last executing test programs: 9.109505986s ago: executing program 3 (id=1250): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000001c0)="4a9dca2586d6d2ca8c939c1844079e1831348e508e6832f8266ba7ffa9b3c3c0ad7cbaa45a", 0x25}, {&(0x7f0000000400)="b541c9727013d835994636760fe11c4eb840dd9ea0fd139262b75579d5ac3803305341c18f8d8c00f3c523cad0d7bdcb13ecc7a87dca1bde91f3a09c83f3de0d7283233acf0189536884fa7522bc72a6d90390a5ee61eddc0367de8a8956d78d77e3d980afd0ba2cc7318143cc38800c0c6ff899c95be6ca9151907aa2946dc73b35b3659bcebd201ed6359a0a335666ba90cddcbc8bd07e3c85691df9439e765b059c20d21cbbe0611d4d96f0483043fb8a6b1ad409cff9e9d8b84c5946e526bb45a70c8479f33b1c1edbbe857354ec57544e14936b1f450a03bde75587c003", 0xe0}, {&(0x7f0000000580)="77ba42c7ccdb901fa445dcc93db3123b33e4690418176cf61d9ccd39dc0a2b4b91ad422b669a1452b6367e740d86a41a86b13b4d7cfa7374ce624f86c176447cab623a1c151497d445603e2b3c7d5d54a85f4e4ea27196e4ee5a7f7fdd98d12e2ff35532303f06d5a600caf055e1d9483b5aa654bf3b400b3c985a7b53066b1991904d9a97ee22c93a886f3c656927d663", 0x91}, {&(0x7f0000000240)="34f9b72c3725acdb1230308ab970f010d9f99fc00ddf6dc9ef9fa90a036c8c7ddb935725325d3e119b8d132b8ea78b638bce66ab4a23e73bc4", 0x39}, {&(0x7f0000000640)="3d168126351e57ba933737030aae3609911e1f72a415c33f911349f652792303a37f3dbbdc50b114310102a94e65e01e05d80ad953b614488d96267d8e163f2d57a96bb65864340ffa5a1ad49d7029a674ea1163abfc96fd5ff23b138dd206564f9850fdebde5b6bdebc5f0eb1ae1c8beacf196462658186efc8ba6763626940e56fee6067b2debd", 0x88}, {&(0x7f00000002c0)="08b8cf197698b0fe6680d6ffe772568c78a5493fd1d7e2b716dfacfaaa2f46e1aba597aa4cb94f33dbed0672b61b1db4a834", 0x32}], 0x6, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78, 0x10}}, {{&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000a00)="c046e3943f412410f5222641f9c57d01e98f3f74503fc6bd1a26bf2d920f59419cc5cf4eb4e53d43bfadcbcf7e5f7b53bcedd186f29fa3c195cdc64c5f00d4e8dd39393ba25a10c8f20efa90a60c7bfaecd650d98862b8af0a3b3911b18b2946106f17d4ecf523c01623f56eaf97d84f82bd9fab1f423bccdf2fb3e67659d58363af4a497ec1cda6345b23de0bc0b1cd558d52dd80146a8a46f13f1b536bd1c3fee4b0d51fe36d298dae5e8d741eb4dc9517badf5120b77971427411da3dfaeadf92ab0f62c86c3573e2", 0xca}, {&(0x7f0000000b00)="55ed347b7cdc4ecaf64f8e209b77dc759191b91ce7e54b4fca6e6d33bb418acd399c36612521dff25bcbc157173174e1fcd16d218e938dfac82585db8cf715d3c530c018c996f0c3c83342f684dc267cff3c2a8f2e3b5011f299cae46f273fde28b60b759ae1c2c2f42fb4f236f9ce256408b5ece800843282f132e8cd6928209a98560e41ed8bdb9ffb16e610d6e1f1d56e904df28b8d6bb026b7", 0x9b}, {&(0x7f0000000bc0)="dff3d43930a4318f8478ec9f06f2157fd0d1cbbbc1f5f6a0105660d7e070d59c28de1626df8c23cdec5fc6990e6685673112069118f555df3bae17ca81f49f8b522b2936da8c995b4f96f748777c8a23a6a6cd550e30957f3f15a7586f18ef596ce611c10f170c5f1dca9a6eb47aa244e1e65727668dc76bb3288832e16df28bb7a50451b784e2bf86cabd4358e499e7eb06458207c95d6d5127f4d6601d7a528474abad1b4801d1db5a87de75565a36510aaa8ec329caac6fac7f1e72a2ab630f0d2a42b1646596f5201cd9fbfb2335ab0e224e6e90a156c353ee153563fb60c0713d6929ae1af05cdc98cb82ecee961e556765589df2d52ccd00b0f039", 0xfe}, {&(0x7f0000000cc0)="a66fd658208c67dccd316e40de2b5591ef4d15d6f57480436ab5305eb3bee5fd2f4d1e77afc67c92aff9226dad3622fb28b2fe0319c65e6f466f8f8c1c60150d3e8e007def452e679d66c7d4bc2db03dde556f474aa46d4845b9b75f9a71f9d33d7f1dd7cbd0409f825073389fccd6d0c6bc9524be6156ddde9741a30f9d804fa297247df3dfa5ecc8921378d3ad0dde2276c7509c34b7df6a38e7d10642265c09ba22181f833cbe72de6e47a2928c2dc16f968caef31134a4c6bd5257719ad2a6f8de0a3f06197666fb0e3e0e1988", 0xcf}, {&(0x7f0000000dc0)="e45f9949b1e6bf8f8a0db63cae03e5aa59af93b280481e1eaf6c4c946f41bc43ab8bb842a8ea24011da70fe3046ae386277d2234e299f40043a6741532cecfe29966865cdd78ce66fc52af066b34b9a5588b70d736423899692295ad8c0b6138020a5faf4baf15a02c0a3b175e4396c0090d4506513a0f4286759cf34107e2ac1f4e707bd39a17c41e33fdbb0da31118851479d929e535e4c0aa741941cb9e", 0x9f}], 0x5, 0x0, 0x0, 0x2800c011}}, {{&(0x7f0000000f00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f80)="e9f7844dd6b2af635c2ae9cc295ec852ad9fc35165ca4e8637fbff723f837ead990e10dbce127a37f49c538129ce5e6bd1abb941ff98dd7b3199d12dddf157684158d07ba403e76ea69e28b44868b1220c0003a8", 0x54}, {&(0x7f0000001000)="cce79f18e4ec695ff38d8a1e02720376730245350f1471495148cea38f181272e652d82440f91194fdcb1d51fd95a862f776e5b279570713e92dc69a8a304ececd1df56dfe48cb61b125500b2747e12318f9d235b4abfb19a6001b331e3bbf33bf81efc3e776b90440dbd757a0cc8605fd5f534cfcf127ee7b88f91d939b", 0x7e}], 0x2, &(0x7f0000001140)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48, 0x800}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000011c0)="316f6a80d0a649bf7586aa3b205e74ccda5382f60de79fbec2c82f55cee59d18dc07f27c89576145098b27518000dab1c5dfdd702e477d04118d1fb5193424e89823b0b7a79bad0fb9a8dfba1b618d372a42f3571af4ce3a2f28658932fcfe3c193ad3783cdbe3b4271e7e65a8d5b4bd92ca101f8b9cb8502606c8d8b403ca8705a149b25f53bf3b552c0587d921f56579a91ac8d19f23fa1430be2d03f67874cdde71f235bc3ae20bd6aaa9a0b6494566ba42a4211a339b517dd8fe658c436badf6148b1a74223d74aec738876316209c218d58040002863e9fd2bd102947c2b2b1caf5efca5da5906718b7dd01a4094129c8691f2366ca9a16e8", 0xfb}], 0x1, 0x0, 0x0, 0x20000000}}], 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x7, 0x202000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) getpid() 7.546053012s ago: executing program 3 (id=1264): socket$netlink(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x25b9, 0x20, 0x0, 0x298}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r2, 0x3516, 0x483, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000f0f0000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x10a) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r11, 0xae80, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000080000000001a0000f700000000000000", @ANYRES32=0x1, @ANYBLOB="00251903000064ea00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x80, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x3}, {0x0, 0x8, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0x0, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x7, 0x50, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x3, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0x9, 0x3, 0x8, '\x00', 0x6}, {0xf, 0x3, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x4, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf1, '\x00', 0x7}, {0x7, 0x7, 0x4}]}}) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x1, &(0x7f0000000440)=""/239, &(0x7f0000000200)=0xef) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4020, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',dirsync,\x00']) r13 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x541000, 0x0) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) 7.251993019s ago: executing program 3 (id=1265): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x1e, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, @NFT_MSG_DELOBJ={0x60, 0x14, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x114}}, 0x40) close(r1) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xfc0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8427000000000000140003006e657464657673696d3000000000000008002900449d00001800168014000180100006"], 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x4804) 5.146826383s ago: executing program 3 (id=1271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) 4.925239519s ago: executing program 3 (id=1276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='lp', 0x65) sendmmsg$inet(r0, 0x0, 0x0, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 4.667940551s ago: executing program 2 (id=1281): syz_open_dev$vim2m(0x0, 0x8000, 0x2) keyctl$revoke(0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000300)="00000102c1f6", 0x6, r1) 4.610313037s ago: executing program 2 (id=1282): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 4.450860377s ago: executing program 2 (id=1284): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x188) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='attr/prev\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x4}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socket(0x200000100000011, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000140), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3010000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) 4.023630292s ago: executing program 3 (id=1288): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000fc0)=0x2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="13c6", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0xe4010102}, 0x9c}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x7, @empty, 0x2}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000004c0)="5247d15247d3de2f043303000000000000008f8bfafbe3013c4d35c428faae43e5845cd82bba6cec755e28a344dbc826cac696b5fb65cb5ae50f6ba8a280c5f899817e5d79f79db4ec11bef78eba39f06b1ed51b48fc2e94a02d", 0x5a}, {&(0x7f0000000340)="97f9fa790482fd4ceff6b0950cf3e31c6cbe7a22", 0x14}, {&(0x7f00000053c0)="0f7e406715548732b4058b4443eea2f938e437919c8370c06a5ae953d9ff6340770e1101a4fa8d0a46c4e08a3524bfd3263db56ed28a09e48ca18ee4c04a7d22c290ae7dda9350811fb854065da6009e0f44dbe47ec24e43054aeb1978d27305bb59c4ce8c8a0baaad9ba3dc2b426fccbbf69ff3610c669e90bfee37ec091f64580c39052d624d49d981191bccf133a6d761ffa06bb1b1ed0df8fca45613b5c781b7c3ddad4de716512a991509f69a6b6f69bba06220f6e8fdd6db8692d5980322ebade2de87ce64b43a7597334c99abbe9accc370b110d1eb65669d1bbe40953d17b334ddb934c68e7d87eaa4e1e0faf1f8ae24ba42529e85b2b62df63f8753d8ab0dee5c0e84d7e05f0b2f2d3ecb6046ad487e569a268f481aa9673fb250f06af393a0eeca097da73adc81387c477821f4b2ceea6e5451049088adcb48cb2f77c54e097fd15ad7d857152d1fe02b10ccbc5c0b072501ac7f5194562e191352a371568f80c36a280cc35aa214139d24e1a8b06f36f0b2eecd961f00280e45b7c318e6cb4f3e486a4b5fe3ad6e88f18b9ad76f5eecdb279c55d40c4451af163b3e7efd287dfef56dcbbe62c213f950fb84f7a4a10639ab388597ac66e4fc01c83a17fbc97117c4ac1c2401970b548e67db669eed780df421ab858cbc6b127b9ddf2f416f5553406ffd7af16198fec0261a9af0deee49a6ab24b720cbc66d08aac187addb10869c37adf15b59adbc3720d5560886e6fac370e99e5799ea672e367e1cc9917a852ec7bd0e035e9abbf1673deae0c3ab22160f72388c8eb6ac31b4d6e3112c7d2384eb4afe098c2fc995ba25285a5afd62eec796527a95af3ebd3b8e0d2372608e57b6b10a95d844d0124c37da02f313f084d583f51733a177541433f2a9546ac3fbf9b2ad215525e7e16bf47886b8565822d50bda44a3f7ebaab41b485449f23d5c4654a9da69eb514d268019627bebcb42fab7b6d8da9487ff0c5548c5312c12e358d32973d7a853c8bcbfd90b5dd5d8b5556b0a5beda12ab9e773146bcc50c657cea3c5a059ae9eb953ffdfd0ac2106414e68f91f47744ec541dddd779e2bd65ff7d6bdcc29c161d877147c2810fb066e990d8878ed2e45bf590c8339e60db55f77aa5e368be68313ecd14adf3a438b56192d24ab1e1ddb512f7ef01fbd7cdfe8a58cf923307096a622ac8507cc6ecfc10a9d002b00ccb71c6d663217b769813acf27a182a8d37a9e03e8d78c7a0c871ea0d05a72d48b95c17c40cb7af0bd1c6e2b0f5f7750b0e9ef7509e5c194c3be15ff893a5bed9df11759304382068ab130fa2d2107648323fc777178535c6ef4e9db97e9000883fea4f097d6a9e23e56f44ebd1258eced32abe0b405b8fb21df00b0eff32a9ce5ee0a8bd4a5a55a9b1e4201b44fb8ca7693b653bee27358a77762aca2af0af208c4daf7d1fc084dab16730c0dcabc3241c4494939817f7ed7d70ee58e8224b026c22a128f10459927c0b38bbe0e208342bdac9ac0aa71b1f402d70afd371ba29e6221f31c12ba358e83fb54941e85441ddd016bc96fce0d07238a0d5cadc4e99d784167aa5a6017520a066efbf859d8bc03d8f2c36eb8feb12cf2236e7e3b6c1002b11d20b26807ff3a4fdcaed4b80d907dfcfe67208f2513d42ce1649ced2dfce19dc6581b113eb747aa5ffe93c78bb632ac3c818b9d80697878c74da7b6b6a3405e8b8494eab4eac6aa9be62cc144d8964bdccb9ac9bcd3c22b7844d545fa644246ded35e5a22bf1cd8b35e11484f84c759ff045b5efbb3bef44ddbf9f2afb62048d29b132c659503bdb7557d19f54456ea5a113478f319ed102bc3e5a551b940d09f92ffb2ac90ba30e20e0259cd04ee7ee9ec9a6d1b71dd151f961afcc1aefba420af2b77c1774bd17ad09d91c94157b520d3ecbfdc3bcfd1634eb365f992e21fde48410dfae4661a61cb29d7864b76ef55e4d26a5c1ec1a413f774e6881e7c5de475fd55c6b310a39d82a50921ef24ee826700ecab9255547c005af3d6e9e1ac7bef86de0c05fc79b8db87cd5dc4a3034a4c60e7800d7852486029939442d2a0126f99420701a3489f68cf508a3141444762110ff63b09667af659014dda99138ba7468b86d842ee3ad7bc25f6e353b750c394f21ee1d51b62eebafee6419b2189428662e8ace3b9216fe25d76d3b397b94bef6f9b597fdf55a056859cf4e8478230bb17b6490e3cce3d1cd29383642185a54bfbd38b906b1fd6389e3fbb0e7a538e91f5093ab4dec96e4ee47255644e630322841e38daf8732ada90998e1b4f871ddb3a6af2afdcdf2e0ae6a6bedc2c5960c8bfe4d2f34ba9e4efdafd4875897f662a6b921cd24c622217f82846ca171d8fe6ae49c98b1ba0d59d47a88311170b9522357b2f8eaae99a859f10b3ea4c76ebbe94e52f8f09d6669f706bd6050bada4ac783a8a14e74e41ba0250971bc464812797f333f4c7b71da43c608ce25f65f9cb180e318be5154eaf6691cad7987aac376c9f5a042352d7c4e922d7801a106bd5d3aa668c3519f6b546b419edd7a214e007cb6124aa06c9269900b6323e1c4e35a45a61031bc682629a5e333fc5131dfa77eb79748681a4831637d5ca42f4e3ff6dbaef6443ca301e882207140e7fafed8da8c72e01bac361fe9b939d37ea772f871922f6914ef044d0d4f0797561bc95cf545803da9fc5d35c9fe78e7cbe5812744f9f02d55aab3dbcdeecc75e7619d346dd6f31f2e27c1fd9a624ebeac64906a726959a05eb3e666788ff3932ebf754fe704a01f1f89d007f32f2d3c994b7f8b8794c49f1d4ff3e26bce1c55bf0800f0997fb2e28dfc2274320ccf5ff3a61d6ee4b03d791495c27c52c847b65c765e676ab648607e67041854f72775387018b43719bd4bdffd9a422aec6dbcb66715255e123b8d4964389498887b9ff463c56e7086faac413d61ab0ca42fb79a12d5d2ce064c87e111f83af75f846cb6d59a980502d68af5d3dca79f98a8d1a0689d61e4f900bc631842f05cabe289e500611d5398c8150719d20d7d14e2b5782dae7cae199014b31a476e1c4bd38fba61cd34c186294d118bb9866e0030813210a53e6ffe00b22ac934a7d77ed671bed080fdd80914efb603161922f0b734feee9cd25e0008d0e30c6ce00f5a44fc14fc632bff12027e01f0383a63d0e1e2c295c77dd8a6c98f2d5c4d93b6f316b44c11aeca1256a48904af6ba5089ebe4138e201020b7d61f7866e7a3cf493d9c86fae99a61a6390e6fa26b0f52393abeed3e4696707201a5aa249f4a0ff8b3d1896f12e98de0f50a06165045dae1a44c1e806ed34a1bfd3761e2b7127a3dada160736c466b5e6b4adecdc186147a4c91c177a4c648db5551ba872227ec517aa59d85db5d8084dbc525bce7cae31eb795cbb3310ddd375e36881a9736218e048c48a5b77e412ce5b5c7cd943fd41404824b19a094bec58de915769cd2cf3baa46fcf721780ed66423d653ca1b6d848cfbe6cbda95b8a5af9309bec12ffc25cc425dc61e71e747d691dbfe7596a3f06e19b17de4958617f4fbc6a5f25f228ecc8add843cd1c67d8d42f29e1380b828378fe25e9560c911575c2b0d6ad0617574d5ab5c95c836b652dc0ab6cd4e2ccf826f887e4fe80baca72a060ca2eb41440d0453a536ff0fbdbcf37aaa62c507f1be0fc10a7e1c81890e1de9c83e9466a7d7a4867f575d1e4ef28f81bd0a7d3effb81269c65ae3f1d0e472304e0f46d687f1a019c303e738e4af1350942c45d5b32d450b0ed8313ea33cb05b694631536ad8b7dc070a18164de1224a5e34480163897d2e7603e45ea5f563c7e75044b4cd5bcfefa5c221e5ec2d3d47524016cb5ac8c54d86cd3fc79ee22b555b82d0e52bac2a4cecddafce44260005a6df98014a5124c438ade952814922c37f75565a60286ac0cd5130aee9acc613823d59402696e0ace7d822d1a688afee85e990f8a58f527dea6e72e15b5f52bc5d6efcff6ce8c3c49429baa93743600dd085cd43d01f43be4fb00fd92cd3874a0a9049285063392db01c14897c55afc83e849e34385d03d1dcf62041ebd29f68e0838e1d518bea33a78f7815f56d6af66861d9c67c9c3f0d5360bb892ade54149c5d61801046dfde5f59745a39895a37efdf3c3e8984b7b51ef8661134ae42c6acaf2113f8b7f6384bda5434138442040271af86ae05eaf19abc6f43c9efd331886d65be015e1c47946b0afc3a3ee8c569792d6746ff664b29e34dc3a36407e83c2666ef9dc178dd7dfabae62c7bae1b9cdc002605d799c97cb6ef15383611ef57be496a5ee37483616210f53cd2c13cb0540c95eb6d93d7cd5fe6f835ca5e02b9a1561584a1761e577f261791ef68117e8c6a22ccaf468ae20610017fc81f5f826628beb2ead0c1a2e43726cd279a2c3d6ab2d7f5db41be6a81e29117bf484ddbbf3cc66bc83f61673cbf319847fdadd3b1e50392273646c86fc62e67d17721c3b78da948eb25bd5c3b6c683155e560b7879fa68d149984155e6931162c04049ab5e62efc9846c1343a79ef2052980b044015c8ea9c3d7690a9f9a226a306000e7fb0af3ec06fb04b7ead3f273c202240cf44edb0a177e04a7ba3efac4e8e7df1af4fe0958c0a75235a22f00054bf712f6e7ad0c7549e7fe7961008c84ec50d4fe5dd64b083050fcd6115940b9cfef8409b7317c52dd319468247fc237a19147cc620665db0ba19a50c2785db6020ba85898782c2aeed62fb064d6a3e91f40ef0178eb574f0747e38cb59914aa18c9fd4d8c189e61caa9e12d39320d2943b1d6996aad96dd58728968c52891ac6adce376cb7e256be452ad0d91e1b90eb045b1bcfb051ec56ebcb6f8218fd72c7de48a690fb5ec88caa746e6b14983cb89ff0f100b0ef09c6424aa02ae8e687c6f5428838e91f8bff6a22b8547b65c1c0bb788f935e6754d4cfe40608beef0f91996f61e8462c4c7ecdc2110708d71e7c51bc7fa24f54339080d639bed6dd7806857e5c2dedd8644d41286d8a6c569f421b6b2050817288be8de95a3cca248d0b53c87eff6b8b6a9b74a0cb3ca4df84dfcd8666a65a7575e2746785517f823a0c3f838ea92e6665c4fbe3fdf2d0cae9e2485de0eb7924433a8c6a5db6ed7ae5ecac91ebf03e938c0dbaf13527e191c85b91e35e1e431f6c5aa00b0022c9d0f394d0eb71762b954600ad54887d85885479c967708d823b83ccdc9ca9f6f1af0af9fc83e786f27c0132e1cdd1808498c6912660aecf4ead48994d4d59a592e2bfd7e4dc5aa3d8a5ca4a85accc83bbffa5cf13d102c4ff55e7cb61d15f778514acbf6d8e297497f18e8b1a9754cc3625c087b25c26ef928f18713c2afd7e6f392c04dd08431e48dd69cd149634a3efec0a7d0b1f33435bea70ab0f7662e7798ca9374e1fac36186b0ec5351d9254dff1c7930b61482fafaa4cd94bbf1e797bcc1ba5010e56aa930a17ecc2bee328402cd0c9893033dd89c3f370391f3e1fe3d01fa85477cb5abc4179e1b974006dbeb6c9abfafc76c955ee16911d87524abcec2dc654d17ed135084d3f74e68e481eec4a0ca84db192dd8946011a5260af0260e974334ef1f70f44ea702fd7a3f7602f41fe08ed9a753b666d75b019992a11cf3a5230fa39705835c9f3375f20ecc66476faf44e73047d457a51731c391f0dd6c6529e4a3eb9a755142df531aa7e931600b11a885edac683487a568a1a6dcaa8ed9fcf59ed214d5b1bc2e5aa951217acf1ccf4ce09f30e52a4ac17b5c01d8976b300c093581d62e7eadacec7ca", 0x1000}, {&(0x7f0000000980)="4c64b0ddb30a9d6c3fdeaa3b255143ef8260036d4a8e5bfb291a9b5dc627519a486c6181b0a6ffc79a97c2fc7cb906b9335647e65d20b5ee113499", 0x3b}, {&(0x7f0000004040)="7682123a1474c84ccc44ff06cb14b1ca914cc11c7379fce254bf8a8b32e9c3f72941cbfa4dba78d846aaebc2a7f9370eca59f9899036f7dff9434e41e41744317aeb4332d1133a6a1c537f76da8c8d9171461ced8ff3ded809c7742766e6407abcd92bcb368e187c8fc49069fe3782e9bdb9f947e666c59f9ac44628a6fb99bfa7614f90b90ed8c0f42a21f0c99f289c2d9d10fc34020e5057c7b52947280a9f05913a1300", 0xa5}], 0x5, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"], 0x128}}], 0x3, 0x44) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x1, 0xa1a}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x3fff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000000703000000000000000000000000000900010073797a316ec968af"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="a5fd00000001000000000000002fe6e3c4312dee72547d0c37cdf681"], 0x14}}, 0x0) 3.603832933s ago: executing program 4 (id=1292): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 3.382511809s ago: executing program 0 (id=1295): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 3.282690332s ago: executing program 4 (id=1296): socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32) r0 = syz_io_uring_setup(0x22e, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) (async, rerun: 32) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000240)={0x14}, 0x14) (async, rerun: 64) syz_usb_ep_write(r4, 0x3, 0x70, &(0x7f0000000140)="a858f6b019060f4043f518b7e711342322b36fad65e1bd44e4bc8eb2dfbd6ec2ef9ec055625216b6f4bedb1f88e8b315c57b3f8e2b36d697332f20d21eb62ad756e8c219c9efe769ad59d9d873deb49e7719897c76910af5f602904be816d8dabfc88a829690b2d9140a823097c28d8a") (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002800048024000180090001006d6574610000000000000280080001400000000018000240000000060900010073797a30000000000c0003400000000000000003050007400c000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) (async) r11 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$unix(0x1, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 3.140165076s ago: executing program 4 (id=1297): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000001f40)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x3, 0x1, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000700)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4, 0x100, @val=0x80}}}}}}}, 0x0) 2.848696619s ago: executing program 0 (id=1299): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x804) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000002c0)=0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='lp', 0x65) sendmmsg$inet(r1, 0x0, 0x0, 0x40) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2.708224489s ago: executing program 4 (id=1301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffe3d, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="610000005000030425bd70000000000000000000", @ANYRES64=r5, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0) 2.24489204s ago: executing program 1 (id=1303): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, 0x0, 0x0) close(0x3) 2.203705003s ago: executing program 1 (id=1304): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000640)={0x18, r2, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xd0ffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 2.107933217s ago: executing program 2 (id=1305): unshare(0x20000400) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffffb, 0x3136564e, 0x1, @stepwise={0x5, 0x1, 0x4, 0x3, 0x0, 0x7}}) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000300000000000000000000000004000000000000071800000000040000d604000000000000000000000000000000000100010100"], 0x0) unshare(0x64020080) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @mcast2, 0x800}}}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000040)=0x80, 0x4) 1.868180881s ago: executing program 2 (id=1306): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 1.807954508s ago: executing program 0 (id=1307): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xb4, 0x4) 1.522781666s ago: executing program 2 (id=1308): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x8200, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x608901, 0x0) socket$tipc(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) syz_pidfd_open(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x20, 0x2, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x8e, 0x1e3d}) gettid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x9, 0xff0, {0xffffffffffffffff}, {}, 0x5, 0x2}) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020}, 0xfffffe5d) 1.148686776s ago: executing program 1 (id=1309): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 1.147960072s ago: executing program 0 (id=1310): socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r0}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x48}}, 0x0) 992.159815ms ago: executing program 0 (id=1311): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) unshare(0x480) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (fail_nth: 4) 497.476752ms ago: executing program 0 (id=1312): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) unshare(0x2c020400) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="1c00000000000000000000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) recvmmsg(r3, 0x0, 0x0, 0x40010000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000401005700000000245700e7ffffff00"]) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$igmp(0x2, 0x3, 0x2) 421.786309ms ago: executing program 4 (id=1313): r0 = mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000040)) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0xfffffefd, 0x1}, 0x10) (async) close(r1) (async) r4 = getpgid(0xffffffffffffffff) sched_setattr(r4, 0x0, 0x0) (async) sched_setattr(r4, &(0x7f0000000000)={0x38, 0x0, 0x4, 0xc960, 0x6, 0x3, 0x3, 0x1, 0x7, 0x200}, 0x0) (async) mq_notify(r0, &(0x7f00000000c0)={0x0, 0xc, 0x1, @tid=r4}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) readv(r0, &(0x7f0000000240)=[{0x0}], 0x1) 328.168881ms ago: executing program 1 (id=1314): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, 0x0, 0x0) close(0x3) 302.655514ms ago: executing program 1 (id=1315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) 71.678107ms ago: executing program 4 (id=1316): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) unshare(0x22020400) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) bind$xdp(r3, &(0x7f00000005c0)={0x2d, 0x8, 0x0, 0xc}, 0x10) 0s ago: executing program 1 (id=1317): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x804) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000002c0)=0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='lp', 0x65) sendmmsg$inet(r1, 0x0, 0x0, 0x40) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) kernel console output (not intermixed with test programs): syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 193.942424][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.962276][ T5930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 243, changing to 11 [ 193.973628][ T9] usb 3-1: config 10 has an invalid interface number: 211 but max is 0 [ 193.981855][ T9] usb 3-1: config 10 has no interface number 0 [ 193.992537][ T9] usb 3-1: config 10 interface 211 altsetting 14 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 194.086115][ T9] usb 3-1: config 10 interface 211 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 194.124534][ T5930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16639, setting to 1024 [ 194.146151][ T9] usb 3-1: config 10 interface 211 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 194.177680][ T5930] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 194.187051][ T9] usb 3-1: config 10 interface 211 altsetting 14 endpoint 0x9 has an invalid bInterval 222, changing to 7 [ 194.207332][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.213720][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.287971][ T30] audit: type=1326 audit(1758624767.401:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fdd38d710 code=0x7ffc0000 [ 194.291411][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.332677][ T9] usb 3-1: config 10 interface 211 has no altsetting 0 [ 194.343669][ T9] usb 3-1: string descriptor 0 read error: -22 [ 194.350005][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice=99.7e [ 194.364027][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.375894][ T5930] hub 5-1:1.0: bad descriptor, ignoring hub [ 194.381818][ T5930] hub 5-1:1.0: probe with driver hub failed with error -5 [ 194.415266][ T7675] IPVS: Scheduler module ip_vs_ not found [ 194.483320][ T9] appletouch 3-1:10.211: Could not find int-in endpoint [ 194.490927][ T5930] cdc_wdm 5-1:1.0: skipping garbage [ 194.518862][ T30] audit: type=1326 audit(1758624767.401:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 194.541382][ T5930] cdc_wdm 5-1:1.0: skipping garbage [ 194.543122][ T9] appletouch 3-1:10.211: probe with driver appletouch failed with error -5 [ 194.557123][ T5930] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 194.583084][ T5930] cdc_wdm 5-1:1.0: Unknown control protocol [ 194.631511][ T9] usbhid 3-1:10.211: couldn't find an input interrupt endpoint [ 194.652014][ T30] audit: type=1326 audit(1758624767.401:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 194.666818][ T5930] usb 5-1: USB disconnect, device number 32 [ 194.704095][ T30] audit: type=1326 audit(1758624767.401:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 194.737553][ T30] audit: type=1326 audit(1758624767.401:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 194.801945][ T9] usb 3-1: USB disconnect, device number 20 [ 194.930231][ T7689] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.430'. [ 194.953247][ T7689] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.430'. [ 195.014543][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.024209][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.037556][ T7693] fuse: Unknown parameter 'rootmod' [ 195.082567][ T5930] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 195.242582][ T5966] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 195.251231][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 195.261088][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.279082][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 195.300626][ T5930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 243, changing to 11 [ 195.311871][ T5930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16639, setting to 1024 [ 195.344332][ T5930] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 195.375237][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.383576][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 195.403102][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 195.416714][ T5966] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 195.427337][ T5966] usb 2-1: config 0 has no interface number 0 [ 195.448029][ T5930] hub 5-1:1.0: bad descriptor, ignoring hub [ 195.454673][ T5966] usb 2-1: config 0 interface 184 has no altsetting 0 [ 195.465792][ T5930] hub 5-1:1.0: probe with driver hub failed with error -5 [ 195.486639][ T5966] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 195.509337][ T5930] cdc_wdm 5-1:1.0: skipping garbage [ 195.516807][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.527003][ T5930] cdc_wdm 5-1:1.0: skipping garbage [ 195.533128][ T5966] usb 2-1: Product: syz [ 195.540090][ T5930] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 195.546778][ T5966] usb 2-1: Manufacturer: syz [ 195.551993][ T5930] cdc_wdm 5-1:1.0: Unknown control protocol [ 195.577417][ T9] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 195.594217][ T5966] usb 2-1: SerialNumber: syz [ 195.614408][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 195.631031][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 195.655324][ T5966] usb 2-1: config 0 descriptor?? [ 195.664018][ T9] usb 1-1: Product: syz [ 195.674448][ T5930] usb 5-1: USB disconnect, device number 33 [ 195.692981][ T9] usb 1-1: Manufacturer: syz [ 195.707969][ T5966] smsc75xx v1.0.0 [ 195.782111][ T9] usb 1-1: SerialNumber: syz [ 195.814187][ T9] usb 1-1: config 0 descriptor?? [ 195.831212][ T9] ims_pcu 1-1:0.0: Zero length descriptor [ 195.858799][ T9] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 196.050283][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.067167][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.079619][ T5930] usb 1-1: USB disconnect, device number 22 [ 196.119871][ T5966] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 196.158430][ T5966] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 196.197188][ T5966] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 196.221379][ T5966] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 196.275957][ T5966] usb 2-1: USB disconnect, device number 33 [ 196.279194][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 196.288369][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 196.288421][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 196.300561][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.301216][ T5867] Bluetooth: hci0: command 0x0406 tx timeout [ 197.651562][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 198.181886][ T7735] FAULT_INJECTION: forcing a failure. [ 198.181886][ T7735] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 198.212872][ T7735] CPU: 1 UID: 0 PID: 7735 Comm: syz.4.440 Not tainted syzkaller #0 PREEMPT(full) [ 198.212897][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.212909][ T7735] Call Trace: [ 198.212917][ T7735] [ 198.212925][ T7735] dump_stack_lvl+0x189/0x250 [ 198.212950][ T7735] ? __pfx____ratelimit+0x10/0x10 [ 198.212969][ T7735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.212989][ T7735] ? __pfx__printk+0x10/0x10 [ 198.213011][ T7735] ? __might_fault+0xb0/0x130 [ 198.213042][ T7735] should_fail_ex+0x414/0x560 [ 198.213068][ T7735] _copy_from_user+0x2d/0xb0 [ 198.213085][ T7735] ___sys_recvmsg+0x12e/0x510 [ 198.213106][ T7735] ? __pfx____sys_recvmsg+0x10/0x10 [ 198.213144][ T7735] ? __might_fault+0xb0/0x130 [ 198.213163][ T7735] do_recvmmsg+0x307/0x770 [ 198.213186][ T7735] ? __pfx_do_recvmmsg+0x10/0x10 [ 198.213211][ T7735] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.213238][ T7735] __x64_sys_recvmmsg+0x190/0x240 [ 198.213257][ T7735] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 198.213272][ T7735] ? rcu_is_watching+0x15/0xb0 [ 198.213289][ T7735] ? do_syscall_64+0xbe/0x3b0 [ 198.213305][ T7735] do_syscall_64+0xfa/0x3b0 [ 198.213318][ T7735] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.213331][ T7735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.213344][ T7735] ? clear_bhb_loop+0x60/0xb0 [ 198.213360][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.213372][ T7735] RIP: 0033:0x7f49e078eec9 [ 198.213393][ T7735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.213404][ T7735] RSP: 002b:00007f49e16a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 198.213419][ T7735] RAX: ffffffffffffffda RBX: 00007f49e09e6180 RCX: 00007f49e078eec9 [ 198.213429][ T7735] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000005 [ 198.213438][ T7735] RBP: 00007f49e16a9090 R08: 0000000000000000 R09: 0000000000000000 [ 198.213446][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.213454][ T7735] R13: 00007f49e09e6218 R14: 00007f49e09e6180 R15: 00007f49e0b0fa28 [ 198.213475][ T7735] [ 198.855126][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 199.057525][ T7745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.222626][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 199.342532][ T5966] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 199.465344][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.488643][ T9] usb 3-1: config 0 interface 0 has no altsetting 1 [ 199.510777][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 199.520267][ T5966] usb 1-1: Using ep0 maxpacket: 16 [ 199.535155][ T5966] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.545924][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 199.581382][ T5966] usb 1-1: config 0 has no interface number 0 [ 199.592583][ T9] usb 3-1: Product: syz [ 199.596766][ T9] usb 3-1: Manufacturer: syz [ 199.913549][ T9] usb 3-1: SerialNumber: syz [ 199.949268][ T5966] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 199.969572][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.990953][ T5966] usb 1-1: Product: syz [ 199.998034][ T9] usb 3-1: config 0 descriptor?? [ 200.022745][ T5950] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 200.113062][ T5966] usb 1-1: Manufacturer: syz [ 200.130805][ T5966] usb 1-1: SerialNumber: syz [ 200.165593][ T5966] usb 1-1: config 0 descriptor?? [ 200.174701][ T5950] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 200.194747][ T5966] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 200.204524][ T5950] usb 2-1: can't read configurations, error -61 [ 200.392679][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 200.400440][ T5950] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 200.586095][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 200.605341][ T5950] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 200.613578][ T5950] usb 2-1: can't read configurations, error -61 [ 200.613709][ T24] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 200.628815][ T5950] usb usb2-port1: attempt power cycle [ 200.635368][ T24] usb 5-1: config 0 has no interface number 0 [ 200.644523][ T24] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 200.653752][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.661756][ T24] usb 5-1: Product: syz [ 200.665995][ T24] usb 5-1: Manufacturer: syz [ 200.673533][ T24] usb 5-1: SerialNumber: syz [ 200.681685][ T24] usb 5-1: config 0 descriptor?? [ 200.697964][ T24] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 200.972578][ T5950] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 201.005676][ T5950] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 201.015703][ T5950] usb 2-1: can't read configurations, error -61 [ 201.052726][ T5966] gspca_spca1528: reg_w err -110 [ 201.072812][ T5966] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 201.164527][ T5950] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 201.196009][ T5950] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 201.207066][ T5950] usb 2-1: can't read configurations, error -61 [ 201.220538][ T5950] usb usb2-port1: unable to enumerate USB device [ 201.623491][ T9] usb 3-1: USB disconnect, device number 21 [ 201.655346][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 201.655380][ T30] audit: type=1326 audit(1758624775.331:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e078eec9 code=0x7ffc0000 [ 201.660766][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.737022][ T24] gspca_topro: reg_w err -71 [ 201.803060][ T24] gspca_topro: Sensor soi763a [ 201.847014][ T24] usb 5-1: USB disconnect, device number 34 [ 201.880739][ T5966] usb 1-1: USB disconnect, device number 23 [ 202.012583][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 202.182718][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 202.193437][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.222646][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.224597][ T7776] loop2: detected capacity change from 0 to 7 [ 202.240707][ T5965] loop2: [ 202.242184][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 202.254510][ T5965] loop2: partition table partially beyond EOD, truncated [ 202.267941][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.269192][ T7776] loop2: [ 202.282149][ T7776] loop2: partition table partially beyond EOD, truncated [ 202.289424][ T9] usb 3-1: Manufacturer: syz [ 202.310013][ T9] usb 3-1: config 0 descriptor?? [ 203.564318][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 203.584185][ T5917] usb 3-1: USB disconnect, device number 22 [ 204.707754][ T7812] netlink: 300 bytes leftover after parsing attributes in process `syz.3.462'. [ 204.926891][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.953314][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.041125][ T7817] loop2: detected capacity change from 0 to 7 [ 205.064816][ T7817] loop2: [ 205.067906][ T7817] loop2: partition table partially beyond EOD, truncated [ 205.864108][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 206.034302][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.047324][ T7836] mac80211_hwsim hwsim7 : renamed from wlan1 (while UP) [ 206.065071][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 206.129295][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.182797][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.262520][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.271603][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.325213][ T24] usb 2-1: config 0 descriptor?? [ 206.334171][ T7826] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 206.377943][ T7843] loop6: detected capacity change from 0 to 7 [ 206.428806][ T7843] Dev loop6: unable to read RDB block 7 [ 206.499065][ T7843] loop6: unable to read partition table [ 206.507215][ T7843] loop6: partition table beyond EOD, truncated [ 206.522613][ T7843] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 206.551349][ T7839] ip6erspan0: entered promiscuous mode [ 206.774168][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 206.802556][ T5966] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 206.998620][ T5966] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 207.006596][ T5966] usb 1-1: can't read configurations, error -61 [ 207.142809][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.466'. [ 207.162186][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 207.283158][ T5966] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 207.446027][ T5966] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 207.454040][ T5966] usb 1-1: can't read configurations, error -61 [ 207.499379][ T5966] usb usb1-port1: attempt power cycle [ 207.852918][ T5966] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 207.959098][ T5966] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 208.041429][ T5966] usb 1-1: can't read configurations, error -61 [ 208.213176][ T5966] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 208.279965][ T5966] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 208.315519][ T5966] usb 1-1: can't read configurations, error -61 [ 208.330777][ T5966] usb usb1-port1: unable to enumerate USB device [ 208.359742][ T7869] tipc: New replicast peer: 255.255.255.255 [ 208.368848][ T7869] tipc: Enabled bearer , priority 10 [ 208.594188][ T7877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.480'. [ 208.918697][ T7895] loop6: detected capacity change from 0 to 7 [ 208.935401][ T7895] Dev loop6: unable to read RDB block 7 [ 208.951565][ T7895] loop6: unable to read partition table [ 208.967149][ T7895] loop6: partition table beyond EOD, truncated [ 208.992843][ T7895] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 209.087085][ T5862] usb 2-1: USB disconnect, device number 38 [ 209.247580][ T7903] input: syz0 as /devices/virtual/input/input16 [ 209.308801][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 209.322710][ T5862] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 209.484888][ T5966] tipc: Node number set to 2649626889 [ 209.648511][ T5862] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.680780][ T5862] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 209.693854][ T5862] usb 2-1: can't read configurations, error -71 [ 211.385337][ T7933] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 212.020426][ T7940] loop6: detected capacity change from 0 to 7 [ 212.057660][ T7940] Dev loop6: unable to read RDB block 7 [ 212.071289][ T7940] loop6: unable to read partition table [ 212.082884][ T7940] loop6: partition table beyond EOD, truncated [ 212.089176][ T7940] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 214.501677][ T7974] loop2: detected capacity change from 0 to 7 [ 214.510525][ T5965] loop2: [ 214.516644][ T5965] loop2: partition table partially beyond EOD, truncated [ 214.541215][ T7974] loop2: [ 214.547382][ T7974] loop2: partition table partially beyond EOD, truncated [ 214.719017][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 215.044465][ T7980] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 215.077704][ T7981] loop6: detected capacity change from 0 to 7 [ 215.108523][ T7985] netlink: 44 bytes leftover after parsing attributes in process `syz.1.508'. [ 215.129850][ T5965] Dev loop6: unable to read RDB block 7 [ 215.137267][ T5965] loop6: unable to read partition table [ 215.146688][ T5965] loop6: partition table beyond EOD, truncated [ 215.190171][ T7981] Dev loop6: unable to read RDB block 7 [ 215.246710][ T7981] loop6: unable to read partition table [ 215.259705][ T7983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.289082][ T7983] bond1: (slave bond2): making interface the new active one [ 215.299184][ T7981] loop6: partition table beyond EOD, truncated [ 215.299390][ T7983] bond1: (slave bond2): Enslaving as an active interface with an up link [ 215.350728][ T7981] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 215.397384][ T7980] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 215.438472][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.505'. [ 215.573685][ T7996] netlink: 14220 bytes leftover after parsing attributes in process `syz.4.511'. [ 216.067945][ T8007] fuse: Invalid uid '00000000000000000005' [ 216.222893][ T5930] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 216.320337][ T8011] loop2: detected capacity change from 0 to 7 [ 216.331591][ T8013] binder: 8012:8013 ioctl 541b 0 returned -22 [ 216.378964][ T8011] loop2: [ 216.383754][ T8011] loop2: partition table partially beyond EOD, truncated [ 216.394259][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.406849][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.527932][ T5930] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 216.587918][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.659624][ T5930] usb 5-1: config 0 descriptor?? [ 216.882703][ T5966] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 216.952534][ T9] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 217.055385][ T5966] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 217.076386][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.086003][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.116716][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.132182][ T5966] usb 1-1: config 0 descriptor?? [ 217.143983][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.157611][ T5930] usbhid 5-1:0.0: can't add hid device: -71 [ 217.167262][ T5930] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 217.198823][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 217.240827][ T5930] usb 5-1: USB disconnect, device number 35 [ 217.255057][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.294089][ T9] usb 2-1: config 0 descriptor?? [ 217.356198][ T8024] loop6: detected capacity change from 0 to 7 [ 217.365739][ T5966] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 217.370259][ T8024] Dev loop6: unable to read RDB block 7 [ 217.378936][ T8024] loop6: unable to read partition table [ 217.388690][ T8024] loop6: partition table beyond EOD, truncated [ 217.395106][ T8024] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 217.796318][ T5966] [drm:udl_init] *ERROR* Selecting channel failed [ 217.829992][ T8040] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 217.868077][ T5966] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 217.898407][ T5966] [drm] Initialized udl on minor 2 [ 217.926460][ T5966] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 217.944425][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 217.968409][ T5966] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 217.979355][ T8044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.996308][ T5930] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 218.013944][ T5966] usb 1-1: USB disconnect, device number 28 [ 218.038905][ T5930] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 218.202287][ T8051] netlink: 'syz.4.527': attribute type 1 has an invalid length. [ 218.318324][ T9] usb 2-1: USB disconnect, device number 41 [ 218.460383][ T8051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.519679][ T8056] bond1: (slave gretap1): making interface the new active one [ 218.564848][ T8056] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 218.602938][ T24] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 218.764405][ T24] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 218.774885][ T24] usb 5-1: config 5 has no interface number 0 [ 218.797790][ T24] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 218.844171][ T24] usb 5-1: config 5 interface 123 has no altsetting 0 [ 218.879867][ T24] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 218.891922][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.913931][ T24] usb 5-1: Product: syz [ 218.956697][ T24] usb 5-1: Manufacturer: syz [ 218.972571][ T24] usb 5-1: SerialNumber: syz [ 219.221876][ T8069] loop6: detected capacity change from 0 to 7 [ 219.307813][ T8069] Dev loop6: unable to read RDB block 7 [ 219.362076][ T8069] loop6: unable to read partition table [ 219.438177][ T8069] loop6: partition table beyond EOD, truncated [ 219.449870][ T8069] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 219.671934][ T8081] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.535'. [ 219.882528][ T5966] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 220.032691][ T5966] usb 1-1: Using ep0 maxpacket: 16 [ 220.069748][ T5966] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 220.078285][ T5966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.118731][ T5966] usb 1-1: config 0 has no interface number 0 [ 220.199947][ T8098] netlink: 'syz.2.540': attribute type 64 has an invalid length. [ 220.206840][ T5966] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 220.228337][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.238322][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 220.250657][ T5966] usb 1-1: Product: syz [ 220.256036][ T5966] usb 1-1: Manufacturer: syz [ 220.260885][ T5966] usb 1-1: SerialNumber: syz [ 220.274342][ T5966] usb 1-1: config 0 descriptor?? [ 220.289826][ T5966] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 220.323780][ T5966] usb 1-1: No valid video chain found. [ 220.522653][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 220.559201][ C0] raw-gadget.3 gadget.2: ignoring, device is not running [ 220.601759][ T8084] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.625076][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.678615][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.051424][ T8116] netlink: 80 bytes leftover after parsing attributes in process `syz.2.545'. [ 221.276549][ T5930] usb 1-1: USB disconnect, device number 29 [ 221.355889][ T24] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 221.419910][ T24] usb 5-1: USB disconnect, device number 36 [ 222.977017][ T30] audit: type=1326 audit(1758624796.641:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 223.047526][ T30] audit: type=1326 audit(1758624796.651:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 223.072339][ T30] audit: type=1326 audit(1758624796.651:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 223.103252][ T30] audit: type=1326 audit(1758624796.651:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 223.128776][ T30] audit: type=1326 audit(1758624796.651:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 223.224376][ T30] audit: type=1326 audit(1758624796.651:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 223.300554][ T8151] fuse: Bad value for 'fd' [ 223.633191][ T30] audit: type=1326 audit(1758624796.651:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 223.812721][ T30] audit: type=1326 audit(1758624796.651:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 223.864490][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.942661][ T30] audit: type=1326 audit(1758624796.651:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 223.971906][ T30] audit: type=1326 audit(1758624796.651:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 223.977588][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.140699][ T8156] loop6: detected capacity change from 0 to 524288000 [ 224.304188][ T8157] support for the xor transformation has been removed. [ 225.181662][ T5862] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 225.201888][ T5917] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 225.216217][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 225.362529][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 225.367028][ T8168] netlink: 56 bytes leftover after parsing attributes in process `syz.4.559'. [ 225.367773][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 225.396353][ T5917] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 225.436868][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 225.440464][ T5917] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.483808][ T5862] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 225.499522][ T5917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.552020][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.572727][ T5917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.593517][ T5862] usb 1-1: config 0 descriptor?? [ 225.598726][ T5917] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.628309][ T5917] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.640917][ T5862] as10x_usb: device has been detected [ 225.655634][ T5862] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 225.667405][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.753129][ T5862] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 225.856883][ T5862] as10x_usb: error during firmware upload part1 [ 225.902154][ T5862] Registered device nBox DVB-T Dongle [ 225.921336][ T5862] usb 1-1: USB disconnect, device number 30 [ 225.947740][ T5917] usb 2-1: GET_CAPABILITIES returned 0 [ 225.961897][ T5917] usbtmc 2-1:16.0: can't read capabilities [ 226.028966][ T5862] Unregistered device nBox DVB-T Dongle [ 226.030024][ T5862] as10x_usb: device has been disconnected [ 226.163659][ T8172] netlink: 'syz.4.561': attribute type 3 has an invalid length. [ 226.227343][ T5950] usb 2-1: USB disconnect, device number 42 [ 226.944140][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 227.067109][ T8194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 227.105971][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 227.128825][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 227.161367][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 227.191874][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 227.201875][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.262659][ T9] usb 5-1: Product: syz [ 227.295651][ T9] usb 5-1: Manufacturer: syz [ 227.301092][ T9] usb 5-1: SerialNumber: syz [ 227.310956][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 227.326487][ T9] usb 5-1: config 0 descriptor?? [ 227.386435][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 227.445191][ T8198] netlink: 'syz.1.569': attribute type 15 has an invalid length. [ 227.500517][ T3577] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.567461][ T3512] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.578792][ T3512] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.587807][ T3512] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.686449][ T9] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 227.702619][ T5862] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 227.840494][ T8209] fuse: Bad value for 'rootmode' [ 227.854252][ T8209] fuse: Bad value for 'rootmode' [ 227.861462][ T8209] fuse: Bad value for 'rootmode' [ 227.886490][ T5950] usb 5-1: USB disconnect, device number 37 [ 227.903021][ T8209] fuse: Bad value for 'rootmode' [ 227.923325][ T5862] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.942503][ T5862] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.983081][ T5862] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.993672][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.004326][ T5862] usb 2-1: Product: syz [ 228.012306][ T5862] usb 2-1: Manufacturer: syz [ 228.019025][ T5862] usb 2-1: SerialNumber: syz [ 228.096752][ T8216] netlink: 'syz.2.574': attribute type 4 has an invalid length. [ 228.106851][ T8216] netlink: 152 bytes leftover after parsing attributes in process `syz.2.574'. [ 228.190255][ T8216] .`: renamed from bond0 (while UP) [ 228.262878][ T5862] usb 2-1: 0:2 : does not exist [ 228.295172][ T5862] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 228.400122][ T5862] usb 2-1: USB disconnect, device number 43 [ 228.689617][ T5862] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 228.743135][ T5862] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 228.750700][ T5862] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 228.762338][ T5862] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 228.770761][ T5862] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 228.804588][ T5862] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 228.834831][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.873568][ T5862] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 228.881200][ T5862] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 228.900400][ T5862] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 228.912838][ T5950] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 228.929340][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 228.929356][ T30] audit: type=1326 audit(1758624802.601:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 228.963509][ T5862] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 228.977586][ T5862] hid-generic 00A0:0006:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 229.062707][ T5937] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 229.130176][ T30] audit: type=1326 audit(1758624802.601:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 229.187705][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 229.204050][ T5950] usb 3-1: config 0 has no interfaces? [ 229.233061][ T5950] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 229.246940][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.274638][ T5937] usb 5-1: config 0 has no interfaces? [ 229.284287][ T5937] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 229.312502][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.322537][ T5950] usb 3-1: Product: syz [ 229.326732][ T5950] usb 3-1: Manufacturer: syz [ 229.340598][ T5937] usb 5-1: Product: syz [ 229.345195][ T5950] usb 3-1: SerialNumber: syz [ 229.351638][ T30] audit: type=1326 audit(1758624802.601:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 229.374257][ T5937] usb 5-1: Manufacturer: syz [ 229.378865][ T5937] usb 5-1: SerialNumber: syz [ 229.403505][ T5950] usb 3-1: config 0 descriptor?? [ 229.444630][ T30] audit: type=1326 audit(1758624802.601:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 229.473649][ T5937] usb 5-1: config 0 descriptor?? [ 229.479689][ T30] audit: type=1326 audit(1758624802.611:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 229.542517][ T30] audit: type=1326 audit(1758624802.611:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 229.624460][ T30] audit: type=1326 audit(1758624802.611:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 229.698775][ T30] audit: type=1326 audit(1758624802.611:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 229.731500][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.752015][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.823697][ T8228] loop6: detected capacity change from 0 to 524288000 [ 229.868359][ T30] audit: type=1326 audit(1758624802.611:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 229.923166][ T8249] binder: 8241:8249 ioctl 40046205 0 returned -22 [ 229.934695][ T30] audit: type=1326 audit(1758624802.611:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 230.055796][ T8254] support for the xor transformation has been removed. [ 230.443722][ T5950] usb 3-1: USB disconnect, device number 24 [ 230.928232][ T8268] syz.3.586 (8268): attempted to duplicate a private mapping with mremap. This is not supported. [ 230.948467][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.957992][ T8270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.973756][ T8270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.010443][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.693603][ T8293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.707061][ T8293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.902816][ T8293] support for the xor transformation has been removed. [ 232.316910][ T5950] usb 5-1: USB disconnect, device number 38 [ 234.445391][ T5966] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 234.582570][ T5966] usb 5-1: device descriptor read/64, error -71 [ 234.593950][ T5950] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 234.683873][ T8338] 8021q: VLANs not supported on ip_vti0 [ 234.757375][ T8338] kvm: pic: single mode not supported [ 234.757449][ T8338] kvm: pic: level sensitive irq not supported [ 234.775330][ T5950] usb 3-1: config 0 interface 0 has no altsetting 0 [ 234.792799][ T8338] kvm: pic: non byte read [ 234.797398][ T8338] kvm: pic: non byte read [ 234.802243][ T8338] kvm: pic: non byte read [ 234.807147][ T8338] kvm: pic: non byte read [ 234.811708][ T8338] kvm: pic: non byte read [ 234.813772][ T5950] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 234.817676][ T8338] kvm: pic: single mode not supported [ 234.825214][ T8338] kvm: pic: non byte read [ 234.831516][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.851476][ T5966] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 234.860912][ T5950] usb 3-1: config 0 descriptor?? [ 234.899963][ T8338] kvm: pic: non byte read [ 234.908171][ T8338] kvm: pic: non byte read [ 234.923006][ T8338] kvm: pic: non byte read [ 235.002813][ T5966] usb 5-1: device descriptor read/64, error -71 [ 235.135125][ T5966] usb usb5-port1: attempt power cycle [ 235.314485][ T5950] hid_parser_main: 5 callbacks suppressed [ 235.314508][ T5950] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 235.368068][ T8357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.376983][ T8357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.405486][ T5950] elecom 0003:056E:010C.0007: hidraw0: USB HID v1.01 Device [HID 056e:010c] on usb-dummy_hcd.2-1/input0 [ 235.459125][ T8361] netlink: 48 bytes leftover after parsing attributes in process `syz.0.609'. [ 235.626663][ T5862] usb 3-1: USB disconnect, device number 25 [ 235.654297][ T5966] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 235.683218][ T5966] usb 5-1: device descriptor read/8, error -71 [ 235.720270][ T8360] fido_id[8360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 235.932557][ T5966] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 235.945043][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 235.973092][ T5966] usb 5-1: device descriptor read/8, error -71 [ 236.083220][ T5966] usb usb5-port1: unable to enumerate USB device [ 236.102555][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 236.109837][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.122932][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 236.132846][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.144093][ T9] usb 2-1: config 0 descriptor?? [ 236.710818][ T9] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 236.822566][ T9] usb 2-1: USB disconnect, device number 44 [ 238.562028][ T8403] binder: BINDER_SET_CONTEXT_MGR already set [ 238.579746][ T8405] binder: 8402:8405 ioctl c0306201 2000000004c0 returned -22 [ 238.597535][ T8403] binder: 8402:8403 ioctl 4018620d 200000004a80 returned -16 [ 239.041314][ T8417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.623'. [ 239.629658][ T8428] geneve2: entered allmulticast mode [ 241.262662][ T5862] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 241.363220][ T8456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.393958][ T8456] vim2m vim2m.0: vidioc_s_fmt queue busy [ 241.430118][ T5862] usb 5-1: config index 0 descriptor too short (expected 5156, got 36) [ 241.442961][ T8459] netlink: 'syz.2.632': attribute type 11 has an invalid length. [ 241.450853][ T5862] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 241.470626][ T5862] usb 5-1: config 54 has 0 interfaces, different from the descriptor's value: 20 [ 241.493936][ T5862] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.521990][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.808301][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.835357][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.262546][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 242.262564][ T30] audit: type=1326 audit(1758624815.911:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 242.319630][ T30] audit: type=1326 audit(1758624815.911:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 242.347126][ T30] audit: type=1326 audit(1758624815.911:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 242.435647][ T30] audit: type=1326 audit(1758624815.911:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 242.561379][ T30] audit: type=1326 audit(1758624815.911:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 242.668113][ T30] audit: type=1326 audit(1758624815.911:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 242.717042][ T8482] fuse: Unknown parameter '' [ 242.854611][ T30] audit: type=1326 audit(1758624815.911:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 243.148553][ T30] audit: type=1326 audit(1758624815.911:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 243.305891][ T30] audit: type=1326 audit(1758624815.911:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 243.455756][ T9] usb 5-1: USB disconnect, device number 43 [ 243.589267][ T30] audit: type=1326 audit(1758624815.911:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 243.975541][ T8500] geneve2: entered allmulticast mode [ 244.365320][ T8506] vivid-007: disconnect [ 244.380579][ T8507] vivid-007: reconnect [ 245.132701][ T5862] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 245.312641][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 245.335359][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.432575][ T5862] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.648921][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.691536][ T5862] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 245.701014][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.714103][ T5862] usb 3-1: config 0 descriptor?? [ 246.028710][ T8513] bridge1: entered promiscuous mode [ 246.171570][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.318300][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.376780][ T8524] fuse: Unknown parameter 'rootmod' [ 246.815181][ T5862] usbhid 3-1:0.0: can't add hid device: -71 [ 246.888934][ T5862] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 247.090250][ T5862] usb 3-1: USB disconnect, device number 26 [ 247.192614][ T5950] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 247.373010][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 247.438205][ T5950] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 247.447797][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.457193][ T5950] usb 5-1: Product: syz [ 247.463841][ T5950] usb 5-1: Manufacturer: syz [ 247.484014][ T8547] netlink: 48 bytes leftover after parsing attributes in process `syz.0.653'. [ 247.861289][ T5950] usb 5-1: SerialNumber: syz [ 247.877638][ T5950] usb 5-1: config 0 descriptor?? [ 247.893632][ T5950] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 248.619452][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.668819][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.882946][ T5950] gspca_sonixj: reg_w1 err -110 [ 248.887957][ T5950] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 249.077361][ T8556] loop2: detected capacity change from 0 to 7 [ 249.117370][ T5965] loop2: [ 249.138895][ T5965] loop2: partition table partially beyond EOD, truncated [ 249.227261][ T8556] loop2: [ 249.230340][ T8556] loop2: partition table partially beyond EOD, truncated [ 249.988202][ T8571] geneve2: entered allmulticast mode [ 250.732195][ T9] usb 5-1: USB disconnect, device number 44 [ 251.173076][ T5917] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 251.352530][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 251.360042][ T5917] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 251.390255][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.435381][ T5917] usb 5-1: config 0 descriptor?? [ 251.667050][ T8582] warning: `syz.4.661' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 251.737212][ T8597] fuse: Bad value for 'fd' [ 251.902696][ T8602] sch_tbf: burst 9 is lower than device lo mtu (39799) ! [ 251.949366][ T5917] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 251.976640][ T5917] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 252.002596][ T5917] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 252.030364][ T5917] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 252.047578][ T5917] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 252.070981][ T5917] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 252.119300][ T5917] logitech 0003:046D:C29C.0009: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 252.428567][ T5917] logitech 0003:046D:C29C.0009: no inputs found [ 252.537196][ T8616] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.670'. [ 252.567941][ T5917] usb 5-1: USB disconnect, device number 45 [ 252.675063][ T8616] Failed to get privilege flags for destination (handle=0x2:0x0) [ 252.779087][ T8619] netlink: 'syz.0.672': attribute type 15 has an invalid length. [ 253.225978][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 253.334338][ T8630] netlink: 176 bytes leftover after parsing attributes in process `syz.4.676'. [ 253.364375][ T980] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 253.421925][ T980] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.239636][ T8641] geneve2: entered allmulticast mode [ 255.637489][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.645116][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.143683][ T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 256.324323][ T9] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 256.334026][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 256.342117][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 256.350660][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.360964][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 256.370121][ T9] usb 3-1: config 0 has no interface number 0 [ 256.376969][ T9] usb 3-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.395814][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.405431][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.413535][ T9] usb 3-1: Product: syz [ 256.417821][ T9] usb 3-1: Manufacturer: syz [ 256.431435][ T9] usb 3-1: SerialNumber: syz [ 256.510601][ T980] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 256.520648][ T9] usb 3-1: config 0 descriptor?? [ 256.572657][ T5917] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 256.577428][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 256.577444][ T30] audit: type=1326 audit(1758624830.251:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.0.689" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fdd38eec9 code=0x0 [ 256.662565][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 256.667181][ T980] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 256.667211][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.667229][ T980] usb 5-1: Product: syz [ 256.667243][ T980] usb 5-1: Manufacturer: syz [ 256.667280][ T980] usb 5-1: SerialNumber: syz [ 256.670544][ T980] usb 5-1: config 0 descriptor?? [ 256.676125][ T980] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 256.723433][ T5917] usb 2-1: device descriptor read/64, error -71 [ 256.728348][ T8672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.728833][ T8672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.749421][ T9] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 256.749516][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 256.858566][ T9] usb 3-1: USB disconnect, device number 27 [ 256.983038][ T5917] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 257.046296][ T5937] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 257.144106][ T5917] usb 2-1: device descriptor read/64, error -71 [ 257.464630][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.502674][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.584404][ T8230] udevd[8230]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.603338][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 257.609142][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 257.609170][ T5937] usb 1-1: can't read configurations, error -61 [ 257.683937][ T5917] usb usb2-port1: attempt power cycle [ 257.762798][ T5937] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 257.912542][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 257.919645][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 257.919683][ T5937] usb 1-1: can't read configurations, error -61 [ 257.920204][ T5937] usb usb1-port1: attempt power cycle [ 258.040255][ T5917] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 258.062971][ T5917] usb 2-1: device descriptor read/8, error -71 [ 258.267026][ T5937] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 258.313720][ T5917] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 258.314040][ T8719] geneve2: entered allmulticast mode [ 258.343191][ T5917] usb 2-1: device descriptor read/8, error -71 [ 258.343281][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 258.348962][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 258.399196][ T980] gspca_ov534_9: reg_w failed -71 [ 258.428611][ T5937] usb 1-1: can't read configurations, error -61 [ 258.452807][ T5917] usb usb2-port1: unable to enumerate USB device [ 258.552561][ T5937] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 258.573310][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 258.577214][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 258.618938][ T5937] usb 1-1: can't read configurations, error -61 [ 258.630250][ T5937] usb usb1-port1: unable to enumerate USB device [ 258.682508][ T980] gspca_ov534_9: Unknown sensor 0000 [ 258.682596][ T980] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 258.684812][ T980] usb 5-1: USB disconnect, device number 46 [ 260.054286][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.065497][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.157119][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 261.206079][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 261.412254][ T8765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.425515][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 261.457659][ T8765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.685138][ T9] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 261.724468][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.781380][ T9] usb 1-1: config 0 has no interface number 0 [ 261.822506][ T9] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 261.941197][ T9] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.965489][ T9] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 261.977678][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.019822][ T9] usb 1-1: Product: syz [ 262.055704][ T9] usb 1-1: Manufacturer: syz [ 262.076317][ T9] usb 1-1: SerialNumber: syz [ 262.112672][ T9] usb 1-1: config 0 descriptor?? [ 262.275634][ T8769] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 262.588392][ T8761] loop6: detected capacity change from 0 to 524287999 [ 262.788133][ T8773] geneve2: entered allmulticast mode [ 264.142512][ T5937] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 264.221641][ T9] usb 1-1: USB disconnect, device number 35 [ 264.328198][ T8788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.714'. [ 264.398773][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 264.407817][ T5937] usb 2-1: config 0 has no interfaces? [ 264.419298][ T8790] openvswitch: netlink: Flow actions attr not present in new flow. [ 264.453724][ T5937] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 264.473560][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.499790][ T5937] usb 2-1: Product: syz [ 264.535481][ T5937] usb 2-1: Manufacturer: syz [ 264.555583][ T5937] usb 2-1: SerialNumber: syz [ 264.590707][ T5937] usb 2-1: config 0 descriptor?? [ 264.712916][ T9] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 264.895893][ T8778] loop6: detected capacity change from 0 to 524288000 [ 264.941139][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 264.952287][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 264.982483][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 265.003138][ T8778] support for the xor transformation has been removed. [ 265.055058][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 265.080193][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.116805][ T9] usb 3-1: config 0 descriptor?? [ 265.135234][ T8796] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 265.290036][ T5869] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 265.364082][ T9] wacom 0003:056A:00DE.000B: item fetching failed at offset 5/7 [ 265.387401][ T9] wacom 0003:056A:00DE.000B: parse failed [ 265.400050][ T9] wacom 0003:056A:00DE.000B: probe with driver wacom failed with error -22 [ 265.454021][ T8797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.774219][ T9] usb 3-1: USB disconnect, device number 28 [ 266.390458][ T980] usb 2-1: USB disconnect, device number 49 [ 267.052716][ T8840] geneve2: entered allmulticast mode [ 267.142607][ T980] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 267.164795][ T8839] netlink: 'syz.3.728': attribute type 13 has an invalid length. [ 267.172687][ T8839] netlink: 228 bytes leftover after parsing attributes in process `syz.3.728'. [ 267.312633][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 267.319863][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.332118][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.356671][ T980] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 267.382518][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.416866][ T980] usb 5-1: config 0 descriptor?? [ 267.752594][ T5917] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 267.929971][ T980] uclogic 0003:5543:0003.000C: item fetching failed at offset 0/3 [ 267.938620][ T980] uclogic 0003:5543:0003.000C: parse failed [ 267.942642][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 267.961229][ T980] uclogic 0003:5543:0003.000C: probe with driver uclogic failed with error -22 [ 267.977103][ T5917] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.991093][ T5917] usb 3-1: config 1 interface 0 has no altsetting 0 [ 268.001897][ T5917] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 268.014054][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.033198][ T5917] usb 3-1: Product: syz [ 268.037565][ T5917] usb 3-1: Manufacturer: syz [ 268.042167][ T5917] usb 3-1: SerialNumber: syz [ 268.137558][ T8849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.150900][ T980] usb 5-1: USB disconnect, device number 47 [ 268.196178][ T8849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.337980][ T8856] ptrace attach of "./syz-executor exec"[5883] was attempted by "./syz-executor exec"[8856] [ 268.363956][ T8856] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 268.419996][ T8856] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 268.464375][ T8856] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 268.474176][ T8856] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 268.501718][ T5917] usbhid 3-1:1.0: can't add hid device: -71 [ 268.514261][ T5917] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 268.541139][ T8856] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 268.557924][ T5917] usb 3-1: USB disconnect, device number 29 [ 268.559906][ T30] audit: type=1326 audit(1758624842.231:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 268.614009][ T30] audit: type=1326 audit(1758624842.231:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 268.990026][ T30] audit: type=1326 audit(1758624842.271:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 269.180845][ T8874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.190060][ T30] audit: type=1326 audit(1758624842.271:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 269.357845][ T8874] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 269.407312][ T8874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.490882][ T8874] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 269.713144][ T30] audit: type=1326 audit(1758624842.271:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 269.741356][ T8874] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 269.765644][ T8874] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 269.993759][ T30] audit: type=1326 audit(1758624842.271:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 270.020296][ T30] audit: type=1326 audit(1758624842.271:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 270.045901][ T30] audit: type=1326 audit(1758624842.271:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 270.071772][ T30] audit: type=1326 audit(1758624842.271:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 270.099999][ T30] audit: type=1326 audit(1758624842.271:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdd38eec9 code=0x7ffc0000 [ 270.154171][ T8874] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.161440][ T8874] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 270.343168][ T8874] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 270.388416][ T8874] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 270.819686][ T8899] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 270.840693][ T8899] vlan2: entered promiscuous mode [ 270.863654][ T5862] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 271.032872][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 271.252378][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 271.472795][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 271.512600][ T5937] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 271.675947][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 271.764946][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.790547][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.874001][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 271.877699][ T5937] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 271.895776][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.970790][ T5937] usb 3-1: config 0 descriptor?? [ 272.194789][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 272.209216][ T5937] usbhid 3-1:0.0: can't add hid device: -71 [ 272.258852][ T5937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 272.353002][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 272.366766][ T5937] usb 3-1: USB disconnect, device number 30 [ 272.475891][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.489220][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.551037][ T5862] usb 1-1: unable to get BOS descriptor or descriptor too short [ 272.559769][ T5862] usb 1-1: no configurations [ 272.568338][ T5862] usb 1-1: can't read configurations, error -22 [ 272.742749][ T5937] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 272.985074][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.000295][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.019611][ T5937] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 273.040110][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.063694][ T5937] usb 3-1: config 0 descriptor?? [ 273.348093][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 273.493283][ T5937] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 273.522369][ T5937] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000D/input/input19 [ 273.563447][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 273.654935][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 274.098960][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 274.158692][ T5937] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 274.230878][ T5937] usb 3-1: USB disconnect, device number 31 [ 274.276223][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 274.436394][ T8953] fido_id[8953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 274.461484][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 274.817432][ T8957] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.758'. [ 275.869289][ T8960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.878117][ T5862] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 276.227989][ T5862] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 276.278551][ T5862] usb 5-1: config 0 has no interface number 0 [ 276.328752][ T5862] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 276.372528][ T5862] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 276.444631][ T5862] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.495836][ T5862] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 276.541987][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.576569][ T5862] usb 5-1: Product: syz [ 276.580826][ T5862] usb 5-1: Manufacturer: syz [ 276.604140][ T5862] usb 5-1: SerialNumber: syz [ 276.623481][ T5862] usb 5-1: config 0 descriptor?? [ 276.629256][ T8975] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 276.666445][ T5862] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 276.732845][ T5862] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 276.779191][ T5862] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 278.383047][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 278.704110][ T9012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.770'. [ 278.836285][ T9016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.770'. [ 278.890749][ T5937] usb 5-1: USB disconnect, device number 48 [ 278.911289][ T5937] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 278.928387][ T5937] cyberjack 5-1:0.69: device disconnected [ 278.977878][ T9019] fuse: Bad value for 'fd' [ 279.157940][ T9026] sctp: [Deprecated]: syz.1.775 (pid 9026) Use of int in max_burst socket option deprecated. [ 279.157940][ T9026] Use struct sctp_assoc_value instead [ 279.205624][ T9029] loop2: detected capacity change from 0 to 7 [ 279.234774][ T9029] loop2: [ 279.238065][ T9029] loop2: partition table partially beyond EOD, truncated [ 279.527599][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 279.602543][ T5937] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 279.748631][ T9042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.772066][ T9042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.781486][ T9044] netlink: 44 bytes leftover after parsing attributes in process `syz.4.779'. [ 279.800335][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 279.820710][ T5937] usb 3-1: not running at top speed; connect to a high speed hub [ 279.833571][ T9039] bridge1: port 1(veth3) entered blocking state [ 279.844720][ T9039] bridge1: port 1(veth3) entered disabled state [ 279.855679][ T5937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.874166][ T9042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.887077][ T5937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.888276][ T9046] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.905860][ T9042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.911196][ T9039] veth3: entered allmulticast mode [ 279.918646][ T5937] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.930941][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.939593][ T9039] veth3: entered promiscuous mode [ 279.967930][ T5937] usb 3-1: Product: syz [ 279.973634][ T5937] usb 3-1: Manufacturer: syz [ 279.978929][ T5937] usb 3-1: SerialNumber: syz [ 280.090713][ T9050] raw_sendmsg: syz.0.782 forgot to set AF_INET. Fix it! [ 280.234123][ T5937] usb 3-1: 0:2 : does not exist [ 280.242831][ T5937] usb 3-1: unit 4 not found! [ 280.259885][ T5937] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 280.295792][ T5937] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 280.337335][ T5937] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 280.371860][ T5937] usb 3-1: USB disconnect, device number 32 [ 280.454974][ T9055] input: syz1 as /devices/virtual/input/input20 [ 280.597080][ T9059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.623619][ T9059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.306231][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 281.542708][ T9] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 281.572631][ T980] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 281.620577][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 282.080145][ T9] usb 1-1: No LPM exit latency info found, disabling LPM. [ 282.094328][ T9] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 282.114615][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.135754][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 282.150980][ T980] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 282.160464][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.185069][ T980] usb 2-1: config 0 descriptor?? [ 282.195750][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.216159][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.378855][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 283.267512][ T9] usb 1-1: Product: ꖽ篔℞쵀븨繠ꢂ췂㍄㟲蓛䀴ꂗ묒甌뼭涫 [ 283.277803][ T9] usb 1-1: Manufacturer: 覭죲䍪蔁⦃癍䜯铐ꂒ༾濃皜訷杓茪਒냱뮛玩㯕게衛ᱏ䤱糲탗緫鎇쬞嫽Ⴤￒᥠ숗崉喤縡白繂Ą㘼匶趚ꊶ❜ᥥᙂ鴘焼ܬ㡈꘶舩荈㯴腠瑡湣 [ 283.366404][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 283.458209][ T9] usb 1-1: SerialNumber: Ћ [ 283.469596][ T980] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 283.492055][ T980] [drm:udl_init] *ERROR* Selecting channel failed [ 283.602987][ T980] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 283.630221][ T980] [drm] Initialized udl on minor 2 [ 283.660634][ T980] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 283.716239][ T980] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 283.755572][ T5954] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 283.768057][ T5954] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 283.776533][ T980] usb 2-1: USB disconnect, device number 50 [ 283.909080][ T9094] fuse: Unknown parameter 'root' [ 283.956484][ T9] usb 1-1: 0:2 : does not exist [ 283.983310][ T9] usb 1-1: USB disconnect, device number 38 [ 284.059497][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.460314][ T9117] syz_tun: entered allmulticast mode [ 285.609179][ T9118] syz_tun: left allmulticast mode [ 286.085968][ T9142] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 286.532911][ T5937] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 286.702762][ T9159] bridge_slave_0: left allmulticast mode [ 286.708461][ T9159] bridge_slave_0: left promiscuous mode [ 286.714574][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.752278][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 286.752295][ T30] audit: type=1326 audit(1758624860.421:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9155 comm="syz.3.814" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f819b18eec9 code=0x0 [ 286.781049][ T5937] usb 3-1: config 2 has an invalid interface number: 190 but max is 0 [ 286.795060][ T9159] bridge_slave_1: left allmulticast mode [ 286.804651][ T5937] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 286.822296][ T9159] bridge_slave_1: left promiscuous mode [ 286.834196][ T5937] usb 3-1: config 2 has no interface number 0 [ 286.840351][ T5937] usb 3-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.862304][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.986050][ T5937] usb 3-1: string descriptor 0 read error: -22 [ 286.997466][ T5937] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 287.026728][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.127003][ T9159] bond0: (slave bond_slave_0): Releasing backup interface [ 287.265353][ T9159] bond0: (slave bond_slave_1): Releasing backup interface [ 287.301272][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.313009][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.348401][ T5937] (null): keene_cmd_main failed (-71) [ 287.404800][ T5937] video4linux radio48: keene_cmd_main failed (-71) [ 287.437260][ T5937] radio-keene 3-1:2.190: V4L2 device registered as radio48 [ 287.458470][ T9159] team0: Port device team_slave_0 removed [ 287.531195][ T9159] team0: Port device team_slave_1 removed [ 287.539434][ T9159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.558084][ T9159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.572635][ T5937] usb 3-1: USB disconnect, device number 33 [ 287.697076][ T9159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.842578][ T9159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.967737][ T9159] bond1: (slave gretap1): Releasing active interface [ 288.047229][ T9159] veth3: left allmulticast mode [ 288.052125][ T9159] veth3: left promiscuous mode [ 288.098360][ T9159] bridge1: port 1(veth3) entered disabled state [ 288.302697][ T5954] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 288.462525][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 288.534380][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.551451][ T5954] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 288.569589][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.597978][ T5954] usb 3-1: Product: syz [ 288.611797][ T5954] usb 3-1: Manufacturer: syz [ 288.631010][ T5954] usb 3-1: SerialNumber: syz [ 288.656337][ T5954] usb 3-1: config 0 descriptor?? [ 288.673934][ T5954] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 288.680465][ T5954] usb 3-1: selecting invalid altsetting 1 [ 288.886283][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.913887][ T9205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.925480][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.934152][ T9205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.138841][ T9211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.177612][ T9213] vim2m vim2m.0: vidioc_s_fmt queue busy [ 289.208828][ T5954] gspca_stk014: reg_r err -110 [ 289.215809][ T5954] stk014 3-1:0.0: probe with driver stk014 failed with error -110 [ 289.238213][ T5950] usb 3-1: USB disconnect, device number 34 [ 289.520517][ T9223] tipc: Started in network mode [ 289.525587][ T9223] tipc: Node identity 76f692129506, cluster identity 4711 [ 289.533148][ T9223] tipc: Enabled bearer , priority 0 [ 289.541079][ T9223] syzkaller0: entered promiscuous mode [ 289.546638][ T9223] syzkaller0: entered allmulticast mode [ 289.560374][ T9223] tipc: Resetting bearer [ 289.721268][ T9226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.739349][ T9226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.774988][ T9226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.842664][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.905903][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.962753][ T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 289.988812][ T9226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.454639][ T9] usb 3-1: device descriptor read/all, error -71 [ 290.514062][ T9218] tipc: Resetting bearer [ 290.552262][ T9218] tipc: Disabling bearer [ 290.932574][ T9] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 291.124425][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 291.133482][ T9] usb 3-1: config 7 has an invalid interface number: 67 but max is 0 [ 291.165574][ T9] usb 3-1: config 7 has no interface number 0 [ 291.211435][ T9] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 291.221901][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.231376][ T9] usb 3-1: Product: 㯑 [ 291.236712][ T9] usb 3-1: Manufacturer: 떒 [ 291.480935][ T9] usb 3-1: USB disconnect, device number 36 [ 292.174310][ T9259] loop6: detected capacity change from 0 to 7 [ 292.211268][ T9259] Dev loop6: unable to read RDB block 7 [ 292.234993][ T9259] loop6: unable to read partition table [ 292.251150][ T9259] loop6: partition table beyond EOD, truncated [ 292.271126][ T9259] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 292.392535][ T980] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 292.472961][ T5950] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 292.568215][ T980] usb 2-1: device descriptor read/64, error -71 [ 292.623535][ T5950] usb 3-1: device descriptor read/64, error -71 [ 292.842853][ T9271] hub 9-0:1.0: USB hub found [ 292.852593][ T9271] hub 9-0:1.0: 1 port detected [ 292.991726][ T980] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 292.992514][ T5950] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 293.142643][ T980] usb 2-1: device descriptor read/64, error -71 [ 293.212484][ T5950] usb 3-1: device descriptor read/64, error -71 [ 293.339773][ T980] usb usb2-port1: attempt power cycle [ 293.340940][ T5950] usb usb3-port1: attempt power cycle [ 293.353395][ T5862] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 293.492697][ T5862] usb 5-1: device descriptor read/64, error -71 [ 293.515127][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 293.577355][ T9278] hsr0: entered promiscuous mode [ 293.590525][ T9278] macvtap1: entered allmulticast mode [ 293.596258][ T9278] hsr0: entered allmulticast mode [ 293.605594][ T9278] hsr_slave_0: entered allmulticast mode [ 293.611344][ T9278] hsr_slave_1: entered allmulticast mode [ 293.712590][ T5950] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 293.712793][ T980] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 293.732898][ T5862] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 293.772929][ T980] usb 2-1: device descriptor read/8, error -71 [ 293.883488][ T5950] usb 3-1: device descriptor read/8, error -71 [ 293.993499][ T5862] usb 5-1: device descriptor read/64, error -71 [ 294.048453][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 294.057970][ T980] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 294.088021][ T980] usb 2-1: device descriptor read/8, error -71 [ 294.122934][ T5862] usb usb5-port1: attempt power cycle [ 294.157055][ T5950] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 294.206132][ T980] usb usb2-port1: unable to enumerate USB device [ 294.246721][ T5950] usb 3-1: device descriptor read/8, error -71 [ 294.375249][ T5950] usb usb3-port1: unable to enumerate USB device [ 294.482667][ T5862] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 294.535116][ T5862] usb 5-1: device descriptor read/8, error -71 [ 294.802625][ T5862] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 294.837284][ T5862] usb 5-1: device descriptor read/8, error -71 [ 294.917859][ T9312] vlan2: entered promiscuous mode [ 294.924078][ T9312] geneve1: entered promiscuous mode [ 294.929441][ T9312] vlan2: entered allmulticast mode [ 294.937015][ T9312] geneve1: entered allmulticast mode [ 294.952880][ T5862] usb usb5-port1: unable to enumerate USB device [ 296.142121][ T9358] netlink: 192 bytes leftover after parsing attributes in process `syz.2.878'. [ 296.154529][ T9358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.878'. [ 296.601787][ T9371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.535458][ T9430] netlink: 'syz.2.898': attribute type 3 has an invalid length. [ 297.847974][ T9444] bridge0: port 3(erspan0) entered blocking state [ 297.859753][ T9444] bridge0: port 3(erspan0) entered disabled state [ 297.867083][ T9444] erspan0: entered allmulticast mode [ 297.878533][ T9444] erspan0: entered promiscuous mode [ 297.884901][ T9444] bridge0: port 3(erspan0) entered blocking state [ 297.892633][ T9444] bridge0: port 3(erspan0) entered forwarding state [ 297.915879][ T9449] erspan0: left allmulticast mode [ 297.920953][ T9449] erspan0: left promiscuous mode [ 297.933028][ T9449] bridge0: port 3(erspan0) entered disabled state [ 298.412942][ T9474] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 298.606307][ T9481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.921'. [ 298.635333][ T9487] netlink: 32 bytes leftover after parsing attributes in process `syz.2.924'. [ 299.346626][ T9514] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 299.566289][ T9523] netlink: 32 bytes leftover after parsing attributes in process `syz.1.937'. [ 299.998156][ T9546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.948'. [ 300.033543][ T9546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.948'. [ 300.068887][ T9546] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 300.135378][ T9554] syzkaller1: entered promiscuous mode [ 300.145976][ T9554] syzkaller1: entered allmulticast mode [ 300.298216][ T9559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.952'. [ 300.311322][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 300.326269][ T9561] openvswitch: netlink: Unknown nsh attribute 0 [ 300.355514][ T9561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.160237][ T9608] netlink: 32 bytes leftover after parsing attributes in process `syz.4.966'. [ 301.203887][ T9610] netlink: 'syz.0.967': attribute type 10 has an invalid length. [ 301.273073][ T9610] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.280771][ T9610] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.374868][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'. [ 301.422682][ T9610] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.429921][ T9610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.437462][ T9610] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.444661][ T9610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.533607][ T9610] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 301.561528][ T9618] bridge_slave_1: left allmulticast mode [ 301.578204][ T9618] bridge_slave_1: left promiscuous mode [ 301.614698][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.641386][ T9618] bridge_slave_0: left allmulticast mode [ 301.648117][ T9618] bridge_slave_0: left promiscuous mode [ 301.658880][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.711078][ T9618] bond0: (slave bridge0): Releasing backup interface [ 302.578073][ T9671] netlink: 'syz.1.987': attribute type 6 has an invalid length. [ 302.744447][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 303.366521][ T9707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.444308][ T9716] bond1: (slave macsec1): Error -34 calling dev_set_mtu [ 303.590578][ T9724] bridge0: entered promiscuous mode [ 303.603279][ T9724] bridge0: entered allmulticast mode [ 303.828975][ T9735] __nla_validate_parse: 3 callbacks suppressed [ 303.828993][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 303.861024][ T9735] bond0: entered promiscuous mode [ 303.870485][ T9735] batadv0: entered promiscuous mode [ 303.881035][ T9735] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 303.894754][ T9735] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 303.929519][ T9735] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1014'. [ 304.029264][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 304.111491][ T9735] bond0 (unregistering): left promiscuous mode [ 304.119016][ T9735] bond0 (unregistering): Released all slaves [ 305.384081][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 305.403610][ T9809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1039'. [ 305.414763][ T9798] netlink: 'syz.1.1036': attribute type 13 has an invalid length. [ 305.431638][ T9798] netlink: 'syz.1.1036': attribute type 17 has an invalid length. [ 305.628646][ T9798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.727210][ T9792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.852298][ T9792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.431401][ T9847] netlink: 'syz.4.1051': attribute type 1 has an invalid length. [ 306.716308][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.736283][ T9] IPVS: starting estimator thread 0... [ 306.762280][ T9852] macvlan2: entered promiscuous mode [ 306.781918][ T9852] macvlan2: entered allmulticast mode [ 306.799654][ T9852] bond0: entered promiscuous mode [ 306.806914][ T9852] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 306.820828][ T9852] bond0: left promiscuous mode [ 306.865031][ T9865] IPVS: using max 28 ests per chain, 67200 per kthread [ 308.458064][ T9949] netlink: 'syz.0.1087': attribute type 13 has an invalid length. [ 308.463866][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 308.487361][ T9949] netlink: 'syz.0.1087': attribute type 27 has an invalid length. [ 308.553584][ T9952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1088'. [ 308.698760][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 310.080349][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880556a7800: rx timeout, send abort [ 310.091517][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880556a7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 310.108267][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880556a6800: rx timeout, send abort [ 310.116874][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880556a6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 310.442992][T10035] loop2: detected capacity change from 0 to 7 [ 310.484552][ T5879] loop2: [ 310.495075][ T5879] loop2: partition table partially beyond EOD, truncated [ 310.539836][T10035] loop2: [ 310.548691][T10035] loop2: partition table partially beyond EOD, truncated [ 310.701168][ T5235] loop2: [ 310.739413][ T5235] loop2: partition table partially beyond EOD, truncated [ 311.359208][T10060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.411057][T10060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.467280][T10060] loop2: detected capacity change from 0 to 8 [ 311.509362][T10060] Dev loop2: unable to read RDB block 8 [ 311.537162][T10060] loop2: unable to read partition table [ 311.568188][T10069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.582963][T10060] loop2: partition table beyond EOD, truncated [ 311.590937][T10069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.637231][T10060] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 312.163997][T10103] FAULT_INJECTION: forcing a failure. [ 312.163997][T10103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.207376][T10103] CPU: 0 UID: 0 PID: 10103 Comm: syz.2.1140 Not tainted syzkaller #0 PREEMPT(full) [ 312.207399][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.207407][T10103] Call Trace: [ 312.207411][T10103] [ 312.207416][T10103] dump_stack_lvl+0x189/0x250 [ 312.207434][T10103] ? __pfx____ratelimit+0x10/0x10 [ 312.207445][T10103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.207456][T10103] ? __pfx__printk+0x10/0x10 [ 312.207470][T10103] ? __might_fault+0xb0/0x130 [ 312.207490][T10103] should_fail_ex+0x414/0x560 [ 312.207507][T10103] _copy_from_iter+0x1de/0x1790 [ 312.207517][T10103] ? __lock_acquire+0xab9/0xd20 [ 312.207537][T10103] ? __lock_acquire+0xab9/0xd20 [ 312.207551][T10103] ? __pfx__copy_from_iter+0x10/0x10 [ 312.207567][T10103] ? page_copy_sane+0x4e/0x280 [ 312.207579][T10103] copy_page_from_iter+0xdd/0x170 [ 312.207592][T10103] tun_get_user+0x1d7b/0x3e20 [ 312.207608][T10103] ? tun_get_user+0x6f6/0x3e20 [ 312.207623][T10103] ? aa_file_perm+0x44d/0x1550 [ 312.207634][T10103] ? __pfx_tun_get_user+0x10/0x10 [ 312.207645][T10103] ? _parse_integer_limit+0x1ae/0x1f0 [ 312.207659][T10103] ? __lock_acquire+0xab9/0xd20 [ 312.207675][T10103] ? ref_tracker_alloc+0x318/0x460 [ 312.207684][T10103] ? __lock_acquire+0xab9/0xd20 [ 312.207698][T10103] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 312.207712][T10103] ? tun_get+0x1c/0x2f0 [ 312.207726][T10103] ? tun_get+0x1c/0x2f0 [ 312.207736][T10103] ? tun_get+0x1c/0x2f0 [ 312.207749][T10103] tun_chr_write_iter+0x113/0x200 [ 312.207761][T10103] vfs_write+0x5c9/0xb30 [ 312.207778][T10103] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 312.207789][T10103] ? __pfx_vfs_write+0x10/0x10 [ 312.207807][T10103] ? __fget_files+0x2a/0x420 [ 312.207820][T10103] ksys_write+0x145/0x250 [ 312.207834][T10103] ? __pfx_ksys_write+0x10/0x10 [ 312.207845][T10103] ? rcu_is_watching+0x15/0xb0 [ 312.207858][T10103] ? do_syscall_64+0xbe/0x3b0 [ 312.207870][T10103] do_syscall_64+0xfa/0x3b0 [ 312.207880][T10103] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.207889][T10103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.207898][T10103] ? clear_bhb_loop+0x60/0xb0 [ 312.207910][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.207919][T10103] RIP: 0033:0x7ff5fa78d97f [ 312.207930][T10103] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 312.207938][T10103] RSP: 002b:00007ff5fb69e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 312.207949][T10103] RAX: ffffffffffffffda RBX: 00007ff5fa9e5fa0 RCX: 00007ff5fa78d97f [ 312.207962][T10103] RDX: 0000000000000032 RSI: 0000200000000700 RDI: 00000000000000c8 [ 312.207968][T10103] RBP: 00007ff5fb69e090 R08: 0000000000000000 R09: 0000000000000000 [ 312.207974][T10103] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 312.207980][T10103] R13: 00007ff5fa9e6038 R14: 00007ff5fa9e5fa0 R15: 00007ff5fab0fa28 [ 312.207995][T10103] [ 312.897479][T10115] FAULT_INJECTION: forcing a failure. [ 312.897479][T10115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.948506][T10115] CPU: 0 UID: 0 PID: 10115 Comm: syz.3.1145 Not tainted syzkaller #0 PREEMPT(full) [ 312.948529][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.948538][T10115] Call Trace: [ 312.948545][T10115] [ 312.948552][T10115] dump_stack_lvl+0x189/0x250 [ 312.948577][T10115] ? __pfx____ratelimit+0x10/0x10 [ 312.948596][T10115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.948615][T10115] ? __pfx__printk+0x10/0x10 [ 312.948636][T10115] ? __might_fault+0xb0/0x130 [ 312.948674][T10115] should_fail_ex+0x414/0x560 [ 312.948700][T10115] _copy_from_user+0x2d/0xb0 [ 312.948721][T10115] __sys_bind+0x199/0x3e0 [ 312.948740][T10115] ? __pfx___sys_bind+0x10/0x10 [ 312.948767][T10115] ? __pfx_ksys_write+0x10/0x10 [ 312.948783][T10115] ? rcu_is_watching+0x15/0xb0 [ 312.948805][T10115] __x64_sys_bind+0x7a/0x90 [ 312.948823][T10115] do_syscall_64+0xfa/0x3b0 [ 312.948838][T10115] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.948855][T10115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.948870][T10115] ? clear_bhb_loop+0x60/0xb0 [ 312.948890][T10115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.948904][T10115] RIP: 0033:0x7f819b18eec9 [ 312.948920][T10115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.948934][T10115] RSP: 002b:00007f819bf4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 312.948953][T10115] RAX: ffffffffffffffda RBX: 00007f819b3e5fa0 RCX: 00007f819b18eec9 [ 312.948965][T10115] RDX: 0000000000000010 RSI: 00002000000005c0 RDI: 0000000000000003 [ 312.948975][T10115] RBP: 00007f819bf4f090 R08: 0000000000000000 R09: 0000000000000000 [ 312.948986][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.948996][T10115] R13: 00007f819b3e6038 R14: 00007f819b3e5fa0 R15: 00007f819b50fa28 [ 312.949024][T10115] [ 313.417719][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1151'. [ 313.482666][T10137] tipc: Started in network mode [ 313.502147][T10137] tipc: Node identity 9ee68e06e983, cluster identity 4711 [ 313.542765][T10137] tipc: Enabled bearer , priority 0 [ 313.581821][T10143] syzkaller0: entered promiscuous mode [ 313.645874][T10143] syzkaller0: entered allmulticast mode [ 313.673693][T10148] loop2: detected capacity change from 0 to 7 [ 313.693460][T10148] loop2: [ 313.696465][T10148] loop2: partition table partially beyond EOD, truncated [ 313.757858][T10137] tipc: Resetting bearer [ 313.800867][T10134] tipc: Resetting bearer [ 313.956434][T10134] tipc: Disabling bearer [ 314.201848][T10178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1166'. [ 316.518751][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1181'. [ 317.259796][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.272504][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.651094][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1196'. [ 318.877281][T10278] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 319.111964][T10281] syzkaller1: entered promiscuous mode [ 319.134881][T10281] syzkaller1: entered allmulticast mode [ 319.438526][T10292] FAULT_INJECTION: forcing a failure. [ 319.438526][T10292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.455976][T10292] CPU: 1 UID: 0 PID: 10292 Comm: syz.0.1205 Not tainted syzkaller #0 PREEMPT(full) [ 319.456000][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.456009][T10292] Call Trace: [ 319.456015][T10292] [ 319.456023][T10292] dump_stack_lvl+0x189/0x250 [ 319.456046][T10292] ? __pfx____ratelimit+0x10/0x10 [ 319.456065][T10292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.456084][T10292] ? __pfx__printk+0x10/0x10 [ 319.456105][T10292] ? __might_fault+0xb0/0x130 [ 319.456138][T10292] should_fail_ex+0x414/0x560 [ 319.456166][T10292] _copy_from_user+0x2d/0xb0 [ 319.456187][T10292] __x64_sys_epoll_ctl+0x126/0x1a0 [ 319.456212][T10292] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 319.456231][T10292] ? rcu_is_watching+0x15/0xb0 [ 319.456254][T10292] ? do_syscall_64+0xbe/0x3b0 [ 319.456276][T10292] do_syscall_64+0xfa/0x3b0 [ 319.456293][T10292] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.456309][T10292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.456325][T10292] ? clear_bhb_loop+0x60/0xb0 [ 319.456346][T10292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.456362][T10292] RIP: 0033:0x7f5fdd38eec9 [ 319.456377][T10292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.456392][T10292] RSP: 002b:00007f5fde2c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 319.456411][T10292] RAX: ffffffffffffffda RBX: 00007f5fdd5e5fa0 RCX: 00007f5fdd38eec9 [ 319.456425][T10292] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 319.456436][T10292] RBP: 00007f5fde2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.456447][T10292] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 319.456458][T10292] R13: 00007f5fdd5e6038 R14: 00007f5fdd5e5fa0 R15: 00007f5fdd70fa28 [ 319.456487][T10292] [ 319.951095][T10302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1209'. [ 320.172966][T10315] FAULT_INJECTION: forcing a failure. [ 320.172966][T10315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.192168][T10315] CPU: 1 UID: 0 PID: 10315 Comm: syz.2.1215 Not tainted syzkaller #0 PREEMPT(full) [ 320.192193][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.192203][T10315] Call Trace: [ 320.192210][T10315] [ 320.192218][T10315] dump_stack_lvl+0x189/0x250 [ 320.192243][T10315] ? __pfx____ratelimit+0x10/0x10 [ 320.192261][T10315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.192280][T10315] ? __pfx__printk+0x10/0x10 [ 320.192312][T10315] should_fail_ex+0x414/0x560 [ 320.192341][T10315] _copy_to_user+0x31/0xb0 [ 320.192364][T10315] simple_read_from_buffer+0xe1/0x170 [ 320.192392][T10315] proc_fail_nth_read+0x1b3/0x220 [ 320.192413][T10315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.192434][T10315] ? rw_verify_area+0x2a6/0x4d0 [ 320.192451][T10315] ? __lock_acquire+0xab9/0xd20 [ 320.192477][T10315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.192496][T10315] vfs_read+0x200/0xa30 [ 320.192515][T10315] ? fdget_pos+0x247/0x320 [ 320.192534][T10315] ? __pfx___mutex_lock+0x10/0x10 [ 320.192554][T10315] ? __pfx_vfs_read+0x10/0x10 [ 320.192576][T10315] ? __fget_files+0x2a/0x420 [ 320.192596][T10315] ? __fget_files+0x3a0/0x420 [ 320.192610][T10315] ? __fget_files+0x2a/0x420 [ 320.192636][T10315] ksys_read+0x145/0x250 [ 320.192658][T10315] ? __pfx_ksys_read+0x10/0x10 [ 320.192675][T10315] ? rcu_is_watching+0x15/0xb0 [ 320.192698][T10315] ? do_syscall_64+0xbe/0x3b0 [ 320.192719][T10315] do_syscall_64+0xfa/0x3b0 [ 320.192734][T10315] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.192750][T10315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.192764][T10315] ? clear_bhb_loop+0x60/0xb0 [ 320.192783][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.192800][T10315] RIP: 0033:0x7ff5fa78d8dc [ 320.192815][T10315] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 320.192829][T10315] RSP: 002b:00007ff5fb69e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.192846][T10315] RAX: ffffffffffffffda RBX: 00007ff5fa9e5fa0 RCX: 00007ff5fa78d8dc [ 320.192858][T10315] RDX: 000000000000000f RSI: 00007ff5fb69e0a0 RDI: 0000000000000003 [ 320.192869][T10315] RBP: 00007ff5fb69e090 R08: 0000000000000000 R09: 0000000000000000 [ 320.192880][T10315] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 320.192890][T10315] R13: 00007ff5fa9e6038 R14: 00007ff5fa9e5fa0 R15: 00007ff5fab0fa28 [ 320.192919][T10315] [ 321.124574][T10340] FAULT_INJECTION: forcing a failure. [ 321.124574][T10340] name failslab, interval 1, probability 0, space 0, times 0 [ 321.206315][T10340] CPU: 0 UID: 0 PID: 10340 Comm: syz.1.1223 Not tainted syzkaller #0 PREEMPT(full) [ 321.206342][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 321.206352][T10340] Call Trace: [ 321.206360][T10340] [ 321.206368][T10340] dump_stack_lvl+0x189/0x250 [ 321.206393][T10340] ? __pfx____ratelimit+0x10/0x10 [ 321.206417][T10340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.206437][T10340] ? __pfx__printk+0x10/0x10 [ 321.206464][T10340] ? __pfx___might_resched+0x10/0x10 [ 321.206481][T10340] ? fs_reclaim_acquire+0x7d/0x100 [ 321.206502][T10340] should_fail_ex+0x414/0x560 [ 321.206531][T10340] should_failslab+0xa8/0x100 [ 321.206555][T10340] kmem_cache_alloc_noprof+0x73/0x3c0 [ 321.206576][T10340] ? ep_insert+0x272/0x19e0 [ 321.206602][T10340] ep_insert+0x272/0x19e0 [ 321.206638][T10340] ? __pfx_ep_insert+0x10/0x10 [ 321.206659][T10340] ? __pfx___mutex_lock+0x10/0x10 [ 321.206678][T10340] ? rcu_is_watching+0x15/0xb0 [ 321.206714][T10340] do_epoll_ctl+0x7f4/0xe80 [ 321.206745][T10340] __x64_sys_epoll_ctl+0x163/0x1a0 [ 321.206770][T10340] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 321.206791][T10340] ? rcu_is_watching+0x15/0xb0 [ 321.206813][T10340] ? do_syscall_64+0xbe/0x3b0 [ 321.206835][T10340] do_syscall_64+0xfa/0x3b0 [ 321.206852][T10340] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.206868][T10340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.206885][T10340] ? clear_bhb_loop+0x60/0xb0 [ 321.206906][T10340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.206923][T10340] RIP: 0033:0x7f13cfd8eec9 [ 321.206939][T10340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.206954][T10340] RSP: 002b:00007f13d0bf8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 321.206972][T10340] RAX: ffffffffffffffda RBX: 00007f13cffe5fa0 RCX: 00007f13cfd8eec9 [ 321.206985][T10340] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 321.206995][T10340] RBP: 00007f13d0bf8090 R08: 0000000000000000 R09: 0000000000000000 [ 321.207006][T10340] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 321.207018][T10340] R13: 00007f13cffe6038 R14: 00007f13cffe5fa0 R15: 00007f13d010fa28 [ 321.207048][T10340] [ 322.072549][ T30] audit: type=1326 audit(1758624895.731:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 322.105149][T10363] fuse: Bad value for 'user_id' [ 322.110047][T10363] fuse: Bad value for 'user_id' [ 322.162637][ T30] audit: type=1326 audit(1758624895.731:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 322.197506][ T30] audit: type=1326 audit(1758624895.731:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 322.301237][ T30] audit: type=1326 audit(1758624895.731:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 322.449043][T10371] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1234'. [ 322.490725][ T30] audit: type=1326 audit(1758624895.731:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 322.542088][T10371] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 322.672521][ T30] audit: type=1326 audit(1758624895.731:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 322.738788][ T30] audit: type=1326 audit(1758624895.731:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 322.791976][ T30] audit: type=1326 audit(1758624895.731:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 322.857209][ T30] audit: type=1326 audit(1758624895.731:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 322.998680][ T30] audit: type=1326 audit(1758624895.771:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff5fa78eec9 code=0x7ffc0000 [ 323.650808][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 324.422969][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 324.702227][T10426] syzkaller1: entered promiscuous mode [ 324.707794][T10426] syzkaller1: entered allmulticast mode [ 324.822578][ T24] usb 3-1: device descriptor read/64, error -71 [ 325.122475][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 325.268949][T10442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1260'. [ 325.284248][ T24] usb 3-1: device descriptor read/64, error -71 [ 325.303682][T10442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1260'. [ 325.323799][T10442] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 325.393851][ T24] usb usb3-port1: attempt power cycle [ 325.753099][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 325.761021][T10454] fuse: blksize only supported for fuseblk [ 325.783061][ T24] usb 3-1: device descriptor read/8, error -71 [ 325.815340][ T5937] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 325.864407][T10456] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1265'. [ 325.878539][T10456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.954001][T10456] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 325.962614][T10456] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 325.972491][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 325.990723][ T5937] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 326.000906][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.010797][ T5937] usb 2-1: Product: syz [ 326.015584][ T5937] usb 2-1: Manufacturer: syz [ 326.021980][ T5937] usb 2-1: SerialNumber: syz [ 326.027109][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 326.040048][ T5937] usb 2-1: config 0 descriptor?? [ 326.055116][ T24] usb 3-1: device descriptor read/8, error -71 [ 326.085268][ T5937] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 326.121134][ T5937] usb 2-1: Detected FT232H [ 326.163166][ T24] usb usb3-port1: unable to enumerate USB device [ 326.293653][ T5937] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 326.311648][ T5937] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 326.320566][ T5937] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 326.332995][ T5937] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 326.358127][ T5937] usb 2-1: USB disconnect, device number 55 [ 326.384878][ T5937] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 326.407045][ T5937] ftdi_sio 2-1:0.0: device disconnected [ 327.999646][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'. [ 328.168157][T10483] tipc: Enabled bearer , priority 0 [ 328.177495][T10483] syzkaller0: entered promiscuous mode [ 328.185743][T10483] syzkaller0: entered allmulticast mode [ 328.211950][T10483] tipc: Resetting bearer [ 328.221820][T10481] tipc: Resetting bearer [ 328.285071][T10481] tipc: Disabling bearer [ 328.476206][T10498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1280'. [ 328.491001][T10498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1280'. [ 328.501150][T10498] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 328.574843][T10502] syzkaller1: entered promiscuous mode [ 328.581298][T10502] syzkaller1: entered allmulticast mode [ 328.777908][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 329.170743][T10519] FAULT_INJECTION: forcing a failure. [ 329.170743][T10519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.191480][T10519] CPU: 0 UID: 0 PID: 10519 Comm: syz.1.1289 Not tainted syzkaller #0 PREEMPT(full) [ 329.191495][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 329.191502][T10519] Call Trace: [ 329.191506][T10519] [ 329.191511][T10519] dump_stack_lvl+0x189/0x250 [ 329.191527][T10519] ? __pfx____ratelimit+0x10/0x10 [ 329.191538][T10519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.191550][T10519] ? __pfx__printk+0x10/0x10 [ 329.191563][T10519] ? __might_fault+0xb0/0x130 [ 329.191583][T10519] should_fail_ex+0x414/0x560 [ 329.191600][T10519] _copy_from_user+0x2d/0xb0 [ 329.191614][T10519] do_sys_poll+0x242/0x1070 [ 329.191637][T10519] ? __pfx_do_sys_poll+0x10/0x10 [ 329.191684][T10519] ? rcu_read_lock_any_held+0xb3/0x120 [ 329.191695][T10519] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 329.191707][T10519] ? vfs_write+0x956/0xb30 [ 329.191735][T10519] ? set_user_sigmask+0xc7/0x1b0 [ 329.191745][T10519] ? __pfx_set_user_sigmask+0x10/0x10 [ 329.191760][T10519] __se_sys_ppoll+0x1ff/0x260 [ 329.191775][T10519] ? __pfx___se_sys_ppoll+0x10/0x10 [ 329.191789][T10519] ? __pfx_ksys_write+0x10/0x10 [ 329.191800][T10519] ? rcu_is_watching+0x15/0xb0 [ 329.191812][T10519] ? do_syscall_64+0xbe/0x3b0 [ 329.191822][T10519] ? __x64_sys_ppoll+0x20/0xc0 [ 329.191836][T10519] do_syscall_64+0xfa/0x3b0 [ 329.191846][T10519] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.191856][T10519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.191865][T10519] ? clear_bhb_loop+0x60/0xb0 [ 329.191877][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.191886][T10519] RIP: 0033:0x7f13cfd8eec9 [ 329.191895][T10519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.191903][T10519] RSP: 002b:00007f13d0bf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 329.191914][T10519] RAX: ffffffffffffffda RBX: 00007f13cffe5fa0 RCX: 00007f13cfd8eec9 [ 329.191921][T10519] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 329.191928][T10519] RBP: 00007f13d0bf8090 R08: 0000000000000000 R09: 0000000000000000 [ 329.191934][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.191939][T10519] R13: 00007f13cffe6038 R14: 00007f13cffe5fa0 R15: 00007f13d010fa28 [ 329.191954][T10519] [ 329.614209][T10525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1292'. [ 329.647325][T10528] loop2: detected capacity change from 0 to 7 [ 329.678054][T10531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.722057][T10531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.784359][T10537] syzkaller1: entered promiscuous mode [ 329.804928][T10531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.814021][T10531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.825344][T10528] loop2: [ 329.837625][T10537] syzkaller1: entered allmulticast mode [ 329.904148][T10528] loop2: partition table partially beyond EOD, truncated [ 331.532919][T10570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1306'. [ 331.892564][ T980] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 332.042934][T10576] syzkaller1: entered promiscuous mode [ 332.060332][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 332.074681][T10576] syzkaller1: entered allmulticast mode [ 332.080674][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.104602][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.169929][ T980] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.187499][T10581] FAULT_INJECTION: forcing a failure. [ 332.187499][T10581] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 332.201190][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.218735][ T980] usb 3-1: config 0 descriptor?? [ 332.224370][T10581] CPU: 0 UID: 0 PID: 10581 Comm: syz.0.1311 Not tainted syzkaller #0 PREEMPT(full) [ 332.224392][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 332.224402][T10581] Call Trace: [ 332.224409][T10581] [ 332.224415][T10581] dump_stack_lvl+0x189/0x250 [ 332.224438][T10581] ? __pfx____ratelimit+0x10/0x10 [ 332.224455][T10581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.224472][T10581] ? __pfx__printk+0x10/0x10 [ 332.224502][T10581] ? fs_reclaim_acquire+0x7d/0x100 [ 332.224525][T10581] should_fail_ex+0x414/0x560 [ 332.224551][T10581] prepare_alloc_pages+0x213/0x610 [ 332.224574][T10581] __alloc_frozen_pages_noprof+0x123/0x370 [ 332.224592][T10581] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 332.224605][T10581] ? do_raw_spin_lock+0x121/0x290 [ 332.224626][T10581] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 332.224644][T10581] ? policy_nodemask+0x27c/0x720 [ 332.224667][T10581] alloc_pages_mpol+0x232/0x4a0 [ 332.224691][T10581] alloc_pages_noprof+0xa9/0x190 [ 332.224712][T10581] get_free_pages_noprof+0xf/0x80 [ 332.224727][T10581] __pollwait+0x27b/0x460 [ 332.224748][T10581] ? __pfx___pollwait+0x10/0x10 [ 332.224765][T10581] pipe_poll+0x16f/0x470 [ 332.224786][T10581] ? __pfx_pipe_poll+0x10/0x10 [ 332.224804][T10581] do_sys_poll+0x8c6/0x1070 [ 332.224830][T10581] ? do_sys_poll+0x361/0x1070 [ 332.224859][T10581] ? __pfx_do_sys_poll+0x10/0x10 [ 332.224888][T10581] ? __pfx___pollwait+0x10/0x10 [ 332.224913][T10581] ? __pfx_pollwake+0x10/0x10 [ 332.224936][T10581] ? __pfx_pollwake+0x10/0x10 [ 332.224960][T10581] ? __pfx_pollwake+0x10/0x10 [ 332.224984][T10581] ? __pfx_pollwake+0x10/0x10 [ 332.225007][T10581] ? __pfx_pollwake+0x10/0x10 [ 332.225031][T10581] ? __pfx_pollwake+0x10/0x10 [ 332.225054][T10581] ? __pfx_pollwake+0x10/0x10 [ 332.225076][T10581] ? __pfx_pollwake+0x10/0x10 [ 332.225100][T10581] ? __pfx_pollwake+0x10/0x10 [ 332.225121][T10581] ? rcu_read_lock_any_held+0xb3/0x120 [ 332.225138][T10581] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 332.225158][T10581] ? vfs_write+0x956/0xb30 [ 332.225203][T10581] ? set_user_sigmask+0xc7/0x1b0 [ 332.225220][T10581] ? __pfx_set_user_sigmask+0x10/0x10 [ 332.225246][T10581] __se_sys_ppoll+0x1ff/0x260 [ 332.225270][T10581] ? __pfx___se_sys_ppoll+0x10/0x10 [ 332.225290][T10581] ? __pfx_ksys_write+0x10/0x10 [ 332.225307][T10581] ? rcu_is_watching+0x15/0xb0 [ 332.225328][T10581] ? do_syscall_64+0xbe/0x3b0 [ 332.225344][T10581] ? __x64_sys_ppoll+0x20/0xc0 [ 332.225368][T10581] do_syscall_64+0xfa/0x3b0 [ 332.225381][T10581] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.225398][T10581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.225415][T10581] ? clear_bhb_loop+0x60/0xb0 [ 332.225434][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.225450][T10581] RIP: 0033:0x7f5fdd38eec9 [ 332.225466][T10581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.225480][T10581] RSP: 002b:00007f5fde2c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 332.225506][T10581] RAX: ffffffffffffffda RBX: 00007f5fdd5e5fa0 RCX: 00007f5fdd38eec9 [ 332.225519][T10581] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 332.225530][T10581] RBP: 00007f5fde2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 332.225540][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.225548][T10581] R13: 00007f5fdd5e6038 R14: 00007f5fdd5e5fa0 R15: 00007f5fdd70fa28 [ 332.225569][T10581] [ 332.687935][ T980] hub 3-1:0.0: USB hub found [ 332.700061][ T980] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 333.176060][ T980] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 333.188918][T10598] ================================================================== [ 333.197019][T10598] BUG: KASAN: slab-out-of-bounds in xfrm_state_find+0x2cf2/0x5400 [ 333.204839][T10598] Read of size 1 at addr ffff888053f5cbb0 by task syz.4.1316/10598 [ 333.212730][T10598] [ 333.215058][T10598] CPU: 0 UID: 0 PID: 10598 Comm: syz.4.1316 Not tainted syzkaller #0 PREEMPT(full) [ 333.215078][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 333.215089][T10598] Call Trace: [ 333.215096][T10598] [ 333.215104][T10598] dump_stack_lvl+0x189/0x250 [ 333.215129][T10598] ? __kasan_check_byte+0x12/0x40 [ 333.215153][T10598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.215174][T10598] ? lock_release+0x4b/0x3e0 [ 333.215201][T10598] ? __virt_addr_valid+0x4a5/0x5c0 [ 333.215225][T10598] print_report+0xca/0x240 [ 333.215241][T10598] ? xfrm_state_find+0x2cf2/0x5400 [ 333.215261][T10598] kasan_report+0x118/0x150 [ 333.215285][T10598] ? xfrm_state_find+0x2cf2/0x5400 [ 333.215309][T10598] xfrm_state_find+0x2cf2/0x5400 [ 333.215329][T10598] ? ipv6_get_saddr_eval+0xb85/0xee0 [ 333.215355][T10598] ? ipv6_dev_get_saddr+0x143/0xb70 [ 333.215378][T10598] ? xfrm_state_find+0x1da/0x5400 [ 333.215399][T10598] ? __pfx_xfrm_state_find+0x10/0x10 [ 333.215422][T10598] ? xfrm_resolve_and_create_bundle+0x6e6/0x2f80 [ 333.215447][T10598] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 333.215481][T10598] ? stack_depot_save_flags+0x40/0x860 [ 333.215507][T10598] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 333.215531][T10598] ? __lock_acquire+0xab9/0xd20 [ 333.215561][T10598] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 333.215586][T10598] ? rt_set_nexthop+0x693/0xa80 [ 333.215612][T10598] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 333.215636][T10598] ? xfrm_expand_policies+0x41f/0x6a0 [ 333.215662][T10598] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 333.215695][T10598] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 333.215722][T10598] xfrm_lookup_route+0x3c/0x1c0 [ 333.215747][T10598] udp_sendmsg+0x142e/0x2170 [ 333.215775][T10598] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 333.215798][T10598] ? __pfx_udp_sendmsg+0x10/0x10 [ 333.215824][T10598] ? count_memcg_event_mm+0x21/0x260 [ 333.215848][T10598] ? count_memcg_event_mm+0x21/0x260 [ 333.215873][T10598] ? __pfx_aa_sk_perm+0x10/0x10 [ 333.215896][T10598] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 333.215917][T10598] ? sock_rps_record_flow+0x19/0x410 [ 333.215941][T10598] ? inet_sendmsg+0x29c/0x370 [ 333.215963][T10598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.215983][T10598] __sock_sendmsg+0x19c/0x270 [ 333.216008][T10598] ____sys_sendmsg+0x52d/0x830 [ 333.216031][T10598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.216054][T10598] ? import_iovec+0x74/0xa0 [ 333.216075][T10598] ___sys_sendmsg+0x21f/0x2a0 [ 333.216096][T10598] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.216131][T10598] ? __fget_files+0x2a/0x420 [ 333.216146][T10598] ? __fget_files+0x3a0/0x420 [ 333.216165][T10598] __sys_sendmmsg+0x227/0x430 [ 333.216188][T10598] ? __pfx___sys_sendmmsg+0x10/0x10 [ 333.216207][T10598] ? do_futex+0x333/0x420 [ 333.216238][T10598] ? __pfx___se_sys_futex+0x10/0x10 [ 333.216263][T10598] __x64_sys_sendmmsg+0xa0/0xc0 [ 333.216284][T10598] do_syscall_64+0xfa/0x3b0 [ 333.216304][T10598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.216321][T10598] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.216339][T10598] ? clear_bhb_loop+0x60/0xb0 [ 333.216357][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.216371][T10598] RIP: 0033:0x7f49e078eec9 [ 333.216386][T10598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.216402][T10598] RSP: 002b:00007f49e16eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 333.216421][T10598] RAX: ffffffffffffffda RBX: 00007f49e09e5fa0 RCX: 00007f49e078eec9 [ 333.216435][T10598] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 333.216447][T10598] RBP: 00007f49e0811f91 R08: 0000000000000000 R09: 0000000000000000 [ 333.216458][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.216468][T10598] R13: 00007f49e09e6038 R14: 00007f49e09e5fa0 R15: 00007f49e0b0fa28 [ 333.216488][T10598] [ 333.216495][T10598] [ 333.596463][T10598] Allocated by task 10310: [ 333.600860][T10598] kasan_save_track+0x3e/0x80 [ 333.605525][T10598] __kasan_kmalloc+0x93/0xb0 [ 333.610099][T10598] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 333.616495][T10598] kmalloc_reserve+0x136/0x290 [ 333.621244][T10598] __alloc_skb+0x142/0x2d0 [ 333.625638][T10598] alloc_skb_with_frags+0xca/0x890 [ 333.630733][T10598] sock_alloc_send_pskb+0x857/0x990 [ 333.635915][T10598] unix_dgram_sendmsg+0x461/0x1850 [ 333.641004][T10598] __sock_sendmsg+0x21c/0x270 [ 333.645670][T10598] ____sys_sendmsg+0x52d/0x830 [ 333.650503][T10598] ___sys_sendmsg+0x21f/0x2a0 [ 333.655160][T10598] __sys_sendmmsg+0x227/0x430 [ 333.659820][T10598] __x64_sys_sendmmsg+0xa0/0xc0 [ 333.664652][T10598] do_syscall_64+0xfa/0x3b0 [ 333.669140][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.675011][T10598] [ 333.677369][T10598] Freed by task 10318: [ 333.681412][T10598] kasan_save_track+0x3e/0x80 [ 333.686071][T10598] kasan_save_free_info+0x46/0x50 [ 333.691076][T10598] __kasan_slab_free+0x5b/0x80 [ 333.695823][T10598] kfree+0x18e/0x440 [ 333.699699][T10598] skb_release_data+0x62d/0x7c0 [ 333.704528][T10598] sk_skb_reason_drop+0x127/0x170 [ 333.709532][T10598] unix_release_sock+0x9ea/0xd50 [ 333.714449][T10598] unix_release+0x92/0xd0 [ 333.718762][T10598] sock_close+0xc3/0x240 [ 333.722985][T10598] __fput+0x44c/0xa70 [ 333.726949][T10598] task_work_run+0x1d1/0x260 [ 333.731518][T10598] get_signal+0x11ed/0x1340 [ 333.735997][T10598] arch_do_signal_or_restart+0x9a/0x750 [ 333.741535][T10598] exit_to_user_mode_loop+0x75/0x110 [ 333.746808][T10598] do_syscall_64+0x2bd/0x3b0 [ 333.751379][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.757249][T10598] [ 333.759558][T10598] The buggy address belongs to the object at ffff888053f5c800 [ 333.759558][T10598] which belongs to the cache kmalloc-cg-512 of size 512 [ 333.773935][T10598] The buggy address is located 432 bytes to the right of [ 333.773935][T10598] allocated 512-byte region [ffff888053f5c800, ffff888053f5ca00) [ 333.788603][T10598] [ 333.790912][T10598] The buggy address belongs to the physical page: [ 333.797313][T10598] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53f5c [ 333.806062][T10598] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 333.814539][T10598] memcg:ffff88802cb07601 [ 333.818758][T10598] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 333.826316][T10598] page_type: f5(slab) [ 333.830286][T10598] raw: 00fff00000000040 ffff88801a44b140 dead000000000122 0000000000000000 [ 333.838849][T10598] raw: 0000000000000000 0000000000100010 00000000f5000000 ffff88802cb07601 [ 333.847414][T10598] head: 00fff00000000040 ffff88801a44b140 dead000000000122 0000000000000000 [ 333.856071][T10598] head: 0000000000000000 0000000000100010 00000000f5000000 ffff88802cb07601 [ 333.864719][T10598] head: 00fff00000000002 ffffea00014fd701 00000000ffffffff 00000000ffffffff [ 333.873368][T10598] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 333.882013][T10598] page dumped because: kasan: bad access detected [ 333.888410][T10598] page_owner tracks the page as allocated [ 333.894103][T10598] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10310, tgid 10307 (syz.4.1212), ts 320192121064, free_ts 311897074216 [ 333.915701][T10598] post_alloc_hook+0x240/0x2a0 [ 333.920541][T10598] get_page_from_freelist+0x21e4/0x22c0 [ 333.926074][T10598] __alloc_frozen_pages_noprof+0x181/0x370 [ 333.931879][T10598] alloc_pages_mpol+0x232/0x4a0 [ 333.936724][T10598] allocate_slab+0x8a/0x370 [ 333.941212][T10598] ___slab_alloc+0xbeb/0x1420 [ 333.945882][T10598] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 333.952283][T10598] kmalloc_reserve+0x136/0x290 [ 333.957026][T10598] __alloc_skb+0x142/0x2d0 [ 333.961420][T10598] alloc_skb_with_frags+0xca/0x890 [ 333.966514][T10598] sock_alloc_send_pskb+0x857/0x990 [ 333.971694][T10598] unix_dgram_sendmsg+0x461/0x1850 [ 333.976785][T10598] __sock_sendmsg+0x21c/0x270 [ 333.981446][T10598] ____sys_sendmsg+0x52d/0x830 [ 333.986190][T10598] ___sys_sendmsg+0x21f/0x2a0 [ 333.990845][T10598] __sys_sendmmsg+0x227/0x430 [ 333.995503][T10598] page last free pid 5881 tgid 5881 stack trace: [ 334.001807][T10598] __free_frozen_pages+0xbc4/0xd30 [ 334.006901][T10598] __put_partials+0x156/0x1a0 [ 334.011553][T10598] put_cpu_partial+0x17c/0x250 [ 334.016296][T10598] __slab_free+0x2d5/0x3c0 [ 334.020689][T10598] qlist_free_all+0x97/0x140 [ 334.025263][T10598] kasan_quarantine_reduce+0x148/0x160 [ 334.030708][T10598] __kasan_slab_alloc+0x22/0x80 [ 334.035540][T10598] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 334.040987][T10598] getname_flags+0xb8/0x540 [ 334.045498][T10598] user_path_at+0x24/0x60 [ 334.049817][T10598] __x64_sys_umount+0xee/0x160 [ 334.054569][T10598] do_syscall_64+0xfa/0x3b0 [ 334.059055][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.064938][T10598] [ 334.067242][T10598] Memory state around the buggy address: [ 334.072851][T10598] ffff888053f5ca80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 334.080889][T10598] ffff888053f5cb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 334.088931][T10598] >ffff888053f5cb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 334.097057][T10598] ^ [ 334.102666][T10598] ffff888053f5cc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.110707][T10598] ffff888053f5cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.118746][T10598] ================================================================== [ 334.135626][T10598] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 334.142857][T10598] CPU: 1 UID: 0 PID: 10598 Comm: syz.4.1316 Not tainted syzkaller #0 PREEMPT(full) [ 334.152322][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 334.162394][T10598] Call Trace: [ 334.165671][T10598] [ 334.168593][T10598] dump_stack_lvl+0x99/0x250 [ 334.173179][T10598] ? __asan_memcpy+0x40/0x70 [ 334.177762][T10598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.182951][T10598] ? __pfx__printk+0x10/0x10 [ 334.187538][T10598] vpanic+0x281/0x750 [ 334.191532][T10598] ? preempt_schedule+0xae/0xc0 [ 334.196369][T10598] ? __pfx_vpanic+0x10/0x10 [ 334.200863][T10598] ? preempt_schedule_common+0x83/0xd0 [ 334.206310][T10598] ? preempt_schedule+0xae/0xc0 [ 334.211151][T10598] ? __pfx_preempt_schedule+0x10/0x10 [ 334.216549][T10598] panic+0xb9/0xc0 [ 334.220262][T10598] ? __pfx_panic+0x10/0x10 [ 334.224668][T10598] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 334.230560][T10598] ? xfrm_state_find+0x2cf2/0x5400 [ 334.235661][T10598] check_panic_on_warn+0x89/0xb0 [ 334.240590][T10598] ? xfrm_state_find+0x2cf2/0x5400 [ 334.245692][T10598] end_report+0x78/0x160 [ 334.249956][T10598] kasan_report+0x129/0x150 [ 334.254456][T10598] ? xfrm_state_find+0x2cf2/0x5400 [ 334.259559][T10598] xfrm_state_find+0x2cf2/0x5400 [ 334.264487][T10598] ? ipv6_get_saddr_eval+0xb85/0xee0 [ 334.269768][T10598] ? ipv6_dev_get_saddr+0x143/0xb70 [ 334.274962][T10598] ? xfrm_state_find+0x1da/0x5400 [ 334.279978][T10598] ? __pfx_xfrm_state_find+0x10/0x10 [ 334.285255][T10598] ? xfrm_resolve_and_create_bundle+0x6e6/0x2f80 [ 334.291577][T10598] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 334.297728][T10598] ? stack_depot_save_flags+0x40/0x860 [ 334.303184][T10598] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 334.309764][T10598] ? __lock_acquire+0xab9/0xd20 [ 334.314618][T10598] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 334.319982][T10598] ? rt_set_nexthop+0x693/0xa80 [ 334.324828][T10598] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 334.330192][T10598] ? xfrm_expand_policies+0x41f/0x6a0 [ 334.335558][T10598] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 334.340924][T10598] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 334.346728][T10598] xfrm_lookup_route+0x3c/0x1c0 [ 334.351659][T10598] udp_sendmsg+0x142e/0x2170 [ 334.356251][T10598] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 334.361792][T10598] ? __pfx_udp_sendmsg+0x10/0x10 [ 334.366725][T10598] ? count_memcg_event_mm+0x21/0x260 [ 334.372004][T10598] ? count_memcg_event_mm+0x21/0x260 [ 334.377285][T10598] ? __pfx_aa_sk_perm+0x10/0x10 [ 334.382126][T10598] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 334.388545][T10598] ? sock_rps_record_flow+0x19/0x410 [ 334.393824][T10598] ? inet_sendmsg+0x29c/0x370 [ 334.398490][T10598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.403765][T10598] __sock_sendmsg+0x19c/0x270 [ 334.408440][T10598] ____sys_sendmsg+0x52d/0x830 [ 334.413202][T10598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.418481][T10598] ? import_iovec+0x74/0xa0 [ 334.422975][T10598] ___sys_sendmsg+0x21f/0x2a0 [ 334.427643][T10598] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.432845][T10598] ? __fget_files+0x2a/0x420 [ 334.437430][T10598] ? __fget_files+0x3a0/0x420 [ 334.442102][T10598] __sys_sendmmsg+0x227/0x430 [ 334.446772][T10598] ? __pfx___sys_sendmmsg+0x10/0x10 [ 334.451958][T10598] ? do_futex+0x333/0x420 [ 334.456287][T10598] ? __pfx___se_sys_futex+0x10/0x10 [ 334.461478][T10598] __x64_sys_sendmmsg+0xa0/0xc0 [ 334.466320][T10598] do_syscall_64+0xfa/0x3b0 [ 334.470812][T10598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.476866][T10598] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.483008][T10598] ? clear_bhb_loop+0x60/0xb0 [ 334.487673][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.493553][T10598] RIP: 0033:0x7f49e078eec9 [ 334.497956][T10598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.517552][T10598] RSP: 002b:00007f49e16eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.525957][T10598] RAX: ffffffffffffffda RBX: 00007f49e09e5fa0 RCX: 00007f49e078eec9 [ 334.533960][T10598] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 334.541919][T10598] RBP: 00007f49e0811f91 R08: 0000000000000000 R09: 0000000000000000 [ 334.550008][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.557965][T10598] R13: 00007f49e09e6038 R14: 00007f49e09e5fa0 R15: 00007f49e0b0fa28 [ 334.565931][T10598] [ 334.569210][T10598] Kernel Offset: disabled [ 334.573527][T10598] Rebooting in 86400 seconds..