last executing test programs: 12m46.095698663s ago: executing program 2 (id=841): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000280)={0x620240, 0x2, 0x8}, 0x18) mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0x1d6) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff0000000904010102ff0000000705870240"], 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r2, &(0x7f0000000600)='dir .', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='sys_mnt/block/zram0/algorithm_params/file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000880)={[{@upperdir={'upperdir', 0x3d, './debug'}, 0x3a}], [{@permit_directio}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_eq}, {@context={'context', 0x3d, 'user_u'}}], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') write(r2, &(0x7f0000000700)='bind', 0x4) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)="0200000000000038", 0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xa400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r4, 0x6, &(0x7f0000000180)={0x0, 0x1, 0xa2, 0x7a, r7}) write(r6, &(0x7f0000000400)='algo=zstd dict=d', 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4855}, 0x24000052) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x64, 0x21, 0x200, 0x0, 0x0, {{@in=@private=0xa010100, @in=@multicast1, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x64}}, 0x0) 12m41.868326325s ago: executing program 2 (id=848): setns(0xc9, 0x40000000) socket$packet(0x11, 0x2, 0x300) r0 = memfd_secret(0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000340)={0xc0, 0x0, 0x82000}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0xf, 0x803, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x330}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000180), 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000540)={"7894adbd24ab3ac6656ff534edde4907", 0x0, 0x0, {0x4}, {0x8000000000000000, 0x401}, 0xffffffff, [0xd, 0x7, 0x10001, 0x41e5b89, 0x30000000000, 0x401, 0x7, 0x0, 0x9, 0x8000e, 0x4, 0x7, 0xffff, 0x8000000000000000, 0x800, 0x47]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r5 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r5, 0x0, 0x0, 0x1000f4) sendfile(r5, r5, 0x0, 0x40000000800) 12m40.531157238s ago: executing program 2 (id=852): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x6) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r6, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00050008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="144adfaed0972d7381253c32", @ANYRES16=r9, @ANYBLOB="34052bbd7000ffdbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4050) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 12m35.385004933s ago: executing program 2 (id=859): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') getpid() mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fstat(0xffffffffffffffff, &(0x7f0000004f40)) newfstatat(0xffffffffffffff9c, &(0x7f0000004fc0)='./file0\x00', &(0x7f0000005000), 0x4000) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000005080), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000940)={0xcb, 0x1c, &(0x7f0000000540)="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"}) syz_open_dev$tty1(0xc, 0x4, 0x1) 12m34.471203577s ago: executing program 2 (id=860): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m30.823866206s ago: executing program 2 (id=867): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xc, 0xb}, 0x1}, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$pppoe(0x18, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff3f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x2, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0xe5e54be0630c28fa, 0x4, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12m30.113261645s ago: executing program 32 (id=867): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xc, 0xb}, 0x1}, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$pppoe(0x18, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff3f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x2, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0xe5e54be0630c28fa, 0x4, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14.524246952s ago: executing program 3 (id=2274): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) sched_setattr(r3, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000480)=0x4000000) read$dsp(r6, &(0x7f0000000280)=""/189, 0xbd) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaa2279ed647d3ece32080045000028000d0090780ac10005000000070000000700000004"], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 14.011927413s ago: executing program 0 (id=2275): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7) setpriority(0x0, 0x0, 0x2a14b58) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f0000002180)=[{&(0x7f0000000040)}], 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) 12.729397504s ago: executing program 3 (id=2277): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.680004927s ago: executing program 5 (id=2278): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@userptr={0x0, 0x1, 0x4, 0x8, 0x80002, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "01000100"}, 0xfffe, 0x2, {0x0}, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) 11.53959332s ago: executing program 1 (id=2279): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac3(0x6, 0xb1, &(0x7f0000000280)=ANY=[], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) fsopen(&(0x7f0000000040)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='sour#e', &(0x7f0000019780)='%\xff:2\x82|\x9a^mA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xef:\xb5\x0e\xec\xe5\xdc\xe5\x8d)\x01\x00\x00\x01\x00\x00\x00\x00\xc5*\x15\xd7_\xb2_`\x92|\x7f\xff8\xf7o$j&!\xfd\xea\xb0\xb0\xb9\xf9,\xedJ{;CL\xd9\x9b\xbd\xc1O\xe8\x94(\x18\xb6\xea2\xa4\xb3\xb3sQ-v\\\xb4\xdaf\x1c*Q\xf3w\xcd\x96\a*\xff\xfc.\xee\xb6\xe53\xcd\xec9T+8\x14Ze\\W\xbbKzWU\xe1\'7][\xce \xadAo+\xab\xe3H)\xa5\xfa\xacY\xe6\x84\xa6Y\xd6z\xf2j{\x19\xda\xe0\xec\xf3\xa6\x87\xcdJ\xa8\xc08C\xca\x9d\xb9\xcf\xaf\x82\xb9df\x81\x82\xf8\x1eh/C\xbf\x1c~1E\x911\xd6\xde\xc2a\xbf\xfe\x12\xd4X\xccb8q<\x86\x16,ewr\x82\xfc\x85\x9c\t\"7\x0e\xafq\x03\x193\x9eD&\xc3\xaba\xc2\xe4;\x9ax\xd8\xb9F\xf8\xf2\x8d3\x12\xc2\xd0\xd9\xbf\xbb\r\xe7\'S\x89M\x18W:q\x108\xf8\xd3\x94\xc6\xcc\xe5\xbaE\\\xc2\xfb;\xe8s \x1en`\xd3\x8e!|\xe0\x18J\x98\xc3\x15\x18\xd3\x81-', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000019700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e000000010000000000000104000000200000010000b6d151adc33b7600000000000d01000000050000000000000c020000000a009c7c556100000000000c0200000000696e74006d61"], 0x0, 0x5a, 0x0, 0x0, 0x7fffffff}, 0x28) close(0x3) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000100880)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x8001, 0x40, &(0x7f0000100740)="9dc5f02f61527b2886b86c03aa60fb822dee5e1ff9555e57797bb19af2ca806372b06d4e7bf232bf889a6a7e41e3701ab0e9826a64f121d084dbf7131575375895c8fc2d8406edd607e40989857083c5fd3f835c235a6d23b9f18ec92e36c08995a14d", 0x63, 0x7, 0x401, 0x0, 0x3, 0xffff, &(0x7f00001007c0)="05a2134ace8f6e166670fd7eb0045e60a1b0bdb2fe10926e9b79bb014f290ec49382ecddbd6975fe5270503ffef577c8c0ffc59fd851634967ba6bf8082d7432019dc5a712c1c972f7ce4dbbdc428021a33f68afbda0538f6f8487f74a045c3bd8c15576f0e09efdc755dc391d8efe6ed466f98a1c06afb707d27c4804e978adcb2ab20e5fa89fa1a89de2c50e3c095816d138fc28967a520fa8a2084d6138b6a14dc4c5339ec79b5445ed2c03ee2208f9dd60c3e72b7cc802e191e6"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x19000, &(0x7f0000000700)=""/102400, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) fanotify_init(0x200, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000198c0)=ANY=[@ANYBLOB="7c0000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000005400128009000100766c616e00000000440002800c0002001600000017000000340004800c00010000000000020000000c00010008000000001000000c00010001800000400000000c000100000030000300000008000500", @ANYRES32=r5, @ANYBLOB="fad4a17ef745b6cd3083345ecd34a6e768efc4bfc33fc11ca7196806c89e81cc8cdde337ad34155cc0"], 0x7c}}, 0x8048802) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c0003003412000078560000010000000010000005200973a10185010a19031500250775089501b1020a16039501b102850216008026ff7f75100a5304950181020a5404950181020a550495018102c0"], 0x154) write$UHID_DESTROY(r0, &(0x7f0000000500), 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) 11.083955527s ago: executing program 0 (id=2280): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x6) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r6, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00050008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="144adfaed0972d7381253c32", @ANYRES16=r9, @ANYBLOB="34052bbd7000ffdbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4050) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000500dfd74d05892300000000000000000000000100000000000000000000000000004000000011000100000000000000"], 0x104}}, 0x0) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 9.792854176s ago: executing program 5 (id=2283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xc, 0xa96}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x0, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2400508c}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) 9.427062817s ago: executing program 1 (id=2284): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000240)={0x20000, 0x4, 0x10000000000337, 0x200, 0x3, 0xfffffffffffffffd, 0x8f7e, 0x8, 0x1}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000240)={0x0, 0x124d, 0x6, '\x00', &(0x7f0000000180)=0x25}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6a3}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200248b4}, 0x2002889c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x63}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r6, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e0000000000050021000000000005"], 0x84}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}}}, 0x0) mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x107010, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0) 9.391850264s ago: executing program 5 (id=2285): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1f, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x13, 0x2}}}}}]}}]}}, 0x0) unshare(0x60000600) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x22800, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r4 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') execveat$binfmt(r3, r4, &(0x7f0000000740), 0x0, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x7f) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) read$proc_mixer(r5, &(0x7f0000000300)=""/253, 0xfd) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000180), 0x620602, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x5, 0x4) 9.216656777s ago: executing program 4 (id=2286): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16002182973d2bd4b83c4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494961172959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000600000085000000a0000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000280)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) 8.174124222s ago: executing program 4 (id=2287): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, 0x0) sched_setattr(r3, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$dsp(r6, &(0x7f0000000280)=""/189, 0xbd) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaa2279ed647d3ece32080045000028000d0090780ac10005000000070000000700000004"], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 6.617272037s ago: executing program 4 (id=2288): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) r4 = dup(r3) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1) 5.083828751s ago: executing program 5 (id=2289): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getrusage(0x1, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_getoverrun(r1) r2 = epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x11c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x108, 0x11, 0x0, 0x1, [@nested={0x101, 0xb1, 0x0, 0x1, [@generic="156284c5ec97bfa6c6a89639f2aa4f0d0514a53a77a46aa88a786cdf214cda86a7fd8d4f4fd3d82f846fdda02e77747c2f83caf18f1450f5f6e381626457046c7ee3574f66ee7c6377da39cd063181785a17feab0d0d6ed6ac4035a8a0010f62badbf093877fd02106e154937da96d5b812ea8b8e2141f67e38a4776aa6ebae8b563607430b45434bf50994fd0d133f15c85239acec7aa848d8aa9d9f11c8b66def1d11bdcc644936644d01ff17d07daa6b30ef56ee02efade450ebe4f747e49692adce45726637ba009ea6b75205c56f911566fa60b6c3ebf10b7aaad0db2e895e0af753f8087aa785b2f4571d0fb8ecbe5966c5ee55662385092480d"]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4085}, 0x8015) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) listen(r5, 0x0) 4.903813123s ago: executing program 1 (id=2290): r0 = socket$netlink(0x10, 0x3, 0xb) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) r2 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f00000002c0)={0x0, 0xd5a8, 0x2, 0x2, 0x382}, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.878398737s ago: executing program 3 (id=2291): r0 = socket$netlink(0x10, 0x3, 0xb) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) r2 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f00000002c0)={0x0, 0xd5a8, 0x2, 0x2, 0x382}, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.713086629s ago: executing program 0 (id=2292): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x2}, @window={0x3, 0x7, 0x7}, @mss={0x2, 0x8}, @sack_perm, @sack_perm], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, 0x0, 0x0) sendto$inet(r1, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000001880)=""/18) 3.621194131s ago: executing program 0 (id=2293): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@userptr={0x0, 0x1, 0x4, 0x8, 0x80002, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "01000100"}, 0xfffe, 0x2, {0x0}, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) 3.299654699s ago: executing program 3 (id=2294): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getrusage(0x1, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_getoverrun(r1) r2 = epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x11c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x108, 0x11, 0x0, 0x1, [@nested={0x101, 0xb1, 0x0, 0x1, [@generic="156284c5ec97bfa6c6a89639f2aa4f0d0514a53a77a46aa88a786cdf214cda86a7fd8d4f4fd3d82f846fdda02e77747c2f83caf18f1450f5f6e381626457046c7ee3574f66ee7c6377da39cd063181785a17feab0d0d6ed6ac4035a8a0010f62badbf093877fd02106e154937da96d5b812ea8b8e2141f67e38a4776aa6ebae8b563607430b45434bf50994fd0d133f15c85239acec7aa848d8aa9d9f11c8b66def1d11bdcc644936644d01ff17d07daa6b30ef56ee02efade450ebe4f747e49692adce45726637ba009ea6b75205c56f911566fa60b6c3ebf10b7aaad0db2e895e0af753f8087aa785b2f4571d0fb8ecbe5966c5ee55662385092480d"]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4085}, 0x8015) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) listen(r5, 0x0) 3.133091122s ago: executing program 1 (id=2295): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000006c0), &(0x7f0000000140)=r0}, 0x4b) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000400)=0xe8) read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) mount$overlay(0x0, &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0), 0x404832, &(0x7f0000000480)={[{@verity_off}, {@verity_require}], [{@fowner_gt={'fowner>', r4}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@flag='silent'}, {@flag='sync'}, {@uid_gt={'uid>', r5}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) r6 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "05dbb356e7ceb5abdd244dc6d1bc5affdd673e6d8dd02a44004a6c3dcc92a558ca5ce1a5925450c20e9ea550be50df4d6c482433c53c7045fdab986554b84363", 0x28}, 0x48, 0xffffffffffffffff) keyctl$get_persistent(0x16, r4, r6) close(0x3) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="2900004e1560254722cb66187f"]) 2.935253521s ago: executing program 5 (id=2296): prctl$PR_SCHED_CORE(0x3e, 0x20001, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x133}], 0x2}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000001600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x50) r2 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) fsopen(0x0, 0x1) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/210, 0xd2}], 0x1, 0x60, 0x2) 2.429821202s ago: executing program 0 (id=2297): openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xcc0, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) syz_usb_connect$uac2(0x0, 0x103, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x3, 0x1, 0x6, 0x0, 0xb7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x6, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x36, 0x1}, [@processing_unit={0x11, 0x24, 0x8, 0x6, 0x4, [0x0, 0x0, 0x1, 0x3, 0x3, 0x1]}, @processing_unit={0x7, 0x24, 0x8, 0x3, 0x5, [0x1]}, @multiply_unit={0x7, 0x24, 0xc, 0x3, 0xf, 0x3, 0x3}, @extension_unit={0x7, 0x24, 0x9, 0x3, 0xfffd, 0x5}, @feature_unit={0x7, 0x24, 0x6, 0x5, 0x1, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xe5, 0x2, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xff, 0x4, 0xf, {0x8, 0x25, 0x1, 0x83, 0x3c, 0x0, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0xc8, 0xa, "4be8cf5b3967374b9d"}, @as_header={0x10, 0x24, 0x1, 0x1, 0x0, 0x0, 0x1002, 0xed, 0x4, 0x6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xff}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0xfec, 0x80, "b6a2"}, @as_header={0x10, 0x24, 0x1, 0x4, 0x2, 0x2, 0x4, 0x2, 0xcb8, 0x4}, @as_header={0x10, 0x24, 0x1, 0x0, 0x3, 0x3, 0x3, 0xe, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x1, 0x2, {0x8, 0x25, 0x1, 0x2, 0xc, 0x5, 0x7}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x110, 0x0, 0x9, 0x0, 0x8, 0x1}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}, 0x9, [{0x87, &(0x7f00000005c0)=@string={0x87, 0x3, "4be6cc3952f22bfd9f6369cce121ea8adde22685d1ab909b637f297f605bae4187649022eb6ccabcf563005a2b3c6338ef85e2eeafa6e9554b3e7aef1976ef87c38ebe53d3b20ec874d68d0a2e989e5929f813a768adf7180972cf1f38f06b076abe5cbd56044879768f349c29e14b2913878bef0738e1d1f20ca22b6185cc7572d7cfdb7c"}}, {0x5c, &(0x7f0000000680)=@string={0x5c, 0x3, "a7578c4a8da983989767218defe892ed185a8a51b7d57d2752f4462079bf77bd18b3b59162b412c32189832ef95d4e7512ba957f0d1f2e58021fd9d9a1f9a42ddd39b01160277682b31993ac3a176afda068ba0f5585a628c6a2"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x42a}}, {0x27, &(0x7f0000000740)=@string={0x27, 0x3, "c44444182730e0c2bcfca47d0296181a74c0df5411a750635cc2e37824f7ea25e4709e1203"}}, {0xe, &(0x7f0000000780)=@string={0xe, 0x3, "404cce85317fa66faa44ac8d"}}, {0x64, &(0x7f00000007c0)=@string={0x64, 0x3, "95f3c5bf3d05da5b6a97012a15b8bd5051df3ce5b96af2506c058e98cda31ca1477cc5da144d067c7f2cb05f42361d7ccf42b747bd32295dc9a9df7e44edd892ee9d9f73d84ebff304e89fb7f2a6ba19d73e1cdbdcfe65c9bc18136966c5cdcfbed6"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x140c}}, {0x30, &(0x7f0000000880)=@string={0x30, 0x3, "731fd73e6f0a019803c55340380492cd630dc90fc588158cabe22d40f1d5011e927d7f4521c3510a4dd2c43bde2e"}}, {0xc9, &(0x7f00000008c0)=@string={0xc9, 0x3, "9f306438d660f025124f4f55ae9053633c57c902c8f597912f28354972c7d4db38bb34fabc23f89a6f03acabe318dcb348a99748c5b47e34ed1fea6cb0d8218a564fe22da0925c09696a1aac8c58f9fdbda2241d0abdd5fa22489cff5ca1c1ce33dc305e84fbb8ea214e727d00aab2d7ed2a13e2006442199366a87cdfb84899be5426c93da1eaee48b8eb5ad12096479fe6e02fa6f66ff0075d0ed7e414e1ad1832c2e0c71e8ed89f500e70a12f5aa24fe400a0ce048a232bf46e81a5a14ca46f227d97cbf574"}}]}) 2.237903336s ago: executing program 4 (id=2298): r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@userptr={0x0, 0x1, 0x4, 0x8, 0x80002, {r2, r3/1000+10000}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "01000100"}, 0xfffe, 0x2, {0x0}, 0x2}) 2.212806297s ago: executing program 5 (id=2299): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1f, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x13, 0x2}}}}}]}}]}}, 0x0) unshare(0x60000600) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x22800, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r4 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') execveat$binfmt(r3, r4, &(0x7f0000000740), 0x0, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x7f) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) read$proc_mixer(r5, &(0x7f0000000300)=""/253, 0xfd) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000180), 0x620602, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x5, 0x4) 2.18459492s ago: executing program 3 (id=2300): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x6, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0405602, &(0x7f0000000480)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0xe, 0xfe, 0x0, 0x0, "023d2134"}, 0x0, 0x2, {0x0}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r2 = open(0x0, 0x80140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x5a42, &(0x7f0000000040)={0x0, 0xdaa8, 0x10, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0xc, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listns(0x0, &(0x7f00000000c0), 0x0, 0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r12, r10, &(0x7f0000000340)={0x0, 0x5a7a, 0x0, 0x2, 0x2ce}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x0, 0x1f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x18a7, 0x1, 0x2, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x40000, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x400, 0x1, 0x20a, 0x0, r2}}], 0x4, &(0x7f0000000400)={0x2e, 0x10, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r9, '\x00', {0x4, 0xe50, 0x0, 0x0}}, &(0x7f0000000480)) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendto$inet6(r1, 0x0, 0xc1962c2dcac55def, 0x20000800, &(0x7f0000000100)={0xa, 0x4e22, 0x40000000, @remote, 0x1}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0xafa9, 0x1800}], 0x1, 0x0) r14 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) splice(r13, 0x0, r14, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.095941356s ago: executing program 4 (id=2301): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x200000005c832, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x2000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000400)={'fscrypt:', @desc2}, &(0x7f0000000440)={0x0, "65dedc1a10eb4b398b3328e2efc3b38deb991073297b4a9013ac4337d09d7c4939af440efed8ac9d206295d8bb239ed60fa263b3c14916a0aa36b4739834d613", 0x1c}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000004c0)={r2, 0x90, 0x1000}, &(0x7f0000000500)={'enc=', 'pkcs1', ' hash=', {'sha1-neon\x00'}}, &(0x7f0000000580)="82e41261c07755026d966a2ec9505b28c08bae6cfbad03fedfc563c9707018011e71452664d91749e6b6bdcc267bfe5c887159e01ccc12b8d933fd1c8657c6f56e35f458f0ff43b0e8af9ee398c0ded220c59eb7872df84f6478942364222162f6f4f00c20761f23510d68827915d0b0eadb3d398800c5a98253d17e164734b6671ae7f2dec1d1747de444b532443a28", &(0x7f0000000640)=""/4096) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000000)='D', 0x1}, {&(0x7f0000000200)="d73d1b8dc0e9a7f30c219959fa1b954094de001bc32410fa84b730da3a353e46bd439a12b09a5be22d2d236fa495f9a2181b22654df8328ed023f2a297ed72aaae2f3a628361bb9f2eb11dad2119afde75d45da28dce42283122c3e09a33251ae6146ce898f0a743b4db5099e9cf044da2032cc5d60b724bd694e280fc56705b8f77675f2e6e48568e8ef001b5a249c0d19cf54fe3326f9187e7b315d09f434a4c0c2ca9ad14c84488c98f1da42ab9ca04c5639004eaee6bdec5fcc33957b2b03d9bcff5975c046cf20c", 0xca}, {&(0x7f0000000300)="cdd770fb72d8a9ab4ea1d42b82faf2d0ee04676a575173cb5da72e65728073c548a4e8ff8beff7b7ed681c41f7ccdcbcb52fde38f9df7e025ddcb11af00ba8b5a040253242c6cc6504cac3780e461e7c3fdb817f20f533d252501410b102e84845d731fdafe77d1cafdfd583713fa08883b74f143f30face7c9ec063b9fd8348b20d0699a48451804e508d987ae71c9188767b0b9eccefb3642250", 0x9b}], 0x3}, 0x0) 820.801743ms ago: executing program 1 (id=2302): prctl$PR_GET_SECUREBITS(0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f00008b9000/0x1000)=nil, 0x1000, 0xe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f000058f000/0x3000)=nil, 0x3000, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x9, 0x13, 0x3, 0x7f}]}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, 0x0, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_getevents(0x0, 0x9, 0x0, 0x0, &(0x7f0000000240)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000140)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x10, 0x2, 0x4) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$cont(0x18, r6, 0x0, 0x80) 730.681284ms ago: executing program 3 (id=2303): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getrusage(0x1, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_getoverrun(r1) r2 = epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x11c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x108, 0x11, 0x0, 0x1, [@nested={0x101, 0xb1, 0x0, 0x1, [@generic="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"]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4085}, 0x8015) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 520.471325ms ago: executing program 4 (id=2304): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r3}, &(0x7f0000001b80), &(0x7f0000001bc0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r3, &(0x7f0000000380)}, 0x20) (fail_nth: 2) 237.672348ms ago: executing program 1 (id=2305): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TUPDATE={0x8}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=2306): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="4500001c12344000402f"], 0x1c) kernel console output (not intermixed with test programs): 001 instead [ 1311.287234][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xee09 instead [ 1311.287252][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xbca2 instead [ 1311.287298][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1311.287314][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1311.287331][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xee09 instead [ 1311.287350][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xbca2 instead [ 1311.287396][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1311.287412][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1311.287429][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xee09 instead [ 1311.287448][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xbca2 instead [ 1311.287493][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1311.287509][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1311.287526][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xee09 instead [ 1311.287545][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xbca2 instead [ 1311.287596][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1311.287612][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1311.287629][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xee09 instead [ 1311.287647][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xbca2 instead [ 1311.287693][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1311.287711][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1311.287729][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xee09 instead [ 1311.287749][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xbca2 instead [ 1311.287796][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1311.287812][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1311.287829][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xee09 instead [ 1311.287847][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xbca2 instead [ 1311.289712][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1311.289731][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1311.289773][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xee09 instead [ 1311.289794][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xbca2 instead [ 1311.289845][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1311.289862][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1311.289881][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xee09 instead [ 1311.289900][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xbca2 instead [ 1311.289946][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1311.289962][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1311.289979][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xee09 instead [ 1311.289998][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xbca2 instead [ 1311.290050][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1311.290069][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1311.290087][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xee09 instead [ 1311.290108][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xbca2 instead [ 1311.290157][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1311.290175][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1311.290193][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xee09 instead [ 1311.290211][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xbca2 instead [ 1311.290258][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1311.290275][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1311.290291][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xee09 instead [ 1311.290310][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xbca2 instead [ 1311.290357][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1311.290373][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1311.290390][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xee09 instead [ 1311.290409][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xbca2 instead [ 1311.290456][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1311.290471][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1311.290489][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xee09 instead [ 1311.290508][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xbca2 instead [ 1311.290553][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1311.290569][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1311.290586][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xee09 instead [ 1311.290604][T13736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xbca2 instead [ 1311.290640][T13736] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1311.290649][T13736] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1311.543278][T13748] FAULT_INJECTION: forcing a failure. [ 1311.543278][T13748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1311.543308][T13748] CPU: 1 UID: 0 PID: 13748 Comm: syz.3.1866 Tainted: G L syzkaller #0 PREEMPT(full) [ 1311.543336][T13748] Tainted: [L]=SOFTLOCKUP [ 1311.543343][T13748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1311.543354][T13748] Call Trace: [ 1311.543362][T13748] [ 1311.543369][T13748] dump_stack_lvl+0x100/0x190 [ 1311.543405][T13748] should_fail_ex.cold+0x5/0xa [ 1311.543433][T13748] _copy_from_user+0x2e/0xd0 [ 1311.543457][T13748] kstrtouint_from_user+0xd6/0x1d0 [ 1311.543485][T13748] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1311.543518][T13748] ? lock_acquire+0x1d1/0x380 [ 1311.543567][T13748] proc_fail_nth_write+0x83/0x220 [ 1311.543594][T13748] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1311.543628][T13748] vfs_write+0x2aa/0x1050 [ 1311.543651][T13748] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1311.543676][T13748] ? lock_acquire+0x1d1/0x380 [ 1311.543696][T13748] ? __fget_files+0x34/0x3d0 [ 1311.543720][T13748] ? __pfx_vfs_write+0x10/0x10 [ 1311.543740][T13748] ? find_held_lock+0x2b/0x80 [ 1311.543769][T13748] ? __fget_files+0x215/0x3d0 [ 1311.543799][T13748] ? __fget_files+0x21f/0x3d0 [ 1311.543832][T13748] ksys_write+0x12a/0x250 [ 1311.543853][T13748] ? __pfx_ksys_write+0x10/0x10 [ 1311.543883][T13748] do_syscall_64+0x123/0x790 [ 1311.543907][T13748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.543926][T13748] RIP: 0033:0x7f40ec15e98e [ 1311.543943][T13748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1311.543961][T13748] RSP: 002b:00007f40ed028fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1311.543981][T13748] RAX: ffffffffffffffda RBX: 00007f40ed0296c0 RCX: 00007f40ec15e98e [ 1311.543994][T13748] RDX: 0000000000000001 RSI: 00007f40ed0290a0 RDI: 0000000000000007 [ 1311.544006][T13748] RBP: 00007f40ed029090 R08: 0000000000000000 R09: 0000000000000000 [ 1311.544018][T13748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.544028][T13748] R13: 00007f40ec426038 R14: 00007f40ec425fa0 R15: 00007ffe856781e8 [ 1311.544053][T13748] [ 1311.547471][ T9887] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.547514][ T9887] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.547553][ T9887] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.547586][ T9887] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.270540][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 1313.334087][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 1313.345197][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 1313.347033][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 1313.356671][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 1314.042907][T13759] Could not find key with description: [syz] [ 1314.042949][T13759] process_request_key_err: No key [ 1314.042987][T13759] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1314.043028][T13759] One or more global auth toks could not properly register; rc = [-2] [ 1314.043189][T13759] Error validating options; rc = [-2] [ 1314.276632][ T9261] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1314.460728][ T9261] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1314.470551][ T9261] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 1314.470846][ T9261] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1314.470881][ T9261] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1314.470956][ T9261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.598348][ T9261] usb 4-1: config 0 descriptor?? [ 1315.245480][ T9261] input: HID 06cb:73f4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:06CB:73F4.002A/input/input77 [ 1315.306152][ T9261] itetech 0003:06CB:73F4.002A: offset (1) exceeds report_count (1) [ 1315.306196][ T9261] itetech 0003:06CB:73F4.002A: offset (2) exceeds report_count (1) [ 1315.306216][ T9261] itetech 0003:06CB:73F4.002A: offset (3) exceeds report_count (1) [ 1315.306234][ T9261] itetech 0003:06CB:73F4.002A: offset (4) exceeds report_count (1) [ 1315.306254][ T9261] itetech 0003:06CB:73F4.002A: offset (5) exceeds report_count (1) [ 1315.306273][ T9261] itetech 0003:06CB:73F4.002A: offset (39) exceeds report_count (1) [ 1315.306292][ T9261] itetech 0003:06CB:73F4.002A: offset (9) exceeds report_count (1) [ 1315.306311][ T9261] itetech 0003:06CB:73F4.002A: offset (25) exceeds report_count (1) [ 1316.294435][T13762] ima: policy update failed [ 1316.566697][ T31] audit: type=1802 audit(2000000703.369:5886): pid=13762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.1879" res=0 errno=0 [ 1317.716923][T12655] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.717282][T12655] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.717362][T12655] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.717424][T12655] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.780611][ T9261] itetech 0003:06CB:73F4.002A: input,hidraw0: USB HID v0.04 Joystick [HID 06cb:73f4] on usb-dummy_hcd.3-1/input0 [ 1317.795282][ T9261] usb 4-1: USB disconnect, device number 67 [ 1318.128235][T13777] netlink: 'syz.4.1875': attribute type 1 has an invalid length. [ 1318.128305][T13777] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1875'. [ 1318.543305][T13774] fido_id[13774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1321.299255][T13797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1889'. [ 1322.077151][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 1322.082290][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 1322.084570][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 1322.120235][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 1322.120694][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 1323.173591][T13804] loop9: detected capacity change from 0 to 2640 [ 1323.179843][T13804] buffer_io_error: 6 callbacks suppressed [ 1323.179882][T13804] Buffer I/O error on dev loop9, logical block 0, async page read [ 1323.180095][T13804] Buffer I/O error on dev loop9, logical block 0, async page read [ 1323.180246][T13804] Buffer I/O error on dev loop9, logical block 0, async page read [ 1323.180372][T13804] Buffer I/O error on dev loop9, logical block 0, async page read [ 1323.180485][T13804] Buffer I/O error on dev loop9, logical block 0, async page read [ 1323.180731][T13804] Buffer I/O error on dev loop9, logical block 0, async page read [ 1323.181026][T13804] Buffer I/O error on dev loop9, logical block 0, async page read [ 1323.181195][T13804] Buffer I/O error on dev loop9, logical block 0, async page read [ 1323.181245][T13804] ldm_validate_partition_table(): Disk read failed. [ 1323.181356][T13804] Buffer I/O error on dev loop9, logical block 0, async page read [ 1323.181488][T13804] Buffer I/O error on dev loop9, logical block 0, async page read [ 1323.181702][T13804] Dev loop9: unable to read RDB block 0 [ 1323.182802][T13804] loop9: unable to read partition table [ 1323.184076][T13804] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1325.855609][T13813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1882'. [ 1326.723091][T13815] netlink: 'syz.0.1883': attribute type 1 has an invalid length. [ 1326.723107][T13815] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1883'. [ 1329.192387][T13825] Could not find key with description: [syz] [ 1329.192413][T13825] process_request_key_err: No key [ 1329.192453][T13825] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1329.192493][T13825] One or more global auth toks could not properly register; rc = [-2] [ 1329.192723][T13825] Error validating options; rc = [-2] [ 1331.364454][ T31] audit: type=1400 audit(2000000718.439:5887): avc: denied { accept } for pid=13833 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1331.365910][T13510] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 1331.580613][T13837] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1894'. [ 1332.998104][T13845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1901'. [ 1333.651588][T13850] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1333.651662][T13850] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1333.916656][T12657] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.916702][T12657] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.916736][T12657] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.916769][T12657] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1334.198595][T13856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1337.242129][T13873] ima: policy update failed [ 1337.457013][ T31] audit: type=1802 audit(2000000724.319:5888): pid=13873 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.1908" res=0 errno=0 [ 1337.615669][ T30] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 1337.766107][ T30] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1337.768216][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1337.768249][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1337.768289][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.771780][ T30] usb 2-1: config 0 descriptor?? [ 1337.772464][T13874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1338.113785][T13874] lo speed is unknown, defaulting to 1000 [ 1340.438506][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1911'. [ 1340.447539][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1911'. [ 1340.449574][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1911'. [ 1340.451415][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1911'. [ 1341.735777][ T30] usbhid 2-1:0.0: can't add hid device: -71 [ 1341.735840][ T30] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1341.738535][ T30] usb 2-1: USB disconnect, device number 65 [ 1341.971977][T13893] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1913'. [ 1342.463839][T13897] netlink: 'syz.1.1914': attribute type 5 has an invalid length. [ 1342.567838][ T30] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1343.328254][ T30] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1343.498743][ T30] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1343.498837][ T30] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1343.638771][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.638799][ T30] usb 1-1: Product: syz [ 1343.638849][ T30] usb 1-1: Manufacturer: syz [ 1343.638866][ T30] usb 1-1: SerialNumber: syz [ 1343.673760][ T30] usb 1-1: config 0 descriptor?? [ 1343.695481][T13896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1343.695610][T13896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1343.996041][T13896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1343.996170][T13896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1344.179943][T13910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.180325][T13910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.408089][ T985] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1344.415755][T13916] netlink: 'syz.4.1912': attribute type 5 has an invalid length. [ 1344.558619][ T985] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1344.587711][ T985] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1344.587819][ T985] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1344.587943][ T985] usb 4-1: config 0 has no interface number 0 [ 1344.588393][ T985] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1344.588500][ T985] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1344.588674][ T985] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1344.588776][ T985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.687303][ T985] usb 4-1: config 0 descriptor?? [ 1344.694585][T13911] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1345.015336][T13920] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1345.015487][T13920] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1345.117466][ T31] audit: type=1326 audit(2000000732.199:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.3.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40ec19e159 code=0x0 [ 1345.119632][ T31] audit: type=1326 audit(2000000732.199:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.3.1917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40ec19e159 code=0x0 [ 1345.606420][ T5878] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.606470][ T5878] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.606504][ T5878] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.606537][ T5878] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.659494][ T30] Error reading MAC address [ 1345.673236][ T30] usb 1-1: USB disconnect, device number 51 [ 1345.796430][ T9261] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1345.965630][ T9261] usb 2-1: Using ep0 maxpacket: 16 [ 1345.970187][ T9261] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1345.970235][ T9261] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1345.972893][ T9261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.972920][ T9261] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1345.972961][ T9261] usb 2-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 1345.972983][ T9261] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1345.978466][ T9261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.978494][ T9261] usb 2-1: Product: syz [ 1345.978510][ T9261] usb 2-1: Manufacturer: syz [ 1345.978526][ T9261] usb 2-1: SerialNumber: syz [ 1346.195549][T13510] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1346.836223][ T30] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1346.875605][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1346.986154][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 1346.988859][ T30] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1346.991966][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.992039][ T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1346.992326][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1346.992414][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1346.992683][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.048544][ T30] hub 1-1:1.0: bad descriptor, ignoring hub [ 1347.048572][ T30] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1347.049089][ T30] cdc_wdm 1-1:1.0: skipping garbage [ 1347.049103][ T30] cdc_wdm 1-1:1.0: skipping garbage [ 1347.050997][ T30] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1347.051016][ T30] cdc_wdm 1-1:1.0: Unknown control protocol [ 1347.065273][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1347.094870][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 1347.094971][ T9] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1347.095010][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1347.095051][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.167953][T10463] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1347.186267][ T9] usb 5-1: config 0 descriptor?? [ 1347.260195][ T985] usb 4-1: USB disconnect, device number 68 [ 1347.325717][T10463] usb 6-1: Using ep0 maxpacket: 32 [ 1347.327271][T10463] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1347.331569][T10463] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.331628][T10463] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.331683][T10463] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1347.331746][T10463] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.337205][T10463] usb 6-1: config 0 descriptor?? [ 1347.384361][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 1347.391317][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 1347.391653][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 1347.391916][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 1347.392028][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 1347.432950][T13939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.433398][T13939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.698299][ T985] usb 1-1: USB disconnect, device number 52 [ 1348.396343][ T9] input: HID 06cb:73f4 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:06CB:73F4.002B/input/input79 [ 1348.466187][ T9] itetech 0003:06CB:73F4.002B: offset (1) exceeds report_count (1) [ 1348.466222][ T9] itetech 0003:06CB:73F4.002B: offset (2) exceeds report_count (1) [ 1348.466241][ T9] itetech 0003:06CB:73F4.002B: offset (3) exceeds report_count (1) [ 1348.466259][ T9] itetech 0003:06CB:73F4.002B: offset (4) exceeds report_count (1) [ 1348.466278][ T9] itetech 0003:06CB:73F4.002B: offset (5) exceeds report_count (1) [ 1348.466300][ T9] itetech 0003:06CB:73F4.002B: offset (39) exceeds report_count (1) [ 1348.466320][ T9] itetech 0003:06CB:73F4.002B: offset (9) exceeds report_count (1) [ 1348.466339][ T9] itetech 0003:06CB:73F4.002B: offset (25) exceeds report_count (1) [ 1348.564963][ T9261] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1348.565013][ T9261] cdc_ncm 2-1:1.0: bind() failure [ 1348.608257][ T9261] usb 2-1: USB disconnect, device number 66 [ 1348.646226][T10463] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002C/input/input80 [ 1348.726436][T10463] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002C/input/input81 [ 1348.728879][ T9] itetech 0003:06CB:73F4.002B: input,hidraw0: USB HID v0.04 Joystick [HID 06cb:73f4] on usb-dummy_hcd.4-1/input0 [ 1348.762425][ T9] usb 5-1: USB disconnect, device number 77 [ 1348.826335][T10463] kye 0003:0458:5011.002C: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 1348.985979][T13958] fido_id[13958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1350.311277][ C1] kye 0003:0458:5011.002C: usb_submit_urb(ctrl) failed: -1 [ 1350.435486][ T9261] usb 6-1: reset high-speed USB device number 21 using dummy_hcd [ 1350.495593][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 1351.288535][T13967] ima: policy update failed [ 1351.494378][ T31] audit: type=1802 audit(2000000738.369:5891): pid=13967 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.1932" res=0 errno=0 [ 1353.464458][T13981] ima: policy update failed [ 1353.695744][T13988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1931'. [ 1354.191778][ T31] audit: type=1802 audit(2000000740.539:5892): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.1935" res=0 errno=0 [ 1354.299756][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'. [ 1354.304896][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'. [ 1354.316990][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'. [ 1354.318169][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'. [ 1354.467640][ T5760] usb 6-1: USB disconnect, device number 21 [ 1356.260141][ T771] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.260415][ T771] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.260450][ T771] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.260482][ T771] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.498953][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 1356.500841][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 1356.502776][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 1356.504217][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 1357.989721][T14005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1943'. [ 1359.629480][T14008] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1359.631187][T14008] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1359.726232][T13903] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1359.736827][T13903] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1359.736923][T13903] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1359.737053][T13903] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1360.515666][T14023] Could not find key with description: [syz] [ 1360.515746][T14023] process_request_key_err: No key [ 1360.515783][T14023] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1360.515827][T14023] One or more global auth toks could not properly register; rc = [-2] [ 1360.516180][T14023] Error validating options; rc = [-2] [ 1361.458644][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.458753][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.829193][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 1361.846034][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 1361.847551][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 1361.849193][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 1361.849784][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 1362.085564][ T5760] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1362.275473][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 1362.344901][ T5760] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1362.418071][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.418107][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.418130][ T5760] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1362.418191][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.733802][ T5760] usb 2-1: config 0 descriptor?? [ 1365.333549][T12657] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1365.333879][T12657] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1365.333930][T12657] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1365.333962][T12657] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1365.426353][ T5760] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.002D/input/input82 [ 1365.540395][T14040] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1365.540483][T14040] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1365.820889][ T5760] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.002D/input/input83 [ 1365.897807][ T5760] kye 0003:0458:5011.002D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 1366.517508][T14047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1947'. [ 1367.195305][ C1] kye 0003:0458:5011.002D: usb_submit_urb(ctrl) failed: -1 [ 1367.330831][ T985] usb 2-1: reset high-speed USB device number 67 using dummy_hcd [ 1367.456837][ T985] usb 2-1: device descriptor read/64, error -32 [ 1367.740610][T14052] fuse: Bad value for 'fd' [ 1368.340372][T10463] usb 2-1: USB disconnect, device number 67 [ 1368.789574][T14059] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1955'. [ 1370.425071][T14073] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1959'. [ 1373.601564][T14089] ceph: No mds server is up or the cluster is laggy [ 1373.616054][ T5760] libceph: connect (1)[c::]:6789 error -101 [ 1373.616226][ T5760] libceph: mon0 (1)[c::]:6789 connect error [ 1373.891979][T14108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1965'. [ 1375.718311][T14112] ima: policy update failed [ 1375.908395][ T31] audit: type=1802 audit(2000000762.799:5893): pid=14112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.1970" res=0 errno=0 [ 1377.342284][T14116] ima: policy update failed [ 1377.534543][ T31] audit: type=1802 audit(2000000764.419:5894): pid=14116 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.1972" res=0 errno=0 [ 1378.364836][T14123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1964'. [ 1378.983088][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 1379.000471][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 1379.002108][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 1379.003729][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 1379.004733][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 1379.806923][T14132] loop9: detected capacity change from 0 to 2640 [ 1379.809696][T14132] buffer_io_error: 11 callbacks suppressed [ 1379.809733][T14132] Buffer I/O error on dev loop9, logical block 0, async page read [ 1379.809856][T14132] Buffer I/O error on dev loop9, logical block 0, async page read [ 1379.809995][T14132] Buffer I/O error on dev loop9, logical block 0, async page read [ 1379.810130][T14132] Buffer I/O error on dev loop9, logical block 0, async page read [ 1379.810288][T14132] Buffer I/O error on dev loop9, logical block 0, async page read [ 1379.810592][T14132] Buffer I/O error on dev loop9, logical block 0, async page read [ 1379.810877][T14132] Buffer I/O error on dev loop9, logical block 0, async page read [ 1379.810978][T14132] Buffer I/O error on dev loop9, logical block 0, async page read [ 1379.811029][T14132] ldm_validate_partition_table(): Disk read failed. [ 1379.811187][T14132] Buffer I/O error on dev loop9, logical block 0, async page read [ 1379.811356][T14132] Buffer I/O error on dev loop9, logical block 0, async page read [ 1379.811499][T14132] Dev loop9: unable to read RDB block 0 [ 1379.812257][T14132] loop9: unable to read partition table [ 1379.813559][T14132] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1384.553351][T14147] loop9: detected capacity change from 0 to 2640 [ 1384.556951][T14147] ldm_validate_partition_table(): Disk read failed. [ 1384.557365][T14147] Dev loop9: unable to read RDB block 0 [ 1384.558149][T14147] loop9: unable to read partition table [ 1384.559134][T14147] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1387.018443][T14156] 9p: Bad value for 'wfdno' [ 1388.855523][T12658] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1388.855567][T12658] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1388.855595][T12658] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1388.855624][T12658] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1388.868942][ T9261] libceph: connect (1)[c::]:6789 error -101 [ 1388.869125][ T9261] libceph: mon0 (1)[c::]:6789 connect error [ 1388.917869][T14162] ceph: No mds server is up or the cluster is laggy [ 1390.095519][ T5760] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 1391.096110][ T5760] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1391.097298][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1391.097319][ T5760] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1391.097342][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.101026][ T5760] usb 5-1: config 0 descriptor?? [ 1391.101721][T14178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1391.357394][T14192] Could not find key with description: [syz] [ 1391.357450][T14192] process_request_key_err: No key [ 1391.357490][T14192] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1391.357528][T14192] One or more global auth toks could not properly register; rc = [-2] [ 1391.357828][T14192] Error validating options; rc = [-2] [ 1392.604036][T14178] lo speed is unknown, defaulting to 1000 [ 1392.720507][T14198] netlink: 'syz.3.1992': attribute type 5 has an invalid length. [ 1396.556687][ T5760] usbhid 5-1:0.0: can't add hid device: -32 [ 1396.556787][ T5760] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1398.849568][T10463] usb 5-1: USB disconnect, device number 78 [ 1398.907957][T14203] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1398.917065][ T9887] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1398.917110][ T9887] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1398.917142][ T9887] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1399.007001][ T985] libceph: connect (1)[c::]:6789 error -101 [ 1399.007184][ T985] libceph: mon0 (1)[c::]:6789 connect error [ 1399.045916][T14226] ceph: No mds server is up or the cluster is laggy [ 1399.296783][T14229] netlink: 'syz.5.1991': attribute type 1 has an invalid length. [ 1399.296806][T14229] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1991'. [ 1400.770325][T14249] netlink: 'syz.0.2003': attribute type 5 has an invalid length. [ 1401.315703][ T5760] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1401.467283][ T5760] usb 2-1: Using ep0 maxpacket: 16 [ 1401.470406][ T5760] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1401.470454][ T5760] usb 2-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06 [ 1401.471890][ T5760] usb 2-1: config 3 has an invalid interface number: 105 but max is 1 [ 1401.471918][ T5760] usb 2-1: config 3 has an invalid interface number: 164 but max is 1 [ 1401.471939][ T5760] usb 2-1: config 3 has no interface number 0 [ 1401.471956][ T5760] usb 2-1: config 3 has no interface number 1 [ 1401.471990][ T5760] usb 2-1: config 3 interface 105 has no altsetting 0 [ 1401.472010][ T5760] usb 2-1: config 3 interface 164 has no altsetting 0 [ 1401.474380][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.474405][ T5760] usb 2-1: Product: syz [ 1401.474420][ T5760] usb 2-1: Manufacturer: syz [ 1401.474435][ T5760] usb 2-1: SerialNumber: syz [ 1401.803710][T14253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.804142][T14253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.318163][T14271] netlink: 'syz.5.2006': attribute type 5 has an invalid length. [ 1402.525677][T10463] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 1402.708026][ T5760] uvcvideo 2-1:3.164: Found UVC 0.00 device syz (04c8:0720) [ 1402.708063][ T5760] uvcvideo 2-1:3.164: No valid video chain found. [ 1402.715886][ T5760] usb 2-1: USB disconnect, device number 68 [ 1403.090024][T10463] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1403.095489][T10463] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1403.095526][T10463] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1403.095567][T10463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.100712][T10463] usb 5-1: config 0 descriptor?? [ 1403.102802][T14269] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1404.810051][T14269] lo speed is unknown, defaulting to 1000 [ 1408.201711][T10463] usbhid 5-1:0.0: can't add hid device: -32 [ 1408.202099][T10463] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1408.609435][T10463] usb 5-1: USB disconnect, device number 79 [ 1409.368599][T14309] loop9: detected capacity change from 0 to 2640 [ 1409.369000][T14309] buffer_io_error: 22 callbacks suppressed [ 1409.369010][T14309] Buffer I/O error on dev loop9, logical block 0, async page read [ 1409.369032][T14309] Buffer I/O error on dev loop9, logical block 0, async page read [ 1409.369049][T14309] Buffer I/O error on dev loop9, logical block 0, async page read [ 1409.369065][T14309] Buffer I/O error on dev loop9, logical block 0, async page read [ 1409.369080][T14309] Buffer I/O error on dev loop9, logical block 0, async page read [ 1409.369108][T14309] Buffer I/O error on dev loop9, logical block 0, async page read [ 1409.369133][T14309] Buffer I/O error on dev loop9, logical block 0, async page read [ 1409.369149][T14309] Buffer I/O error on dev loop9, logical block 0, async page read [ 1409.369159][T14309] ldm_validate_partition_table(): Disk read failed. [ 1409.369174][T14309] Buffer I/O error on dev loop9, logical block 0, async page read [ 1409.369190][T14309] Buffer I/O error on dev loop9, logical block 0, async page read [ 1409.369216][T14309] Dev loop9: unable to read RDB block 0 [ 1409.369362][T14309] loop9: unable to read partition table [ 1409.369554][T14309] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1409.438514][T14306] FAULT_INJECTION: forcing a failure. [ 1409.438514][T14306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.438549][T14306] CPU: 0 UID: 0 PID: 14306 Comm: syz.1.2014 Tainted: G L syzkaller #0 PREEMPT(full) [ 1409.438576][T14306] Tainted: [L]=SOFTLOCKUP [ 1409.438583][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1409.438613][T14306] Call Trace: [ 1409.438621][T14306] [ 1409.438629][T14306] dump_stack_lvl+0x100/0x190 [ 1409.438664][T14306] should_fail_ex.cold+0x5/0xa [ 1409.438693][T14306] _copy_to_user+0x32/0xd0 [ 1409.438720][T14306] bpf_prog_test_run_raw_tp+0x3f0/0x7d0 [ 1409.438750][T14306] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1409.438777][T14306] ? fput+0x7c/0x100 [ 1409.438804][T14306] ? __bpf_prog_get+0x97/0x290 [ 1409.438834][T14306] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1409.438857][T14306] __sys_bpf+0x2265/0x4a30 [ 1409.438886][T14306] ? __pfx___sys_bpf+0x10/0x10 [ 1409.438907][T14306] ? find_held_lock+0x2b/0x80 [ 1409.438940][T14306] ? get_pid_task+0xfc/0x250 [ 1409.438965][T14306] ? get_pid_task+0xfc/0x250 [ 1409.439000][T14306] ? find_held_lock+0x2b/0x80 [ 1409.439034][T14306] ? rcu_read_lock_any_held+0x6a/0x90 [ 1409.439063][T14306] ? find_held_lock+0x2b/0x80 [ 1409.439090][T14306] ? ksys_write+0x190/0x250 [ 1409.439111][T14306] ? ksys_write+0x190/0x250 [ 1409.439131][T14306] ? lock_acquire+0x1d1/0x380 [ 1409.439174][T14306] ? fput+0x7c/0x100 [ 1409.439199][T14306] ? ksys_write+0x1ac/0x250 [ 1409.439224][T14306] ? __x64_sys_bpf+0xce/0x140 [ 1409.439244][T14306] __x64_sys_bpf+0xce/0x140 [ 1409.439266][T14306] ? do_syscall_64+0xae/0x790 [ 1409.439289][T14306] do_syscall_64+0x123/0x790 [ 1409.439311][T14306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.439332][T14306] RIP: 0033:0x7fd73579e159 [ 1409.439349][T14306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.439368][T14306] RSP: 002b:00007fd7365b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1409.439389][T14306] RAX: ffffffffffffffda RBX: 00007fd735a25fa0 RCX: 00007fd73579e159 [ 1409.439402][T14306] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1409.439415][T14306] RBP: 00007fd7365b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.439427][T14306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.439440][T14306] R13: 00007fd735a26038 R14: 00007fd735a25fa0 R15: 00007ffc3d93d8b8 [ 1409.439468][T14306] [ 1410.014565][T14315] Could not find key with description: [syz] [ 1410.014596][T14315] process_request_key_err: No key [ 1410.014679][T14315] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1410.014718][T14315] One or more global auth toks could not properly register; rc = [-2] [ 1410.014932][T14315] Error validating options; rc = [-2] [ 1410.953602][T14317] ubi: mtd0 is already attached to ubi0 [ 1412.073842][T10463] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1412.908773][T14323] ima: policy update failed [ 1413.115119][ T31] audit: type=1802 audit(2000000799.989:5895): pid=14323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.2025" res=0 errno=0 [ 1413.405533][T10463] usb 5-1: device not accepting address 80, error -71 [ 1413.839112][T14330] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1413.880648][T14330] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1414.248559][ T1226] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1414.248615][ T1226] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1414.248650][ T1226] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1414.248684][ T1226] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1414.614989][T10463] libceph: connect (1)[c::]:6789 error -101 [ 1414.615182][T10463] libceph: mon0 (1)[c::]:6789 connect error [ 1414.650664][T14334] ceph: No mds server is up or the cluster is laggy [ 1416.375853][T10463] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 1416.473352][ T31] audit: type=1400 audit(2000000803.549:5896): avc: denied { read write } for pid=14352 comm="syz.5.2033" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1416.501463][ T31] audit: type=1400 audit(2000000803.549:5897): avc: denied { open } for pid=14352 comm="syz.5.2033" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1416.546206][T10463] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1416.547184][T10463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1416.547217][T10463] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1416.547257][T10463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.552984][T10463] usb 2-1: config 0 descriptor?? [ 1416.555043][T14348] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1416.895623][ T985] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1416.941082][T14348] lo speed is unknown, defaulting to 1000 [ 1417.085572][ T985] usb 6-1: Using ep0 maxpacket: 32 [ 1417.086418][ T985] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1417.087657][ T985] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 1417.087684][ T985] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1417.087706][ T985] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.087724][ T985] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1417.087772][ T985] usb 6-1: config 1 has no interface number 0 [ 1417.087811][ T985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.234615][ T985] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1418.516272][T14353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.520166][T14353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.651417][T14353] netlink: 'syz.5.2033': attribute type 10 has an invalid length. [ 1418.659012][ T985] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 1418.659344][ T985] snd_usb_pod 6-1:1.1: invalid control EP [ 1418.659361][ T985] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 1418.665851][ T985] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1418.673539][ T985] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1421.613430][T10463] usbhid 2-1:0.0: can't add hid device: -71 [ 1421.613523][T10463] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1421.641483][T10463] usb 2-1: USB disconnect, device number 69 [ 1421.741630][T14200] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1421.741853][T14200] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1421.741919][T14200] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1421.741953][T14200] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1421.903827][T10463] usb 6-1: USB disconnect, device number 22 [ 1422.068922][T14372] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1422.068988][T14372] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1423.324659][T14373] ima: policy update failed [ 1423.690615][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.690671][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.691147][ T31] audit: type=1802 audit(2000000810.399:5898): pid=14373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.2031" res=0 errno=0 [ 1424.638759][T14380] ima: policy update failed [ 1424.851196][ T31] audit: type=1802 audit(2000000811.719:5899): pid=14380 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.2038" res=0 errno=0 [ 1426.733330][T14390] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1426.733517][T14390] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1426.832760][T14201] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.833064][T14201] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.833273][T14201] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.833383][T14201] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1428.846419][T14404] netlink: 'syz.0.2043': attribute type 5 has an invalid length. [ 1428.940442][T14407] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1428.940500][T14407] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1429.015574][ T5785] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1429.015616][ T5785] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1429.015648][ T5785] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1429.015680][ T5785] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1429.069333][T10463] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1429.155999][T14413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2044'. [ 1429.470209][T10463] usb 6-1: Using ep0 maxpacket: 8 [ 1429.470913][T10463] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1429.520618][T10463] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1429.520660][T10463] usb 6-1: config 0 has no interface number 0 [ 1429.520699][T10463] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1429.520724][T10463] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1429.520755][T10463] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1429.520782][T10463] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1429.520809][T10463] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1430.190201][T10463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.190232][T10463] usb 6-1: Product: syz [ 1430.190249][T10463] usb 6-1: Manufacturer: syz [ 1430.190265][T10463] usb 6-1: SerialNumber: syz [ 1430.219616][T10463] usb 6-1: config 0 descriptor?? [ 1430.610005][T14424] FAULT_INJECTION: forcing a failure. [ 1430.610005][T14424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1430.610046][T14424] CPU: 1 UID: 0 PID: 14424 Comm: syz.1.2042 Tainted: G L syzkaller #0 PREEMPT(full) [ 1430.610075][T14424] Tainted: [L]=SOFTLOCKUP [ 1430.610082][T14424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1430.610094][T14424] Call Trace: [ 1430.610102][T14424] [ 1430.610110][T14424] dump_stack_lvl+0x100/0x190 [ 1430.610145][T14424] should_fail_ex.cold+0x5/0xa [ 1430.610174][T14424] _copy_from_user+0x2e/0xd0 [ 1430.610200][T14424] copy_msghdr_from_user+0x9f/0x4c0 [ 1430.610225][T14424] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1430.610262][T14424] ___sys_sendmsg+0x106/0x1e0 [ 1430.610286][T14424] ? __pfx____sys_sendmsg+0x10/0x10 [ 1430.610322][T14424] ? __fget_files+0x34/0x3d0 [ 1430.610370][T14424] __sys_sendmmsg+0x20c/0x440 [ 1430.610401][T14424] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1430.610427][T14424] ? preempt_schedule_thunk+0x16/0x40 [ 1430.610474][T14424] ? fput+0x7c/0x100 [ 1430.610501][T14424] ? ksys_write+0x1ac/0x250 [ 1430.610523][T14424] ? __pfx_ksys_write+0x10/0x10 [ 1430.610544][T14424] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 1430.610577][T14424] __x64_sys_sendmmsg+0x9c/0x100 [ 1430.610604][T14424] ? lockdep_hardirqs_on+0x7d/0x110 [ 1430.610625][T14424] do_syscall_64+0x123/0x790 [ 1430.610654][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.610676][T14424] RIP: 0033:0x7fd73579e159 [ 1430.610693][T14424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.610712][T14424] RSP: 002b:00007fd736598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1430.610732][T14424] RAX: ffffffffffffffda RBX: 00007fd735a26090 RCX: 00007fd73579e159 [ 1430.610745][T14424] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004 [ 1430.610758][T14424] RBP: 00007fd736598090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.610770][T14424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.610782][T14424] R13: 00007fd735a26128 R14: 00007fd735a26090 R15: 00007ffc3d93d8b8 [ 1430.610811][T14424] [ 1430.884637][T10463] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1430.909613][T10463] usb 6-1: USB disconnect, device number 23 [ 1430.945564][ T985] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 1431.119011][ T985] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1431.270166][ T985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1431.270404][ T985] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1431.270445][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.273395][ T985] usb 5-1: config 0 descriptor?? [ 1431.274069][T14422] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1431.395869][ T5846] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1431.605999][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 1431.673454][ T5846] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1431.736901][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.736968][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1431.737039][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1431.737180][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.893800][ T5846] usb 4-1: config 0 descriptor?? [ 1432.581671][T14422] lo speed is unknown, defaulting to 1000 [ 1433.726324][ T5846] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.002E/input/input84 [ 1433.751642][ T5846] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.002E/input/input85 [ 1433.800558][T14430] vlan2: entered promiscuous mode [ 1433.800583][T14430] bridge0: entered promiscuous mode [ 1433.816807][ T5846] kye 0003:0458:5011.002E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1434.118322][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2052'. [ 1434.382409][ T31] audit: type=1400 audit(2000000821.459:5900): avc: denied { mounton } for pid=14451 comm="syz.1.2054" path="/411/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1434.695152][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.697507][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.699089][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.702273][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.703844][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.706781][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.708293][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.709888][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.711405][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.712920][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.714448][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.715987][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.717529][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.719063][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.720501][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.722016][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.723847][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.725316][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.726820][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.737261][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.738911][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.740581][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.742137][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.743635][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.745098][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.746611][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.748047][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.751460][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.753018][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.754516][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.756044][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.759334][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1434.760897][T14466] NILFS (nullb0): couldn't find nilfs on the device [ 1435.379793][T14456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1435.395703][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 1435.440151][ T30] usb 4-1: USB disconnect, device number 69 [ 1435.449254][T14472] lo speed is unknown, defaulting to 1000 [ 1435.514696][ T985] usbhid 5-1:0.0: can't add hid device: -71 [ 1435.514759][ T985] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1435.548145][ T985] usb 5-1: USB disconnect, device number 82 [ 1436.628649][T14490] Could not find key with description: [syz] [ 1436.628676][T14490] process_request_key_err: No key [ 1436.628752][T14490] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1436.628798][T14490] One or more global auth toks could not properly register; rc = [-2] [ 1436.629105][T14490] Error validating options; rc = [-2] [ 1436.725601][ T5760] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1436.794579][T14483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2055'. [ 1436.905498][ T5760] usb 1-1: Using ep0 maxpacket: 8 [ 1436.911172][ T5760] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1436.940577][ T5760] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.940608][ T5760] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1436.940747][ T5760] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1436.940779][ T5760] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1436.940853][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.135342][ T5760] hub 1-1:1.0: bad descriptor, ignoring hub [ 1437.135653][ T5760] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1437.161016][ T5760] cdc_wdm 1-1:1.0: skipping garbage [ 1437.161044][ T5760] cdc_wdm 1-1:1.0: skipping garbage [ 1437.313689][ T5760] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1437.314024][ T5760] cdc_wdm 1-1:1.0: Unknown control protocol [ 1437.840311][T14484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.888546][T14484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.362479][ T5760] usb 1-1: USB disconnect, device number 53 [ 1439.386812][ T9] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 1439.540316][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1439.567124][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1439.567231][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1439.567428][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.831805][ T9] usb 5-1: config 0 descriptor?? [ 1439.848076][T14494] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1441.053881][T14498] ima: policy update failed [ 1441.320470][ T31] audit: type=1802 audit(2000000828.129:5901): pid=14498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.2061" res=0 errno=0 [ 1441.401157][T14494] lo speed is unknown, defaulting to 1000 [ 1441.574430][T14499] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 1441.574447][T14499] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2060'. [ 1442.458766][T14507] ima: policy update failed [ 1442.717413][ T31] audit: type=1802 audit(2000000829.539:5902): pid=14507 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.2064" res=0 errno=0 [ 1442.851036][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1442.851098][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1442.874463][ T9] usb 5-1: USB disconnect, device number 83 [ 1443.126726][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1443.130476][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1443.131909][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1443.133717][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1443.134295][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1444.327092][ T985] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 1444.385853][ T30] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1444.486002][ T985] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1444.489045][ T985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1444.489079][ T985] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1444.489117][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.492637][ T985] usb 5-1: config 0 descriptor?? [ 1444.493927][T14515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1444.546159][ T30] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 1444.549902][ T30] usb 2-1: config 1 has an invalid interface number: 15 but max is 0 [ 1444.549936][ T30] usb 2-1: config 1 has no interface number 0 [ 1444.549985][ T30] usb 2-1: config 1 interface 15 has no altsetting 0 [ 1444.554833][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.554861][ T30] usb 2-1: Product: syz [ 1444.554890][ T30] usb 2-1: Manufacturer: syz [ 1444.554906][ T30] usb 2-1: SerialNumber: syz [ 1444.630243][T14520] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1444.630305][T14520] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1444.871581][T14515] lo speed is unknown, defaulting to 1000 [ 1445.524524][T14517] batman_adv: batadv0: Adding interface: veth0 [ 1445.524596][T14517] batman_adv: batadv0: The MTU of interface veth0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1445.524631][T14517] batman_adv: batadv0: Interface activated: veth0 [ 1446.698642][T14538] FAULT_INJECTION: forcing a failure. [ 1446.698642][T14538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1446.699103][T14538] CPU: 0 UID: 0 PID: 14538 Comm: syz.5.2070 Tainted: G L syzkaller #0 PREEMPT(full) [ 1446.699133][T14538] Tainted: [L]=SOFTLOCKUP [ 1446.699141][T14538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1446.699153][T14538] Call Trace: [ 1446.699161][T14538] [ 1446.699169][T14538] dump_stack_lvl+0x100/0x190 [ 1446.699203][T14538] should_fail_ex.cold+0x5/0xa [ 1446.699238][T14538] _copy_to_user+0x32/0xd0 [ 1446.699265][T14538] simple_read_from_buffer+0xcb/0x170 [ 1446.699296][T14538] proc_fail_nth_read+0x1af/0x230 [ 1446.699325][T14538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1446.699354][T14538] ? rw_verify_area+0xce/0x6d0 [ 1446.699375][T14538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1446.699402][T14538] vfs_read+0x1e4/0xb40 [ 1446.699425][T14538] ? lock_acquire+0x1d1/0x380 [ 1446.699447][T14538] ? __fget_files+0x34/0x3d0 [ 1446.699473][T14538] ? __pfx_vfs_read+0x10/0x10 [ 1446.699494][T14538] ? find_held_lock+0x2b/0x80 [ 1446.699523][T14538] ? __fget_files+0x215/0x3d0 [ 1446.699553][T14538] ? __fget_files+0x21f/0x3d0 [ 1446.699607][T14538] ksys_read+0x12a/0x250 [ 1446.699630][T14538] ? __pfx_ksys_read+0x10/0x10 [ 1446.699661][T14538] do_syscall_64+0x123/0x790 [ 1446.699686][T14538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.699707][T14538] RIP: 0033:0x7f2d9995e98e [ 1446.699725][T14538] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1446.699740][T14538] RSP: 002b:00007f2d9a7f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1446.699759][T14538] RAX: ffffffffffffffda RBX: 00007f2d9a7f76c0 RCX: 00007f2d9995e98e [ 1446.699773][T14538] RDX: 000000000000000f RSI: 00007f2d9a7f70a0 RDI: 0000000000000004 [ 1446.699786][T14538] RBP: 00007f2d9a7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.699798][T14538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.699810][T14538] R13: 00007f2d99c26128 R14: 00007f2d99c26090 R15: 00007ffc3a85cf38 [ 1446.699840][T14538] [ 1447.082228][ T30] usb 2-1: USB disconnect, device number 70 [ 1447.249186][T14540] binder: 14539:14540 ioctl c0306201 0 returned -14 [ 1447.591702][ T985] usbhid 5-1:0.0: can't add hid device: -71 [ 1447.591796][ T985] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1447.801277][ T985] usb 5-1: USB disconnect, device number 84 [ 1449.162683][T14554] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1449.162747][T14554] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1449.385611][T14200] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1449.385657][T14200] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1449.385689][T14200] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1449.385722][T14200] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.944996][T14564] FAULT_INJECTION: forcing a failure. [ 1450.944996][T14564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1450.945031][T14564] CPU: 1 UID: 0 PID: 14564 Comm: syz.0.2069 Tainted: G L syzkaller #0 PREEMPT(full) [ 1450.945059][T14564] Tainted: [L]=SOFTLOCKUP [ 1450.945065][T14564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1450.945076][T14564] Call Trace: [ 1450.945083][T14564] [ 1450.945090][T14564] dump_stack_lvl+0x100/0x190 [ 1450.945123][T14564] should_fail_ex.cold+0x5/0xa [ 1450.945150][T14564] _copy_to_user+0x32/0xd0 [ 1450.945178][T14564] bpf_prog_test_run_raw_tp+0x3f0/0x7d0 [ 1450.945206][T14564] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1450.945234][T14564] ? fput+0x7c/0x100 [ 1450.945261][T14564] ? __bpf_prog_get+0x97/0x290 [ 1450.945294][T14564] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1450.945319][T14564] __sys_bpf+0x2265/0x4a30 [ 1450.945348][T14564] ? __pfx___sys_bpf+0x10/0x10 [ 1450.945369][T14564] ? find_held_lock+0x2b/0x80 [ 1450.945397][T14564] ? get_pid_task+0xfc/0x250 [ 1450.945419][T14564] ? get_pid_task+0xfc/0x250 [ 1450.945449][T14564] ? find_held_lock+0x2b/0x80 [ 1450.945478][T14564] ? rcu_read_lock_any_held+0x6a/0x90 [ 1450.945505][T14564] ? find_held_lock+0x2b/0x80 [ 1450.945528][T14564] ? ksys_write+0x190/0x250 [ 1450.945546][T14564] ? ksys_write+0x190/0x250 [ 1450.945565][T14564] ? lock_acquire+0x1d1/0x380 [ 1450.945605][T14564] ? fput+0x7c/0x100 [ 1450.945631][T14564] ? ksys_write+0x1ac/0x250 [ 1450.945657][T14564] ? __x64_sys_bpf+0xce/0x140 [ 1450.945677][T14564] __x64_sys_bpf+0xce/0x140 [ 1450.945700][T14564] ? do_syscall_64+0xae/0x790 [ 1450.945723][T14564] do_syscall_64+0x123/0x790 [ 1450.945747][T14564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.945767][T14564] RIP: 0033:0x7fc22299e159 [ 1450.945786][T14564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.945804][T14564] RSP: 002b:00007fc2238af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1450.945824][T14564] RAX: ffffffffffffffda RBX: 00007fc222c25fa0 RCX: 00007fc22299e159 [ 1450.945837][T14564] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1450.945850][T14564] RBP: 00007fc2238af090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.945863][T14564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.945875][T14564] R13: 00007fc222c26038 R14: 00007fc222c25fa0 R15: 00007ffd25033dc8 [ 1450.945904][T14564] [ 1452.011026][ T1226] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.011455][ T1226] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.011533][ T1226] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.011595][ T1226] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.379794][T14571] netlink: 'syz.5.2078': attribute type 1 has an invalid length. [ 1452.379811][T14571] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2078'. [ 1453.495911][ T1226] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1453.496274][ T1226] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1453.497152][ T1226] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1453.497218][ T1226] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.685835][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1455.835603][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1455.838207][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1455.842141][ T9] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 1455.842173][ T9] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1455.842202][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.842232][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1455.842262][ T9] usb 6-1: config 1 has no interface number 0 [ 1455.842448][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.108668][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1457.403550][T14601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.404207][T14601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.436530][T14584] netlink: 'syz.5.2084': attribute type 10 has an invalid length. [ 1457.439839][ T9] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 1457.440114][ T9] snd_usb_pod 6-1:1.1: invalid control EP [ 1457.440130][ T9] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 1457.440307][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1457.440774][ T9] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1457.641538][T14604] Could not find key with description: [syz] [ 1457.641579][T14604] process_request_key_err: No key [ 1457.641625][T14604] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1457.641664][T14604] One or more global auth toks could not properly register; rc = [-2] [ 1457.641831][T14604] Error validating options; rc = [-2] [ 1458.843489][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 1458.855659][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 1458.857154][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 1458.858884][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 1458.859720][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 1459.677074][ T31] audit: type=1400 audit(2000000846.749:5903): avc: denied { read } for pid=14614 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1459.677124][ T31] audit: type=1400 audit(2000000846.749:5904): avc: denied { read open } for pid=14614 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1459.677167][ T31] audit: type=1400 audit(2000000846.759:5905): avc: denied { getattr } for pid=14614 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1459.905792][ T31] audit: type=1400 audit(2000000846.989:5906): avc: denied { write } for pid=14612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1459.907349][ T31] audit: type=1400 audit(2000000846.989:5907): avc: denied { add_name } for pid=14612 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1459.983769][ T985] usb 6-1: USB disconnect, device number 24 [ 1461.229602][ T31] audit: type=1400 audit(2000000848.309:5908): avc: denied { write } for pid=14628 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1461.711411][T14638] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 1461.711441][T14638] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2095'. [ 1463.584388][T14658] fuse: Bad value for 'fd' [ 1464.178241][ T31] audit: type=1400 audit(2000000851.259:5909): avc: denied { write } for pid=14640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1466.024124][ T31] audit: type=1400 audit(2000000853.099:5910): avc: denied { write } for pid=14667 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1467.469048][T14683] Could not find key with description: [syz] [ 1467.469089][T14683] process_request_key_err: No key [ 1467.469125][T14683] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1467.469156][T14683] One or more global auth toks could not properly register; rc = [-2] [ 1467.469220][T14683] Error validating options; rc = [-2] [ 1469.717347][T14697] netlink: 'syz.0.2107': attribute type 27 has an invalid length. [ 1469.760133][T14697] bond0: (slave bond_slave_1): Releasing backup interface [ 1470.193287][T14703] netlink: 'syz.0.2109': attribute type 1 has an invalid length. [ 1470.193304][T14703] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2109'. [ 1470.195726][ T985] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1470.345998][ T985] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1470.348394][ T985] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 1470.348416][ T985] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1470.348431][ T985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1470.348450][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.350174][ T985] usb 5-1: config 0 descriptor?? [ 1470.828400][ T985] input: HID 06cb:73f4 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:06CB:73F4.002F/input/input86 [ 1470.887010][ T985] itetech 0003:06CB:73F4.002F: offset (1) exceeds report_count (1) [ 1470.887048][ T985] itetech 0003:06CB:73F4.002F: offset (2) exceeds report_count (1) [ 1470.887067][ T985] itetech 0003:06CB:73F4.002F: offset (3) exceeds report_count (1) [ 1470.887086][ T985] itetech 0003:06CB:73F4.002F: offset (4) exceeds report_count (1) [ 1470.887101][ T985] itetech 0003:06CB:73F4.002F: offset (5) exceeds report_count (1) [ 1470.887119][ T985] itetech 0003:06CB:73F4.002F: offset (39) exceeds report_count (1) [ 1470.887137][ T985] itetech 0003:06CB:73F4.002F: offset (9) exceeds report_count (1) [ 1470.887152][ T985] itetech 0003:06CB:73F4.002F: offset (25) exceeds report_count (1) [ 1471.051850][ T985] itetech 0003:06CB:73F4.002F: input,hidraw0: USB HID v0.04 Joystick [HID 06cb:73f4] on usb-dummy_hcd.4-1/input0 [ 1472.169433][T14714] ima: policy update failed [ 1472.570104][ T31] audit: type=1802 audit(2000000859.249:5911): pid=14714 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.2112" res=0 errno=0 [ 1472.745040][T14721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2111'. [ 1474.005577][ T5846] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1474.155578][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 1474.157831][ T5846] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1474.158952][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.158982][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.159006][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1474.159044][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.683318][T14729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2115'. [ 1475.452199][ T5846] usb 4-1: config 0 descriptor?? [ 1475.510536][ T985] usb 5-1: USB disconnect, device number 85 [ 1475.787227][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1475.787423][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1476.686421][T14733] ima: policy update failed [ 1477.101643][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1477.101815][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1477.103559][ T31] audit: type=1802 audit(2000000863.769:5912): pid=14733 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.2113" res=0 errno=0 [ 1477.152462][T14732] ceph: No mds server is up or the cluster is laggy [ 1477.253198][ T5846] usbhid 4-1:0.0: can't add hid device: -71 [ 1477.253301][ T5846] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1477.268202][ T5846] usb 4-1: USB disconnect, device number 70 [ 1479.561699][T14747] netlink: 'syz.5.2122': attribute type 1 has an invalid length. [ 1479.561715][T14747] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2122'. [ 1480.031066][T14759] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1480.031136][T14759] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1481.585287][ T5665] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.585825][ T5665] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.585888][ T5665] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.585944][ T5665] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.665772][ T9] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 1482.242533][T14779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2127'. [ 1482.836235][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1482.838743][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1482.838791][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1482.838859][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.884261][ T9] usb 5-1: config 0 descriptor?? [ 1482.885696][T14769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1482.984943][T14783] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1482.985004][T14783] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1484.035501][T14789] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2132'. [ 1484.338036][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.338089][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.773881][T14769] lo speed is unknown, defaulting to 1000 [ 1485.548493][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1485.548583][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1485.566562][ T9] usb 5-1: USB disconnect, device number 86 [ 1486.758018][T14796] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1486.758056][T14796] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1486.758076][T14796] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1487.002609][T14810] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1487.002821][T14810] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1487.520083][T14813] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2139'. [ 1488.498068][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 1488.504323][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 1488.506223][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 1488.536046][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 1490.352837][T14825] ima: policy update failed [ 1490.562498][ T31] audit: type=1802 audit(2000000877.429:5913): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.2142" res=0 errno=0 [ 1492.875594][ T5760] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1493.035820][ T5760] usb 1-1: Using ep0 maxpacket: 32 [ 1493.037872][ T5760] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1493.039005][ T5760] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 1493.039033][ T5760] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1493.039055][ T5760] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.039075][ T5760] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1493.039107][ T5760] usb 1-1: config 1 has no interface number 0 [ 1493.039144][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.060432][ T5760] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1493.269943][T14832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.276969][T14832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.297352][T14832] netlink: 'syz.0.2144': attribute type 10 has an invalid length. [ 1493.298203][ T5760] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 1493.298503][ T5760] snd_usb_pod 1-1:1.1: invalid control EP [ 1493.298519][ T5760] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 1493.298721][ T5760] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1493.299200][ T5760] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1494.061099][ T5846] usb 1-1: USB disconnect, device number 54 [ 1494.235624][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 1494.242464][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 1494.244200][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 1494.247492][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 1494.248550][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 1496.504307][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 1496.504503][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 1496.545262][T14867] ceph: No mds server is up or the cluster is laggy [ 1496.852423][ T31] audit: type=1400 audit(2000000883.929:5914): avc: denied { write } for pid=14848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1497.553165][T14889] fuse: Bad value for 'fd' [ 1498.058341][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2154'. [ 1498.058368][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2154'. [ 1499.323074][ T31] audit: type=1400 audit(2000000886.399:5915): avc: denied { write } for pid=14895 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1499.455533][ T5846] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1499.636948][ T5846] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 1499.663627][ T5846] usb 4-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 1499.690576][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.690612][ T5846] usb 4-1: Product: syz [ 1499.690686][ T5846] usb 4-1: Manufacturer: syz [ 1499.690728][ T5846] usb 4-1: SerialNumber: syz [ 1499.752550][ T5846] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 1499.759188][ T5846] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 1499.766857][ T5846] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 1499.766933][ T5846] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 1499.766999][ T5846] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 1499.767063][ T5846] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 1499.767126][ T5846] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83 [ 1499.767190][ T5846] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 1499.784094][ T5846] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1500.391881][ T5846] usb 4-1: USB disconnect, device number 71 [ 1500.432550][ T5846] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1500.433103][ T5846] keyspan 4-1:1.0: device disconnected [ 1500.872632][ T31] audit: type=1400 audit(2000000887.949:5916): avc: denied { write } for pid=14900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1502.009985][ T31] audit: type=1400 audit(2000000889.059:5917): avc: denied { write } for pid=14924 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1503.695663][ T5846] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1503.855906][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 1503.858531][ T5846] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1503.887935][ T5846] usb 5-1: config index 0 descriptor too short (expected 27632, got 27) [ 1503.888022][ T5846] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1503.888082][ T5846] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.888139][ T5846] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1503.888200][ T5846] usb 5-1: config 1 has no interface number 0 [ 1503.888425][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.933524][T14955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2168'. [ 1504.641742][ T5846] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1504.839567][T14937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.840018][T14937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.874619][T14937] netlink: 'syz.4.2164': attribute type 10 has an invalid length. [ 1504.885840][ T5846] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 1504.886128][ T5846] snd_usb_pod 5-1:1.1: invalid control EP [ 1504.886142][ T5846] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1504.886310][ T5846] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1504.886758][ T5846] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1504.953475][ T31] audit: type=1400 audit(2000000892.029:5918): avc: denied { write } for pid=14933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1505.231596][ T5846] kernel read not supported for file /sequencer (pid: 5846 comm: kworker/1:6) [ 1505.408742][ T31] audit: type=1400 audit(2000000892.489:5919): avc: denied { write } for pid=14970 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1506.471042][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 1506.487408][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 1506.488792][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 1506.490093][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 1506.490904][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 1507.259326][T14205] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.260087][T14205] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.260268][T14205] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.260365][T14205] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1508.005488][ T31] audit: type=1400 audit(2000000895.059:5920): avc: denied { write } for pid=14974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1508.292185][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 1508.307738][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 1508.309542][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 1508.311040][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 1508.440466][ T5760] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1508.625669][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 1508.628418][ T5760] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1508.632419][ T5760] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 1508.632453][ T5760] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1508.632483][ T5760] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.632512][ T5760] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1508.632543][ T5760] usb 2-1: config 1 has no interface number 0 [ 1508.632727][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.815461][ T9] usb 5-1: USB disconnect, device number 87 [ 1509.090584][ T5760] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1509.132925][ T31] audit: type=1400 audit(2000000896.139:5921): avc: denied { write } for pid=15001 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1509.406008][T14998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.412448][T14998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.444026][T14998] netlink: 'syz.1.2176': attribute type 10 has an invalid length. [ 1509.444825][ T5760] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 1509.444994][ T5760] snd_usb_pod 2-1:1.1: invalid control EP [ 1509.445003][ T5760] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 1509.445117][ T5760] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1509.482365][ T5760] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1509.709850][T15008] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1509.710049][T15008] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1510.848792][T13907] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.977211][T13907] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.989130][T13907] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.989247][T13907] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.647220][T13907] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.651813][ T5785] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.651866][ T5785] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.651891][ T5785] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.664241][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'. [ 1513.874983][ T5760] usb 2-1: USB disconnect, device number 71 [ 1514.409704][T15048] 9p: Bad value for 'wfdno' [ 1514.436081][T15048] Could not find key with description: [syz] [ 1514.436134][T15048] process_request_key_err: No key [ 1514.436171][T15048] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1514.436208][T15048] One or more global auth toks could not properly register; rc = [-2] [ 1514.436362][T15048] Error validating options; rc = [-2] [ 1514.926923][ T31] audit: type=1400 audit(2000000901.999:5922): avc: denied { write } for pid=15025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1515.761368][ T31] audit: type=1400 audit(2000000902.839:5923): avc: denied { write } for pid=15055 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1517.003767][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 1517.024561][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 1517.026375][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 1517.048832][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 1517.050048][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 1517.374901][ T5846] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1517.625488][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 1517.627512][ T5846] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1517.629749][ T5846] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 1517.629775][ T5846] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1517.629796][ T5846] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.629813][ T5846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1517.629826][ T5846] usb 4-1: config 1 has no interface number 0 [ 1517.629850][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.740868][ T5846] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1517.965425][T15064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1517.965898][T15064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1518.024068][T15064] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 1518.024799][ T5846] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1518.025099][ T5846] snd_usb_pod 4-1:1.1: invalid control EP [ 1518.025114][ T5846] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1518.025300][ T5846] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1518.063782][ T5846] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1519.028558][T15076] ima: policy update failed [ 1519.217544][ T31] audit: type=1802 audit(2000000906.109:5924): pid=15076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.2182" res=0 errno=0 [ 1519.259422][T15078] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1519.259488][T15078] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1519.347113][T15078] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1519.434470][T15078] batman_adv: batadv0: Removing interface: syzkaller0 [ 1519.615581][T13903] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1519.615626][T13903] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1519.615659][T13903] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1519.615691][T13903] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.076490][ T31] audit: type=1400 audit(2000000907.159:5925): avc: denied { write } for pid=15066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1520.491210][ T31] audit: type=1400 audit(2000000907.569:5926): avc: denied { write } for pid=15096 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1520.494320][ T5846] usb 4-1: USB disconnect, device number 72 [ 1522.211033][T15110] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1522.211231][T15110] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1524.460275][T15121] Could not find key with description: [syz] [ 1524.460319][T15121] process_request_key_err: No key [ 1524.460356][T15121] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1524.460396][T15121] One or more global auth toks could not properly register; rc = [-2] [ 1524.460629][T15121] Error validating options; rc = [-2] [ 1525.572964][T15127] fuse: Bad value for 'fd' [ 1525.846627][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2195'. [ 1525.852898][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2195'. [ 1525.854186][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2195'. [ 1525.882991][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2195'. [ 1526.879081][T15138] 9p: Bad value for 'rfdno' [ 1526.893779][T15138] Could not find key with description: [syz] [ 1526.893860][T15138] process_request_key_err: No key [ 1526.893905][T15138] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1526.893955][T15138] One or more global auth toks could not properly register; rc = [-2] [ 1526.894200][T15138] Error validating options; rc = [-2] [ 1527.979633][T15148] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1527.979835][T15148] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1528.565795][T14201] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.565956][T14201] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.566082][T14201] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.566207][T14201] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.076087][T15160] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1530.076194][T15160] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1530.076255][T15160] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1532.688276][T15174] fuse: Bad value for 'fd' [ 1534.384958][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2214'. [ 1535.343919][T15186] 9p: Bad value for 'rfdno' [ 1535.366536][T15186] Could not find key with description: [syz] [ 1535.366622][T15186] process_request_key_err: No key [ 1535.366726][T15186] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1535.366767][T15186] One or more global auth toks could not properly register; rc = [-2] [ 1535.367014][T15186] Error validating options; rc = [-2] [ 1536.284606][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 1537.318516][T15190] ima: policy update failed [ 1537.528614][ T31] audit: type=1802 audit(2000000924.399:5927): pid=15190 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.2218" res=0 errno=0 [ 1538.548007][T15205] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1538.548221][T15205] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1541.626891][T15280] fuse: Bad value for 'fd' [ 1542.701979][T15288] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1542.702162][T15288] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1543.248416][T15293] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2229'. [ 1545.322047][T15299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2233'. [ 1545.782624][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.782676][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.608151][T15221] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.608407][T15221] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.608487][T15221] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.608542][T15221] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1549.784524][T15331] netlink: 'syz.5.2239': attribute type 1 has an invalid length. [ 1549.784541][T15331] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2239'. [ 1550.224991][T15332] ceph: No mds server is up or the cluster is laggy [ 1550.225244][ T30] libceph: connect (1)[c::]:6789 error -22 [ 1550.225378][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 1550.748667][T15341] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1550.748872][T15341] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1551.246423][T15341] vimc vimc.0: kthread_run failed with -4 [ 1551.535581][T15228] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1551.535625][T15228] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1551.535657][T15228] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1551.535689][T15228] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1552.444399][T15355] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2245'. [ 1553.015579][ T30] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1553.179192][ T30] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1553.183044][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.183075][ T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1553.183243][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.200605][ T30] usb 2-1: config 0 descriptor?? [ 1553.236921][ T30] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1553.237322][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 1553.784404][ T30] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1553.818483][ T30] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1553.819602][ T30] usb 2-1: media controller created [ 1553.840687][T15351] fuse: Bad value for 'fd' [ 1554.342494][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1554.518843][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 1554.518929][ T30] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1554.539654][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input87 [ 1554.564558][ T30] dvb-usb: schedule remote query interval to 150 msecs. [ 1554.564574][ T30] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1554.714726][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2247'. [ 1554.737989][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 1554.764056][ T30] dvb-usb: error while querying for an remote control event. [ 1554.915561][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 1554.919299][ T30] dvb-usb: error while querying for an remote control event. [ 1555.283461][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 1555.283998][ T30] dvb-usb: error while querying for an remote control event. [ 1556.360911][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 1556.360941][ T30] dvb-usb: error while querying for an remote control event. [ 1556.410532][ T30] usb 2-1: USB disconnect, device number 72 [ 1556.484340][ T30] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1557.990286][T15391] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1557.990420][T15391] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1559.367178][T15406] FAULT_INJECTION: forcing a failure. [ 1559.367178][T15406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1559.367229][T15406] CPU: 0 UID: 0 PID: 15406 Comm: syz.3.2256 Tainted: G L syzkaller #0 PREEMPT(full) [ 1559.367257][T15406] Tainted: [L]=SOFTLOCKUP [ 1559.367264][T15406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1559.367276][T15406] Call Trace: [ 1559.367282][T15406] [ 1559.367289][T15406] dump_stack_lvl+0x100/0x190 [ 1559.367312][T15406] should_fail_ex.cold+0x5/0xa [ 1559.367329][T15406] _copy_from_user+0x2e/0xd0 [ 1559.367345][T15406] copy_msghdr_from_user+0x9f/0x4c0 [ 1559.367360][T15406] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1559.367376][T15406] ? rcu_is_watching+0x13/0xc0 [ 1559.367393][T15406] ? trace_contention_end.constprop.0+0x145/0x1a0 [ 1559.367412][T15406] ___sys_sendmsg+0x106/0x1e0 [ 1559.367426][T15406] ? __pfx____sys_sendmsg+0x10/0x10 [ 1559.367444][T15406] ? __fget_files+0x34/0x3d0 [ 1559.367471][T15406] __sys_sendmmsg+0x20c/0x440 [ 1559.367489][T15406] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1559.367517][T15406] ? __pfx___schedule+0x10/0x10 [ 1559.367540][T15406] __x64_sys_sendmmsg+0x9c/0x100 [ 1559.367556][T15406] ? lockdep_hardirqs_on+0x7d/0x110 [ 1559.367568][T15406] do_syscall_64+0x123/0x790 [ 1559.367581][T15406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.367593][T15406] RIP: 0033:0x7f40ec19e159 [ 1559.367604][T15406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.367615][T15406] RSP: 002b:00007f40ecfe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1559.367627][T15406] RAX: ffffffffffffffda RBX: 00007f40ec426180 RCX: 00007f40ec19e159 [ 1559.367635][T15406] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000005 [ 1559.367643][T15406] RBP: 00007f40ecfe7090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.367650][T15406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.367657][T15406] R13: 00007f40ec426218 R14: 00007f40ec426180 R15: 00007ffe856781e8 [ 1559.367672][T15406] [ 1559.806042][T15218] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.806305][T15218] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.806368][T15218] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.806430][T15218] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1561.970191][T15417] fuse: Bad value for 'fd' [ 1563.719678][T15218] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.719857][T15218] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.719901][T15218] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.719934][T15218] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.263973][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 1564.281654][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 1564.295995][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 1564.299505][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 1564.300375][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 1565.586299][T15447] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2267'. [ 1565.825720][ T5760] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1565.985946][ T5760] usb 4-1: Using ep0 maxpacket: 8 [ 1565.990924][ T5760] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1566.011348][ T5760] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.011379][ T5760] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1566.011547][ T5760] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1566.011581][ T5760] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1566.011739][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.192579][ T5760] hub 4-1:1.0: bad descriptor, ignoring hub [ 1566.208041][ T5760] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1566.210522][ T5760] cdc_wdm 4-1:1.0: skipping garbage [ 1566.210569][ T5760] cdc_wdm 4-1:1.0: skipping garbage [ 1566.351716][ T5760] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1566.359731][ T5760] cdc_wdm 4-1:1.0: Unknown control protocol [ 1566.758119][T15449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.760906][T15449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.207727][ T30] usb 4-1: USB disconnect, device number 73 [ 1567.665255][T15459] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1567.665639][T15459] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1568.179902][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2264'. [ 1568.179929][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2264'. [ 1568.515810][ T30] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1568.666676][ T30] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 1568.668048][ T30] usb 5-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 1568.672014][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.672039][ T30] usb 5-1: Product: syz [ 1568.672054][ T30] usb 5-1: Manufacturer: syz [ 1568.672070][ T30] usb 5-1: SerialNumber: syz [ 1568.733106][ T30] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 1568.733287][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 1568.753800][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 1568.753877][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 1568.753947][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 1568.754758][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 1568.755163][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 1568.755234][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 1568.808542][ T30] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1569.903692][T15253] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.904370][T15253] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.904444][T15253] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.904501][T15253] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1570.409226][T15479] fuse: Bad value for 'fd' [ 1570.936616][ T5760] usb 5-1: USB disconnect, device number 88 [ 1570.963916][ T5760] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1570.964445][ T5760] keyspan 5-1:1.0: device disconnected [ 1572.976631][T15500] syzkaller0: entered promiscuous mode [ 1572.976656][T15500] syzkaller0: entered allmulticast mode [ 1573.308043][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'. [ 1573.308071][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'. [ 1574.793936][ T5760] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 1574.794450][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1574.844539][T15517] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 1574.844569][T15517] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2280'. [ 1575.952556][ T5760] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1575.957945][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 1575.962505][ T9] usb 2-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 1575.984709][ T5760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1575.984773][ T5760] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1575.984949][ T5760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.018314][ T5663] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.018597][ T5663] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.018674][ T5663] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.018734][ T5663] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.158254][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.158318][ T9] usb 2-1: Product: syz [ 1576.158362][ T9] usb 2-1: Manufacturer: syz [ 1576.158409][ T9] usb 2-1: SerialNumber: syz [ 1576.206496][ T5760] usb 6-1: config 0 descriptor?? [ 1576.210023][T15507] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1576.361205][ T9] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 1576.362459][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1576.544860][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1576.575636][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 1576.576170][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1576.576667][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1576.577202][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 83 [ 1576.577708][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 1576.757037][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1577.333315][ T9] usb 2-1: USB disconnect, device number 73 [ 1577.440020][ T5760] usbhid 6-1:0.0: can't add hid device: -71 [ 1577.440555][ T5760] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1577.643719][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1577.684769][ T5760] usb 6-1: USB disconnect, device number 25 [ 1577.694979][ T9] keyspan 2-1:1.0: device disconnected [ 1579.514031][ T31] audit: type=1400 audit(2000000966.589:5928): avc: denied { listen } for pid=15526 comm="syz.5.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1579.865487][ T30] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1580.036125][ T30] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1580.040750][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.040779][ T30] usb 2-1: Product: syz [ 1580.040795][ T30] usb 2-1: Manufacturer: syz [ 1580.040831][ T30] usb 2-1: SerialNumber: syz [ 1580.295032][ T5846] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1580.606685][T15523] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1580.765489][T15523] usb 1-1: Using ep0 maxpacket: 8 [ 1580.767720][T15523] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1580.771369][T15523] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.771394][T15523] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1580.771435][T15523] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1580.771463][T15523] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1580.771502][T15523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.795481][ T5760] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 1581.010539][ T30] usb 2-1: USB disconnect, device number 74 [ 1581.034465][ T5760] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1581.049771][ T5760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1581.049806][ T5760] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1581.049847][ T5760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.450052][T15523] hub 1-1:1.0: bad descriptor, ignoring hub [ 1581.450080][T15523] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1581.450535][T15523] cdc_wdm 1-1:1.0: skipping garbage [ 1581.450551][T15523] cdc_wdm 1-1:1.0: skipping garbage [ 1581.525050][T15556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.556656][ T5846] usb 2-1: Service connection timeout for: 256 [ 1581.556727][ T5846] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1581.596162][T15556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.643635][ T5846] ath9k_htc: Failed to initialize the device [ 1581.654856][ T5760] usb 6-1: config 0 descriptor?? [ 1581.691486][T15564] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1581.691881][ T30] usb 2-1: ath9k_htc: USB layer deinitialized [ 1581.806412][T15523] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1581.806434][T15523] cdc_wdm 1-1:1.0: Unknown control protocol [ 1581.836993][T15523] usb 1-1: USB disconnect, device number 55 [ 1582.342573][T15564] lo speed is unknown, defaulting to 1000 [ 1583.783761][ T5760] usbhid 6-1:0.0: can't add hid device: -71 [ 1583.783832][ T5760] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1583.806142][ T5760] usb 6-1: USB disconnect, device number 26 [ 1607.216502][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.216556][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.666408][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.666444][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.106677][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.106712][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.745657][ T32] INFO: task syz-executor:5628 blocked in I/O wait for more than 143 seconds. [ 1730.745682][ T32] Tainted: G L syzkaller #0 [ 1730.745690][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1730.745695][ T32] task:syz-executor state:D stack:22952 pid:5628 tgid:5628 ppid:5627 task_flags:0x440100 flags:0x00080000 [ 1730.745728][ T32] Call Trace: [ 1730.745733][ T32] [ 1730.745743][ T32] __schedule+0x1259/0x6920 [ 1730.745768][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1730.745793][ T32] ? __pfx___schedule+0x10/0x10 [ 1730.745810][ T32] ? find_held_lock+0x2b/0x80 [ 1730.745828][ T32] ? schedule+0x225/0x2c0 [ 1730.745848][ T32] schedule+0xdd/0x2c0 [ 1730.745866][ T32] io_schedule+0x8a/0xf0 [ 1730.745884][ T32] bit_wait_io+0xd/0xe0 [ 1730.745894][ T32] __wait_on_bit+0x65/0x180 [ 1730.745906][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 1730.745919][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 1730.745932][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1730.745945][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 1730.745962][ T32] do_get_write_access+0x836/0x11e0 [ 1730.745985][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 1730.746002][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 1730.746024][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 1730.746045][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 1730.746064][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1730.746080][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1730.746098][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 1730.746114][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 1730.746130][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 1730.746147][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 1730.746163][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 1730.746199][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1730.746210][ T32] ext4_dirty_inode+0xd9/0x130 [ 1730.746221][ T32] ? rcu_is_watching+0x13/0xc0 [ 1730.746238][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 1730.746256][ T32] file_update_time_flags+0x49c/0x520 [ 1730.746271][ T32] ext4_page_mkwrite+0x324/0x1860 [ 1730.746287][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1730.746299][ T32] ? __pfx_vm_normal_page+0x10/0x10 [ 1730.746314][ T32] ? find_held_lock+0x2b/0x80 [ 1730.746332][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 1730.746345][ T32] do_page_mkwrite+0x17a/0x440 [ 1730.746360][ T32] do_wp_page+0x9ed/0x45c0 [ 1730.746382][ T32] ? lock_acquire+0x1d1/0x380 [ 1730.746395][ T32] ? __pfx_do_wp_page+0x10/0x10 [ 1730.746411][ T32] ? lock_acquire+0x1d1/0x380 [ 1730.746425][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1730.746441][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1730.746462][ T32] __handle_mm_fault+0x1cd2/0x2f60 [ 1730.746482][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 1730.746500][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 1730.746521][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 1730.746548][ T32] handle_mm_fault+0x363/0xa20 [ 1730.746572][ T32] do_user_addr_fault+0x59c/0x12f0 [ 1730.746593][ T32] exc_page_fault+0x6f/0xd0 [ 1730.746605][ T32] asm_exc_page_fault+0x26/0x30 [ 1730.746618][ T32] RIP: 0033:0x7fa4a5a701e3 [ 1730.746628][ T32] RSP: 002b:00007ffeca56c630 EFLAGS: 00010202 [ 1730.746639][ T32] RAX: 00007fa49e03ff88 RBX: 00007ffeca56c760 RCX: 0000000000000000 [ 1730.746647][ T32] RDX: 00007fa49e03ff84 RSI: 0000000000000008 RDI: 00007ffeca56c760 [ 1730.746655][ T32] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 1730.746662][ T32] R10: 00007ffeca56c740 R11: 0000000000000000 R12: 0000000000000000 [ 1730.746671][ T32] R13: 0000000000000078 R14: ffffffffffffff88 R15: 0000000000000000 [ 1730.746687][ T32] [ 1730.746744][ T32] INFO: task syz.3.2303:15575 blocked in I/O wait for more than 143 seconds. [ 1730.746755][ T32] Tainted: G L syzkaller #0 [ 1730.746761][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1730.746766][ T32] task:syz.3.2303 state:D stack:24680 pid:15575 tgid:15575 ppid:5639 task_flags:0x440140 flags:0x00080002 [ 1730.746798][ T32] Call Trace: [ 1730.746802][ T32] [ 1730.746808][ T32] __schedule+0x1259/0x6920 [ 1730.746826][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1730.746848][ T32] ? __pfx___schedule+0x10/0x10 [ 1730.746864][ T32] ? find_held_lock+0x2b/0x80 [ 1730.746882][ T32] ? schedule+0x225/0x2c0 [ 1730.746902][ T32] schedule+0xdd/0x2c0 [ 1730.746919][ T32] io_schedule+0x8a/0xf0 [ 1730.746937][ T32] bit_wait_io+0xd/0xe0 [ 1730.746947][ T32] __wait_on_bit+0x65/0x180 [ 1730.746959][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 1730.747049][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 1730.747070][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1730.747093][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 1730.747112][ T32] do_get_write_access+0x836/0x11e0 [ 1730.747135][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 1730.747152][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 1730.747182][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 1730.747203][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 1730.747222][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1730.747237][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1730.747256][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 1730.747272][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 1730.747288][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 1730.747304][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 1730.747321][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 1730.747333][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1730.747344][ T32] ext4_dirty_inode+0xd9/0x130 [ 1730.747355][ T32] ? rcu_is_watching+0x13/0xc0 [ 1730.747372][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 1730.747389][ T32] file_update_time_flags+0x49c/0x520 [ 1730.747404][ T32] ext4_page_mkwrite+0x324/0x1860 [ 1730.747420][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1730.747432][ T32] ? __pfx_vm_normal_page+0x10/0x10 [ 1730.747447][ T32] ? find_held_lock+0x2b/0x80 [ 1730.747464][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 1730.747477][ T32] do_page_mkwrite+0x17a/0x440 [ 1730.747492][ T32] do_wp_page+0x9ed/0x45c0 [ 1730.747509][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 1730.747522][ T32] ? lock_acquire+0x1d1/0x380 [ 1730.747536][ T32] ? __pfx_do_wp_page+0x10/0x10 [ 1730.747552][ T32] ? lock_acquire+0x1d1/0x380 [ 1730.747565][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1730.747581][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1730.747602][ T32] __handle_mm_fault+0x1cd2/0x2f60 [ 1730.747622][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 1730.747641][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 1730.747662][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 1730.747690][ T32] handle_mm_fault+0x363/0xa20 [ 1730.747711][ T32] do_user_addr_fault+0x59c/0x12f0 [ 1730.747732][ T32] exc_page_fault+0x6f/0xd0 [ 1730.747744][ T32] asm_exc_page_fault+0x26/0x30 [ 1730.747756][ T32] RIP: 0033:0x7f40ec072809 [ 1730.747766][ T32] RSP: 002b:00007ffe85678230 EFLAGS: 00010202 [ 1730.747775][ T32] RAX: 0000001b2d7167e8 RBX: ffffffffffff27e8 RCX: ffffffff82646e15 [ 1730.747784][ T32] RDX: 0000001b2d7167e4 RSI: 0000000000000004 RDI: 00007f40ecf55720 [ 1730.747791][ T32] RBP: 0000000000000000 R08: 00007f40ec410000 R09: 00007f40ec412000 [ 1730.747799][ T32] R10: 0000000082646e19 R11: 000000000000000e R12: 0000000000000000 [ 1730.747806][ T32] R13: 000000000007ffff R14: ffffffff82646643 R15: 00007f40ecf55720 [ 1730.747814][ T32] ? copy_page_range+0x1ec3/0x57c0 [ 1730.747834][ T32] ? copy_page_range+0x2695/0x57c0 [ 1730.747855][ T32] [ 1730.747861][ T32] INFO: task syz.1.2305:15588 blocked in I/O wait for more than 143 seconds. [ 1730.747871][ T32] Tainted: G L syzkaller #0 [ 1730.747877][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1730.747882][ T32] task:syz.1.2305 state:D stack:26664 pid:15588 tgid:15588 ppid:5650 task_flags:0x440140 flags:0x00080002 [ 1730.747914][ T32] Call Trace: [ 1730.747919][ T32] [ 1730.747925][ T32] __schedule+0x1259/0x6920 [ 1730.747942][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1730.747964][ T32] ? __pfx___schedule+0x10/0x10 [ 1730.747981][ T32] ? find_held_lock+0x2b/0x80 [ 1730.747998][ T32] ? schedule+0x225/0x2c0 [ 1730.748018][ T32] schedule+0xdd/0x2c0 [ 1730.748035][ T32] io_schedule+0x8a/0xf0 [ 1730.748053][ T32] bit_wait_io+0xd/0xe0 [ 1730.748064][ T32] __wait_on_bit+0x65/0x180 [ 1730.748075][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 1730.748088][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 1730.748100][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1730.748114][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 1730.748130][ T32] do_get_write_access+0x836/0x11e0 [ 1730.748152][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 1730.748173][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 1730.748193][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 1730.748213][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 1730.748232][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1730.748246][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1730.748265][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 1730.748281][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 1730.748297][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 1730.748313][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 1730.748329][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 1730.748342][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1730.748353][ T32] ext4_dirty_inode+0xd9/0x130 [ 1730.748364][ T32] ? rcu_is_watching+0x13/0xc0 [ 1730.748380][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 1730.748397][ T32] file_update_time_flags+0x49c/0x520 [ 1730.748427][ T32] ext4_page_mkwrite+0x324/0x1860 [ 1730.748443][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1730.748460][ T32] do_page_mkwrite+0x17a/0x440 [ 1730.748475][ T32] do_fault+0x659/0x1830 [ 1730.748490][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 1730.748507][ T32] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1730.748528][ T32] ? __pfx_do_fault+0x10/0x10 [ 1730.748542][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 1730.748559][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1730.748576][ T32] ? __pmd_alloc+0x3fb/0x950 [ 1730.748593][ T32] __handle_mm_fault+0x150b/0x2f60 [ 1730.748614][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 1730.748631][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 1730.748653][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 1730.748681][ T32] handle_mm_fault+0x363/0xa20 [ 1730.748703][ T32] do_user_addr_fault+0x59c/0x12f0 [ 1730.748723][ T32] exc_page_fault+0x6f/0xd0 [ 1730.748735][ T32] asm_exc_page_fault+0x26/0x30 [ 1730.748747][ T32] RIP: 0033:0x7fd73566baa3 [ 1730.748756][ T32] RSP: 002b:00007ffc3d93da20 EFLAGS: 00010246 [ 1730.748765][ T32] RAX: 0000000000dffde8 RBX: 0000000000000000 RCX: 0000001b2cf64000 [ 1730.748773][ T32] RDX: 0000001b2cf24000 RSI: 0000000000e00000 RDI: 00007fd7359e0708 [ 1730.748780][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1730.748787][ T32] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1730.748794][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc3d93dcb0 [ 1730.748810][ T32] [ 1730.748816][ T32] INFO: task syz.0.2306:15590 blocked in I/O wait for more than 143 seconds. [ 1730.748826][ T32] Tainted: G L syzkaller #0 [ 1730.748832][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1730.748837][ T32] task:syz.0.2306 state:D stack:27496 pid:15590 tgid:15590 ppid:5640 task_flags:0x440140 flags:0x00080002 [ 1730.748869][ T32] Call Trace: [ 1730.748872][ T32] [ 1730.748879][ T32] __schedule+0x1259/0x6920 [ 1730.748896][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1730.748918][ T32] ? __pfx___schedule+0x10/0x10 [ 1730.748934][ T32] ? find_held_lock+0x2b/0x80 [ 1730.748952][ T32] ? schedule+0x225/0x2c0 [ 1730.748971][ T32] schedule+0xdd/0x2c0 [ 1730.748989][ T32] io_schedule+0x8a/0xf0 [ 1730.749006][ T32] bit_wait_io+0xd/0xe0 [ 1730.749017][ T32] __wait_on_bit+0x65/0x180 [ 1730.749029][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 1730.749042][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 1730.749054][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1730.749068][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 1730.749084][ T32] do_get_write_access+0x836/0x11e0 [ 1730.749106][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 1730.749122][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 1730.749142][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 1730.749163][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 1730.749186][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1730.749200][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1730.749219][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 1730.749235][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 1730.749251][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 1730.749267][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 1730.749283][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 1730.749296][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1730.749307][ T32] ext4_dirty_inode+0xd9/0x130 [ 1730.749317][ T32] ? rcu_is_watching+0x13/0xc0 [ 1730.749334][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 1730.749350][ T32] touch_atime+0x65f/0x770 [ 1730.749367][ T32] ext4_file_mmap_prepare+0x56d/0x670 [ 1730.749384][ T32] ? __pfx_ext4_file_mmap_prepare+0x10/0x10 [ 1730.749405][ T32] __mmap_region+0xead/0x32e0 [ 1730.749421][ T32] ? __pfx___mmap_region+0x10/0x10 [ 1730.749433][ T32] ? get_page_from_freelist+0x110d/0x35d0 [ 1730.749448][ T32] ? bpf_ksym_find+0x128/0x1c0 [ 1730.749468][ T32] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1730.749481][ T32] ? prepare_alloc_pages+0x1f0/0x5b0 [ 1730.749505][ T32] ? lock_acquire+0x1d1/0x380 [ 1730.749518][ T32] ? unwind_next_frame+0xbd/0x2090 [ 1730.749538][ T32] ? lock_acquire+0x1d1/0x380 [ 1730.749551][ T32] ? is_bpf_text_address+0x25/0x1a0 [ 1730.749568][ T32] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1730.749581][ T32] ? find_held_lock+0x2b/0x80 [ 1730.749598][ T32] ? is_bpf_text_address+0x8a/0x1a0 [ 1730.749614][ T32] ? is_bpf_text_address+0x8a/0x1a0 [ 1730.749653][ T32] ? __pfx_mt_find+0x10/0x10 [ 1730.749672][ T32] mmap_region+0x5a8/0x6d0 [ 1730.749687][ T32] ? __pfx_mmap_region+0x10/0x10 [ 1730.749700][ T32] ? shmem_mapping+0xd/0x50 [ 1730.749714][ T32] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 1730.749733][ T32] ? security_mmap_addr+0x71/0x1e0 [ 1730.749750][ T32] ? __get_unmapped_area+0x255/0x3e0 [ 1730.749768][ T32] do_mmap+0x12c7/0x1c30 [ 1730.749787][ T32] ? lock_acquire+0x1d1/0x380 [ 1730.749800][ T32] ? __pfx_do_mmap+0x10/0x10 [ 1730.749816][ T32] ? __pfx___might_resched+0x10/0x10 [ 1730.749828][ T32] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 1730.749841][ T32] ? security_current_getlsmprop_subj+0x6e/0x130 [ 1730.749864][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 1730.749882][ T32] vm_mmap_pgoff+0x28d/0x470 [ 1730.749899][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1730.749913][ T32] ? __fget_files+0x215/0x3d0 [ 1730.749935][ T32] ? __fget_files+0x21f/0x3d0 [ 1730.749954][ T32] ksys_mmap_pgoff+0x3cb/0x610 [ 1730.749971][ T32] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1730.749986][ T32] ? __do_sys_prctl+0x14e/0x2270 [ 1730.750006][ T32] ? __pfx___do_sys_prctl+0x10/0x10 [ 1730.750025][ T32] __x64_sys_mmap+0x125/0x190 [ 1730.750042][ T32] do_syscall_64+0x123/0x790 [ 1730.750056][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.750068][ T32] RIP: 0033:0x7fc22299dec2 [ 1730.750077][ T32] RSP: 002b:00007ffd25033ee8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1730.750088][ T32] RAX: ffffffffffffffda RBX: 0000001b2ce64000 RCX: 00007fc22299dec2 [ 1730.750096][ T32] RDX: 0000000000000003 RSI: 0000000000dc0000 RDI: 0000001b2ce64000 [ 1730.750103][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 1730.750111][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000001e4 [ 1730.750118][ T32] R13: 00000000000927c0 R14: 0000000000182429 R15: 00007ffd250341c0 [ 1730.750134][ T32] [ 1730.750149][ T32] [ 1730.750149][ T32] Showing all locks held in the system: [ 1730.750159][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1730.750171][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1730.750227][ T32] locks held by getty/5356: 2, on CPU#0: [ 1730.750236][ T32] #0: ffff8880337440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1730.750264][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1730.750292][ T32] locks held by syz-executor/5628: 3, on CPU#1: [ 1730.750300][ T32] #0: ffff8880731c01c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 1730.750332][ T32] #1: ffff888037992558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 1730.750361][ T32] #2: ffff88803799e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 1730.750405][ T32] locks held by syz.3.2303/15575: 3, on CPU#0: [ 1730.750413][ T32] #0: ffff88807427e308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 1730.750445][ T32] #1: ffff888037992558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 1730.750472][ T32] #2: ffff88803799e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 1730.750501][ T32] locks held by syz.1.2305/15588: 3, on CPU#0: [ 1730.750514][ T32] #0: ffff88807427c6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 1730.750546][ T32] #1: ffff888037992558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 1730.750574][ T32] #2: ffff88803799e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 1730.750603][ T32] locks held by syz.0.2306/15590: 3, on CPU#1: [ 1730.750611][ T32] #0: ffff888033286540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1730.750640][ T32] #1: ffff888037992460 (sb_writers#5){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x56d/0x670 [ 1730.750675][ T32] #2: ffff88803799e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 1730.750704][ T32] [ 1730.750707][ T32] ============================================= [ 1730.750707][ T32] [ 1730.750719][ T32] NMI backtrace for cpu 0 [ 1730.750730][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1730.750745][ T32] Tainted: [L]=SOFTLOCKUP [ 1730.750750][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1730.750757][ T32] Call Trace: [ 1730.750761][ T32] [ 1730.750766][ T32] dump_stack_lvl+0x100/0x190 [ 1730.750784][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1730.750803][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1730.750817][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1730.750836][ T32] sys_info+0x141/0x190 [ 1730.750850][ T32] watchdog+0xcb1/0x1030 [ 1730.750868][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1730.750886][ T32] ? __pfx_watchdog+0x10/0x10 [ 1730.750900][ T32] ? __kthread_parkme+0x18f/0x230 [ 1730.750916][ T32] ? kthread+0x13a/0x450 [ 1730.750931][ T32] ? __pfx_watchdog+0x10/0x10 [ 1730.750944][ T32] kthread+0x373/0x450 [ 1730.750960][ T32] ? __pfx_kthread+0x10/0x10 [ 1730.750977][ T32] ret_from_fork+0x730/0xd60 [ 1730.750991][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1730.751005][ T32] ? __switch_to+0x800/0x10f0 [ 1730.751022][ T32] ? __pfx_kthread+0x10/0x10 [ 1730.751039][ T32] ret_from_fork_asm+0x1a/0x30 [ 1730.751058][ T32] [ 1730.751062][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1730.751103][ C1] NMI backtrace for cpu 1 [ 1730.751117][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1730.751141][ C1] Tainted: [L]=SOFTLOCKUP [ 1730.751148][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1730.751158][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1730.751177][ C1] Code: 57 93 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 48 19 00 fb f4 0c 50 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1730.751193][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000242 [ 1730.751207][ C1] RAX: 00000000050f00f1 RBX: ffff88801f68cb00 RCX: ffffffff8bd27215 [ 1730.751219][ C1] RDX: 0000000000000001 RSI: ffffffff8e38e957 RDI: ffffffff8c623980 [ 1730.751231][ C1] RBP: ffffed1003ed1960 R08: 0000000000000001 R09: ffffed10170a67bd [ 1730.751242][ C1] R10: ffff8880b8533deb R11: 0000000000000001 R12: 0000000000000000 [ 1730.751254][ C1] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 1730.751266][ C1] FS: 0000000000000000(0000) GS:ffff888123c4f000(0000) knlGS:0000000000000000 [ 1730.751282][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1730.751294][ C1] CR2: 00005570657ddbe0 CR3: 0000000075a25000 CR4: 00000000003526f0 [ 1730.751306][ C1] Call Trace: [ 1730.751312][ C1] [ 1730.751318][ C1] default_idle+0x9/0x10 [ 1730.751337][ C1] default_idle_call+0x6c/0xb0 [ 1730.751356][ C1] do_idle+0x3ae/0x5b0 [ 1730.751378][ C1] ? __pfx_do_idle+0x10/0x10 [ 1730.751399][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 1730.751424][ C1] cpu_startup_entry+0x4f/0x60 [ 1730.751446][ C1] start_secondary+0x21d/0x2d0 [ 1730.751465][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1730.751486][ C1] common_startup_64+0x13e/0x158 [ 1730.751515][ C1] [ 1730.752086][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1732.767103][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1732.777754][ T32] Tainted: [L]=SOFTLOCKUP [ 1732.782052][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1732.792099][ T32] Call Trace: [ 1732.795357][ T32] [ 1732.798268][ T32] dump_stack_lvl+0x100/0x190 [ 1732.802928][ T32] vpanic+0x553/0x970 [ 1732.806886][ T32] ? __pfx_vpanic+0x10/0x10 [ 1732.811369][ T32] panic+0xd1/0xe0 [ 1732.815061][ T32] ? __pfx_panic+0x10/0x10 [ 1732.819468][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 1732.824492][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1732.830627][ T32] ? watchdog.cold+0x1ec/0x234 [ 1732.835384][ T32] watchdog.cold+0x1fd/0x234 [ 1732.840003][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1732.845791][ T32] ? __pfx_watchdog+0x10/0x10 [ 1732.850448][ T32] ? __kthread_parkme+0x18f/0x230 [ 1732.855459][ T32] ? kthread+0x13a/0x450 [ 1732.859701][ T32] ? __pfx_watchdog+0x10/0x10 [ 1732.864354][ T32] kthread+0x373/0x450 [ 1732.868406][ T32] ? __pfx_kthread+0x10/0x10 [ 1732.872990][ T32] ret_from_fork+0x730/0xd60 [ 1732.877569][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1732.882670][ T32] ? __switch_to+0x800/0x10f0 [ 1732.887326][ T32] ? __pfx_kthread+0x10/0x10 [ 1732.891897][ T32] ret_from_fork_asm+0x1a/0x30 [ 1732.896643][ T32] [ 1732.899890][ T32] Kernel Offset: disabled [ 1732.904198][ T32] Rebooting in 86400 seconds..