last executing test programs: 5m3.335534563s ago: executing program 0 (id=271): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f775bc37356af4badef0ce6b4f3a95d5575705f69642d", @ANYRESDEC=0x0, @ANYRES16=r0], 0x0, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080), 0xf56f, 0x10000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000180)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 5m3.113142559s ago: executing program 0 (id=272): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 5m2.997360972s ago: executing program 0 (id=274): io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x40, 0xfffffff9, 0xd4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x805, 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x7822, 0x400, 0x2, 0x105}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xdc, 0x47, 0xa3, 0x10, 0x1f38, 0x1, 0x29ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x1a, 0xd5, 0x0, 0x75, 0x90, 0x7d, 0x5}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008003200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5m0.998630373s ago: executing program 0 (id=288): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async, rerun: 64) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x7}) (rerun: 64) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r4, &(0x7f0000000240)) r5 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r5, &(0x7f0000000000)=""/31, 0x1f, 0x12000, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioprio_get$pid(0x0, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) (async) r7 = semget$private(0x0, 0x3, 0x400) r8 = semget$private(0x0, 0x1, 0x0) semop(r8, &(0x7f0000000380)=[{0x1, 0xe8, 0x1000}], 0x1) (async) semop(r7, &(0x7f0000000400)=[{0x1, 0x200, 0x1000}], 0x1) (async, rerun: 32) semop(0x0, &(0x7f0000000440)=[{0x0, 0x5, 0x3000}], 0x1) (rerun: 32) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x918) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) (async, rerun: 32) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (rerun: 32) 5m0.45472572s ago: executing program 0 (id=291): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab120400000000000001090224"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x3}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x8, 0x10001, 0x1, 0x0, 0x2, 0xd, 0x8}, 0x1c) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000002c0)={0x3, 'wlan0\x00', {0xff00000}, 0x4}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:De', 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000000040)={0x11, @private=0xa010100, 0x4e20, 0x2, 'none\x00', 0x10, 0x6, 0x43}, 0x2c) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r11, 0xc0145b0e, &(0x7f0000000040)) 4m59.896746864s ago: executing program 0 (id=293): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x2000) pwrite64(r4, &(0x7f0000000080)="5349c37f851bf30c34e8dc1b51cf9eecd10d5efe632de2b9cc7bc50616927b79a204e5f7b824", 0x26, 0xffffffffffffffff) r5 = dup(r2) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) (async, rerun: 64) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881ac, 0x4}) (async, rerun: 64) write$binfmt_elf64(r6, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x79, 0xa3, 0x23e, 0x2, 0x3e, 0xfffffffb, 0x3c9, 0x40, 0x3c7, 0x10000, 0x5, 0x38, 0x0, 0x6, 0x6b1, 0x400}, [], "", ['\x00']}, 0x140) (async) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4m59.237826242s ago: executing program 32 (id=293): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x2000) pwrite64(r4, &(0x7f0000000080)="5349c37f851bf30c34e8dc1b51cf9eecd10d5efe632de2b9cc7bc50616927b79a204e5f7b824", 0x26, 0xffffffffffffffff) r5 = dup(r2) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) (async, rerun: 64) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881ac, 0x4}) (async, rerun: 64) write$binfmt_elf64(r6, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x79, 0xa3, 0x23e, 0x2, 0x3e, 0xfffffffb, 0x3c9, 0x40, 0x3c7, 0x10000, 0x5, 0x38, 0x0, 0x6, 0x6b1, 0x400}, [], "", ['\x00']}, 0x140) (async) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11.981560168s ago: executing program 2 (id=1672): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xf8, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x4, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x40000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 11.758740085s ago: executing program 2 (id=1674): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = fcntl$getown(r3, 0x9) r5 = eventfd(0x80000001) readv(r5, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/2, 0x2}], 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450e00280064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2071, 0x0, 0xe7}}}}}}, 0x0) r9 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) kcmp(r4, 0x0, 0x5, r2, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, 0x0, r9}, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) socket(0x29, 0x80000, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x2b, 0x3}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b26946113d"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) 10.195210136s ago: executing program 2 (id=1680): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) r1 = socket$rds(0x15, 0x5, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000580), 0x0, 0x40, &(0x7f0000000600)={r2, r3+10000000}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x400250}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, 0x0, 0x1) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r9, 0x5452, &(0x7f00000000c0)=0x1000000000000002) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xcf49, 0x4, 0x6}, 0x0, &(0x7f0000000180)={0x3f7, 0x1bb, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_enter(r6, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 8.596628475s ago: executing program 2 (id=1687): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001600)={@flat=@binder={0x73622a85, 0x1100}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="1201510329fbf0403807ea52fd4045cec60102030109023300ba0db37c8301020610780904d4090078"], &(0x7f00000017c0)={0x54, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000015c0)=@lang_id={0x0, 0x3, 0x44f}}, {0x2, &(0x7f0000001680)=ANY=[@ANYRES64=r8]}, {0x0, &(0x7f0000001580)=@lang_id={0x0, 0x3, 0x3409}}, {0x0, &(0x7f0000001780)=@lang_id={0x0, 0x3, 0x1c01}}]}) 5.130993356s ago: executing program 1 (id=1704): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988200000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x100000, 0x8811}, 0x0) 5.033231866s ago: executing program 1 (id=1706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000700010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xc4}}, 0x0) 5.026533457s ago: executing program 3 (id=1707): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=0x6e) recvmmsg(r0, &(0x7f0000008d00)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x4}, 0x4}, {{&(0x7f0000000580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/184, 0xb8}, {&(0x7f00000007c0)=""/144, 0x90}, {&(0x7f0000000880)=""/137, 0x89}, {&(0x7f0000000940)=""/90, 0x5a}, {&(0x7f00000009c0)=""/81, 0x51}, {&(0x7f0000000a40)=""/81, 0x51}], 0x7, &(0x7f0000001bc0)=""/166, 0xa6}, 0x2}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f0000001c80)=""/121, 0x79}, {&(0x7f0000001d00)=""/249, 0xf9}, {&(0x7f0000001e00)=""/245, 0xf5}, {&(0x7f0000001f00)=""/100, 0x64}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x6}, 0x1}, {{&(0x7f0000003000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000003080)=""/244, 0xf4}, {&(0x7f0000003180)=""/5, 0x5}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}], 0x4}, 0x6}, {{&(0x7f0000005200)=@hci, 0x80, &(0x7f00000076c0)=[{&(0x7f0000005280)=""/24, 0x18}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/5, 0x5}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/213, 0xd5}, {&(0x7f0000007400)=""/180, 0xb4}, {&(0x7f00000074c0)=""/67, 0x43}, {&(0x7f0000007540)=""/59, 0x3b}, {&(0x7f0000007580)=""/219, 0xdb}, {&(0x7f0000007680)=""/62, 0x3e}], 0xa}, 0x2}, {{&(0x7f0000007780), 0x80, &(0x7f0000008c80)=[{&(0x7f0000007800)=""/144, 0x90}, {&(0x7f00000078c0)=""/83, 0x53}, {&(0x7f0000007940)=""/128, 0x80}, {&(0x7f00000079c0)=""/140, 0x8c}, {&(0x7f0000007a80)=""/169, 0xa9}, {&(0x7f0000007b40)=""/4096, 0x1000}, {&(0x7f0000008b40)=""/111, 0x6f}, {&(0x7f0000008bc0)=""/136, 0x88}], 0x8}, 0x3b2}], 0x6, 0x2002, &(0x7f0000008e80)={0x77359400}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008ec0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=0x6e) (async) recvmmsg(r0, &(0x7f0000008d00)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x4}, 0x4}, {{&(0x7f0000000580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/184, 0xb8}, {&(0x7f00000007c0)=""/144, 0x90}, {&(0x7f0000000880)=""/137, 0x89}, {&(0x7f0000000940)=""/90, 0x5a}, {&(0x7f00000009c0)=""/81, 0x51}, {&(0x7f0000000a40)=""/81, 0x51}], 0x7, &(0x7f0000001bc0)=""/166, 0xa6}, 0x2}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f0000001c80)=""/121, 0x79}, {&(0x7f0000001d00)=""/249, 0xf9}, {&(0x7f0000001e00)=""/245, 0xf5}, {&(0x7f0000001f00)=""/100, 0x64}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x6}, 0x1}, {{&(0x7f0000003000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000003080)=""/244, 0xf4}, {&(0x7f0000003180)=""/5, 0x5}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}], 0x4}, 0x6}, {{&(0x7f0000005200)=@hci, 0x80, &(0x7f00000076c0)=[{&(0x7f0000005280)=""/24, 0x18}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/5, 0x5}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/213, 0xd5}, {&(0x7f0000007400)=""/180, 0xb4}, {&(0x7f00000074c0)=""/67, 0x43}, {&(0x7f0000007540)=""/59, 0x3b}, {&(0x7f0000007580)=""/219, 0xdb}, {&(0x7f0000007680)=""/62, 0x3e}], 0xa}, 0x2}, {{&(0x7f0000007780), 0x80, &(0x7f0000008c80)=[{&(0x7f0000007800)=""/144, 0x90}, {&(0x7f00000078c0)=""/83, 0x53}, {&(0x7f0000007940)=""/128, 0x80}, {&(0x7f00000079c0)=""/140, 0x8c}, {&(0x7f0000007a80)=""/169, 0xa9}, {&(0x7f0000007b40)=""/4096, 0x1000}, {&(0x7f0000008b40)=""/111, 0x6f}, {&(0x7f0000008bc0)=""/136, 0x88}], 0x8}, 0x3b2}], 0x6, 0x2002, &(0x7f0000008e80)={0x77359400}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008ec0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) (async) 4.774833352s ago: executing program 1 (id=1708): io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x40, 0xfffffff9, 0xd4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x805, 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x7822, 0x400, 0x2, 0x105}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xdc, 0x47, 0xa3, 0x10, 0x1f38, 0x1, 0x29ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x1a, 0xd5, 0x0, 0x75, 0x90, 0x7d, 0x5}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB='\n\x009\x00\x00\x00p'], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.774499804s ago: executing program 3 (id=1709): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd2894000000000000010902"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.756929542s ago: executing program 4 (id=1710): r0 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x400250}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 4.667398183s ago: executing program 4 (id=1711): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000012050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 4.444552517s ago: executing program 4 (id=1713): r0 = semget(0x1, 0x3, 0x79c) semop(r0, &(0x7f0000000300)=[{0x3, 0x23}, {0x1, 0xbbdd, 0x1000}], 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000002002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 4.386881119s ago: executing program 4 (id=1714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a4, &(0x7f0000000000)={{@any, 0xffff7dff}, @hyper, 0x0, 0x0, 0x4000000f8, 0x8, 0x0, 0x4000000, 0x7}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x4040, &(0x7f0000000200)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000838f86806fe47036000a000400280000000b000002", @ANYRES32=0x0], 0x20, 0x2400e044}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r7, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) r8 = fanotify_init(0x202, 0x1000) fanotify_mark(r8, 0x1, 0x48000013, r4, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000040)='N.::/', 0x0) 4.055321833s ago: executing program 2 (id=1715): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r2, 0x29, 0x1f, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sigaltstack(&(0x7f0000001040)={0x0, 0x80000002}, 0x0) sigaltstack(&(0x7f0000000680)={0x0, 0x80000002}, &(0x7f00000007c0)={0x0}) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x8000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) ioctl$TCXONC(r5, 0x80045440, 0x2) socket$netlink(0x10, 0x3, 0x10) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000014c0)=0x60, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) getsockname$unix(r1, &(0x7f00000001c0), &(0x7f0000000040)=0x6e) syz_io_uring_submit(0x0, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f0000000000)={0x9, {0x7f, 0xe7, 0xfffffff8, 0xfffff000}, {0x2, 0x3, 0xffffbfff, 0xfff}, {0x40, 0x5}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x7, 0x0, 0x1, 0xf07}, 0x0, [0x0, 0x3, 0x4, 0xff, 0x33e, 0x0, 0x4, 0x0, 0x1, 0x4, 0x0, 0x8, 0xfffffef7bfffffff, 0x0, 0xfffffffffffffffe, 0x4, 0x7, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xffffffffffffc523, 0x6, 0x0, 0x0, 0x4, 0x6, 0x0, 0x10000, 0x2, 0x0, 0x3, 0x5806, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x10000, 0x400000000007785, 0x0, 0x4, 0x4, 0x8, 0x8, 0xfffffffffffffffe, 0x8, 0x0, 0xffffffffffffff9a, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x100, 0x0, 0x10, 0x6, 0x1000, 0x2, 0x0, 0x100, 0x2000000000081, 0xfffffffffffffffd, 0x5a744889, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x22c, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x551, 0x0, 0x20000000, 0x0, 0x80]}) 3.1156328s ago: executing program 1 (id=1717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000c400000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b400000000009000100", @ANYRES16=r0], 0xc4}}, 0x0) 2.310829771s ago: executing program 1 (id=1718): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e26, 0x8, @ipv4={'\x00', '\xff\xff', @dev}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x782) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fbfffee60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.884811707s ago: executing program 1 (id=1722): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001600)={@flat=@binder={0x73622a85, 0x1100}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="1201510329fbf0403807ea52fd4045cec60102030109023300ba0db37c8301020610780904d4090078"], &(0x7f00000017c0)={0x54, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000015c0)=@lang_id={0x0, 0x3, 0x44f}}, {0x2, &(0x7f0000001680)=ANY=[@ANYRES64=r8]}, {0x0, &(0x7f0000001580)=@lang_id={0x0, 0x3, 0x3409}}, {0x0, &(0x7f0000001780)=@lang_id={0x0, 0x3, 0x1c01}}]}) 1.809390924s ago: executing program 2 (id=1723): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001600)={@flat=@binder={0x73622a85, 0x1100}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="1201510329fbf0403807ea52fd4045cec60102030109023300ba0db37c8301020610780904d4090078"], &(0x7f00000017c0)={0x54, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000015c0)=@lang_id={0x0, 0x3, 0x44f}}, {0x2, &(0x7f0000001680)=ANY=[@ANYRES64=r8]}, {0x0, &(0x7f0000001580)=@lang_id={0x0, 0x3, 0x3409}}, {0x0, &(0x7f0000001780)=@lang_id={0x0, 0x3, 0x1c01}}]}) 1.631843409s ago: executing program 3 (id=1725): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r1, 0x2, 0x2}, 0x8) r2 = io_uring_setup(0x76c8, &(0x7f00000000c0)={0x0, 0xc36c, 0x1000, 0x1, 0xb0ef}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000140)={0x5, r0, 0x8, {0x3, 0x8f8c}, 0xff}, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e20, 0x0, @mcast2, 0x200}}, [0x4, 0x7, 0x4, 0x7, 0x3, 0x2, 0xffffffffffffffff, 0x9, 0x100000000, 0x6, 0x3ff, 0x985, 0x1000, 0x7, 0x401]}, &(0x7f0000000280)=0x100) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000002c0)={r1, 0x5477, 0x2, 0x40f7, 0x8, 0x5}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r5, &(0x7f0000000340)="32d91818e68181e91ce141bdb5bd8efab13e3341c4db428282a8c5fd636a58c47f3a9a7a03822b2530120d638837df63344fff8af0273e8aa93c5cae50f719a4580b1176fb0741f5ff4d4dfd42097b96e51b0b732ed73aed456fb977be9d4150474bf90ce8ed0881575e13d130776b3f6a77e9763109fa025cd1aa1f24e35d04eb637b16c0033196017d2da633f5f8eac091ba547b61051f66ee741f4041fc", &(0x7f0000000440)=@udp6=r6}, 0x20) recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f00000004c0)=@caif=@dbg, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000540)=""/42, 0x2a}, {&(0x7f0000000580)=""/250, 0xfa}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001700)=""/4096, 0x1000}, 0x3bc}, {{&(0x7f0000002700)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/94, 0x5e}, {&(0x7f0000002800)=""/179, 0xb3}, {&(0x7f00000028c0)=""/238, 0xee}, {&(0x7f00000029c0)=""/43, 0x2b}], 0x4, &(0x7f0000002a40)=""/4096, 0x1000}, 0x2}], 0x2, 0x1, &(0x7f0000003ac0)={0x0, 0x989680}) r8 = syz_open_dev$sg(&(0x7f0000003b00), 0x800, 0x103000) ioctl$SG_SET_RESERVED_SIZE(r8, 0x2275, &(0x7f0000003b40)=0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000003b80)={r3, 0xbc, "6545c68dff5bf211ed2f1729a497bc52124794ee91ddb044cff8d9c3208b039975338cd63431f80c40c1e51ebb68d901421a4ef03053867a916f28e6c548dd80b9efd7387568b2140ab7b4c3b37141ae72e8d4e4d886311b962f78bddb34bd8085ccbe1f545078511f8ab00abc90db61dfcecfe9629bb4315a1c3767b27e6c052b54c63c3671b5f8a6519e70ff2ed18af51940af04189105e26e7b6d1e7d6ccd80aff311af493bd06a716516dab0a42493996a9eeb603cd91183548a"}, &(0x7f0000003c80)=0xc4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000003cc0)={r9, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f0000003f00)={0x5, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003d80)=""/225, 0xe1}], &(0x7f0000003ec0)=[0x1, 0xf, 0x10000, 0x6, 0x2], 0x1}, 0x20) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000003f40)='./file0\x00', &(0x7f0000003f80)={0x802, 0x129, 0x13}, 0x18) r11 = open_tree(r10, &(0x7f0000003fc0)='./file0\x00', 0x9000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000004000)=[@in6={0xa, 0x4e22, 0x76, @mcast2, 0x4}, @in6={0xa, 0x4e22, 0x6, @remote, 0x527150f9}, @in6={0xa, 0x4e24, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x1, @local, 0x401}, @in6={0xa, 0x4e21, 0x1, @empty, 0x2}, @in6={0xa, 0x4e21, 0x1, @remote, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0xd8) ioctl$TIOCNOTTY(r7, 0x5422) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004140), r11) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000004180)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(r11, 0x0, 0x20, &(0x7f00000041c0)={@multicast1, @loopback, 0x0}, &(0x7f0000004200)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000004300)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x20a000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004240)={0x6c, r12, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r15 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000004340), 0x100) ioctl$FICLONE(r15, 0x40049409, r8) r16 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000004380), 0x420000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f0000004400)={&(0x7f00000043c0)=[0x0, 0x0], 0x2}) write$P9_RREAD(r7, &(0x7f0000004480)={0x100b, 0x75, 0x2, {0x1000, "a89044f0d1a00f85a749c9dbbea161cd6a4cca3770befbd9b45c647476d842ac367e8300eb5956522f3e5bcb46e020157d67357a1b02eec894518aa276eb77fa138006825f45b394913c9f85f5849d477bef16ab17e7cb6f52c0cd3eb69886aa1472c9e233c96a5c7d2eb4c9fd9e1bf91589a3462b78b81625edb72af38adfa2a4ec65cf3ad0f749b1124dd549da78bc26951078c701522482f321737b834a2e8ac2281bd482943fea5691739c1469f54af041212135d97c69792ec81bd417c711e73d0a91d4b0135a9a7c24fb29539bbd5e43d98e3ec1f85f29bacee0965b718ae1b9d668eca856fe9f2a776f83e987408aa85fba170cfabc6f3e3475336ec6dbfcdc8b21afcc97902128497e4752501f1f738b362004a4de1fcf14f26d8b9f9c3f878411a19ada8d1730ad324093718e23f0987351b26ca63e614958fde9e120c083059da8e3bc99f7faec06001cde1deeb81782d5d3758c08b73f98e678db23471478f419a22a00cbc99a0a736356e53b6f41b7a79c119969cfae0d9f21781d37bd4cdfa9c0451bfe334de8fcd60d07878b268d73043e7b0fb699be6d24f7fede2ab4a47dee9c87722d97806291814de760dc4639dab0f8cba5be1fa120e8938e5bc45f7b167030b214b14a516f288dafed7430dcb4f54978b8195f367d72c3734957236b206ad41a45a9745fed66abc32e6308ddcde72f2fe9476c7e3f31f99694ab156c0cd07e8a8593d2a61f0da7f601517ccaaa68caca5a4f9d7bffd13b3fac30822192fcd2a33641bf46f58761c09f9818e2352c1d822df0f499c8831566fe9dd80280ba5a5613aefaac3b4f6538a504b6b0f3dd6cd8b35a2add65c56f62de8ab7915b7bbe56e475e0f9b3e328ed7e8537f0f25687653f40724c2099d5683b5b9a0ef9cb4ff434158e2eb59ee052b1d84fcd715597a6a0a9395ff7e98d0d0aeb6b4007957b1b95ab1d5cb59fe61489429c70ec415c54b0e430060ca5f317c994a5b19658dfad94a35c3a9a367237d5873c17913b5de7dd083c29f31414f37e284527256608974d01f4d8f3a407d4ec11597590a25ef58ec12cbf8e7728d4df03e69c1cb73ec0a3855cd6738a213bb7b6e1efe97549ad52a068ea6d30f4e50193262dde050246ef5679f117bd307f183b6e431af2268d7116d71ab780691a970784c03833cb47f99d74dd21090dbdc5b9b4e4fc3c2a988b88e26872164c42c3c6b3824784ff942232a17d2d84e4e2ee14aabc36399b8e6ad6e26c995022af728f27d1ca806eb812728106beafbdc501aeac4d7aa009b03d8d12780fd55f63574e81328a0a4c9292a7a9563e15d846248cc13fb5949e325a2d929637d8e6fb8d7e5b3e9bed0d26eebb57935df2e16358813c42c22fc1ae5ba2437db2b86d2f84b430fd5dad399035c5041237fa9ca0190b9b4a65a175be300b6e18cff1823289918e481218158c8d0e23be41db5e89b0253cc04c1583e47ec3277cbf07197dff1632f75f19285e5f9cf2d712fbe0e259316fdb23277dba604e8df663db317ad73ba78faeee0d6b36e675c5806343987e9fe452a86763b58f661bb30f1b9fa269db26c0b57bc7af2c5e2e01751a0d4e9340915deb124e5ae4bfaea14f69c3911370363db809dcd1cf291dd8f3fa11c1478a715cfde8029ca9070c4a8ad315bb62d9b12c08d5f61d5f38394dc8750d04670eff7410f6e300ecbd840e1bad77b6d1dc1e1cba74eb82a83a2645795fc66480c56f4e9522524d666107782c325b1cbef38f360d1123f6c3ead0f81c920b1e08d382a152f453da3a6f25fcfcc408a68b854ca3e0e1bc0a6a4e6723b7b6060c7525017b896e6cc670be152f6435f2281d56d6d2182bc21888dbfdc1b2313eee043c2ec332bd0105679cc6e5ec27ee5e0a9f5895412bbecabb5427809b6aaf1d8b30b137310ce49c2d63a6033ca938239b643b010ae728073beb3c8f3d315657594aca0f36ff281a5094489c326aff0ee1ba6e6f62ed593eb05db1c55f7fe8dbcc82b4502fde964ee7a744d5585c15a8c8cc4baa8fc92ffc391de52e539891db7417bead69326d82a542a0ac6415b7d1cb1a9146f80f8b05328d3bb292ff9065cb7b985456550255598ba6c0959c0e38f4a8963acf03db65bfe767c527e9f85ccb6a400ad617c26183d663dfcd7cf5626d89060dac9f86e581e3c56411d40b2c324cc402387e141638fce59ffc9eb1938bd0649c6897955b81c751732245984aa959989801dada1ebacb58b0792061c3a3343a8c706c4e37cb6caefee088c7086aa5e9be36b7eaefd52a6cf6721e9d38ae1978c350479872ab5021e8df9b32e848d72588168dcba6ca6268fb9657ae566e8b412a295e5d88b7426c5b98134c593f51959196dfa7b98d3e5414a090f9c0177311633f3c4acd355d6cc5389cf59347ad1ef412f37fbf6355d1f449f23bfab69ad8732830e299e0d44416c671634b125c787c5947696fc5e02e8a1c5690a3d602b9515d3226d27f766399baa65e56c366049422d2a0846dcc31f1993ca55a357c9748dfcd342199bd232b54db805d716cfe16038fa073a306f2e011888bdc0851697f762301bc515f415fffc2033258fa1ffabfbbe4fcbc88407ea67d62573d388fa5a925d09d088ac37542843f6a9725d68d80c44688a6f168abc3e82e538db749c99ff3c2543e3d4e24ac782a125eb0940232bc0d0830c080851dd1c34f3e1eaa3db3d8a55381c7231b2dd545b3929c4f73e72b64c5247d285883877156f997e6d7bd55aa630db4beef7e50ae84f0c8ab437024d87730dc61a86e71bf90f782ae28dc3afabaab9fe50f269f49944481aa0e72514b322e29717780c680450580cbdb69b2851acc76a68e0904325d268a52e82ff3810e79c34bbcf6cf4f26220e10945e52cfd9a252fa85892a171972f42a017a4d4fd9643a6988410bac4b7702b3f6258f95d200deb885e0a2ee5658a1a5bfd579785a48f71fd7fb0efaf7daef35eefe9a21a4e4234e67679ed92dc27e4266bc6b8754736b6990f138e7acf49d32832c07a9c86c6b55797fce1461a052b98148b30afa5124dd4ac25e0cb6e3c34cfd99c7188ed08234a2cbb61c6ca9d7b7ac188ef75f1fda779d3b8f98e8e8cd28c0df35623031d37c09e14b8fdcfce3551d8ea745808e79aa300d1c895d9e688bfb8a089683c751c44044a05907671d0ac5b6a7e1c51d139b7b66d5f5b72085abd36dd0d902759a85098acd20bf969b1262bb116c1258218a471e02c549d037ee92257ac1b76ce6888458eb6296d440032287dd11322f73474377c424cdb44a6752325ce730aea85030f9a457bfa8ef7e0d3e8ffe5bb32f68d4db7146c45811f202f2fc4cf8d0ab91d97e5a64bd5ddf8457c19e1f8e711615e7a30df90faa59c62234f08d20129797be6b72965919f2b33613cc7a4ccf5f4b67020aab1db309d230a449705b599383dc0cc59164b102bd0bb87dc4d4171100da1f2d0d5aa5397c60d1e92bffe9e250ba227af92f0ebe5aa98426be08219a7e3ff1109e1d9346adf51150fc83bddc9d57a9382ee70d336abeb89711c74448d7e11207f09826125abe9e5bfb638c402ec951ab88885470f992fed295fe809ef30890fb2419577d72d0b8657579c616110997cd87b5127b7a5eb6fdf1f193cd8ff6f5177c5a198369df5d8298bcd214826de3c059694e5f59daa47d8f15591f1fd1f77aea5c3f74cbe8bfc3a9cbd15abd71d90dce6c4fabf922f6730ac6bc1c6788a9cd8086cc6d73e2aa9078c1e06b9b9f12bb276b03d45b416f83caf15a7b1fd8ca18bd0d5bcde9d8c5a89f7b2a87e42c09f06103be58c8a7aa1da3b852786a7fea07bc6b54e6f1bba6d922a8f866786879f95bcfd8e7a039cc583d9f6b537341f30a27edcd414286b12eef2a747613fe0d06723e704dc7f5a81b4a4da79a2760b5b5ef11ab5a300486d026e24979eaa2982f73996fddbe734d95bb1a3d04de6958ea9470557c30d8c86102c7d1fca7d45320d821fcad9a0077fde503f370471e25202a251e9e7704674d81b943580ed3974f1fe47724481f873e47b5d06e90e843d9787aeefa32c7aa7e7f05afde29a99f173980f752d786f92bd601ed5ca1dc749e579ea43e3d1e9cb72b76ac44a1c0740b6455c7d090fbc0bbc2a73427af12643789dbb56b278d9e56b4799aabac197d21d766fddada2767c40353ab935cc09d50b5ba14b05bbaa3f6157464e451e9d94ec41a4bd83eb35ac56793bf0d4e1c75720805299f09d42a5a794f360311dfb3896340e0807855532c7bbe89c0dd1609b9242548427e6c3e1876a4e02b773425461aa0146865e9824aa43df34a540ad0a58a19d3ec3e905c7895a5fd8dbf01e4511aa22fb026b5ff86692361503b99e4f13e6c67a9a2ac517481a3df91c7f05754083858895c2f9c7914c5011b3921da87e846f6d2e3e77b83a1d4f6ff37e194cb62cceae78c3199407cffa4a2e7baa5c33191fd69228feb6fa59c18fe6639a9fb54691a1e9cf41c8da9be443c3b96d8f0667dd831afed7e597894bcb69593d3bda0d73b0f45cc0a2e6b0d98b97ca393677d17dac8c29aeb1190d5ad680435ce6bbc05660ed2512eaebdd191cc6cfbb75ad59188bfbbe843d28648ff5aad60d79cdd0cda85e17958f54cd4cb56dcdbf77197bf0dc9593dfdf2a7a6466eece7076bbce27e10ea288ae2d1c91c4bab613be2b26e8705240bc3a4f39da46cb2cd032b75630073260be99a1801f870cfb20c0b3fe7e37137d7e3efb0de9a754e489f5730afba2e9f4bc79cc2283e06f17da64665b392898de2ffc35b5e3fecbed2504e215824b446307c379edfd8d5698fcc283cb8491ac055939b074efb4b773adb7ee52d3e986a9a8dd172990d601d8b59d4217207912303419e46ed16530fd3e6f7d4dea22151372cc50f48024d9fd86c4b378fd26dd6ef4a8a341becc2631bbacde87569b14fbcc6c1137d314e4579d4250a6143a32d6e0959256916328ce0061caf9d6118ba7ca4067aba70ae6d119760789377021280cf0c6ee67f777059fdced79599e8f1c10201465239a22e8938bd25d193d9cb8d1f9f5735ad6e3584b000fcfd47c5b87fd12b37b3abf288273f0c309f020a48506662ea4f040a4f833c704b1f685cc68a045fad3a9e778b5802c37c78f2389bde643e40a354b53a17c3c0e7791cf8720f2ca4004fa893f68e77da67f4446345a2a912dc9b6d98d74de1e6cb6c686fd0c0dbfdbf699e37e45c2c19ea4cd7e144bb0f0e74512ad55174e0620d7afc64c0c07c566447085074ea5ace3dcab18509ccbbcd9a05473a2f33a4ce1822765e9f6f30c689d8bed37c08dfeb5ee5df8c413a2b6b5e2b7b9787ef75288f247fdf974afcb31869a652c864d16d9988cf110638d61c9b3771064241cf3838b3a2bcce1dae3b1a07a0fc1a03c17be6b25e5c82ddd292d6f3bb3ed7fcf5f4c28bdf662bfa3cdc71e8011a69eddf869185bc03aefc515773360d58535fc41d180b24e483a046b237b5a5e0e647f4d42f59e9c199c47dab05f4a88a5f92c3bea6fa89dc6025c135075defff1676fa752e6e7f410336b42041a5bb5a60fab9ec3e68686b6e2e3cc113d50c3c4be35820ceafde9f47b3af8cdb59deed8084b35cc9a47b772d0c58d137b2581c52f7bb45169f038946c083d8b4a333c722c5397b26627ff7b5850359ad73dbb0cafb5be186613d37b4330b38148523350e5786c4199d7e4926ce0c9d046c8c9823e1c4969b97b5a3e3d9e842a02fbdb525af5ca54c3caa204833fee5659e8410dfae8d07"}}, 0x100b) 1.407001096s ago: executing program 3 (id=1727): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00') r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = epoll_create1(0x80000) sendmmsg$unix(r5, 0x0, 0x0, 0x400c880) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000002c0)={0x80000018}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x2000000000000) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x1e, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_virt_wifi\x00'}) connect$inet6(r0, 0x0, 0x0) 1.28328688s ago: executing program 5 (id=1728): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xf8, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x4, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7000000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 949.6569ms ago: executing program 5 (id=1729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000ffffffef0000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a3200000000090001"], 0xc4}}, 0x0) 771.06273ms ago: executing program 5 (id=1730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000f000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b400000000009000100", @ANYRES16=r0], 0xc4}}, 0x0) 731.213934ms ago: executing program 5 (id=1731): r0 = open_tree(0xffffffffffffffff, 0x0, 0x80001) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x0, 0xfde9, 0x7f}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x1, 0x0, 0x0, 0x7}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xac, 0x1, 0x2, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x800}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xac}}, 0x60f487dfcaad0f37) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 566.519124ms ago: executing program 5 (id=1732): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08009f000600000008002600b409"], 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000009280)={0x28, 0x13, 0x503dabdc2aa92767, 0x70bd08, 0x25dfdbff, "", [@typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x10, 0x11a, 0x0, 0x1, [@nested={0xc, 0xdb, 0x0, 0x1, [@nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x40849c4}, 0x8014) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = syz_io_uring_setup(0x1a1d, &(0x7f0000000180)={0x0, 0x755e, 0x13080, 0x3, 0x2b8, 0x0, 0x0}, &(0x7f0000000080), &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x0, 0xb1d7, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x95) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) fstat(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = geteuid() r14 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(0xffffffffffffffff, r15, r15) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x1, r11, r12, r13, r15, 0x110, 0x8}, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x3c, r16, 0x1, 0x0, 0x25dfdbfb}, 0x8d}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5a}, r1}}, 0x30) 234.965486ms ago: executing program 3 (id=1733): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x238}, 0x94) 195.880258ms ago: executing program 4 (id=1734): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988200000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x2000000, 0x8811}, 0x0) 138.311422ms ago: executing program 3 (id=1735): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.093683ms ago: executing program 4 (id=1736): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e26, 0x8, @ipv4={'\x00', '\xff\xff', @dev}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x782) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb97ffe60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 0s ago: executing program 5 (id=1737): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x5000) shmdt(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xdfb]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000103000001000000040000000000080010000000000000002000040000000000"], 0x14, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r1) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x20000000) accept4(r5, 0x0, 0x0, 0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a202000000000000000000008000d000a000000140001000000000000000000000000000000000114000100ff0200040000000000000000000000017619a91073c9be92d2e752e8e491dbc410ea5cb76f89"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054) kernel console output (not intermixed with test programs): ] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 362.441204][ T5823] usb 5-1: USB disconnect, device number 71 [ 362.452058][ T5823] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 362.460055][ T30] audit: type=1326 audit(1760885106.356:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 362.482813][ T30] audit: type=1326 audit(1760885106.356:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 362.520934][ T30] audit: type=1326 audit(1760885106.356:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 362.567758][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.579261][ T30] audit: type=1326 audit(1760885106.356:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 362.602283][ T24] usb 6-1: Product: syz [ 362.606462][ T24] usb 6-1: Manufacturer: syz [ 362.612790][ T24] usb 6-1: SerialNumber: syz [ 362.613340][ T5823] cp210x 5-1:0.0: device disconnected [ 362.736173][ T30] audit: type=1326 audit(1760885106.376:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 362.856561][ T24] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 362.918320][ T24] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 362.968291][ T24] usb 6-1: selecting invalid altsetting 0 [ 362.982308][T10576] x_tables: ip_tables: osf match: only valid for protocol 6 [ 362.992467][ T24] usb 6-1: selecting invalid altsetting 0 [ 363.135993][ T24] usb 6-1: USB disconnect, device number 51 [ 363.159783][T10574] kvm: kvm [10573]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 363.189404][T10574] kvm: kvm [10573]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 363.261556][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.295558][T10591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1290'. [ 363.452631][T10598] netlink: 'syz.5.1294': attribute type 1 has an invalid length. [ 363.462620][T10598] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1294'. [ 364.085189][ T5916] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 364.085214][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 364.723620][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.735876][ T10] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 364.745741][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.756879][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 364.930246][ T10] usb 2-1: config 0 descriptor?? [ 364.942356][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 364.987719][ T5916] usb 5-1: config 0 has no interface number 0 [ 365.013899][ T5916] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 365.036058][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.059932][ T5916] usb 5-1: Product: syz [ 365.073978][ T5916] usb 5-1: Manufacturer: syz [ 365.088256][ T5916] usb 5-1: SerialNumber: syz [ 365.112783][ T5916] usb 5-1: config 0 descriptor?? [ 365.121404][ T5916] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 365.142259][ T5916] usb 5-1: selecting invalid altsetting 1 [ 365.152547][ T5916] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 365.176502][ T5916] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 365.215714][ T5916] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 365.284133][ T5916] usb 5-1: media controller created [ 365.420218][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.772593][ T5916] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 365.815261][ T5916] zl10353_read_register: readreg error (reg=127, ret==-71) [ 365.840509][ T5916] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 365.930760][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.954476][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.983076][ T5916] usb 5-1: USB disconnect, device number 72 [ 366.148120][T10631] Cannot find del_set index 0 as target [ 366.313857][T10634] FAULT_INJECTION: forcing a failure. [ 366.313857][T10634] name failslab, interval 1, probability 0, space 0, times 0 [ 366.348940][T10634] CPU: 1 UID: 0 PID: 10634 Comm: syz.5.1302 Not tainted syzkaller #0 PREEMPT(full) [ 366.348964][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.348982][T10634] Call Trace: [ 366.348990][T10634] [ 366.348999][T10634] dump_stack_lvl+0x189/0x250 [ 366.349023][T10634] ? __pfx____ratelimit+0x10/0x10 [ 366.349050][T10634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.349068][T10634] ? __pfx__printk+0x10/0x10 [ 366.349091][T10634] ? __lock_acquire+0xab9/0xd20 [ 366.349119][T10634] should_fail_ex+0x414/0x560 [ 366.349150][T10634] should_failslab+0xa8/0x100 [ 366.349174][T10634] kmem_cache_alloc_noprof+0x74/0x6e0 [ 366.349194][T10634] ? skb_clone+0x212/0x3a0 [ 366.349222][T10634] skb_clone+0x212/0x3a0 [ 366.349249][T10634] __netlink_deliver_tap+0x404/0x850 [ 366.349286][T10634] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.349311][T10634] netlink_deliver_tap+0x19c/0x1b0 [ 366.349336][T10634] netlink_unicast+0x7fa/0x9e0 [ 366.349367][T10634] ? __pfx_netlink_unicast+0x10/0x10 [ 366.349391][T10634] ? netlink_sendmsg+0x642/0xb30 [ 366.349413][T10634] ? skb_put+0x11b/0x210 [ 366.349441][T10634] netlink_sendmsg+0x805/0xb30 [ 366.349474][T10634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.349501][T10634] ? aa_sock_msg_perm+0xf1/0x1d0 [ 366.349523][T10634] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.349544][T10634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.349568][T10634] __sock_sendmsg+0x21c/0x270 [ 366.349592][T10634] ____sys_sendmsg+0x505/0x830 [ 366.349614][T10634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.349644][T10634] ? import_iovec+0x74/0xa0 [ 366.349670][T10634] ___sys_sendmsg+0x21f/0x2a0 [ 366.349691][T10634] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.349744][T10634] ? __fget_files+0x2a/0x420 [ 366.349764][T10634] ? __fget_files+0x3a0/0x420 [ 366.349796][T10634] __x64_sys_sendmsg+0x19b/0x260 [ 366.349817][T10634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.349842][T10634] ? __pfx_ksys_write+0x10/0x10 [ 366.349866][T10634] ? do_syscall_64+0xbe/0xfa0 [ 366.349886][T10634] do_syscall_64+0xfa/0xfa0 [ 366.349901][T10634] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.349917][T10634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.349934][T10634] ? clear_bhb_loop+0x60/0xb0 [ 366.349956][T10634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.349978][T10634] RIP: 0033:0x7fcc86b8efc9 [ 366.349995][T10634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.350011][T10634] RSP: 002b:00007fcc87a32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.350030][T10634] RAX: ffffffffffffffda RBX: 00007fcc86de6090 RCX: 00007fcc86b8efc9 [ 366.350044][T10634] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 366.350055][T10634] RBP: 00007fcc87a32090 R08: 0000000000000000 R09: 0000000000000000 [ 366.350067][T10634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.350078][T10634] R13: 00007fcc86de6128 R14: 00007fcc86de6090 R15: 00007fcc86f0fa28 [ 366.350109][T10634] [ 366.786727][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 366.801747][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 366.854532][ T10] usb 2-1: USB disconnect, device number 49 [ 367.036734][ T5916] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 367.080996][T10652] random: crng reseeded on system resumption [ 367.195974][ T5916] usb 5-1: device descriptor read/64, error -71 [ 367.244380][T10658] netlink: 'syz.2.1307': attribute type 3 has an invalid length. [ 367.505498][ T5916] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 367.679920][ T5916] usb 5-1: device descriptor read/64, error -71 [ 368.037274][ T5916] usb usb5-port1: attempt power cycle [ 368.386727][ T5916] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 368.477632][ T5916] usb 5-1: device descriptor read/8, error -71 [ 368.727044][ T5916] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 368.757339][ T5916] usb 5-1: device descriptor read/8, error -71 [ 368.867283][ T5916] usb usb5-port1: unable to enumerate USB device [ 369.289892][T10680] netlink: 'syz.1.1312': attribute type 4 has an invalid length. [ 369.346171][T10683] fuse: Unknown parameter 'grow[ÃsV¯K­ï æ´ó©]Uup_id-00000000000000000000' [ 369.558460][ T5146] Bluetooth: hci0: command 0x0405 tx timeout [ 369.619259][T10694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1311'. [ 370.663876][T10705] loop2: detected capacity change from 0 to 7 [ 370.751380][ T5837] Dev loop2: unable to read RDB block 7 [ 370.776275][ T5837] loop2: unable to read partition table [ 370.799443][ T5837] loop2: partition table beyond EOD, truncated [ 370.822188][T10705] Dev loop2: unable to read RDB block 7 [ 370.852612][T10705] loop2: unable to read partition table [ 370.879643][T10705] loop2: partition table beyond EOD, truncated [ 370.911147][T10705] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 371.310148][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 371.310165][ T30] audit: type=1326 audit(1760885115.716:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.5.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 371.338535][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.396934][ T5895] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 371.628564][ T10] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 371.934425][ T30] audit: type=1326 audit(1760885115.716:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.5.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 371.956838][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.996708][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 372.022038][ T5895] usb 3-1: config 0 has no interfaces? [ 372.043070][ T30] audit: type=1326 audit(1760885115.756:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.5.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 372.077805][ T5895] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 372.172978][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.200025][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 372.224846][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 372.256746][ T5895] usb 3-1: Product: syz [ 372.261038][ T30] audit: type=1326 audit(1760885115.756:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.5.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 372.286734][ T5895] usb 3-1: Manufacturer: syz [ 372.291347][ T5895] usb 3-1: SerialNumber: syz [ 372.355452][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 372.453608][ T5895] usb 3-1: config 0 descriptor?? [ 372.458792][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 372.586919][ T30] audit: type=1326 audit(1760885115.756:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.5.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 372.596118][T10726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.610582][ T10] usb 6-1: SerialNumber: syz [ 372.644354][ T30] audit: type=1326 audit(1760885115.756:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.5.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 372.673154][ T30] audit: type=1326 audit(1760885115.756:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.5.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 372.719134][T10726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.728211][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 372.777531][ T10] usb-storage 6-1:1.0: USB Mass Storage device detected [ 372.815725][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 372.824740][T10726] netlink: 'syz.3.1326': attribute type 5 has an invalid length. [ 372.832562][T10726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1326'. [ 372.855239][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.866172][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.882312][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 372.892535][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 372.934423][T10726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.945878][T10726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.978123][ T30] audit: type=1326 audit(1760885115.756:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.5.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 373.015924][ T10] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 373.051628][ T10] scsi host1: usb-storage 6-1:1.0 [ 373.076245][ T30] audit: type=1326 audit(1760885115.766:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.5.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 373.128378][ T30] audit: type=1326 audit(1760885115.766:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.5.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 373.362554][T10734] fuse: Unknown parameter 'ˆd' [ 374.331098][ T10] usb 6-1: USB disconnect, device number 52 [ 375.172769][T10746] x_tables: ip_tables: osf match: only valid for protocol 6 [ 375.193799][ T24] usb 3-1: USB disconnect, device number 63 [ 375.316220][T10748] fuse: Unknown parameter 'grow[ÃsV¯K­ï æ´ó©]Uup_id-00000000000000000000' [ 375.534223][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 375.960610][T10766] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1336'. [ 376.368063][T10775] fuse: Unknown parameter 'grow[ÃsV¯K­ï æ´ó©]Uup_id-00000000000000000000' [ 376.486714][ T5916] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 376.655381][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.666355][ T5916] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 376.876810][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.017857][ T5916] usb 5-1: config 0 descriptor?? [ 377.035340][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 377.091014][T10785] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1341'. [ 377.594724][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 377.868142][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 377.891398][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 377.926888][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 377.950275][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 378.033424][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 378.053439][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 378.072200][ T5916] pwc: recv_control_msg error -32 req 04 val 1500 [ 378.092775][ T5916] pwc: recv_control_msg error -32 req 02 val 2500 [ 378.466741][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 378.494934][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 378.522549][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.529787][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.550830][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 378.561051][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 378.568500][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 378.578115][ T5916] pwc: Registered as video103. [ 378.587989][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 378.638182][ T5916] usb 5-1: USB disconnect, device number 77 [ 378.766742][T10799] futex_wake_op: syz.1.1345 tries to shift op by 32; fix this program [ 379.367961][ T10] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 379.527574][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 379.534417][ T10] usb 6-1: config 0 has no interfaces? [ 379.540112][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 379.549781][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.646768][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 379.705374][ T10] usb 6-1: config 0 descriptor?? [ 379.727837][T10833] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1355'. [ 379.816744][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 379.826785][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 379.837558][ T24] usb 5-1: config 1 has an invalid interface number: 26 but max is 0 [ 379.845957][ T24] usb 5-1: config 1 has no interface number 0 [ 379.852792][ T24] usb 5-1: config 1 interface 26 has no altsetting 0 [ 379.943172][ T24] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 379.959593][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.964175][T10808] bond_slave_0: entered promiscuous mode [ 379.968144][ T24] usb 5-1: Product: syz [ 380.016988][ T24] usb 5-1: Manufacturer: syz [ 380.017227][T10808] vlan3: entered promiscuous mode [ 380.021689][ T24] usb 5-1: SerialNumber: syz [ 380.047513][T10808] bond0: entered promiscuous mode [ 380.262195][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1353'. [ 380.341172][ T24] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 380.353289][ T24] usb 5-1: cannot find UAC_HEADER [ 380.407404][ T5916] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 380.536342][ T24] snd-usb-audio 5-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 380.557952][ T24] usb 5-1: USB disconnect, device number 78 [ 380.569572][ T5916] usb 2-1: not running at top speed; connect to a high speed hub [ 380.580583][ T5916] usb 2-1: config 1 has an invalid interface number: 54 but max is 0 [ 380.590822][ T5916] usb 2-1: config 1 has no interface number 0 [ 380.602560][ T5916] usb 2-1: config 1 interface 54 has no altsetting 0 [ 380.614052][ T5916] usb 2-1: New USB device found, idVendor=1114, idProduct=0001, bcdDevice=f4.a7 [ 380.644667][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.657546][ T5916] usb 2-1: Product: syz [ 380.661739][ T5916] usb 2-1: Manufacturer: syz [ 380.666339][ T5916] usb 2-1: SerialNumber: syz [ 380.809377][T10845] x_tables: ip_tables: osf match: only valid for protocol 6 [ 380.874854][T10847] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 381.136799][ T5895] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 381.286701][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 381.293562][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.304667][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.314489][ T5895] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 381.323633][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.335016][ T5895] usb 5-1: config 0 descriptor?? [ 381.411450][ T5916] usb 2-1: USB disconnect, device number 50 [ 381.900938][ T5916] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 381.924410][T10865] FAULT_INJECTION: forcing a failure. [ 381.924410][T10865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.939934][T10865] CPU: 0 UID: 0 PID: 10865 Comm: syz.3.1366 Not tainted syzkaller #0 PREEMPT(full) [ 381.939958][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.939968][T10865] Call Trace: [ 381.939975][T10865] [ 381.939983][T10865] dump_stack_lvl+0x189/0x250 [ 381.940007][T10865] ? __pfx____ratelimit+0x10/0x10 [ 381.940033][T10865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.940051][T10865] ? __pfx__printk+0x10/0x10 [ 381.940068][T10865] ? __might_fault+0xb0/0x130 [ 381.940093][T10865] should_fail_ex+0x414/0x560 [ 381.940123][T10865] _copy_from_iter+0x1de/0x1790 [ 381.940150][T10865] ? rcu_is_watching+0x15/0xb0 [ 381.940176][T10865] ? kmalloc_reserve+0xbd/0x290 [ 381.940199][T10865] ? __pfx__copy_from_iter+0x10/0x10 [ 381.940220][T10865] ? __build_skb_around+0x262/0x3f0 [ 381.940245][T10865] ? netlink_sendmsg+0x642/0xb30 [ 381.940267][T10865] ? skb_put+0x11b/0x210 [ 381.940292][T10865] netlink_sendmsg+0x6b2/0xb30 [ 381.940323][T10865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.940351][T10865] ? aa_sock_msg_perm+0xf1/0x1d0 [ 381.940372][T10865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.940392][T10865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.940418][T10865] __sock_sendmsg+0x21c/0x270 [ 381.940442][T10865] ____sys_sendmsg+0x505/0x830 [ 381.940464][T10865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.940489][T10865] ? import_iovec+0x74/0xa0 [ 381.940514][T10865] ___sys_sendmsg+0x21f/0x2a0 [ 381.940532][T10865] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.940581][T10865] ? __fget_files+0x2a/0x420 [ 381.940602][T10865] ? __fget_files+0x3a0/0x420 [ 381.940632][T10865] __x64_sys_sendmsg+0x19b/0x260 [ 381.940650][T10865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.940674][T10865] ? __pfx_ksys_write+0x10/0x10 [ 381.940697][T10865] ? do_syscall_64+0xbe/0xfa0 [ 381.940716][T10865] do_syscall_64+0xfa/0xfa0 [ 381.940731][T10865] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.940748][T10865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.940764][T10865] ? clear_bhb_loop+0x60/0xb0 [ 381.940784][T10865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.940801][T10865] RIP: 0033:0x7f6e5598efc9 [ 381.940817][T10865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.940839][T10865] RSP: 002b:00007f6e56893038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.940857][T10865] RAX: ffffffffffffffda RBX: 00007f6e55be5fa0 RCX: 00007f6e5598efc9 [ 381.940868][T10865] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 381.940878][T10865] RBP: 00007f6e56893090 R08: 0000000000000000 R09: 0000000000000000 [ 381.940888][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.940898][T10865] R13: 00007f6e55be6038 R14: 00007f6e55be5fa0 R15: 00007f6e55d0fa28 [ 381.940925][T10865] [ 382.236920][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 382.259297][ T5916] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 382.275901][ T5916] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 382.306571][ T5916] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 382.435562][ T5909] usb 6-1: USB disconnect, device number 53 [ 382.452188][ T5916] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 382.475306][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 382.494971][ T5916] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 382.506576][ T5916] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 382.515486][ T5916] usb 2-1: Product: syz [ 382.527302][ T5916] usb 2-1: Manufacturer: syz [ 382.532007][ T5916] usb 2-1: SerialNumber: syz [ 382.560760][ T5916] usb 2-1: config 0 descriptor?? [ 382.569148][ T5916] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 382.613020][ T5916] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 382.901319][T10857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.915022][T10857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.936964][ T5881] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 382.956355][T10857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.965343][T10857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.980274][ T5895] usb 2-1: USB disconnect, device number 51 [ 382.990264][ T5895] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 383.096710][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 383.104339][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 383.113360][ T5881] usb 6-1: config 1 has an invalid interface number: 26 but max is 0 [ 383.121516][ T5881] usb 6-1: config 1 has no interface number 0 [ 383.128105][ T5881] usb 6-1: config 1 interface 26 has no altsetting 0 [ 383.139866][ T5881] usb 6-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 383.149318][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.157829][ T5881] usb 6-1: Product: syz [ 383.162250][ T5881] usb 6-1: Manufacturer: syz [ 383.166988][ T5881] usb 6-1: SerialNumber: syz [ 383.398620][T10878] vlan3: entered promiscuous mode [ 383.492043][ T5881] usb 6-1: unknown interface protocol 0x7d, assuming v1 [ 383.506714][ T5881] usb 6-1: cannot find UAC_HEADER [ 383.556097][ T5881] snd-usb-audio 6-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 383.605001][ T5881] usb 6-1: USB disconnect, device number 54 [ 383.644345][T10887] x_tables: ip_tables: osf match: only valid for protocol 6 [ 383.964509][ T5916] usb 5-1: USB disconnect, device number 79 [ 383.987240][T10895] trusted_key: syz.1.1375 sent an empty control message without MSG_MORE. [ 384.095911][T10902] FAULT_INJECTION: forcing a failure. [ 384.095911][T10902] name failslab, interval 1, probability 0, space 0, times 0 [ 384.108749][T10902] CPU: 0 UID: 0 PID: 10902 Comm: syz.4.1376 Not tainted syzkaller #0 PREEMPT(full) [ 384.108764][T10902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.108771][T10902] Call Trace: [ 384.108775][T10902] [ 384.108780][T10902] dump_stack_lvl+0x189/0x250 [ 384.108795][T10902] ? __pfx____ratelimit+0x10/0x10 [ 384.108810][T10902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.108820][T10902] ? __pfx__printk+0x10/0x10 [ 384.108833][T10902] ? __pfx___might_resched+0x10/0x10 [ 384.108849][T10902] should_fail_ex+0x414/0x560 [ 384.108866][T10902] should_failslab+0xa8/0x100 [ 384.108880][T10902] kmem_cache_alloc_node_noprof+0x77/0x710 [ 384.108897][T10902] ? __alloc_skb+0x112/0x2d0 [ 384.108913][T10902] __alloc_skb+0x112/0x2d0 [ 384.108927][T10902] netlink_ack+0x146/0xa50 [ 384.108943][T10902] ? is_bpf_text_address+0x26/0x2b0 [ 384.108961][T10902] netlink_rcv_skb+0x28c/0x470 [ 384.108974][T10902] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 384.108988][T10902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.109006][T10902] ? bpf_lsm_capable+0x9/0x20 [ 384.109015][T10902] ? security_capable+0x7e/0x2e0 [ 384.109029][T10902] nfnetlink_rcv+0x282/0x2590 [ 384.109042][T10902] ? is_bpf_text_address+0x26/0x2b0 [ 384.109057][T10902] ? __kernel_text_address+0xd/0x40 [ 384.109068][T10902] ? unwind_get_return_address+0x4d/0x90 [ 384.109081][T10902] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.109090][T10902] ? arch_stack_walk+0xfc/0x150 [ 384.109110][T10902] ? stack_trace_save+0x9c/0xe0 [ 384.109119][T10902] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 384.109130][T10902] ? stack_depot_save_flags+0x40/0x860 [ 384.109142][T10902] ? __lock_acquire+0xab9/0xd20 [ 384.109166][T10902] ? __lock_acquire+0xab9/0xd20 [ 384.109182][T10902] ? netlink_deliver_tap+0x2e/0x1b0 [ 384.109199][T10902] ? netlink_deliver_tap+0x2e/0x1b0 [ 384.109215][T10902] netlink_unicast+0x82f/0x9e0 [ 384.109231][T10902] ? __pfx_netlink_unicast+0x10/0x10 [ 384.109244][T10902] ? netlink_sendmsg+0x642/0xb30 [ 384.109256][T10902] ? skb_put+0x11b/0x210 [ 384.109270][T10902] netlink_sendmsg+0x805/0xb30 [ 384.109287][T10902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.109302][T10902] ? aa_sock_msg_perm+0xf1/0x1d0 [ 384.109314][T10902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.109325][T10902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.109339][T10902] __sock_sendmsg+0x21c/0x270 [ 384.109352][T10902] ____sys_sendmsg+0x505/0x830 [ 384.109364][T10902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.109378][T10902] ? import_iovec+0x74/0xa0 [ 384.109392][T10902] ___sys_sendmsg+0x21f/0x2a0 [ 384.109402][T10902] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.109429][T10902] ? __fget_files+0x2a/0x420 [ 384.109440][T10902] ? __fget_files+0x3a0/0x420 [ 384.109456][T10902] __x64_sys_sendmsg+0x19b/0x260 [ 384.109466][T10902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.109481][T10902] ? __pfx_ksys_write+0x10/0x10 [ 384.109493][T10902] ? do_syscall_64+0xbe/0xfa0 [ 384.109505][T10902] do_syscall_64+0xfa/0xfa0 [ 384.109514][T10902] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.109524][T10902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.109533][T10902] ? clear_bhb_loop+0x60/0xb0 [ 384.109545][T10902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.109554][T10902] RIP: 0033:0x7f93ef38efc9 [ 384.109564][T10902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.109573][T10902] RSP: 002b:00007f93f014e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.109583][T10902] RAX: ffffffffffffffda RBX: 00007f93ef5e6090 RCX: 00007f93ef38efc9 [ 384.109591][T10902] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 384.109597][T10902] RBP: 00007f93f014e090 R08: 0000000000000000 R09: 0000000000000000 [ 384.109603][T10902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.109609][T10902] R13: 00007f93ef5e6128 R14: 00007f93ef5e6090 R15: 00007f93ef70fa28 [ 384.109624][T10902] [ 384.416722][ T5916] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 384.566911][ T5881] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 384.691991][T10909] fuse: Unknown parameter 'grow[ÃsV¯K­ï æ´ó©]Uup_id-00000000000000000000' [ 384.699254][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 384.715327][ T5916] usb 5-1: config 0 has no interfaces? [ 384.728781][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 384.735634][ T5916] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 384.735923][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 384.755252][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.756274][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 384.771737][ T5916] usb 5-1: Product: syz [ 384.774030][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 384.780123][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 384.796791][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10 [ 384.812291][ T5916] usb 5-1: Manufacturer: syz [ 384.817888][ T5916] usb 5-1: SerialNumber: syz [ 384.818863][ T5881] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 384.831926][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.840964][ T5916] usb 5-1: config 0 descriptor?? [ 384.843951][ T5881] usb 2-1: Product: syz [ 384.850180][ T5881] usb 2-1: Manufacturer: syz [ 384.854904][ T5881] usb 2-1: SerialNumber: syz [ 384.868228][ T5881] usb 2-1: config 0 descriptor?? [ 384.881137][ T5881] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input30 [ 384.895753][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 384.910249][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 384.938435][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 384.961221][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 384.997560][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 385.019586][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 385.110540][T10895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.129423][T10895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.150380][T10895] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 385.197291][ T5916] usb 2-1: USB disconnect, device number 52 [ 385.970797][T10930] fuse: Unknown parameter 'grow[ÃsV¯K­ï æ´ó©]Uup_id-00000000000000000000' [ 385.992575][T10930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1383'. [ 386.002935][T10930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1383'. [ 386.825766][T10944] loop9: detected capacity change from 0 to 7 [ 386.834966][T10944] Dev loop9: unable to read RDB block 7 [ 386.840878][T10944] loop9: unable to read partition table [ 386.847536][T10944] loop9: partition table beyond EOD, truncated [ 386.854917][T10944] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 386.904531][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 387.053059][ T10] usb 5-1: USB disconnect, device number 80 [ 387.406322][T10964] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 387.446696][ T10] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 387.605920][T10968] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1396'. [ 387.624048][ T10] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 387.649221][ T10] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 387.658442][T10970] FAULT_INJECTION: forcing a failure. [ 387.658442][T10970] name failslab, interval 1, probability 0, space 0, times 0 [ 387.658495][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.671638][ T10] usb 5-1: Product: syz [ 387.682835][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 387.684619][ T10] usb 5-1: Manufacturer: syz [ 387.697350][ T10] usb 5-1: SerialNumber: syz [ 387.705782][T10970] CPU: 0 UID: 0 PID: 10970 Comm: syz.2.1397 Not tainted syzkaller #0 PREEMPT(full) [ 387.705803][T10970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.705812][T10970] Call Trace: [ 387.705822][T10970] [ 387.705829][T10970] dump_stack_lvl+0x189/0x250 [ 387.705851][T10970] ? __pfx____ratelimit+0x10/0x10 [ 387.705876][T10970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.705895][T10970] ? __pfx__printk+0x10/0x10 [ 387.705915][T10970] ? __pfx___might_resched+0x10/0x10 [ 387.705940][T10970] should_fail_ex+0x414/0x560 [ 387.705969][T10970] ? __pfx_proc_alloc_inode+0x10/0x10 [ 387.705984][T10970] should_failslab+0xa8/0x100 [ 387.706007][T10970] ? __pfx_proc_alloc_inode+0x10/0x10 [ 387.706022][T10970] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 387.706041][T10970] ? proc_alloc_inode+0x2a/0xc0 [ 387.706063][T10970] ? __pfx_proc_alloc_inode+0x10/0x10 [ 387.706077][T10970] proc_alloc_inode+0x2a/0xc0 [ 387.706093][T10970] alloc_inode+0x6a/0x1b0 [ 387.706113][T10970] new_inode+0x22/0x170 [ 387.706138][T10970] proc_pid_make_inode+0x21/0x130 [ 387.706160][T10970] proc_ns_instantiate+0x53/0xf0 [ 387.706179][T10970] proc_fill_cache+0x2d0/0x3d0 [ 387.706202][T10970] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 387.706220][T10970] ? __pfx_proc_fill_cache+0x10/0x10 [ 387.706251][T10970] ? filldir64+0x46c/0x690 [ 387.706278][T10970] proc_ns_dir_readdir+0x2e8/0x3c0 [ 387.706302][T10970] iterate_dir+0x399/0x570 [ 387.706326][T10970] __se_sys_getdents64+0xe4/0x260 [ 387.706355][T10970] ? __pfx___se_sys_getdents64+0x10/0x10 [ 387.706372][T10970] ? ksys_write+0x22a/0x250 [ 387.706388][T10970] ? __pfx_filldir64+0x10/0x10 [ 387.706408][T10970] ? __pfx_ksys_write+0x10/0x10 [ 387.706431][T10970] ? do_syscall_64+0xbe/0xfa0 [ 387.706452][T10970] do_syscall_64+0xfa/0xfa0 [ 387.706469][T10970] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.706486][T10970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.706504][T10970] ? clear_bhb_loop+0x60/0xb0 [ 387.706525][T10970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.706542][T10970] RIP: 0033:0x7fae9478efc9 [ 387.706558][T10970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.706573][T10970] RSP: 002b:00007fae95637038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 387.706592][T10970] RAX: ffffffffffffffda RBX: 00007fae949e5fa0 RCX: 00007fae9478efc9 [ 387.706604][T10970] RDX: 00000000000000fb RSI: 0000200000000000 RDI: 0000000000000003 [ 387.706614][T10970] RBP: 00007fae95637090 R08: 0000000000000000 R09: 0000000000000000 [ 387.706624][T10970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.706634][T10970] R13: 00007fae949e6038 R14: 00007fae949e5fa0 R15: 00007fae94b0fa28 [ 387.706663][T10970] [ 387.998697][ T10] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 388.086740][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 388.094208][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 388.103613][ T24] usb 2-1: config 1 has an invalid interface number: 26 but max is 0 [ 388.112618][ T24] usb 2-1: config 1 has no interface number 0 [ 388.142665][ T24] usb 2-1: config 1 interface 26 has no altsetting 0 [ 388.364303][ T24] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 388.377950][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.396775][ T24] usb 2-1: Product: syz [ 388.405238][ T24] usb 2-1: Manufacturer: syz [ 388.416387][ T24] usb 2-1: SerialNumber: syz [ 388.612337][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.621399][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.630052][ T10] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 388.779185][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 388.779203][ T30] audit: type=1326 audit(1760885133.086:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 388.795899][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1395'. [ 388.880098][ T10] usb 5-1: USB disconnect, device number 81 [ 389.034645][ T30] audit: type=1326 audit(1760885133.086:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 389.059842][T10966] vlan3: entered promiscuous mode [ 389.146490][ T24] usb 2-1: unknown interface protocol 0x7d, assuming v1 [ 389.187654][ T24] usb 2-1: cannot find UAC_HEADER [ 389.210726][ T30] audit: type=1326 audit(1760885133.096:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 389.280498][ T30] audit: type=1326 audit(1760885133.096:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 389.305676][ T24] snd-usb-audio 2-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 389.323379][ T24] usb 2-1: USB disconnect, device number 53 [ 389.327978][T10986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.340687][ T30] audit: type=1326 audit(1760885133.096:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 389.363007][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.416792][ T30] audit: type=1326 audit(1760885133.096:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 389.478495][T10986] tipc: Enabling of bearer rejected, failed to enable media [ 389.506408][ T30] audit: type=1326 audit(1760885133.096:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 389.528774][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.579304][ T30] audit: type=1326 audit(1760885133.096:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 389.647813][ T30] audit: type=1326 audit(1760885133.096:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 389.741894][ T30] audit: type=1326 audit(1760885133.106:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae9478d810 code=0x7ffc0000 [ 389.856760][ T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 389.987498][T10999] binder: 10997:10999 ioctl c0306201 200000000680 returned -14 [ 390.006499][T10999] netlink: 'syz.1.1406': attribute type 12 has an invalid length. [ 390.006740][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 390.031584][ T24] usb 5-1: config 0 has no interfaces? [ 390.037407][T10999] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1406'. [ 390.041115][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 390.058445][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.086995][ T24] usb 5-1: Product: syz [ 390.091190][ T24] usb 5-1: Manufacturer: syz [ 390.095812][ T24] usb 5-1: SerialNumber: syz [ 390.123398][ T24] usb 5-1: config 0 descriptor?? [ 390.501891][T11015] FAULT_INJECTION: forcing a failure. [ 390.501891][T11015] name failslab, interval 1, probability 0, space 0, times 0 [ 390.518868][T11015] CPU: 0 UID: 0 PID: 11015 Comm: syz.5.1410 Not tainted syzkaller #0 PREEMPT(full) [ 390.518883][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.518889][T11015] Call Trace: [ 390.518894][T11015] [ 390.518898][T11015] dump_stack_lvl+0x189/0x250 [ 390.518913][T11015] ? __pfx____ratelimit+0x10/0x10 [ 390.518928][T11015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.518939][T11015] ? __pfx__printk+0x10/0x10 [ 390.518951][T11015] ? __lock_acquire+0xab9/0xd20 [ 390.518967][T11015] should_fail_ex+0x414/0x560 [ 390.518985][T11015] should_failslab+0xa8/0x100 [ 390.518999][T11015] kmem_cache_alloc_noprof+0x74/0x6e0 [ 390.519010][T11015] ? skb_clone+0x212/0x3a0 [ 390.519023][T11015] skb_clone+0x212/0x3a0 [ 390.519035][T11015] __netlink_deliver_tap+0x404/0x850 [ 390.519060][T11015] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.519074][T11015] netlink_deliver_tap+0x19c/0x1b0 [ 390.519087][T11015] netlink_unicast+0x7fa/0x9e0 [ 390.519104][T11015] ? __pfx_netlink_unicast+0x10/0x10 [ 390.519117][T11015] ? netlink_sendmsg+0x642/0xb30 [ 390.519128][T11015] ? skb_put+0x11b/0x210 [ 390.519144][T11015] netlink_sendmsg+0x805/0xb30 [ 390.519161][T11015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.519176][T11015] ? aa_sock_msg_perm+0xf1/0x1d0 [ 390.519189][T11015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.519200][T11015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.519214][T11015] __sock_sendmsg+0x21c/0x270 [ 390.519228][T11015] ____sys_sendmsg+0x505/0x830 [ 390.519240][T11015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.519254][T11015] ? import_iovec+0x74/0xa0 [ 390.519269][T11015] ___sys_sendmsg+0x21f/0x2a0 [ 390.519279][T11015] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.519309][T11015] ? __fget_files+0x2a/0x420 [ 390.519321][T11015] ? __fget_files+0x3a0/0x420 [ 390.519338][T11015] __x64_sys_sendmsg+0x19b/0x260 [ 390.519349][T11015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.519363][T11015] ? __pfx_ksys_write+0x10/0x10 [ 390.519375][T11015] ? do_syscall_64+0xbe/0xfa0 [ 390.519387][T11015] do_syscall_64+0xfa/0xfa0 [ 390.519396][T11015] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.519406][T11015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.519415][T11015] ? clear_bhb_loop+0x60/0xb0 [ 390.519426][T11015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.519435][T11015] RIP: 0033:0x7fcc86b8efc9 [ 390.519445][T11015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.519453][T11015] RSP: 002b:00007fcc87a53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.519464][T11015] RAX: ffffffffffffffda RBX: 00007fcc86de5fa0 RCX: 00007fcc86b8efc9 [ 390.519472][T11015] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 390.519478][T11015] RBP: 00007fcc87a53090 R08: 0000000000000000 R09: 0000000000000000 [ 390.519483][T11015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.519489][T11015] R13: 00007fcc86de6038 R14: 00007fcc86de5fa0 R15: 00007fcc86f0fa28 [ 390.519505][T11015] [ 391.446721][ T5881] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 392.046792][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 392.312428][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 392.347618][ T5881] usb 2-1: config 1 has an invalid interface number: 26 but max is 0 [ 392.368870][ T5881] usb 2-1: config 1 has no interface number 0 [ 392.440180][ T24] usb 5-1: USB disconnect, device number 82 [ 392.477098][ T5881] usb 2-1: config 1 interface 26 has no altsetting 0 [ 392.510769][ T5881] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 392.560056][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.579483][ T5881] usb 2-1: Product: syz [ 392.583669][ T5881] usb 2-1: Manufacturer: syz [ 392.593196][ T5881] usb 2-1: SerialNumber: syz [ 392.837462][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 392.851313][T11029] vlan3: entered promiscuous mode [ 393.010990][ T5881] usb 2-1: unknown interface protocol 0x7d, assuming v1 [ 393.018237][ T5881] usb 2-1: cannot find UAC_HEADER [ 393.042650][ T5881] snd-usb-audio 2-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 393.066348][ T5881] usb 2-1: USB disconnect, device number 54 [ 393.143552][ T5895] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 393.298267][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 393.315273][ T5895] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 393.325642][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.347161][ T5895] usb 6-1: config 0 has no interface number 0 [ 393.367252][ T5895] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 393.406596][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.437073][ T5895] usb 6-1: Product: syz [ 393.441392][ T5895] usb 6-1: Manufacturer: syz [ 393.445966][ T5895] usb 6-1: SerialNumber: syz [ 393.474504][ T5895] usb 6-1: config 0 descriptor?? [ 393.946433][ T5895] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22 [ 394.173780][ T5909] usb 6-1: USB disconnect, device number 55 [ 394.468113][T11058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.493918][T11058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.786229][T11072] netlink: 'syz.4.1427': attribute type 10 has an invalid length. [ 395.636939][ T5895] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 395.840885][ T5895] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 395.850345][ T5895] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 395.864546][ T5895] usb 6-1: Product: syz [ 395.876567][ T5895] usb 6-1: Manufacturer: syz [ 395.889793][ T5895] usb 6-1: SerialNumber: syz [ 395.909463][ T5895] usb 6-1: config 0 descriptor?? [ 395.936970][ T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 396.086730][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 396.098666][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 396.112952][ T24] usb 5-1: config 1 has an invalid interface number: 26 but max is 0 [ 396.142337][ T24] usb 5-1: config 1 has no interface number 0 [ 396.162896][ T24] usb 5-1: config 1 interface 26 has no altsetting 0 [ 396.186491][ T24] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 396.220219][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.246320][ T24] usb 5-1: Product: syz [ 396.260030][ T24] usb 5-1: Manufacturer: syz [ 396.265945][ T24] usb 5-1: SerialNumber: syz [ 396.488514][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1430'. [ 396.512781][ T24] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 396.527403][ T24] usb 5-1: cannot find UAC_HEADER [ 396.582058][ T24] snd-usb-audio 5-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 396.613262][ T5895] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 396.636992][ T24] usb 5-1: USB disconnect, device number 83 [ 396.644056][ T5895] asix 6-1:0.0: probe with driver asix failed with error -71 [ 396.695512][ T5895] usb 6-1: USB disconnect, device number 56 [ 396.754014][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1438'. [ 396.959639][T11113] trusted_key: encrypted_key: insufficient parameters specified [ 397.423715][T11123] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 397.566711][ T5916] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 397.976903][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 397.997901][ T5916] usb 3-1: config 0 has no interfaces? [ 398.008137][ T5916] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 398.040715][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.049966][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.061305][ T5916] usb 3-1: Product: syz [ 398.065454][ T5916] usb 3-1: Manufacturer: syz [ 398.099030][ T5916] usb 3-1: SerialNumber: syz [ 398.109598][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.143456][ T5916] usb 3-1: config 0 descriptor?? [ 398.547062][ T5895] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 398.696722][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 398.798593][ T5895] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.816262][ T5895] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.834415][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 398.844191][ T5895] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 398.856861][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.897796][ T5895] usb 2-1: config 0 descriptor?? [ 399.709705][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1456'. [ 399.761595][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 399.761612][ T30] audit: type=1800 audit(1760885144.166:1021): pid=11159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1453" name="bus" dev="ramfs" ino=36144 res=0 errno=0 [ 399.791787][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1456'. [ 399.849712][ T5895] usbhid 2-1:0.0: can't add hid device: -71 [ 399.855730][ T5895] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 399.868661][ T5895] usb 2-1: USB disconnect, device number 55 [ 400.036952][ T5909] usb 3-1: USB disconnect, device number 64 [ 400.076695][ T5881] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 400.105663][T11172] FAULT_INJECTION: forcing a failure. [ 400.105663][T11172] name failslab, interval 1, probability 0, space 0, times 0 [ 400.159353][T11172] CPU: 0 UID: 0 PID: 11172 Comm: syz.1.1458 Not tainted syzkaller #0 PREEMPT(full) [ 400.159369][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 400.159376][T11172] Call Trace: [ 400.159380][T11172] [ 400.159385][T11172] dump_stack_lvl+0x189/0x250 [ 400.159400][T11172] ? __pfx____ratelimit+0x10/0x10 [ 400.159415][T11172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.159425][T11172] ? __pfx__printk+0x10/0x10 [ 400.159438][T11172] ? __pfx___might_resched+0x10/0x10 [ 400.159455][T11172] should_fail_ex+0x414/0x560 [ 400.159473][T11172] should_failslab+0xa8/0x100 [ 400.159489][T11172] kmem_cache_alloc_noprof+0x74/0x6e0 [ 400.159500][T11172] ? security_inode_alloc+0x39/0x330 [ 400.159514][T11172] security_inode_alloc+0x39/0x330 [ 400.159526][T11172] inode_init_always_gfp+0x9ed/0xdc0 [ 400.159541][T11172] ? __pfx_proc_alloc_inode+0x10/0x10 [ 400.159551][T11172] alloc_inode+0x82/0x1b0 [ 400.159563][T11172] new_inode+0x22/0x170 [ 400.159576][T11172] proc_pid_make_inode+0x21/0x130 [ 400.159590][T11172] proc_ns_instantiate+0x53/0xf0 [ 400.159601][T11172] proc_fill_cache+0x2d0/0x3d0 [ 400.159614][T11172] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 400.159623][T11172] ? __pfx_proc_fill_cache+0x10/0x10 [ 400.159640][T11172] ? filldir64+0x46c/0x690 [ 400.159667][T11172] proc_ns_dir_readdir+0x2e8/0x3c0 [ 400.159691][T11172] iterate_dir+0x399/0x570 [ 400.159709][T11172] __se_sys_getdents64+0xe4/0x260 [ 400.159727][T11172] ? __pfx___se_sys_getdents64+0x10/0x10 [ 400.159742][T11172] ? ksys_write+0x22a/0x250 [ 400.159757][T11172] ? __pfx_filldir64+0x10/0x10 [ 400.159776][T11172] ? __pfx_ksys_write+0x10/0x10 [ 400.159797][T11172] ? do_syscall_64+0xbe/0xfa0 [ 400.159818][T11172] do_syscall_64+0xfa/0xfa0 [ 400.159833][T11172] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.159850][T11172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.159867][T11172] ? clear_bhb_loop+0x60/0xb0 [ 400.159887][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.159903][T11172] RIP: 0033:0x7f7939f8efc9 [ 400.159918][T11172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.159933][T11172] RSP: 002b:00007f793ad73038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 400.159951][T11172] RAX: ffffffffffffffda RBX: 00007f793a1e5fa0 RCX: 00007f7939f8efc9 [ 400.159964][T11172] RDX: 00000000000000fb RSI: 0000200000000000 RDI: 0000000000000003 [ 400.159974][T11172] RBP: 00007f793ad73090 R08: 0000000000000000 R09: 0000000000000000 [ 400.159985][T11172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.159995][T11172] R13: 00007f793a1e6038 R14: 00007f793a1e5fa0 R15: 00007f793a30fa28 [ 400.160024][T11172] [ 400.513868][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 400.522232][ T5881] usb 5-1: config 0 has no interfaces? [ 400.546995][ T5881] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 400.556081][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.564155][ T5881] usb 5-1: Product: syz [ 400.568376][ T5881] usb 5-1: Manufacturer: syz [ 400.572974][ T5881] usb 5-1: SerialNumber: syz [ 400.583529][ T5881] usb 5-1: config 0 descriptor?? [ 400.796998][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 400.889599][T11191] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 400.898032][ T5881] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 400.902326][T11191] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 400.932914][T11191] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 401.056757][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 401.063534][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.076576][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 401.090813][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 401.145286][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 401.169062][ T5881] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 401.178325][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 401.200499][ T5881] usb 6-1: Product: syz [ 401.204715][ T5881] usb 6-1: Manufacturer: syz [ 401.210409][ T5881] usb 6-1: SerialNumber: syz [ 401.230912][ T5881] usb 6-1: config 0 descriptor?? [ 401.449218][T11182] netlink: 'syz.5.1461': attribute type 10 has an invalid length. [ 401.457662][T11182] bridge0: port 4(macsec0) entered disabled state [ 401.464201][T11182] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.471417][T11182] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.482684][T11182] bridge0: port 4(macsec0) entered blocking state [ 401.489197][T11182] bridge0: port 4(macsec0) entered forwarding state [ 401.496023][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.503133][T11182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.510485][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.517569][T11182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.541653][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1461'. [ 401.543777][T11182] bridge0: entered promiscuous mode [ 401.558096][T11182] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 401.574737][T11201] macsec0: left allmulticast mode [ 401.582723][T11201] veth1_macvtap: left allmulticast mode [ 401.589688][T11201] macsec0: left promiscuous mode [ 401.595229][T11201] bridge0: port 4(macsec0) entered disabled state [ 401.607683][T11201] vlan2: left promiscuous mode [ 401.614158][T11201] bridge0: port 3(vlan2) entered disabled state [ 401.624424][ T5881] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 401.626352][T11201] bridge_slave_1: left allmulticast mode [ 401.631410][ T5881] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 401.637502][T11201] bridge_slave_1: left promiscuous mode [ 401.655511][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.682943][T11201] bridge_slave_0: left promiscuous mode [ 401.701464][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.744428][T11201] bond0: (slave bridge0): Releasing backup interface [ 401.754097][T11201] bridge0 (unregistering): left promiscuous mode [ 401.881850][ T5881] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 401.890352][ T5881] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 401.902746][ T5881] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 402.083871][ T5881] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 402.094783][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.101498][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.108124][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.114692][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.121467][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.128082][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.134676][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.141347][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.148017][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.154605][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.161209][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.167804][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.174470][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.181099][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.187717][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.194357][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.200875][ T5881] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 402.210076][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.216698][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.223312][ C0] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 402.230171][ T5881] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 402.244114][ T5881] usb 6-1: USB disconnect, device number 57 [ 402.669437][T11207] Cannot find del_set index 0 as target [ 402.774373][ T5895] usb 5-1: USB disconnect, device number 84 [ 402.966993][ T5881] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 403.126746][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 403.134236][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.145328][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.155254][ T5881] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 403.164431][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.179460][ T5881] usb 6-1: config 0 descriptor?? [ 403.187390][ T5881] hub 6-1:0.0: USB hub found [ 403.386352][ T5881] hub 6-1:0.0: 1 port detected [ 403.588388][ T5881] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 403.595592][ T5881] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 403.607347][ T5881] usbhid 6-1:0.0: can't add hid device: -71 [ 403.613385][ T5881] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 403.648309][ T5881] usb 6-1: USB disconnect, device number 58 [ 404.125108][ T30] audit: type=1326 audit(1760885148.526:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 404.197692][ T30] audit: type=1326 audit(1760885148.526:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 404.222910][ T30] audit: type=1326 audit(1760885148.526:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 404.387727][ T30] audit: type=1326 audit(1760885148.526:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 404.410159][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.464220][T11240] FAULT_INJECTION: forcing a failure. [ 404.464220][T11240] name failslab, interval 1, probability 0, space 0, times 0 [ 404.479823][ T30] audit: type=1326 audit(1760885148.526:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 404.503886][T11240] CPU: 1 UID: 0 PID: 11240 Comm: syz.5.1481 Not tainted syzkaller #0 PREEMPT(full) [ 404.503908][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 404.503917][T11240] Call Trace: [ 404.503924][T11240] [ 404.503930][T11240] dump_stack_lvl+0x189/0x250 [ 404.503952][T11240] ? __pfx____ratelimit+0x10/0x10 [ 404.503978][T11240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.503996][T11240] ? __pfx__printk+0x10/0x10 [ 404.504019][T11240] ? __pfx___might_resched+0x10/0x10 [ 404.504047][T11240] should_fail_ex+0x414/0x560 [ 404.504076][T11240] ? __pfx_proc_alloc_inode+0x10/0x10 [ 404.504093][T11240] should_failslab+0xa8/0x100 [ 404.504125][T11240] ? __pfx_proc_alloc_inode+0x10/0x10 [ 404.504140][T11240] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 404.504158][T11240] ? proc_alloc_inode+0x2a/0xc0 [ 404.504180][T11240] ? __pfx_proc_alloc_inode+0x10/0x10 [ 404.504195][T11240] proc_alloc_inode+0x2a/0xc0 [ 404.504212][T11240] alloc_inode+0x6a/0x1b0 [ 404.504233][T11240] new_inode+0x22/0x170 [ 404.504257][T11240] proc_pid_make_inode+0x21/0x130 [ 404.504280][T11240] proc_ns_instantiate+0x53/0xf0 [ 404.504300][T11240] proc_fill_cache+0x2d0/0x3d0 [ 404.504323][T11240] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 404.504340][T11240] ? __pfx_proc_fill_cache+0x10/0x10 [ 404.504369][T11240] ? filldir64+0x46c/0x690 [ 404.504399][T11240] proc_ns_dir_readdir+0x2e8/0x3c0 [ 404.504422][T11240] iterate_dir+0x399/0x570 [ 404.504444][T11240] __se_sys_getdents64+0xe4/0x260 [ 404.504468][T11240] ? __pfx___se_sys_getdents64+0x10/0x10 [ 404.504484][T11240] ? ksys_write+0x22a/0x250 [ 404.504499][T11240] ? __pfx_filldir64+0x10/0x10 [ 404.504518][T11240] ? __pfx_ksys_write+0x10/0x10 [ 404.504539][T11240] ? do_syscall_64+0xbe/0xfa0 [ 404.504560][T11240] do_syscall_64+0xfa/0xfa0 [ 404.504576][T11240] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.504593][T11240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.504609][T11240] ? clear_bhb_loop+0x60/0xb0 [ 404.504629][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.504645][T11240] RIP: 0033:0x7fcc86b8efc9 [ 404.504661][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.504676][T11240] RSP: 002b:00007fcc87a53038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 404.504695][T11240] RAX: ffffffffffffffda RBX: 00007fcc86de5fa0 RCX: 00007fcc86b8efc9 [ 404.504707][T11240] RDX: 00000000000000fb RSI: 0000200000000000 RDI: 0000000000000003 [ 404.504717][T11240] RBP: 00007fcc87a53090 R08: 0000000000000000 R09: 0000000000000000 [ 404.504727][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.504738][T11240] R13: 00007fcc86de6038 R14: 00007fcc86de5fa0 R15: 00007fcc86f0fa28 [ 404.504765][T11240] [ 404.723044][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.804537][ T30] audit: type=1326 audit(1760885148.526:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 404.826962][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.850433][ T30] audit: type=1326 audit(1760885148.526:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 404.872859][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.071548][ T30] audit: type=1326 audit(1760885148.526:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 405.208401][ T30] audit: type=1326 audit(1760885148.526:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 405.261487][ T30] audit: type=1326 audit(1760885148.526:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 405.261656][T11242] Cannot find del_set index 0 as target [ 405.298083][ T30] audit: type=1326 audit(1760885148.656:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae9478d810 code=0x7ffc0000 [ 405.322264][ T30] audit: type=1326 audit(1760885148.656:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 405.345100][ T30] audit: type=1326 audit(1760885148.656:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 405.730781][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1487'. [ 405.846743][ T5916] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 405.854837][T11256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1488'. [ 406.007998][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 406.016167][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.030732][ T5916] usb 2-1: config 0 has no interface number 0 [ 406.037267][ T5916] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 406.048962][ T5916] usb 2-1: config 0 interface 1 has no altsetting 0 [ 406.070928][ T5916] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 406.084520][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.100964][ T5916] usb 2-1: Product: syz [ 406.114040][ T5916] usb 2-1: Manufacturer: syz [ 406.134906][ T5916] usb 2-1: SerialNumber: syz [ 406.140077][ T30] audit: type=1800 audit(1760885150.536:1035): pid=11265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1491" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 406.165069][ T5916] usb 2-1: config 0 descriptor?? [ 406.176749][ T24] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 406.355081][ T24] usb 6-1: device descriptor read/64, error -71 [ 406.401916][ T5916] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 406.424483][ T5916] cx231xx 2-1:0.1: Failed to read PCB config [ 406.648262][ T5916] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 406.675637][ T5916] usb 2-1: USB disconnect, device number 56 [ 406.736752][ T24] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 406.867398][ T24] usb 6-1: device descriptor read/64, error -71 [ 406.976757][ T5916] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 406.984673][ T24] usb usb6-port1: attempt power cycle [ 407.136788][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 407.150570][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.173637][ T5916] usb 2-1: config 0 has no interface number 0 [ 407.184554][ T5916] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 407.195686][ T5916] usb 2-1: config 0 interface 1 has no altsetting 0 [ 407.209126][ T5916] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 407.219712][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.228268][ T5916] usb 2-1: Product: syz [ 407.232730][ T5916] usb 2-1: Manufacturer: syz [ 407.239327][ T5916] usb 2-1: SerialNumber: syz [ 407.249325][ T5916] usb 2-1: config 0 descriptor?? [ 407.336767][ T24] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 407.357608][ T24] usb 6-1: device descriptor read/8, error -71 [ 408.254940][T11248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.277795][T11248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.370763][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 408.457502][ T24] usb 6-1: device descriptor read/8, error -71 [ 408.571084][ T24] usb usb6-port1: unable to enumerate USB device [ 408.584814][ T5916] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 408.631050][T11287] fuse: Unknown parameter 'Uº:Ì ' [ 408.633859][ T5916] cx231xx 2-1:0.1: Failed to read PCB config [ 408.650409][T11289] x_tables: ip_tables: osf match: only valid for protocol 6 [ 408.666789][ T5916] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 408.682303][ T5916] usb 2-1: USB disconnect, device number 57 [ 409.073722][ T30] audit: type=1326 audit(1760885153.456:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11292 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 409.142862][T11299] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1499'. [ 409.227350][T11299] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1499'. [ 409.352416][T11305] loop6: detected capacity change from 0 to 7 [ 409.373315][T11305] Dev loop6: unable to read RDB block 7 [ 409.379258][T11305] loop6: AHDI p1 p2 p3 [ 409.384719][T11305] loop6: partition table partially beyond EOD, truncated [ 409.409222][ T5895] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 409.420912][T11305] loop6: p1 start 4217409618 is beyond EOD, truncated [ 409.428480][T11305] loop6: p2 size 108 extends beyond EOD, truncated [ 409.508488][T11309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.533331][T11309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.551018][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 409.562983][ T5916] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 409.571856][T11309] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1503'. [ 409.586686][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 409.601312][ T5895] usb 2-1: unable to get BOS descriptor or descriptor too short [ 409.611936][ T5895] usb 2-1: config 1 has an invalid interface number: 26 but max is 0 [ 409.650837][ T5895] usb 2-1: config 1 has no interface number 0 [ 409.736896][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 409.776676][ T5895] usb 2-1: config 1 interface 26 has no altsetting 0 [ 409.789264][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.803086][ T5895] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 409.812844][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.822617][ T5916] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 409.876883][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.889395][ T5895] usb 2-1: Product: syz [ 409.897016][ T5916] usb 3-1: config 0 descriptor?? [ 409.906700][ T5895] usb 2-1: Manufacturer: syz [ 409.918028][ T5895] usb 2-1: SerialNumber: syz [ 410.159175][T11301] vlan3: entered promiscuous mode [ 410.323327][ T5916] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 410.392765][ T5895] usb 2-1: unknown interface protocol 0x7d, assuming v1 [ 410.428962][ T5895] usb 2-1: cannot find UAC_HEADER [ 410.632290][ T5895] snd-usb-audio 2-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 410.655355][T11322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.664360][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.676764][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 410.685737][T11322] netlink: 'syz.3.1506': attribute type 5 has an invalid length. [ 410.693594][T11322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1506'. [ 410.708887][T11322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.718588][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.758064][T11299] CUSE: DEVNAME unspecified [ 410.769835][ T5916] usb 3-1: USB disconnect, device number 65 [ 410.799695][ T5895] usb 2-1: USB disconnect, device number 58 [ 410.903626][T11327] Cannot find del_set index 0 as target [ 411.117980][T11334] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1510'. [ 411.446921][ T5895] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 411.646687][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 411.675519][ T5895] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 411.705066][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.732060][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 411.939778][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 411.976881][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.990317][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 411.999963][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.761153][ T5895] usb 5-1: usb_control_msg returned -32 [ 412.802760][ T5895] usbtmc 5-1:16.0: can't read capabilities [ 413.355535][T11357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.364558][T11357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.240706][T11367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1518'. [ 414.487372][T11373] FAULT_INJECTION: forcing a failure. [ 414.487372][T11373] name failslab, interval 1, probability 0, space 0, times 0 [ 414.496725][ T5916] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 414.500130][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 414.515454][T11373] CPU: 0 UID: 0 PID: 11373 Comm: syz.3.1520 Not tainted syzkaller #0 PREEMPT(full) [ 414.515478][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.515489][T11373] Call Trace: [ 414.515497][T11373] [ 414.515505][T11373] dump_stack_lvl+0x189/0x250 [ 414.515530][T11373] ? __pfx____ratelimit+0x10/0x10 [ 414.515556][T11373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.515574][T11373] ? __pfx__printk+0x10/0x10 [ 414.515598][T11373] ? __pfx___might_resched+0x10/0x10 [ 414.515628][T11373] should_fail_ex+0x414/0x560 [ 414.515659][T11373] ? __pfx_proc_alloc_inode+0x10/0x10 [ 414.515677][T11373] should_failslab+0xa8/0x100 [ 414.515700][T11373] ? __pfx_proc_alloc_inode+0x10/0x10 [ 414.515716][T11373] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 414.515735][T11373] ? proc_alloc_inode+0x2a/0xc0 [ 414.515757][T11373] ? __pfx_proc_alloc_inode+0x10/0x10 [ 414.515774][T11373] proc_alloc_inode+0x2a/0xc0 [ 414.515792][T11373] alloc_inode+0x6a/0x1b0 [ 414.515814][T11373] new_inode+0x22/0x170 [ 414.515840][T11373] proc_pid_make_inode+0x21/0x130 [ 414.515863][T11373] proc_ns_instantiate+0x53/0xf0 [ 414.515884][T11373] proc_fill_cache+0x2d0/0x3d0 [ 414.515915][T11373] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 414.515933][T11373] ? __pfx_proc_fill_cache+0x10/0x10 [ 414.515962][T11373] ? filldir64+0x46c/0x690 [ 414.515990][T11373] proc_ns_dir_readdir+0x2e8/0x3c0 [ 414.516013][T11373] iterate_dir+0x399/0x570 [ 414.516037][T11373] __se_sys_getdents64+0xe4/0x260 [ 414.516058][T11373] ? __pfx___se_sys_getdents64+0x10/0x10 [ 414.516075][T11373] ? ksys_write+0x22a/0x250 [ 414.516091][T11373] ? __pfx_filldir64+0x10/0x10 [ 414.516111][T11373] ? __pfx_ksys_write+0x10/0x10 [ 414.516134][T11373] ? do_syscall_64+0xbe/0xfa0 [ 414.516156][T11373] do_syscall_64+0xfa/0xfa0 [ 414.516171][T11373] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.516189][T11373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.516207][T11373] ? clear_bhb_loop+0x60/0xb0 [ 414.516229][T11373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.516245][T11373] RIP: 0033:0x7f6e5598efc9 [ 414.516262][T11373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.516277][T11373] RSP: 002b:00007f6e56893038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 414.516297][T11373] RAX: ffffffffffffffda RBX: 00007f6e55be5fa0 RCX: 00007f6e5598efc9 [ 414.516310][T11373] RDX: 00000000000000fb RSI: 0000200000000000 RDI: 0000000000000003 [ 414.516322][T11373] RBP: 00007f6e56893090 R08: 0000000000000000 R09: 0000000000000000 [ 414.516333][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.516343][T11373] R13: 00007f6e55be6038 R14: 00007f6e55be5fa0 R15: 00007f6e55d0fa28 [ 414.516373][T11373] [ 414.871490][ T5916] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 414.910641][ T5916] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 415.001438][T11376] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1522'. [ 415.010965][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 415.019525][ T10] usb 3-1: config 0 has no interfaces? [ 415.025028][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 415.034220][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.044056][ T10] usb 3-1: config 0 descriptor?? [ 415.055272][ T5916] usb 2-1: config 220 has no interface number 2 [ 415.055647][ T10] usb 5-1: USB disconnect, device number 85 [ 415.073489][ T5916] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 415.105891][ T5916] usb 2-1: config 220 interface 0 has no altsetting 0 [ 415.128846][ T5916] usb 2-1: config 220 interface 76 has no altsetting 0 [ 415.146054][ T5916] usb 2-1: config 220 interface 1 has no altsetting 0 [ 415.166072][ T5916] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 415.185900][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.202039][ T5916] usb 2-1: Product: syz [ 415.226695][ T5916] usb 2-1: Manufacturer: syz [ 415.231332][ T5916] usb 2-1: SerialNumber: syz [ 415.262910][T11369] vlan3: entered promiscuous mode [ 415.475266][T11366] delete_channel: no stack [ 415.484337][ T5916] usb 2-1: selecting invalid altsetting 0 [ 415.496286][ T5916] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 415.542629][ T5916] uvcvideo 2-1:220.0: No valid video chain found. [ 415.576712][ T5916] usb 2-1: selecting invalid altsetting 0 [ 415.584996][ T5916] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 415.622587][ T5916] usb 2-1: USB disconnect, device number 59 [ 416.732197][T11410] loop9: detected capacity change from 0 to 7 [ 416.767016][ T5843] Dev loop9: unable to read RDB block 7 [ 416.773912][ T5843] loop9: unable to read partition table [ 416.786827][ T5843] loop9: partition table beyond EOD, truncated [ 416.800845][T11410] Dev loop9: unable to read RDB block 7 [ 416.807255][T11410] loop9: unable to read partition table [ 416.813129][T11410] loop9: partition table beyond EOD, truncated [ 416.830447][T11410] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 417.265718][ T10] usb 3-1: USB disconnect, device number 66 [ 417.464256][T11420] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1532'. [ 417.512795][T11421] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1534'. [ 417.844448][T11435] loop6: detected capacity change from 0 to 7 [ 417.855256][ T5843] Dev loop6: unable to read RDB block 7 [ 417.867115][ T5843] loop6: AHDI p1 p2 p3 [ 417.874494][ T5843] loop6: partition table partially beyond EOD, truncated [ 417.928770][ T5843] loop6: p1 start 4217409618 is beyond EOD, truncated [ 417.935628][ T5843] loop6: p2 size 108 extends beyond EOD, truncated [ 417.951669][T11435] Dev loop6: unable to read RDB block 7 [ 417.960678][T11435] loop6: AHDI p1 p2 p3 [ 417.966124][T11435] loop6: partition table partially beyond EOD, truncated [ 417.976057][T11435] loop6: p1 start 4217409618 is beyond EOD, truncated [ 417.985240][T11435] loop6: p2 size 108 extends beyond EOD, truncated [ 418.088587][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 418.098447][ T5823] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 418.146328][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 418.257078][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 418.276979][ T5823] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 418.292506][ T5823] usb 5-1: config 0 has no interface number 0 [ 418.300131][ T5823] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 418.314344][ T5823] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 418.326332][ T5823] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.350407][ T5823] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 418.423484][ T5823] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 418.497301][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.910109][ T5823] usb 5-1: config 0 descriptor?? [ 418.919806][ T5823] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 419.138671][T11455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1543'. [ 419.150811][ T5895] usb 5-1: USB disconnect, device number 86 [ 419.162439][ T5895] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 419.188133][T11455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1543'. [ 419.400030][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 419.400048][ T30] audit: type=1326 audit(1760885163.806:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5598efc9 code=0x7ffc0000 [ 419.478609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.632216][ T30] audit: type=1326 audit(1760885163.806:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5598efc9 code=0x7ffc0000 [ 419.858999][ T30] audit: type=1326 audit(1760885163.836:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6e5598efc9 code=0x7ffc0000 [ 419.924151][ T30] audit: type=1326 audit(1760885163.836:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5598efc9 code=0x7ffc0000 [ 419.972266][T11465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1545'. [ 419.982551][T11465] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1545'. [ 420.001838][ T30] audit: type=1326 audit(1760885163.836:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6e5598efc9 code=0x7ffc0000 [ 420.218441][ T30] audit: type=1326 audit(1760885163.836:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5598efc9 code=0x7ffc0000 [ 420.332956][ T30] audit: type=1326 audit(1760885163.836:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e5598efc9 code=0x7ffc0000 [ 420.401797][ T30] audit: type=1326 audit(1760885163.836:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5598efc9 code=0x7ffc0000 [ 420.706812][ T30] audit: type=1326 audit(1760885163.836:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6e5598efc9 code=0x7ffc0000 [ 420.996893][ T30] audit: type=1326 audit(1760885163.836:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5598efc9 code=0x7ffc0000 [ 422.076740][ T10] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 422.156769][ T5823] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 422.266687][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 422.305493][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 422.316501][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 422.337344][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 422.338676][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 422.352245][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 422.365097][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.374292][ T10] usb 6-1: Product: syz [ 422.378765][ T10] usb 6-1: Manufacturer: syz [ 422.400530][ T5823] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 422.423956][ T10] usb 6-1: SerialNumber: syz [ 422.428872][ T5823] usb 2-1: config 0 interface 0 has no altsetting 0 [ 422.440260][ T5823] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 422.457858][ T10] usb 6-1: config 0 descriptor?? [ 422.467886][ T10] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 422.517718][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.529294][ T5823] usb 2-1: config 0 descriptor?? [ 422.589050][ T5895] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 422.662287][T11529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1566'. [ 422.682646][T11529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1566'. [ 422.695327][ T10] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 422.705635][ T10] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 422.747833][T11511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.756878][T11511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.781121][ T5895] usb 5-1: config 0 has an invalid descriptor of length 81, skipping remainder of the config [ 422.831544][ T10] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 422.851851][ T5895] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.985646][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.999205][ T5823] usb 2-1: string descriptor 0 read error: -71 [ 423.001271][ T5895] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 423.008155][ T5823] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 423.040349][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.059003][ T5823] usb 2-1: USB disconnect, device number 60 [ 423.168148][ T5895] usb 5-1: config 0 descriptor?? [ 423.197877][ T5895] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 423.729151][T11548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'. [ 424.235172][T11555] loop6: detected capacity change from 0 to 7 [ 424.267335][T11555] Dev loop6: unable to read RDB block 7 [ 424.293242][T11555] loop6: AHDI p3 [ 424.308121][T11555] loop6: partition table partially beyond EOD, truncated [ 424.718143][ T5895] usb 6-1: USB disconnect, device number 63 [ 424.817782][ T5823] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 425.008586][ T5823] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 425.017931][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.039418][ T5823] usb 3-1: config 0 descriptor?? [ 425.238716][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 425.274524][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 425.310708][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 425.324612][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 425.360212][ T5881] usb 5-1: USB disconnect, device number 87 [ 425.374504][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 425.416393][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 425.453893][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 425.517701][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 425.567023][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 425.593008][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 426.046970][ T5881] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 426.343151][ T5881] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 426.363557][ T5881] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 426.425228][ T5881] usb 2-1: config 220 has no interface number 2 [ 426.442069][ T5881] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 426.484436][ T5881] usb 2-1: config 220 interface 0 has no altsetting 0 [ 426.504701][ T5881] usb 2-1: config 220 interface 76 has no altsetting 0 [ 426.545155][ T5881] usb 2-1: config 220 interface 1 has no altsetting 0 [ 426.598941][ T5881] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 426.636813][ T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 426.666372][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.696710][ T5881] usb 2-1: Product: syz [ 426.711355][ T5881] usb 2-1: Manufacturer: syz [ 426.717551][ T5881] usb 2-1: SerialNumber: syz [ 426.796733][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 426.804660][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 426.837825][ T24] usb 5-1: config 1 has an invalid interface number: 26 but max is 0 [ 426.860148][ T24] usb 5-1: config 1 has no interface number 0 [ 426.885328][ T24] usb 5-1: config 1 interface 26 has no altsetting 0 [ 426.922305][ T24] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 426.936835][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.944983][ T24] usb 5-1: Product: syz [ 426.950732][ T24] usb 5-1: Manufacturer: syz [ 426.955623][ T24] usb 5-1: SerialNumber: syz [ 427.046742][ T5881] usb 2-1: selecting invalid altsetting 0 [ 427.053198][ T5881] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 427.069430][ T5881] uvcvideo 2-1:220.0: No valid video chain found. [ 427.085205][ T5881] usb 2-1: selecting invalid altsetting 0 [ 427.105194][ T5881] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 427.118210][ T5881] usb 2-1: USB disconnect, device number 61 [ 427.257232][ T24] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 427.280959][ T5823] pegasus 3-1:0.0: setup Pegasus II specific registers [ 427.289147][ T24] usb 5-1: cannot find UAC_HEADER [ 427.418734][ T24] snd-usb-audio 5-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 427.469417][ T24] usb 5-1: USB disconnect, device number 88 [ 427.520128][T11614] x_tables: ip_tables: osf match: only valid for protocol 6 [ 428.086412][T11629] loop2: detected capacity change from 0 to 7 [ 428.101517][ T5823] pegasus 3-1:0.0: can't locate MII phy, using default [ 428.112525][ T5843] Dev loop2: unable to read RDB block 7 [ 428.122187][ T5843] loop2: unable to read partition table [ 428.131551][ T5843] loop2: partition table beyond EOD, truncated [ 428.153200][ T5823] pegasus 3-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 32:77:ea:bd:ac:52 [ 428.163834][T11629] Dev loop2: unable to read RDB block 7 [ 428.171333][T11629] loop2: unable to read partition table [ 428.178939][ T5823] usb 3-1: USB disconnect, device number 67 [ 428.188351][T11629] loop2: partition table beyond EOD, truncated [ 428.205731][T11629] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 428.646985][ T5895] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 428.647240][ T5909] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 428.738652][T11644] loop9: detected capacity change from 0 to 7 [ 428.752179][T11644] Dev loop9: unable to read RDB block 7 [ 428.765489][T11644] loop9: unable to read partition table [ 428.776575][T11644] loop9: partition table beyond EOD, truncated [ 428.784292][T11644] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 428.836849][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 428.837510][ T5909] usb 5-1: too many configurations: 37, using maximum allowed: 8 [ 428.853562][ T5895] usb 6-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 428.860120][ T5909] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 231 [ 428.876513][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 243 [ 428.891981][ T5909] usb 5-1: can't read configurations, error -22 [ 428.896587][ T5895] usb 6-1: config 0 has no interface number 0 [ 428.919326][ T5895] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 428.930940][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.941091][ T5895] usb 6-1: Product: syz [ 428.945273][ T5895] usb 6-1: Manufacturer: syz [ 428.952240][ T5895] usb 6-1: SerialNumber: syz [ 428.979689][ T5895] usb 6-1: config 0 descriptor?? [ 428.988348][ T5895] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 429.006779][ T5823] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 429.021527][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 429.021543][ T30] audit: type=1326 audit(1760885173.426:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 429.052745][ T5909] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 429.194237][T11659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.203182][T11659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.220264][T11659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.229259][T11659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.284394][ T5909] usb 5-1: too many configurations: 37, using maximum allowed: 8 [ 429.293315][ T30] audit: type=1326 audit(1760885173.426:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 429.327800][ T5909] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 231 [ 429.341025][ T5909] usb 5-1: can't read configurations, error -22 [ 429.354545][ T5909] usb usb5-port1: attempt power cycle [ 429.362026][ T30] audit: type=1326 audit(1760885173.426:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 429.392111][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 429.399061][ T30] audit: type=1326 audit(1760885173.426:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 429.429970][ T30] audit: type=1326 audit(1760885173.426:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 429.454228][ T30] audit: type=1326 audit(1760885173.426:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 429.454326][ T5823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 429.485322][ T30] audit: type=1326 audit(1760885173.426:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 429.508816][ T30] audit: type=1326 audit(1760885173.426:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 429.531960][ T30] audit: type=1326 audit(1760885173.456:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9478efc9 code=0x7ffc0000 [ 429.627033][ T5823] usb 2-1: config 1 has an invalid interface number: 26 but max is 0 [ 429.635438][ T5823] usb 2-1: config 1 has no interface number 0 [ 429.641757][ T5823] usb 2-1: config 1 interface 26 has no altsetting 0 [ 429.650747][ T5823] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 429.660208][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.660324][ T30] audit: type=1326 audit(1760885173.556:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae9478d810 code=0x7ffc0000 [ 429.668361][ T5823] usb 2-1: Product: syz [ 429.747009][ T5823] usb 2-1: Manufacturer: syz [ 429.751880][ T5823] usb 2-1: SerialNumber: syz [ 429.815963][T11660] chnl_net:caif_netlink_parms(): no params data found [ 429.856795][ T5909] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 429.868773][T11662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.880217][T11662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.888796][ T5909] usb 5-1: too many configurations: 37, using maximum allowed: 8 [ 429.898319][ T5909] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 231 [ 429.907617][ T5909] usb 5-1: can't read configurations, error -22 [ 429.975123][T11648] vlan3: entered promiscuous mode [ 430.066769][ T5909] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 430.080162][ T5823] usb 2-1: unknown interface protocol 0x7d, assuming v1 [ 430.089360][ T5909] usb 5-1: too many configurations: 37, using maximum allowed: 8 [ 430.101033][ T5909] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 231 [ 430.112858][ T5823] usb 2-1: cannot find UAC_HEADER [ 430.121941][ T5909] usb 5-1: can't read configurations, error -22 [ 430.139933][ T5909] usb usb5-port1: unable to enumerate USB device [ 430.182922][ T5823] snd-usb-audio 2-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 430.233958][ T5823] usb 2-1: USB disconnect, device number 62 [ 430.535803][T11664] loop2: detected capacity change from 0 to 7 [ 430.543785][T11664] Dev loop2: unable to read RDB block 7 [ 430.550011][T11664] loop2: unable to read partition table [ 430.555956][T11664] loop2: partition table beyond EOD, truncated [ 430.562701][T11664] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 430.602618][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -110) [ 430.633183][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -32) [ 430.661921][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -32) [ 430.690266][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -32) [ 430.729212][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -32) [ 430.793677][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -32) [ 430.888878][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -32) [ 430.918588][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -32) [ 430.952056][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -32) [ 430.953188][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -32) [ 431.068362][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -32) [ 431.079686][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -32) [ 431.089910][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -32) [ 431.108223][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -32) [ 431.119619][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -32) [ 431.131403][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -32) [ 431.142292][ T5895] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -32) [ 431.205915][ T5895] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 431.491781][T11678] loop6: detected capacity change from 0 to 7 [ 431.500780][ T5843] Dev loop6: unable to read RDB block 7 [ 431.506525][ T5843] loop6: AHDI p1 p2 p3 [ 431.512133][ T5843] loop6: partition table partially beyond EOD, truncated [ 431.520249][ T5843] loop6: p1 start 4217409618 is beyond EOD, truncated [ 431.527940][ T5843] loop6: p2 size 108 extends beyond EOD, truncated [ 431.574032][ T5881] usb 6-1: USB disconnect, device number 64 [ 431.576069][T11678] Dev loop6: unable to read RDB block 7 [ 431.591600][T11678] loop6: AHDI p1 p2 p3 [ 431.598472][T11678] loop6: partition table partially beyond EOD, truncated [ 431.609471][T11678] loop6: p1 start 4217409618 is beyond EOD, truncated [ 431.616410][T11678] loop6: p2 size 108 extends beyond EOD, truncated [ 431.670937][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 431.802211][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 432.415243][T11706] __nla_validate_parse: 26 callbacks suppressed [ 432.415261][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'. [ 432.442986][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 432.903276][T11715] geneve3: entered promiscuous mode [ 432.909533][T11715] geneve3: entered allmulticast mode [ 433.895072][T11720] vivid-007: ================= START STATUS ================= [ 433.933737][T11720] vivid-007: Enable Output Cropping: true [ 433.946765][ T5823] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 433.969680][T11720] vivid-007: Enable Output Composing: true [ 433.977002][T11720] vivid-007: Enable Output Scaler: true [ 434.044817][T11720] vivid-007: Tx RGB Quantization Range: Automatic [ 434.160207][T11720] vivid-007: Transmit Mode: HDMI [ 434.165203][T11720] vivid-007: Hotplug Present: 0x00000000 [ 434.211518][T11720] vivid-007: RxSense Present: 0x00000000 [ 434.248248][ T5823] usb 5-1: device descriptor read/64, error -71 [ 434.266737][T11720] vivid-007: EDID Present: 0x00000000 [ 434.275027][T11720] vivid-007: ================== END STATUS ================== [ 434.412449][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.461852][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.497078][ T5823] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 434.636835][ T5823] usb 5-1: device descriptor read/64, error -71 [ 434.857134][ T5823] usb usb5-port1: attempt power cycle [ 435.306824][ T5823] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 435.350122][ T5823] usb 5-1: device descriptor read/8, error -71 [ 435.553596][T11763] geneve3: entered promiscuous mode [ 435.559663][T11763] geneve3: entered allmulticast mode [ 435.616791][ T5823] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 435.640286][ T5823] usb 5-1: device descriptor read/8, error -71 [ 435.756990][ T5823] usb usb5-port1: unable to enumerate USB device [ 435.936856][ T5916] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 436.086753][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 436.095633][ T5916] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 436.105089][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.113263][ T5916] usb 2-1: Product: syz [ 436.117574][ T5916] usb 2-1: Manufacturer: syz [ 436.122197][ T5916] usb 2-1: SerialNumber: syz [ 436.129725][ T5916] usb 2-1: config 0 descriptor?? [ 436.138589][ T5916] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 436.742503][T11779] x_tables: ip_tables: osf match: only valid for protocol 6 [ 436.849302][ T5916] gspca_sonixj: reg_r err -110 [ 436.854320][ T5916] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 436.994565][ T5916] usb 2-1: USB disconnect, device number 63 [ 437.184356][T11794] IPVS: length: 67 != 8023400 [ 438.066699][ T5895] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 438.256760][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 438.264255][ T5895] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 438.274262][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.303738][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.344129][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.373161][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.416748][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.416978][T11819] x_tables: ip_tables: osf match: only valid for protocol 6 [ 438.425821][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.600234][T11823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.609193][T11823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.642120][T11828] bridge1: entered promiscuous mode [ 438.658140][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1658'. [ 438.706263][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 438.719861][ T5895] usb 3-1: usb_control_msg returned -32 [ 438.725473][ T5895] usbtmc 3-1:16.0: can't read capabilities [ 438.732517][T11823] vlan3: entered promiscuous mode [ 439.579087][T11849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1665'. [ 439.835598][T11802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.849721][T11802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.972037][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.980453][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.228640][T11861] tipc: Started in network mode [ 440.233533][T11861] tipc: Node identity 7ab59b7b7ac7, cluster identity 4711 [ 440.240934][T11861] tipc: Enabled bearer , priority 0 [ 440.250304][T11861] syzkaller0: entered promiscuous mode [ 440.271340][T11861] syzkaller0: entered allmulticast mode [ 440.300834][T11860] tipc: Resetting bearer [ 440.360340][T11860] tipc: Disabling bearer [ 440.965310][ T5909] usb 3-1: USB disconnect, device number 68 [ 441.316987][ T5823] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 441.533543][ T5823] usb 6-1: Using ep0 maxpacket: 32 [ 441.537257][T11877] x_tables: ip_tables: osf match: only valid for protocol 6 [ 441.566286][ T5823] usb 6-1: config 0 has no interfaces? [ 441.574751][ T5823] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 441.592153][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.620516][ T5823] usb 6-1: Product: syz [ 441.624738][ T5823] usb 6-1: Manufacturer: syz [ 441.629771][ T5823] usb 6-1: SerialNumber: syz [ 441.643178][ T5823] usb 6-1: config 0 descriptor?? [ 441.998301][T11888] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1674'. [ 442.009922][T11888] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 442.362735][T11899] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1677'. [ 443.311104][T11910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1681'. [ 443.322835][T11910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1681'. [ 443.581363][ T5895] usb 6-1: USB disconnect, device number 65 [ 443.599214][T11923] Cannot find del_set index 0 as target [ 443.715577][T11924] input: syz1 as /devices/virtual/input/input37 [ 443.751863][T11924] fuse: Unknown parameter 'user_id00000000000000000000' [ 445.579330][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1692'. [ 445.634656][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1692'. [ 445.756710][ T5823] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 445.927401][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 445.939064][ T5823] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 445.947624][ T5823] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.957652][ T5823] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.976833][ T5823] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.009683][T11965] loop9: detected capacity change from 0 to 7 [ 446.017028][T11965] Dev loop9: unable to read RDB block 7 [ 446.032944][T11965] loop9: unable to read partition table [ 446.042996][ T5823] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.057137][T11965] loop9: partition table beyond EOD, truncated [ 446.086993][T11965] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 446.242035][T11960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.272535][T11960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.347218][T11945] fuse: Unknown parameter 'fd0x000000000000000a' [ 446.369407][ T5823] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 446.392732][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.414801][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 446.435788][ T30] audit: type=1326 audit(1760885190.816:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 446.532318][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.561226][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.636929][ T30] audit: type=1326 audit(1760885190.816:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 446.696711][ T30] audit: type=1326 audit(1760885190.816:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 446.719450][ T30] audit: type=1326 audit(1760885190.816:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 446.742000][ T30] audit: type=1326 audit(1760885190.816:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 446.765676][ T30] audit: type=1326 audit(1760885190.816:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 446.793675][ T5823] usb 3-1: usb_control_msg returned -32 [ 446.800283][ T5823] usbtmc 3-1:16.0: can't read capabilities [ 446.807988][ T30] audit: type=1326 audit(1760885190.816:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 446.959615][ T30] audit: type=1326 audit(1760885190.816:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 447.036945][ T30] audit: type=1326 audit(1760885190.816:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 447.066794][ T5916] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 447.244670][ T30] audit: type=1326 audit(1760885190.816:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc86b8efc9 code=0x7ffc0000 [ 447.376754][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 447.385076][ T5916] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 447.396596][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.417015][ T5916] usb 5-1: Product: syz [ 447.439474][ T5916] usb 5-1: Manufacturer: syz [ 447.471433][ T5916] usb 5-1: SerialNumber: syz [ 447.532613][ T5916] usb 5-1: config 0 descriptor?? [ 447.586264][ T5916] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 447.617422][ T5916] usb 5-1: Detected FT4233HP [ 447.638954][T11942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.649209][T11942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.720262][T11979] x_tables: ip_tables: osf match: only valid for protocol 6 [ 447.789190][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.792375][T11982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1701'. [ 447.808583][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.820529][ T5916] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 447.871489][ T5916] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 447.931973][ T5916] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 447.991663][ T5916] usb 5-1: USB disconnect, device number 97 [ 448.271044][ T5916] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 448.303032][ T5916] ftdi_sio 5-1:0.0: device disconnected [ 448.469366][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1705'. [ 448.508067][T11995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1706'. [ 448.520364][T11995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1706'. [ 448.528996][T11996] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 448.563079][T11996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.573410][T11996] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 448.790764][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.807341][T12008] geneve3: entered promiscuous mode [ 448.812750][T12008] geneve3: entered allmulticast mode [ 448.852347][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.896207][T12009] vlan3: entered promiscuous mode [ 448.966775][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 449.126760][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 449.139366][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 449.148379][ T10] usb 2-1: config 1 has an invalid interface number: 26 but max is 0 [ 449.164742][ T10] usb 2-1: config 1 has no interface number 0 [ 449.171011][ T10] usb 2-1: config 1 interface 26 has no altsetting 0 [ 449.180160][ T10] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 449.189411][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.197820][ T10] usb 2-1: Product: syz [ 449.202084][ T10] usb 2-1: Manufacturer: syz [ 449.207045][ T10] usb 2-1: SerialNumber: syz [ 449.355011][ T5909] usb 3-1: USB disconnect, device number 69 [ 449.434855][T12004] vlan3: entered promiscuous mode [ 449.739636][ T10] usb 2-1: unknown interface protocol 0x7d, assuming v1 [ 449.747155][ T10] usb 2-1: cannot find UAC_HEADER [ 449.823707][ T10] snd-usb-audio 2-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 449.850927][ T10] usb 2-1: USB disconnect, device number 64 [ 450.617066][T12032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1717'. [ 451.266801][T12034] loop2: detected capacity change from 0 to 7 [ 451.317679][T12034] Dev loop2: unable to read RDB block 7 [ 451.334651][T12034] loop2: unable to read partition table [ 451.341078][T12034] loop2: partition table beyond EOD, truncated [ 451.376736][T12034] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 451.828459][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 452.307840][ T5909] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 452.352004][T12070] Cannot find del_set index 0 as target [ 452.476794][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 452.492397][ T5909] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 452.501526][ T5909] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.506734][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 452.531059][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.643241][T12074] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1730'. [ 452.658908][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.697999][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 452.705553][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 452.714314][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.748489][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.763318][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.775517][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.789085][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 452.799058][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.807400][ T5909] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.843018][ T5909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 452.902831][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1732'. [ 452.921229][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.185614][ T10] usb 3-1: usb_control_msg returned -32 [ 453.194490][T12082] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1732'. [ 453.239610][ T10] usbtmc 3-1:16.0: can't read capabilities [ 453.407758][ T31] INFO: task kworker/1:2:1216 blocked for more than 143 seconds. [ 453.449215][ T5909] usb 2-1: usb_control_msg returned -32 [ 453.456124][ T31] Not tainted syzkaller #0 [ 453.463910][ T5909] usbtmc 2-1:16.0: can't read capabilities [ 453.677061][T12091] loop2: detected capacity change from 0 to 7 [ 453.686884][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.697820][ T31] task:kworker/1:2 state:D stack:21144 pid:1216 tgid:1216 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 453.716142][ T31] Workqueue: usb_hub_wq hub_event [ 453.797581][T12091] Dev loop2: unable to read RDB block 7 [ 453.803513][T12091] loop2: unable to read partition table [ 453.812674][T12091] loop2: partition table beyond EOD, truncated [ 453.819887][ T31] Call Trace: [ 453.825922][ T31] [ 453.832832][ T31] __schedule+0x1798/0x4cc0 [ 453.844722][ T31] ? __pfx___schedule+0x10/0x10 [ 453.854193][ T31] ? schedule+0x91/0x360 [ 453.855775][T12091] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 453.887336][ T31] schedule+0x165/0x360 [ 453.898355][ T31] schedule_timeout+0x9a/0x270 [ 453.908135][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 453.918895][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.928788][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.952098][ T31] ? wait_for_completion+0x267/0x5d0 [ 454.195857][T12097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.206159][T12097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.249698][ T31] wait_for_completion+0x2bf/0x5d0 [ 454.267553][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 454.273285][ T31] i2c_del_adapter+0x581/0x6e0 [ 454.280903][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 454.519497][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 454.532931][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 454.547333][ T31] ? kfree+0x4d/0x6d0 [ 454.557548][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 454.571261][ T31] dvb_usb_device_exit+0x1be/0x350 [ 454.584487][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 454.600246][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 454.615121][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.635556][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 454.648393][ T31] cxusb_probe+0x603/0x700 [ 454.658469][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 454.668576][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 454.677704][ T1328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.701997][ T31] usb_probe_interface+0x668/0xc30 [ 454.713891][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 454.738263][ T31] really_probe+0x26d/0x9e0 [ 454.760904][ T31] __driver_probe_device+0x18c/0x2f0 [ 454.766446][ T31] driver_probe_device+0x4f/0x430 [ 454.771952][ T31] __device_attach_driver+0x2ce/0x530 [ 454.777790][ T31] bus_for_each_drv+0x251/0x2e0 [ 454.782700][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 454.790165][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 454.795632][ T31] __device_attach+0x2b8/0x400 [ 454.806292][T12050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.813470][ T31] ? __pfx___device_attach+0x10/0x10 [ 454.821358][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 454.828214][ T31] bus_probe_device+0x185/0x260 [ 454.833310][ T31] device_add+0x7b6/0xb50 [ 454.840726][ T31] usb_set_configuration+0x1a87/0x20e0 [ 454.846356][ T31] usb_generic_driver_probe+0x8d/0x150 [ 454.857362][ T31] usb_probe_device+0x1c4/0x390 [ 454.861074][T12050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.862296][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 454.877724][ T31] really_probe+0x26d/0x9e0 [ 454.882360][ T31] __driver_probe_device+0x18c/0x2f0 [ 454.889315][ T31] driver_probe_device+0x4f/0x430 [ 454.894425][ T31] __device_attach_driver+0x2ce/0x530 [ 454.900291][ T31] bus_for_each_drv+0x251/0x2e0 [ 454.905196][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 454.911555][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 454.924022][ T31] __device_attach+0x2b8/0x400 [ 454.929248][ T31] ? __pfx___device_attach+0x10/0x10 [ 454.935096][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 454.942529][ T31] bus_probe_device+0x185/0x260 [ 454.950054][ T31] device_add+0x7b6/0xb50 [ 454.955015][ T31] usb_new_device+0xa39/0x16f0 [ 454.962238][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 454.968000][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.974369][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.980867][ T31] hub_event+0x2958/0x4a20 [ 454.988190][ T31] ? __pfx_hub_event+0x10/0x10 [ 454.993731][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 455.000417][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.006376][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 455.014820][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 455.022576][ T31] process_scheduled_works+0xae1/0x17b0 [ 455.029481][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 455.037204][ T31] worker_thread+0x8a0/0xda0 [ 455.043996][ T31] kthread+0x711/0x8a0 [ 455.049535][ T31] ? __pfx_worker_thread+0x10/0x10 [ 455.058583][ T31] ? __pfx_kthread+0x10/0x10 [ 455.063501][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.070920][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.076426][ T31] ? __pfx_kthread+0x10/0x10 [ 455.082269][ T31] ret_from_fork+0x4bc/0x870 [ 455.089352][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.097303][ T31] ? __switch_to_asm+0x39/0x70 [ 455.102169][ T31] ? __switch_to_asm+0x33/0x70 [ 455.109371][ T31] ? __pfx_kthread+0x10/0x10 [ 455.115204][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.120778][ T31] [ 455.124661][ T31] [ 455.124661][ T31] Showing all locks held in the system: [ 455.133565][ T31] 2 locks held by kworker/u8:0/12: [ 455.139264][ T31] #0: ffff888145298948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 455.151193][ T31] #1: ffffc90000117ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 455.184310][ T31] 1 lock held by khungtaskd/31: [ 455.192936][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 455.206042][ T31] 5 locks held by kworker/1:2/1216: [ 455.211537][ T31] #0: ffff888020a8ad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 455.224702][ T31] #1: ffffc90003e6fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 455.244706][ T31] #2: ffff888027f01198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 455.254013][ T31] #3: ffff88823bfe2198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 455.263485][ T31] #4: ffff888054a02160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 455.273068][ T31] 2 locks held by getty/5583: [ 455.278000][ T31] #0: ffff88814dac90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 455.288098][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 455.298482][ T31] 4 locks held by udevd/5838: [ 455.303313][ T31] #0: ffff8880458e7d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 455.312225][ T31] #1: ffff888076833088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 455.324900][ T31] #2: ffff888034d5bc38 (kn->active#22){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 455.334573][ T31] #3: ffff88823bfe2198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 455.344704][ T31] [ 455.347392][ T31] ============================================= [ 455.347392][ T31] [ 455.355846][ T31] NMI backtrace for cpu 0 [ 455.355862][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 455.355882][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.355891][ T31] Call Trace: [ 455.355897][ T31] [ 455.355902][ T31] dump_stack_lvl+0x189/0x250 [ 455.355918][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.355928][ T31] ? __pfx__printk+0x10/0x10 [ 455.355944][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 455.355960][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 455.355973][ T31] ? __pfx__printk+0x10/0x10 [ 455.355985][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 455.355999][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 455.356013][ T31] watchdog+0xf60/0xfa0 [ 455.356028][ T31] ? watchdog+0x1e2/0xfa0 [ 455.356042][ T31] kthread+0x711/0x8a0 [ 455.356054][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.356066][ T31] ? __pfx_kthread+0x10/0x10 [ 455.356076][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.356090][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.356099][ T31] ? __pfx_kthread+0x10/0x10 [ 455.356109][ T31] ret_from_fork+0x4bc/0x870 [ 455.356124][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.356139][ T31] ? __switch_to_asm+0x39/0x70 [ 455.356150][ T31] ? __switch_to_asm+0x33/0x70 [ 455.356159][ T31] ? __pfx_kthread+0x10/0x10 [ 455.356170][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.356188][ T31] [ 455.356193][ T31] Sending NMI from CPU 0 to CPUs 1: [ 455.504913][ C1] NMI backtrace for cpu 1 [ 455.504929][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 455.504947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.504957][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 455.504978][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 b1 1b 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 455.504992][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 455.505006][ C1] RAX: 33c967120a6d0000 RBX: ffffffff8196bc07 RCX: 33c967120a6d0000 [ 455.505018][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e80d5 RDI: ffffffff8bc073e0 [ 455.505030][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 455.505043][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9dfc70 [ 455.505055][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100385ab58 [ 455.505066][ C1] FS: 0000000000000000(0000) GS:ffff888125e0d000(0000) knlGS:0000000000000000 [ 455.505079][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.505091][ C1] CR2: 00007f6e55bb4198 CR3: 000000007775e000 CR4: 00000000003526f0 [ 455.505105][ C1] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 455.505115][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 455.505126][ C1] Call Trace: [ 455.505134][ C1] [ 455.505140][ C1] default_idle+0x13/0x20 [ 455.505158][ C1] default_idle_call+0x73/0xb0 [ 455.505186][ C1] do_idle+0x1e7/0x510 [ 455.505210][ C1] ? __pfx_do_idle+0x10/0x10 [ 455.505246][ C1] cpu_startup_entry+0x44/0x60 [ 455.505266][ C1] start_secondary+0x101/0x110 [ 455.505284][ C1] common_startup_64+0x13e/0x147 [ 455.505308][ C1] [ 455.681792][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 455.688641][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 455.697738][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.707775][ T31] Call Trace: [ 455.711038][ T31] [ 455.713954][ T31] dump_stack_lvl+0x99/0x250 [ 455.718533][ T31] ? __asan_memcpy+0x40/0x70 [ 455.723107][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.728291][ T31] ? __pfx__printk+0x10/0x10 [ 455.732873][ T31] vpanic+0x237/0x6d0 [ 455.736842][ T31] ? __pfx_vpanic+0x10/0x10 [ 455.741334][ T31] ? preempt_schedule_common+0x83/0xd0 [ 455.746783][ T31] panic+0xb9/0xc0 [ 455.750496][ T31] ? __pfx_panic+0x10/0x10 [ 455.754899][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 455.760263][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 455.766407][ T31] watchdog+0xf9f/0xfa0 [ 455.770557][ T31] ? watchdog+0x1e2/0xfa0 [ 455.774877][ T31] kthread+0x711/0x8a0 [ 455.778932][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.783594][ T31] ? __pfx_kthread+0x10/0x10 [ 455.788170][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.793364][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.798542][ T31] ? __pfx_kthread+0x10/0x10 [ 455.803116][ T31] ret_from_fork+0x4bc/0x870 [ 455.807694][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.812795][ T31] ? __switch_to_asm+0x39/0x70 [ 455.817542][ T31] ? __switch_to_asm+0x33/0x70 [ 455.822289][ T31] ? __pfx_kthread+0x10/0x10 [ 455.826863][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.831625][ T31] [ 455.834887][ T31] Kernel Offset: disabled [ 455.839197][ T31] Rebooting in 86400 seconds..