.102962][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 760.268213][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 760.277539][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.285645][ T10] usb 4-1: Product: syz [ 760.289960][ T10] usb 4-1: Manufacturer: syz [ 760.295854][ T10] usb 4-1: SerialNumber: syz [ 760.304191][ T10] usb 4-1: config 0 descriptor?? [ 760.526939][ T10] hso 4-1:0.0: Can't find BULK IN endpoint [ 760.533790][ T10] usb-storage 4-1:0.0: USB Mass Storage device detected [ 760.669356][T15722] syzkaller1: entered promiscuous mode [ 760.676298][T15722] syzkaller1: entered allmulticast mode [ 760.686254][T15722] devtmpfs: Unknown parameter 'lrge' [ 760.762746][ T10] usb 4-1: USB disconnect, device number 118 [ 760.819988][T15727] overlayfs: missing 'workdir' [ 761.139156][ T5972] usb 2-1: USB disconnect, device number 127 [ 761.188701][T15734] loop6: detected capacity change from 0 to 7 [ 761.198301][T13643] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 761.203972][T13643] loop6: p1 start 3644185255 is beyond EOD, truncated [ 761.211330][ T918] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 761.212290][T13643] loop6: p2 size 1310720 extends beyond EOD, [ 761.219316][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 761.219450][T13643] truncated [ 761.238411][T13643] loop6: p3 start 352518144 is beyond EOD, truncated [ 761.245162][T13643] loop6: p4 start 1635021614 is beyond EOD, truncated [ 761.252258][T13643] loop6: p5 start 50331648 is beyond EOD, truncated [ 761.262739][T15734] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 761.268335][T15734] loop6: p1 start 3644185255 is beyond EOD, truncated [ 761.275967][T15734] loop6: p2 size 1310720 extends beyond EOD, truncated [ 761.286220][T15734] loop6: p3 start 352518144 is beyond EOD, truncated [ 761.293433][T15734] loop6: p4 start 1635021614 is beyond EOD, truncated [ 761.300240][T15734] loop6: p5 start 50331648 is beyond EOD, truncated [ 761.335008][T13643] udevd[13643]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 761.355103][ T918] usb 5-1: device descriptor read/64, error -71 [ 761.361977][T13643] udevd[13643]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 761.375722][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 761.383564][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 761.396278][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 761.406534][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.415430][ T10] usb 4-1: Product: syz [ 761.420156][ T10] usb 4-1: Manufacturer: syz [ 761.424790][ T10] usb 4-1: SerialNumber: syz [ 761.433463][ T10] usb 4-1: config 0 descriptor?? [ 761.610785][ T918] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 761.751487][ T918] usb 5-1: device descriptor read/64, error -71 [ 761.870209][ T918] usb usb5-port1: attempt power cycle [ 762.156617][ T5972] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 762.171187][ T5915] ttusb_dec_send_command: command bulk message failed: error -22 [ 762.193950][ T5915] ttusb-dec 3-1:13.147: probe with driver ttusb-dec failed with error -22 [ 762.206588][ T5915] usb 3-1: USB disconnect, device number 5 [ 762.252460][ T918] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 762.275871][ T918] usb 5-1: device descriptor read/8, error -71 [ 762.350195][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 762.357367][ T5972] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.368501][ T5972] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.379507][ T5972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 762.386257][ T5972] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 762.395643][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.407521][ T5972] usb 2-1: config 0 descriptor?? [ 762.526303][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 762.532821][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.541145][ T918] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 762.541227][ T5915] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 762.563187][ T918] usb 5-1: device descriptor read/8, error -71 [ 762.692321][ T918] usb usb5-port1: unable to enumerate USB device [ 762.714482][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.725727][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 762.736249][ T5915] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 762.745419][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.753467][ T5915] usb 3-1: Product: syz [ 762.757726][ T5915] usb 3-1: Manufacturer: syz [ 762.762354][ T5915] usb 3-1: SerialNumber: syz [ 762.770067][ T5915] usb 3-1: config 0 descriptor?? [ 762.778344][ T10] gs_usb 4-1:0.0: Couldn't get device config: (err=-110) [ 762.782505][ T5915] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 762.785779][ T10] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 762.801213][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 762.821759][ T5915] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 762.910696][ T5972] zeroplus 0003:0C12:0005.0046: collection stack underflow [ 762.918407][ T5972] zeroplus 0003:0C12:0005.0046: item 0 4 0 12 parsing failed [ 762.927336][ T5972] zeroplus 0003:0C12:0005.0046: parse failed [ 762.934377][ T5972] zeroplus 0003:0C12:0005.0046: probe with driver zeroplus failed with error -22 [ 762.995121][ T44] usb 3-1: USB disconnect, device number 6 [ 764.030485][ T5972] usb 4-1: USB disconnect, device number 119 [ 764.072084][ T5915] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 764.129299][T15753] Attempt to restore checkpoint with obsolete wellknown handles [ 764.182404][T15755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.220113][ T5915] usb 3-1: device descriptor read/64, error -71 [ 764.401837][ T5972] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 764.476769][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 764.519537][ T5980] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 764.573743][ T5972] usb 4-1: Using ep0 maxpacket: 32 [ 764.581016][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.592213][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.602060][ T5972] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 764.611488][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.622985][ T5972] usb 4-1: config 0 descriptor?? [ 764.626779][ T5915] usb 3-1: device descriptor read/64, error -71 [ 764.682190][ T5980] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 764.690606][ T5980] usb 5-1: config 0 has no interface number 0 [ 764.696743][ T5980] usb 5-1: config 0 interface 101 has no altsetting 0 [ 764.703722][ T5980] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 764.712872][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.723941][ T5980] usb 5-1: config 0 descriptor?? [ 764.744330][ T5915] usb usb3-port1: attempt power cycle [ 764.951716][T15755] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2928'. [ 765.119532][ T5915] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 765.141035][T15755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.163060][ T5915] usb 3-1: device descriptor read/8, error -71 [ 765.174492][T15751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.180288][ T5983] usb 2-1: USB disconnect, device number 2 [ 765.188221][T15751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.207875][T15755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.228047][T15755] bond0 (unregistering): Released all slaves [ 765.234983][ T5972] ft260 0003:0403:6030.0047: unknown main item tag 0x7 [ 765.339783][ T5980] kaweth 5-1:0.101: Firmware present in device. [ 765.347300][ T5980] kaweth 5-1:0.101: Error reading configuration (-71), no net device created [ 765.357026][ T5980] kaweth 5-1:0.101: probe with driver kaweth failed with error -5 [ 765.369966][ T5980] usb 5-1: USB disconnect, device number 82 [ 765.417603][ T5972] ft260 0003:0403:6030.0047: chip code: 0000 0000 [ 765.428782][ T5915] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 765.451210][ T5915] usb 3-1: device descriptor read/8, error -71 [ 765.567907][ T5915] usb usb3-port1: unable to enumerate USB device [ 765.610258][ T5983] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 765.632585][ T5972] ft260 0003:0403:6030.0047: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 765.772500][ T5983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.782940][ T5983] usb 2-1: config 0 interface 0 has no altsetting 0 [ 765.791812][ T5983] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 765.801206][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.809309][ T5983] usb 2-1: Product: syz [ 765.813617][ T5983] usb 2-1: Manufacturer: syz [ 765.818249][ T5983] usb 2-1: SerialNumber: syz [ 765.827158][ T5983] usb 2-1: config 0 descriptor?? [ 765.837319][ T5983] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 765.855214][ T5983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 765.871568][ T5983] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 765.929582][ T5972] ft260 0003:0403:6030.0047: failed to retrieve status: -71, no wakeup [ 765.944515][T15760] loop6: detected capacity change from 0 to 7 [ 765.954099][ T5972] ft260 0003:0403:6030.0047: failed to retrieve status: -71 [ 765.961685][T13149] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 765.967467][T13149] loop6: p1 start 3644185255 is beyond EOD, truncated [ 765.967581][ T5972] ft260 0003:0403:6030.0047: failed to reset I2C controller: -71 [ 765.975246][T13149] loop6: p2 size 1310720 extends beyond EOD, truncated [ 765.992478][T13149] loop6: p3 start 352518144 is beyond EOD, truncated [ 765.999437][T13149] loop6: p4 start 1635021614 is beyond EOD, truncated [ 766.006521][T13149] loop6: p5 start 50331648 is beyond EOD, truncated [ 766.018047][ T5972] usb 4-1: USB disconnect, device number 120 [ 766.027087][T15760] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 766.040343][T15760] loop6: p1 start 3644185255 is beyond EOD, truncated [ 766.048366][T15760] loop6: p2 size 1310720 extends beyond EOD, truncated [ 766.067094][T15760] loop6: p3 start 352518144 is beyond EOD, truncated [ 766.074974][T15760] loop6: p4 start 1635021614 is beyond EOD, truncated [ 766.082025][T15760] loop6: p5 start 50331648 is beyond EOD, truncated [ 766.112517][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 766.137511][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 766.850796][ T5972] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 767.024035][ T5972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.035378][ T5972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 767.046427][ T5972] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 767.055984][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.064215][ T5972] usb 4-1: Product: syz [ 767.068497][ T5972] usb 4-1: Manufacturer: syz [ 767.073117][ T5972] usb 4-1: SerialNumber: syz [ 767.080743][ T5972] usb 4-1: config 0 descriptor?? [ 767.091131][ T5972] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 767.102724][ T5972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 767.140141][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 767.165157][ T5972] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 767.316518][T14422] usb 4-1: USB disconnect, device number 121 [ 767.326900][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.342311][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 767.367932][ T10] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 767.377124][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.385156][ T10] usb 5-1: Product: syz [ 767.393422][ T10] usb 5-1: Manufacturer: syz [ 767.398616][ T10] usb 5-1: SerialNumber: syz [ 767.419677][ T10] usb 5-1: config 0 descriptor?? [ 767.433129][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 767.446122][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 767.463737][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 767.659037][ T5915] usb 5-1: USB disconnect, device number 83 [ 767.909047][T15801] loop6: detected capacity change from 0 to 7 [ 767.916995][T15801] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 767.922696][T15801] loop6: p1 start 3644185255 is beyond EOD, truncated [ 767.929560][T15801] loop6: p2 size 1310720 extends beyond EOD, truncated [ 767.939055][T15801] loop6: p3 start 352518144 is beyond EOD, truncated [ 767.946388][T15801] loop6: p4 start 1635021614 is beyond EOD, truncated [ 767.953515][T15801] loop6: p5 start 50331648 is beyond EOD, truncated [ 767.987745][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 768.571227][T15812] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2945'. [ 768.580994][T15812] unsupported nlmsg_type 40 [ 768.589231][T15814] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2945'. [ 768.660341][ T918] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 768.692953][ T10] usb 2-1: USB disconnect, device number 3 [ 768.807747][ T5980] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 768.862899][ T918] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 768.872222][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.882550][ T918] usb 5-1: config 0 descriptor?? [ 768.882670][ T5915] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 768.978800][ T5980] usb 3-1: Using ep0 maxpacket: 32 [ 768.985944][ T5980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.001565][ T5980] usb 3-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice= 8.b6 [ 769.010983][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.019014][ T5980] usb 3-1: Product: syz [ 769.023527][ T5980] usb 3-1: Manufacturer: syz [ 769.028189][ T5980] usb 3-1: SerialNumber: syz [ 769.036403][ T5980] usb 3-1: config 0 descriptor?? [ 769.046725][ T5980] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 769.054627][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 769.061916][ T5915] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 769.070342][ T5915] usb 4-1: config 0 has no interface number 0 [ 769.076739][ T5915] usb 4-1: config 0 interface 184 has no altsetting 0 [ 769.087066][ T5915] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 769.096280][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.104633][ T5915] usb 4-1: Product: syz [ 769.108916][ T5915] usb 4-1: Manufacturer: syz [ 769.113586][ T5915] usb 4-1: SerialNumber: syz [ 769.121848][ T5915] usb 4-1: config 0 descriptor?? [ 769.130851][ T5915] smsc75xx v1.0.0 [ 769.349593][ T5915] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 769.361862][ T5915] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 769.372681][ T5915] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 769.391008][ T918] usb 5-1: Cannot set MAC address [ 769.394247][ T5915] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 769.412363][ T918] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 769.446488][ T918] usb 5-1: USB disconnect, device number 84 [ 769.469430][T15827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2948'. [ 769.481826][ T5980] gspca_sn9c20x: Write register 1001 failed -71 [ 769.489992][ T5980] gspca_sn9c20x: Device initialization failed [ 769.498819][ T5980] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 769.516505][ T5980] usb 3-1: USB disconnect, device number 11 [ 769.607195][T15831] usb usb8: usbfs: process 15831 (syz.4.2950) did not claim interface 0 before use [ 769.724557][T15816] tmpfs: Unknown parameter 'noinode32' [ 770.112766][ T5972] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 770.295939][ T5972] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x5A, changing to 0xA [ 770.307638][ T5972] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 74, changing to 10 [ 770.319343][ T5972] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 42082, setting to 1024 [ 770.332272][ T5972] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 770.341441][ T5972] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 770.350193][ T5972] usb 5-1: Manufacturer: syz [ 770.354828][ T5972] usb 5-1: SerialNumber: syz [ 770.363579][T15837] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 770.551894][ T918] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 770.591870][T15837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.601809][T15837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.611648][T15837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.620549][T15837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.637849][ T5972] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 770.648398][ T5972] usb 5-1: USB disconnect, device number 85 [ 770.745642][ T918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.756108][ T918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 770.765287][ T918] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 770.774368][ T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.782477][ T918] usb 2-1: Product: syz [ 770.786708][ T918] usb 2-1: Manufacturer: syz [ 770.791333][ T918] usb 2-1: SerialNumber: syz [ 770.799047][ T918] usb 2-1: config 0 descriptor?? [ 770.809571][ T918] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 770.820351][ T918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 770.833094][ T918] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 771.190763][T15854] loop6: detected capacity change from 0 to 7 [ 771.200726][T15854] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 771.207445][T15854] loop6: p1 start 3644185255 is beyond EOD, truncated [ 771.214902][T15854] loop6: p2 size 1310720 extends beyond EOD, truncated [ 771.224235][T15854] loop6: p3 start 352518144 is beyond EOD, truncated [ 771.232923][T15854] loop6: p4 start 1635021614 is beyond EOD, truncated [ 771.240300][T15854] loop6: p5 start 50331648 is beyond EOD, truncated [ 771.282268][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 771.705755][ T918] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 771.862615][ T10] usb 4-1: USB disconnect, device number 122 [ 771.863262][T15863] usb usb8: usbfs: process 15863 (syz.2.2960) did not claim interface 0 before use [ 772.334590][T15883] syzkaller1: entered promiscuous mode [ 772.341778][T15883] syzkaller1: entered allmulticast mode [ 772.368803][ T5915] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 772.536433][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.547057][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 772.556518][ T5915] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 772.566617][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.575510][ T5915] usb 4-1: Product: syz [ 772.579722][ T5915] usb 4-1: Manufacturer: syz [ 772.584549][ T5915] usb 4-1: SerialNumber: syz [ 772.592692][ T5915] usb 4-1: config 0 descriptor?? [ 772.602253][ T5915] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 772.613675][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 772.623063][ T5980] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 772.637712][ T5915] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 772.790283][ T5980] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 772.801322][ T5980] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 772.810497][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.824222][ T5972] usb 4-1: USB disconnect, device number 123 [ 772.826139][ T5980] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 773.419485][T15887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.430186][T15887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.672024][ T44] usb 2-1: USB disconnect, device number 4 [ 773.749044][T15895] loop6: detected capacity change from 0 to 7 [ 773.770364][T15895] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 773.775958][T15895] loop6: p1 start 3644185255 is beyond EOD, truncated [ 773.801714][T15895] loop6: p2 size 1310720 extends beyond EOD, truncated [ 773.834217][T15895] loop6: p3 start 352518144 is beyond EOD, truncated [ 773.845224][T15895] loop6: p4 start 1635021614 is beyond EOD, truncated [ 773.861738][T15895] loop6: p5 start 50331648 is beyond EOD, truncated [ 773.916226][T15899] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2971'. [ 773.978441][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 774.003411][ T5980] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 774.036401][T15901] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.2972'. [ 774.046532][T15901] netlink: zone id is out of range [ 774.229570][ T5980] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 774.241322][ T5980] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 774.250024][ T5980] usb 3-1: USB disconnect, device number 12 [ 774.305770][ T5915] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 774.454067][ T5915] usb 4-1: device descriptor read/64, error -71 [ 774.519369][ T30] audit: type=1326 audit(1759309554.567:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15857 comm="syz.4.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60a78eec9 code=0x7fc00000 [ 774.566466][ T918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 774.575239][ T918] usb 5-1: too many configurations: 133, using maximum allowed: 8 [ 774.584544][ T918] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 774.592175][ T918] usb 5-1: can't read configurations, error -71 [ 774.623299][T15909] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 [ 774.698672][T15915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2976'. [ 774.712017][ T5915] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 774.862249][ T5915] usb 4-1: device descriptor read/64, error -71 [ 774.935648][ T5983] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 774.978536][ T5915] usb usb4-port1: attempt power cycle [ 775.109603][ T5983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.120185][ T5983] usb 2-1: config 0 interface 0 has no altsetting 0 [ 775.130126][ T5983] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 775.139309][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.147424][ T5983] usb 2-1: Product: syz [ 775.153241][ T5983] usb 2-1: Manufacturer: syz [ 775.157922][ T5983] usb 2-1: SerialNumber: syz [ 775.165292][ T5983] usb 2-1: config 0 descriptor?? [ 775.173708][ T5983] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 775.184278][ T5983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 775.197868][ T5983] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 775.203405][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 775.256132][ T918] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 775.341681][ T5915] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 775.365080][ T5915] usb 4-1: device descriptor read/8, error -71 [ 775.384524][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 775.390355][ T5983] usb 2-1: USB disconnect, device number 5 [ 775.395744][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 775.409176][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.432261][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 775.440040][ T10] pvrusb2: ********** [ 775.444168][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 775.455743][ T10] pvrusb2: Important functionality might not be entirely working. [ 775.463784][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 775.475342][ T918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.485579][ T10] pvrusb2: ********** [ 775.490332][ T918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 775.499617][ T918] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 775.508750][ T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.517929][ T918] usb 5-1: Product: syz [ 775.522150][ T918] usb 5-1: Manufacturer: syz [ 775.527459][ T918] usb 5-1: SerialNumber: syz [ 775.535868][ T918] usb 5-1: config 0 descriptor?? [ 775.544253][ T918] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 775.555888][ T918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 775.569593][ T918] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 775.619727][ T5915] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 775.642316][ T5915] usb 4-1: device descriptor read/8, error -71 [ 775.649309][ T2349] pvrusb2: Invalid write control endpoint [ 775.701019][ T2349] pvrusb2: Invalid write control endpoint [ 775.708779][ T2349] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 775.719770][ T2349] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 775.729105][ T2349] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 775.741043][ T2349] pvrusb2: Device being rendered inoperable [ 775.749994][ T2349] cx25840 16-0044: Unable to detect h/w, assuming cx23887 [ 775.757700][ T2349] cx25840 16-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 775.768626][ T2349] pvrusb2: Attached sub-driver cx25840 [ 775.769729][ T5915] usb usb4-port1: unable to enumerate USB device [ 775.774657][ T2349] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 775.774698][ T2349] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 775.864961][T15921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.873964][T15921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.886549][ T918] usb 3-1: USB disconnect, device number 13 [ 776.053917][T15930] loop6: detected capacity change from 0 to 7 [ 776.062890][T15930] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 776.068331][T15930] loop6: p1 start 3644185255 is beyond EOD, truncated [ 776.075796][T15930] loop6: p2 size 1310720 extends beyond EOD, truncated [ 776.084571][T15930] loop6: p3 start 352518144 is beyond EOD, truncated [ 776.091694][T15930] loop6: p4 start 1635021614 is beyond EOD, truncated [ 776.098546][T15930] loop6: p5 start 50331648 is beyond EOD, truncated [ 776.130578][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 776.702061][T15939] syzkaller1: entered promiscuous mode [ 776.707624][T15939] syzkaller1: entered allmulticast mode [ 776.727102][T15939] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 777.074042][ T5915] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 777.191666][ T918] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 777.213084][ T5915] usb 2-1: device descriptor read/64, error -71 [ 777.275561][T15952] virtio-fs: tag not found [ 777.354251][ T918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.365161][ T918] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 48, using maximum allowed: 30 [ 777.377217][ T918] usb 3-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 777.390521][ T918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 777.399827][ T918] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 777.409343][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.417588][ T918] usb 3-1: Product: syz [ 777.421784][ T918] usb 3-1: Manufacturer: syz [ 777.426422][ T918] usb 3-1: SerialNumber: syz [ 777.434005][ T918] usb 3-1: config 0 descriptor?? [ 777.469736][ T5915] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 777.608895][ T5915] usb 2-1: device descriptor read/64, error -71 [ 777.660215][ T918] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 777.671623][ T918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 777.684781][ T918] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 777.697177][ T918] usb 3-1: USB disconnect, device number 14 [ 777.705700][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 777.726849][ T5915] usb usb2-port1: attempt power cycle [ 777.843989][ T10] usb 4-1: device descriptor read/64, error -71 [ 778.100728][ T5915] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 778.111416][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 778.122624][ T5915] usb 2-1: device descriptor read/8, error -71 [ 778.242519][T15956] syz.2.2990 (15956): /proc/15955/oom_adj is deprecated, please use /proc/15955/oom_score_adj instead. [ 778.259041][ T10] usb 4-1: device descriptor read/64, error -71 [ 778.379610][ T5915] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 778.392374][ T10] usb usb4-port1: attempt power cycle [ 778.401858][ T918] usb 5-1: USB disconnect, device number 87 [ 778.408412][ T5915] usb 2-1: device descriptor read/8, error -71 [ 778.518113][ T5984] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 778.540889][ T5915] usb usb2-port1: unable to enumerate USB device [ 778.688972][ T5984] usb 3-1: Using ep0 maxpacket: 8 [ 778.699242][ T5984] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 778.709819][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 778.718121][ T5984] usb 3-1: Product: syz [ 778.722424][ T5984] usb 3-1: Manufacturer: syz [ 778.727056][ T5984] usb 3-1: SerialNumber: syz [ 778.734502][ T5984] usb 3-1: config 0 descriptor?? [ 778.743111][ T5984] gspca_main: sq905-2.14.0 probing 2770:9120 [ 778.763690][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 778.785761][ T10] usb 4-1: device descriptor read/8, error -71 [ 779.041814][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 779.065663][ T10] usb 4-1: device descriptor read/8, error -71 [ 779.182357][ T10] usb usb4-port1: unable to enumerate USB device [ 779.267950][T15969] loop6: detected capacity change from 0 to 7 [ 779.275351][T15969] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 779.282006][T15969] loop6: p1 start 3644185255 is beyond EOD, truncated [ 779.289169][T15969] loop6: p2 size 1310720 extends beyond EOD, truncated [ 779.297661][T15969] loop6: p3 start 352518144 is beyond EOD, truncated [ 779.304550][T15969] loop6: p4 start 1635021614 is beyond EOD, truncated [ 779.311497][T15969] loop6: p5 start 50331648 is beyond EOD, truncated [ 779.350073][T13643] udevd[13643]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 779.608197][ T5984] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 779.616836][ T5984] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 779.627729][ T5984] usb 3-1: USB disconnect, device number 15 [ 780.031561][T15975] i2c i2c-0: Invalid block write size 254 [ 780.463989][ T5984] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 780.538997][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 780.631090][ T5984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.646874][ T5984] usb 5-1: config 0 interface 0 has no altsetting 0 [ 780.664004][ T5984] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 780.673815][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.682206][ T5984] usb 5-1: Product: syz [ 780.686617][ T5984] usb 5-1: Manufacturer: syz [ 780.692006][ T5984] usb 5-1: SerialNumber: syz [ 780.708953][ T5984] usb 5-1: config 0 descriptor?? [ 780.722915][ T5984] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 780.723647][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.744746][ T5984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 780.761367][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 780.778453][ T5984] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 780.782101][ T10] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 780.807892][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.815966][ T10] usb 3-1: Product: syz [ 780.831116][ T10] usb 3-1: Manufacturer: syz [ 780.835784][ T10] usb 3-1: SerialNumber: syz [ 780.866825][ T10] usb 3-1: config 0 descriptor?? [ 780.877664][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 780.912145][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 780.948311][ T5984] usb 5-1: USB disconnect, device number 88 [ 780.981564][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 780.992243][ T918] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 781.174297][ T918] usb 4-1: Using ep0 maxpacket: 16 [ 781.198706][ T918] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 781.207973][ T918] usb 4-1: config 0 has no interface number 0 [ 781.216002][ T918] usb 4-1: config 0 interface 48 has no altsetting 0 [ 781.252647][ T918] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 781.262090][ T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.271466][ T918] usb 4-1: Product: syz [ 781.275814][ T918] usb 4-1: Manufacturer: syz [ 781.281591][ T918] usb 4-1: SerialNumber: syz [ 781.298217][ T918] usb 4-1: config 0 descriptor?? [ 781.623538][ T5915] usb 4-1: USB disconnect, device number 6 [ 783.251160][T16007] loop6: detected capacity change from 0 to 7 [ 783.265028][T13149] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 783.278232][T13149] loop6: p1 start 3644185255 is beyond EOD, truncated [ 783.297158][T13149] loop6: p2 size 1310720 extends beyond EOD, truncated [ 783.306918][T13149] loop6: p3 start 352518144 is beyond EOD, truncated [ 783.314705][T13149] loop6: p4 start 1635021614 is beyond EOD, truncated [ 783.324831][T13149] loop6: p5 start 50331648 is beyond EOD, truncated [ 783.343992][T16007] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 783.350409][T16007] loop6: p1 start 3644185255 is beyond EOD, truncated [ 783.357937][T16007] loop6: p2 size 1310720 extends beyond EOD, truncated [ 783.367632][T16007] loop6: p3 start 352518144 is beyond EOD, truncated [ 783.375040][T16007] loop6: p4 start 1635021614 is beyond EOD, truncated [ 783.381931][T16007] loop6: p5 start 50331648 is beyond EOD, truncated [ 783.427934][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 783.460934][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 783.735548][T16010] netlink: 'syz.4.3005': attribute type 29 has an invalid length. [ 783.758683][T16010] netlink: 'syz.4.3005': attribute type 29 has an invalid length. [ 783.767181][T16009] delete_channel: no stack [ 783.794411][ T918] usb 3-1: USB disconnect, device number 16 [ 784.151101][T16030] netlink: 'syz.4.3009': attribute type 46 has an invalid length. [ 784.228258][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 784.346064][ T918] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 784.378209][ T10] usb 2-1: device descriptor read/64, error -71 [ 784.527674][ T918] usb 3-1: Using ep0 maxpacket: 32 [ 784.539932][ T918] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 784.549603][ T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.581900][ T918] usb 3-1: config 0 descriptor?? [ 784.611739][ T918] as10x_usb: device has been detected [ 784.625230][ T918] usb 3-1: as102_dvb_register: dvb_register_adapter() failed: -23 [ 784.639047][ T918] Abilis Systems as10x usb driver 3-1:0.0: probe with driver Abilis Systems as10x usb driver failed with error -23 [ 784.652167][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 784.794002][T16038] netlink: 'syz.4.3013': attribute type 21 has an invalid length. [ 784.803203][T16038] netlink: 'syz.4.3013': attribute type 1 has an invalid length. [ 784.806344][ T10] usb 2-1: device descriptor read/64, error -71 [ 784.829417][ T918] usb 3-1: USB disconnect, device number 17 [ 784.848985][ T5980] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 784.955784][ T10] usb usb2-port1: attempt power cycle [ 784.998190][ T5980] usb 4-1: device descriptor read/64, error -71 [ 785.044775][T16021] tmpfs: Cannot change global quota limit on remount [ 785.073089][ T5984] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 785.236222][ T5984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.246489][ T5984] usb 5-1: config 0 interface 0 has no altsetting 0 [ 785.254978][ T5980] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 785.263419][ T5984] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 785.272903][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.281358][ T5984] usb 5-1: Product: syz [ 785.286150][ T5984] usb 5-1: Manufacturer: syz [ 785.290847][ T5984] usb 5-1: SerialNumber: syz [ 785.297989][ T5984] usb 5-1: config 0 descriptor?? [ 785.307792][ T5984] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 785.318523][ T5984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 785.330620][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 785.332522][ T5984] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 785.363423][ T10] usb 2-1: device descriptor read/8, error -71 [ 785.415829][ T5980] usb 4-1: device descriptor read/64, error -71 [ 785.529937][ T5984] usb 5-1: USB disconnect, device number 89 [ 785.536406][ T5980] usb usb4-port1: attempt power cycle [ 785.543924][ T918] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 785.618700][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 785.640289][ T10] usb 2-1: device descriptor read/8, error -71 [ 785.693327][ T918] usb 3-1: device descriptor read/64, error -71 [ 785.757780][ T10] usb usb2-port1: unable to enumerate USB device [ 785.928537][ T5980] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 785.950636][ T5980] usb 4-1: device descriptor read/8, error -71 [ 785.960961][ T918] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 786.110326][ T918] usb 3-1: device descriptor read/64, error -71 [ 786.206698][ T5980] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 786.228629][ T918] usb usb3-port1: attempt power cycle [ 786.235098][ T5980] usb 4-1: device descriptor read/8, error -71 [ 786.356778][ T5980] usb usb4-port1: unable to enumerate USB device [ 786.612990][ T10] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 786.620694][ T918] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 786.647215][ T918] usb 3-1: device descriptor read/8, error -71 [ 786.807514][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.817782][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 786.826570][ T10] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 786.835746][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.844219][ T10] usb 5-1: Product: syz [ 786.848905][ T10] usb 5-1: Manufacturer: syz [ 786.853535][ T10] usb 5-1: SerialNumber: syz [ 786.860758][ T10] usb 5-1: config 0 descriptor?? [ 786.868782][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 786.880145][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 786.894360][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 786.912458][ T918] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 786.945193][ T918] usb 3-1: device descriptor read/8, error -71 [ 787.073152][ T918] usb usb3-port1: unable to enumerate USB device [ 787.277608][T16049] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3016'. [ 787.287817][T16049] 0·: renamed from hsr0 (while UP) [ 787.301463][T16049] 0·: entered allmulticast mode [ 787.306375][T16049] hsr_slave_0: entered allmulticast mode [ 787.323847][T16049] hsr_slave_1: entered allmulticast mode [ 787.349340][T16049] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 787.586597][ T918] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 787.684317][ T5915] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 787.712929][T16064] loop6: detected capacity change from 0 to 7 [ 787.723577][T16064] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 787.730395][T16064] loop6: p1 start 3644185255 is beyond EOD, truncated [ 787.737654][T16064] loop6: p2 size 1310720 extends beyond EOD, truncated [ 787.745991][T16064] loop6: p3 start 352518144 is beyond EOD, truncated [ 787.753034][T16064] loop6: p4 start 1635021614 is beyond EOD, truncated [ 787.760172][ T918] usb 2-1: device descriptor read/64, error -71 [ 787.760359][T16064] loop6: p5 start 50331648 is beyond EOD, truncated [ 787.799334][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 787.856021][ T5915] usb 3-1: config 202 has an invalid interface number: 113 but max is 0 [ 787.864692][ T5915] usb 3-1: config 202 has no interface number 0 [ 787.870977][ T5915] usb 3-1: config 202 interface 113 has no altsetting 0 [ 787.880950][ T5915] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=7e.5f [ 787.890592][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.899024][ T5915] usb 3-1: Product: syz [ 787.903318][ T5915] usb 3-1: Manufacturer: syz [ 787.908026][ T5915] usb 3-1: SerialNumber: syz [ 788.013871][ T918] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 788.131762][T16051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.140829][T16051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.149854][T16051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.158377][ T918] usb 2-1: device descriptor read/64, error -71 [ 788.159095][T16051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.174343][T16051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.183235][T16051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.192322][T16051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.202525][T16051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.219481][T16051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.228820][T16051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.257328][ T5915] usb 3-1: NFC: intf ffff888032cec000 id ffffffff8ef835e0 [ 788.268110][ T5915] usb 3-1: USB disconnect, device number 22 [ 788.287645][ T918] usb usb2-port1: attempt power cycle [ 788.666258][ T918] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 788.689176][ T918] usb 2-1: device descriptor read/8, error -71 [ 788.837479][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 788.965614][ T918] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 788.976290][ T10] usb 4-1: device descriptor read/64, error -71 [ 788.988408][ T918] usb 2-1: device descriptor read/8, error -71 [ 789.083261][ T5915] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 789.104859][ T918] usb usb2-port1: unable to enumerate USB device [ 789.243650][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 789.256768][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.267113][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 789.276463][ T5915] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 789.285582][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.293914][ T5915] usb 3-1: Product: syz [ 789.298307][ T5915] usb 3-1: Manufacturer: syz [ 789.302936][ T5915] usb 3-1: SerialNumber: syz [ 789.311209][ T5915] usb 3-1: config 0 descriptor?? [ 789.320428][ T5915] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 789.331409][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 789.344290][ T5915] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 789.395957][ T10] usb 4-1: device descriptor read/64, error -71 [ 789.511326][ T10] usb usb4-port1: attempt power cycle [ 789.567439][T16078] hfs: unable to load iocharset "io#harset" [ 789.574848][T14422] usb 3-1: USB disconnect, device number 23 [ 789.702548][ T918] usb 5-1: USB disconnect, device number 90 [ 789.874574][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 789.899209][ T10] usb 4-1: device descriptor read/8, error -71 [ 790.067053][ T918] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 790.163507][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 790.186548][ T10] usb 4-1: device descriptor read/8, error -71 [ 790.229696][ T918] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 790.237929][ T918] usb 5-1: config 0 has no interface number 0 [ 790.250602][ T918] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 790.260066][ T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.268102][ T918] usb 5-1: Product: syz [ 790.272982][ T918] usb 5-1: Manufacturer: syz [ 790.277613][ T918] usb 5-1: SerialNumber: syz [ 790.287682][ T918] usb 5-1: config 0 descriptor?? [ 790.300408][ T918] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 790.312724][ T918] pctv452e: pctv452e_power_ctrl: 1 [ 790.312724][ T918] [ 790.321991][ T10] usb usb4-port1: unable to enumerate USB device [ 790.329347][ T918] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 790.329347][ T918] [ 790.340307][ T918] dvb-usb: bulk message failed: -22 (5/0) [ 790.354753][ T918] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 790.369883][ T918] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 790.434166][T16088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.448832][T16049] block nbd1: shutting down sockets [ 790.454398][T16090] netlink: 'syz.2.3027': attribute type 21 has an invalid length. [ 790.465920][T16090] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3027'. [ 790.475606][T16090] netlink: 'syz.2.3027': attribute type 4 has an invalid length. [ 790.483369][T16090] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3027'. [ 790.519157][ T5915] usb 5-1: USB disconnect, device number 91 [ 790.594050][T16094] loop6: detected capacity change from 0 to 7 [ 790.601956][T16094] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 790.608099][T16094] loop6: p1 start 3644185255 is beyond EOD, truncated [ 790.615511][T16094] loop6: p2 size 1310720 extends beyond EOD, truncated [ 790.624928][T16094] loop6: p3 start 352518144 is beyond EOD, truncated [ 790.633405][T16094] loop6: p4 start 1635021614 is beyond EOD, truncated [ 790.640999][T16094] loop6: p5 start 50331648 is beyond EOD, truncated [ 790.693225][T13149] udevd[13149]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 790.869279][ T5984] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 791.030390][ T5984] usb 2-1: no configurations [ 791.035083][ T5984] usb 2-1: can't read configurations, error -22 [ 791.179341][ T5984] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 791.239412][T16101] fuse: Bad value for 'fd' [ 791.312712][T16103] team0: No ports can be present during mode change [ 791.340411][ T5984] usb 2-1: no configurations [ 791.353299][ T5984] usb 2-1: can't read configurations, error -22 [ 791.360712][ T5984] usb usb2-port1: attempt power cycle [ 791.400878][T16107] [ 791.403266][T16107] ====================================================== [ 791.410306][T16107] WARNING: possible circular locking dependency detected [ 791.417355][T16107] syzkaller #0 Not tainted [ 791.421787][T16107] ------------------------------------------------------ [ 791.428868][T16107] syz.4.3033/16107 is trying to acquire lock: [ 791.434948][T16107] ffffffff8fa52dc8 (cpool_mutex){+.+.}-{4:4}, at: tcp_sigpool_alloc_ahash+0x88/0xc70 [ 791.444476][T16107] [ 791.444476][T16107] but task is already holding lock: [ 791.451868][T16107] ffff888021793558 (sk_lock-AF_INET){+.+.}-{0:0}, at: do_tcp_setsockopt+0x854/0x1f20 [ 791.461386][T16107] [ 791.461386][T16107] which lock already depends on the new lock. [ 791.461386][T16107] [ 791.471838][T16107] [ 791.471838][T16107] the existing dependency chain (in reverse order) is: [ 791.480859][T16107] [ 791.480859][T16107] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 791.488541][T16107] lock_acquire+0x120/0x360 [ 791.493582][T16107] lock_sock_nested+0x48/0x100 [ 791.498903][T16107] inet_shutdown+0x6a/0x390 [ 791.503934][T16107] nbd_mark_nsock_dead+0x2e9/0x560 [ 791.509575][T16107] sock_shutdown+0x15e/0x260 [ 791.514711][T16107] nbd_config_put+0x342/0x790 [ 791.519926][T16107] nbd_release+0xfe/0x140 [ 791.524783][T16107] bdev_release+0x536/0x650 [ 791.529819][T16107] blkdev_release+0x15/0x20 [ 791.534866][T16107] __fput+0x44c/0xa70 [ 791.539397][T16107] task_work_run+0x1d4/0x260 [ 791.544517][T16107] do_exit+0x6b5/0x2300 [ 791.549210][T16107] do_group_exit+0x21c/0x2d0 [ 791.554338][T16107] get_signal+0x1285/0x1340 [ 791.559417][T16107] arch_do_signal_or_restart+0xa0/0x790 [ 791.565507][T16107] exit_to_user_mode_loop+0x72/0x130 [ 791.571337][T16107] do_syscall_64+0x2bd/0xfa0 [ 791.576490][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.582917][T16107] [ 791.582917][T16107] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 791.590665][T16107] lock_acquire+0x120/0x360 [ 791.595704][T16107] __mutex_lock+0x187/0x1350 [ 791.600846][T16107] nbd_queue_rq+0x257/0xf10 [ 791.605885][T16107] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 791.611973][T16107] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 791.618888][T16107] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 791.625412][T16107] blk_mq_run_hw_queue+0x348/0x4f0 [ 791.631057][T16107] blk_mq_dispatch_list+0xd0c/0xe00 [ 791.636793][T16107] blk_mq_flush_plug_list+0x469/0x550 [ 791.642709][T16107] __blk_flush_plug+0x3d3/0x4b0 [ 791.648102][T16107] __submit_bio+0x2d3/0x5a0 [ 791.653141][T16107] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 791.659304][T16107] block_read_full_folio+0x599/0x830 [ 791.665114][T16107] filemap_read_folio+0x117/0x380 [ 791.670668][T16107] do_read_cache_folio+0x350/0x590 [ 791.676309][T16107] read_part_sector+0xb6/0x2b0 [ 791.681599][T16107] adfspart_check_ICS+0xa4/0xa50 [ 791.687097][T16107] bdev_disk_changed+0x75f/0x14b0 [ 791.692669][T16107] blkdev_get_whole+0x380/0x510 [ 791.698068][T16107] bdev_open+0x31e/0xd30 [ 791.702845][T16107] blkdev_open+0x457/0x600 [ 791.707799][T16107] do_dentry_open+0x953/0x13f0 [ 791.713108][T16107] vfs_open+0x3b/0x340 [ 791.717709][T16107] path_openat+0x2ee5/0x3830 [ 791.722827][T16107] do_filp_open+0x1fa/0x410 [ 791.727861][T16107] do_sys_openat2+0x121/0x1c0 [ 791.733097][T16107] __x64_sys_openat+0x138/0x170 [ 791.738481][T16107] do_syscall_64+0xfa/0xfa0 [ 791.743517][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.749934][T16107] [ 791.749934][T16107] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 791.757158][T16107] lock_acquire+0x120/0x360 [ 791.762192][T16107] __mutex_lock+0x187/0x1350 [ 791.767316][T16107] nbd_queue_rq+0xc8/0xf10 [ 791.772267][T16107] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 791.778340][T16107] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 791.785201][T16107] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 791.791709][T16107] blk_mq_run_hw_queue+0x348/0x4f0 [ 791.797361][T16107] blk_mq_dispatch_list+0xd0c/0xe00 [ 791.803087][T16107] blk_mq_flush_plug_list+0x469/0x550 [ 791.809088][T16107] __blk_flush_plug+0x3d3/0x4b0 [ 791.814470][T16107] __submit_bio+0x2d3/0x5a0 [ 791.819510][T16107] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 791.825674][T16107] block_read_full_folio+0x599/0x830 [ 791.831490][T16107] filemap_read_folio+0x117/0x380 [ 791.837053][T16107] do_read_cache_folio+0x350/0x590 [ 791.842696][T16107] read_part_sector+0xb6/0x2b0 [ 791.847992][T16107] adfspart_check_ICS+0xa4/0xa50 [ 791.853461][T16107] bdev_disk_changed+0x75f/0x14b0 [ 791.859011][T16107] blkdev_get_whole+0x380/0x510 [ 791.864390][T16107] bdev_open+0x31e/0xd30 [ 791.869170][T16107] blkdev_open+0x457/0x600 [ 791.874122][T16107] do_dentry_open+0x953/0x13f0 [ 791.879509][T16107] vfs_open+0x3b/0x340 [ 791.884108][T16107] path_openat+0x2ee5/0x3830 [ 791.889223][T16107] do_filp_open+0x1fa/0x410 [ 791.894252][T16107] do_sys_openat2+0x121/0x1c0 [ 791.899466][T16107] __x64_sys_openat+0x138/0x170 [ 791.904852][T16107] do_syscall_64+0xfa/0xfa0 [ 791.909913][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.916334][T16107] [ 791.916334][T16107] -> #4 (set->srcu){.+.+}-{0:0}: [ 791.923475][T16107] lock_sync+0xba/0x160 [ 791.928158][T16107] __synchronize_srcu+0x96/0x3a0 [ 791.933629][T16107] elevator_switch+0x12b/0x640 [ 791.938920][T16107] elevator_change+0x315/0x4c0 [ 791.944299][T16107] elevator_set_default+0x186/0x260 [ 791.950026][T16107] blk_register_queue+0x34e/0x3f0 [ 791.955585][T16107] __add_disk+0x677/0xd50 [ 791.960447][T16107] add_disk_fwnode+0xfc/0x480 [ 791.965743][T16107] nbd_dev_add+0x717/0xae0 [ 791.970691][T16107] nbd_init+0x168/0x1f0 [ 791.975383][T16107] do_one_initcall+0x236/0x820 [ 791.980671][T16107] do_initcall_level+0x104/0x190 [ 791.986140][T16107] do_initcalls+0x59/0xa0 [ 791.991003][T16107] kernel_init_freeable+0x334/0x4b0 [ 791.996734][T16107] kernel_init+0x1d/0x1d0 [ 792.001599][T16107] ret_from_fork+0x4bc/0x870 [ 792.006727][T16107] ret_from_fork_asm+0x1a/0x30 [ 792.012113][T16107] [ 792.012113][T16107] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 792.019938][T16107] lock_acquire+0x120/0x360 [ 792.024971][T16107] __mutex_lock+0x187/0x1350 [ 792.030089][T16107] elevator_change+0x1e5/0x4c0 [ 792.035387][T16107] elevator_set_none+0x42/0xb0 [ 792.040681][T16107] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 792.047028][T16107] nbd_start_device+0x17f/0xb10 [ 792.052419][T16107] nbd_genl_connect+0x135b/0x18f0 [ 792.057996][T16107] genl_family_rcv_msg_doit+0x215/0x300 [ 792.064077][T16107] genl_rcv_msg+0x60e/0x790 [ 792.069117][T16107] netlink_rcv_skb+0x208/0x470 [ 792.074505][T16107] genl_rcv+0x28/0x40 [ 792.079035][T16107] netlink_unicast+0x82f/0x9e0 [ 792.084343][T16107] netlink_sendmsg+0x805/0xb30 [ 792.089640][T16107] __sock_sendmsg+0x21c/0x270 [ 792.094869][T16107] ____sys_sendmsg+0x505/0x830 [ 792.100162][T16107] ___sys_sendmsg+0x21f/0x2a0 [ 792.105372][T16107] __x64_sys_sendmsg+0x19b/0x260 [ 792.110843][T16107] do_syscall_64+0xfa/0xfa0 [ 792.115879][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.122326][T16107] [ 792.122326][T16107] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 792.130956][T16107] lock_acquire+0x120/0x360 [ 792.135988][T16107] blk_alloc_queue+0x538/0x620 [ 792.141382][T16107] __blk_mq_alloc_disk+0x15c/0x340 [ 792.147029][T16107] nbd_dev_add+0x46c/0xae0 [ 792.151981][T16107] nbd_init+0x168/0x1f0 [ 792.156731][T16107] do_one_initcall+0x236/0x820 [ 792.162112][T16107] do_initcall_level+0x104/0x190 [ 792.167620][T16107] do_initcalls+0x59/0xa0 [ 792.172484][T16107] kernel_init_freeable+0x334/0x4b0 [ 792.178243][T16107] kernel_init+0x1d/0x1d0 [ 792.183106][T16107] ret_from_fork+0x4bc/0x870 [ 792.188230][T16107] ret_from_fork_asm+0x1a/0x30 [ 792.193520][T16107] [ 792.193520][T16107] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 792.200847][T16107] lock_acquire+0x120/0x360 [ 792.205920][T16107] fs_reclaim_acquire+0x72/0x100 [ 792.211387][T16107] __kmalloc_noprof+0x9c/0x7f0 [ 792.216687][T16107] tcp_sigpool_alloc_ahash+0x144/0xc70 [ 792.222685][T16107] tcp_md5_alloc_sigpool+0x1b/0x50 [ 792.228328][T16107] tcp_md5_do_add+0x107/0x3a0 [ 792.233532][T16107] tcp_v6_parse_md5_keys+0x4df/0x610 [ 792.239357][T16107] do_tcp_setsockopt+0x11dc/0x1f20 [ 792.245045][T16107] do_sock_setsockopt+0x17c/0x1b0 [ 792.250604][T16107] __x64_sys_setsockopt+0x13f/0x1b0 [ 792.256330][T16107] do_syscall_64+0xfa/0xfa0 [ 792.261364][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.267785][T16107] [ 792.267785][T16107] -> #0 (cpool_mutex){+.+.}-{4:4}: [ 792.275095][T16107] validate_chain+0xb9b/0x2140 [ 792.280426][T16107] __lock_acquire+0xab9/0xd20 [ 792.285629][T16107] lock_acquire+0x120/0x360 [ 792.290669][T16107] __mutex_lock+0x187/0x1350 [ 792.295792][T16107] tcp_sigpool_alloc_ahash+0x88/0xc70 [ 792.301699][T16107] tcp_md5_alloc_sigpool+0x1b/0x50 [ 792.307345][T16107] tcp_md5_do_add+0x107/0x3a0 [ 792.312547][T16107] tcp_v4_parse_md5_keys+0x412/0x600 [ 792.318369][T16107] do_tcp_setsockopt+0x11dc/0x1f20 [ 792.324012][T16107] do_sock_setsockopt+0x17c/0x1b0 [ 792.329565][T16107] __x64_sys_setsockopt+0x13f/0x1b0 [ 792.335304][T16107] do_syscall_64+0xfa/0xfa0 [ 792.340334][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.346751][T16107] [ 792.346751][T16107] other info that might help us debug this: [ 792.346751][T16107] [ 792.357070][T16107] Chain exists of: [ 792.357070][T16107] cpool_mutex --> &nsock->tx_lock --> sk_lock-AF_INET [ 792.357070][T16107] [ 792.369771][T16107] Possible unsafe locking scenario: [ 792.369771][T16107] [ 792.377217][T16107] CPU0 CPU1 [ 792.382614][T16107] ---- ---- [ 792.387981][T16107] lock(sk_lock-AF_INET); [ 792.392411][T16107] lock(&nsock->tx_lock); [ 792.399350][T16107] lock(sk_lock-AF_INET); [ 792.406289][T16107] lock(cpool_mutex); [ 792.410539][T16107] [ 792.410539][T16107] *** DEADLOCK *** [ 792.410539][T16107] [ 792.418684][T16107] 1 lock held by syz.4.3033/16107: [ 792.423791][T16107] #0: ffff888021793558 (sk_lock-AF_INET){+.+.}-{0:0}, at: do_tcp_setsockopt+0x854/0x1f20 [ 792.433727][T16107] [ 792.433727][T16107] stack backtrace: [ 792.439616][T16107] CPU: 0 UID: 0 PID: 16107 Comm: syz.4.3033 Not tainted syzkaller #0 PREEMPT(full) [ 792.439636][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 792.439648][T16107] Call Trace: [ 792.439656][T16107] [ 792.439665][T16107] dump_stack_lvl+0x189/0x250 [ 792.439696][T16107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.439723][T16107] ? __pfx__printk+0x10/0x10 [ 792.439747][T16107] ? print_lock_name+0xde/0x100 [ 792.439772][T16107] print_circular_bug+0x2ee/0x310 [ 792.439799][T16107] check_noncircular+0x134/0x160 [ 792.439827][T16107] validate_chain+0xb9b/0x2140 [ 792.439851][T16107] ? xfd_validate_state+0x6d/0x150 [ 792.439873][T16107] ? rcu_is_watching+0x15/0xb0 [ 792.439900][T16107] __lock_acquire+0xab9/0xd20 [ 792.439922][T16107] ? tcp_sigpool_alloc_ahash+0x88/0xc70 [ 792.439945][T16107] lock_acquire+0x120/0x360 [ 792.439964][T16107] ? tcp_sigpool_alloc_ahash+0x88/0xc70 [ 792.439992][T16107] __mutex_lock+0x187/0x1350 [ 792.440014][T16107] ? tcp_sigpool_alloc_ahash+0x88/0xc70 [ 792.440035][T16107] ? rcu_is_watching+0x15/0xb0 [ 792.440057][T16107] ? trace_sched_exit_tp+0x36/0x110 [ 792.440074][T16107] ? __schedule+0x17ae/0x4cc0 [ 792.440093][T16107] ? rcu_read_lock_sched_held+0x89/0x100 [ 792.440117][T16107] ? tcp_sigpool_alloc_ahash+0x88/0xc70 [ 792.440140][T16107] ? __pfx___mutex_lock+0x10/0x10 [ 792.440170][T16107] tcp_sigpool_alloc_ahash+0x88/0xc70 [ 792.440196][T16107] ? __pfx_tcp_sigpool_alloc_ahash+0x10/0x10 [ 792.440218][T16107] ? __might_fault+0xb0/0x130 [ 792.440248][T16107] tcp_md5_alloc_sigpool+0x1b/0x50 [ 792.440269][T16107] tcp_md5_do_add+0x107/0x3a0 [ 792.440293][T16107] tcp_v4_parse_md5_keys+0x412/0x600 [ 792.440322][T16107] ? __pfx_tcp_v4_parse_md5_keys+0x10/0x10 [ 792.440347][T16107] ? __lock_acquire+0xab9/0xd20 [ 792.440373][T16107] ? __local_bh_enable_ip+0x12d/0x1c0 [ 792.440395][T16107] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 792.440421][T16107] do_tcp_setsockopt+0x11dc/0x1f20 [ 792.440444][T16107] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 792.440465][T16107] ? aa_sk_perm+0x81e/0x950 [ 792.440485][T16107] ? __pfx_aa_sk_perm+0x10/0x10 [ 792.440504][T16107] ? aa_sock_opt_perm+0xff/0x1b0 [ 792.440526][T16107] ? sock_common_setsockopt+0x36/0xc0 [ 792.440542][T16107] ? tcp_setsockopt+0x3d/0xe0 [ 792.440567][T16107] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 792.440585][T16107] do_sock_setsockopt+0x17c/0x1b0 [ 792.440607][T16107] __x64_sys_setsockopt+0x13f/0x1b0 [ 792.440630][T16107] do_syscall_64+0xfa/0xfa0 [ 792.440651][T16107] ? lockdep_hardirqs_on+0x9c/0x150 [ 792.440671][T16107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.440688][T16107] ? clear_bhb_loop+0x60/0xb0 [ 792.440707][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.440725][T16107] RIP: 0033:0x7fe60a78eec9 [ 792.440741][T16107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.440757][T16107] RSP: 002b:00007fe60b545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 792.440775][T16107] RAX: ffffffffffffffda RBX: 00007fe60a9e5fa0 RCX: 00007fe60a78eec9 [ 792.440788][T16107] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000004 [ 792.440799][T16107] RBP: 00007fe60a811f91 R08: 00000000000000d8 R09: 0000000000000000 [ 792.440812][T16107] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 792.440823][T16107] R13: 00007fe60a9e6038 R14: 00007fe60a9e5fa0 R15: 00007ffc33a46b58 [ 792.440843][T16107] [ 792.779396][ T5984] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 792.806953][ T5984] usb 2-1: no configurations [ 792.811609][ T5984] usb 2-1: can't read configurations, error -22 [ 792.975927][ T5984] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 792.998116][ T5984] usb 2-1: no configurations [ 793.002758][ T5984] usb 2-1: can't read configurations, error -22 [ 793.010517][ T5984] usb usb2-port1: unable to enumerate USB device