last executing test programs: 9.791365904s ago: executing program 4 (id=722): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000fdffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 9.518705639s ago: executing program 4 (id=724): unshare(0x2c020400) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x760, 0x103382) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) r5 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0, 0xffee}]) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r3, &(0x7f0000000540), 0x0, 0x4040880) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000029000b0027bd72000008000005000004f8f362d0f0f4e97098b58296bf8a62a43cd9c4d7041e7f8d620c59e6a34c3a394c5b82d9daf65dc664b43bada99fcabe"], 0x14}}, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x80402) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x7c, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x68, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x7c}, 0x1, 0x2b1e}, 0x408d4) ioctl$LOOP_SET_STATUS(r1, 0x1277, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x83, 0xa, 0x9, 0x1c, "4b8b3ea40100dfed0b2f3409000000dd5a96a9040009918ac2efcc70af689d37bbe9b87dd5210000000002010000aac8c93e0ba6df00000000fabdf75f000b00", "090000f0ff20000001ff6be3f0ad717e1085deb8070901806cec00", [0x7, 0x206]}) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000040)=0x6, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000000)={0x3, 'xfrm0\x00', {0x1}, 0xc}) 8.481633333s ago: executing program 0 (id=729): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xcc0, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f00cd10b00e08e2632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x4000, 0x60000000, 0x2c3, 0xd17e91c4eaae85fe}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000980), &(0x7f0000000300)=r0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607fd4804053"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000009c0)="0f6748b62e0f2354f30fc732362667672e266436360f01c40f20e035000004000f22e0f0802700b836ff00000f23c00f21f83503000f000f23f80f01d167f20f062e0f09", 0x44}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x5dd1, 0x2, 0x4, 0x20005, 0x20000004, 0x7f, 0x800000004233, 0x0, 0x5, 0xb2e, 0x8001, 0x1, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYRES16=r5], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$vbi(&(0x7f0000000600), 0x0, 0x2) 8.42568836s ago: executing program 4 (id=730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @pic={0xff, 0xcf, 0xa2, 0x6, 0x1, 0x9, 0x5, 0x5, 0x5, 0x9, 0x7f, 0xed, 0x54, 0x8, 0x5, 0xc}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000004000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 7.663567442s ago: executing program 2 (id=732): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4000, @empty}, 0x1c) 7.196465981s ago: executing program 2 (id=733): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x2, 0xfffffffffffffff9, 0xfffffffffffffffe}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) dup(r2) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r3, 0x200004) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2addd0", @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYBLOB=',']) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="21bb606684f7617b3f1b1962ae5dad7799e2b73248c994b2ffbfeabbdf231a116f99508006aec54f5f1f6a8eb079e40d3984b8e0d3ee9ecf237b4796406880234d38dd1cb222aa2c21f29551e8e7fa0c876d27d2b691070960742038cea973dac2750e4d", 0x64}, {&(0x7f0000000600)="1527b0c06b1e39339c9bc52874feb371ecfb5669257bb17fd187d408e61fb33eef9b2d878411ffeee3ea5101a564f6605e26f83e0ec39a9719b1967adc0ce5f95c3b427e9f83e4c2e6d053047b9869453d8b8ed08a8d65fe60dca7fc9c6df65cf95f0abc24330b48b429eefdb1c8a5bb889055da7e4f3f70f1960b8a5749cadbaa84794a0e22d2f7e430b5520b3cc472c0bf10bfa1bc2ade71e51a575fe3a5c5914168096e8b705d252cbba58c478036944d7a20f44d195c03f3995579c8949e8ee258e11259cbcc14e0052b2bc157a16f", 0xd1}, {&(0x7f0000002840)="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", 0x1000}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/70, 0x46}], 0x2}, 0x12060) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 5.892191725s ago: executing program 1 (id=739): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f000001e140)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/138, 0x8a}, {&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000019580)=""/154, 0x9a}, {&(0x7f0000019640)=""/160, 0xa0}, {&(0x7f0000000000)=""/4, 0x4}], 0x5, &(0x7f0000019700)=""/4096, 0x1000}, 0x2a97661e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/100, 0x64}, {&(0x7f0000000300)}, {&(0x7f000001a700)=""/208, 0xd0}, {&(0x7f000001a800)=""/162, 0xa2}, {&(0x7f000001e380)=""/4099, 0x135}, {&(0x7f000001b8c0)=""/4096, 0x1000}], 0x6}, 0xffffffff}, {{&(0x7f000001c8c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f000001cd00)=[{&(0x7f000001c940)=""/165, 0xa5}, {&(0x7f000001ca00)=""/247, 0xf7}, {&(0x7f000001cb00)=""/219, 0xdb}, {&(0x7f000001cc00)=""/206, 0xce}], 0x4, &(0x7f000001cd40)=""/136, 0x88}, 0xbac}, {{&(0x7f000001ce00)=@nfc, 0x80, &(0x7f000001cec0)=[{&(0x7f000001ce80)=""/1, 0x1}], 0x1, &(0x7f000001cf00)=""/154, 0x9a}, 0xfff}, {{&(0x7f000001cfc0)=@hci, 0x80, &(0x7f000001d580)=[{&(0x7f000001d040)=""/23, 0x17}, {&(0x7f000001d080)=""/174, 0xae}, {&(0x7f000001d140)=""/84, 0x54}, {&(0x7f000001d1c0)=""/165, 0xa5}, {&(0x7f000001d280)=""/166, 0xa6}, {&(0x7f000001d340)=""/242, 0xf2}, {&(0x7f000001d440)=""/161, 0xffffffffffffff08}, {&(0x7f000001d500)=""/77, 0x4d}], 0x8, &(0x7f000001d600)=""/121, 0x79}, 0x7ff}, {{&(0x7f000001d680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f000001d8c0)=[{&(0x7f000001d700)=""/71, 0x47}, {&(0x7f000001d780)=""/195, 0xc3}, {&(0x7f000001d880)=""/51, 0x33}], 0x3, &(0x7f000001d900)=""/98, 0x62}}, {{0xfffffffffffffffd, 0x0, &(0x7f000001df40)=[{&(0x7f000001d980)=""/85, 0x55}, {&(0x7f000001da00)=""/155, 0x9b}, {&(0x7f000001dac0)=""/139, 0x8b}, {&(0x7f000001db80)=""/242, 0xf2}, {&(0x7f000001dc80)=""/217, 0xd9}, {&(0x7f000001dd80)=""/201, 0xc9}, {&(0x7f000001de80)=""/159, 0x9f}], 0x7}, 0x7f}, {{&(0x7f000001dfc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000001e040)=[{0xfffffffffffffffe}], 0x1, &(0x7f000001e080)=""/149, 0x95}, 0x8}], 0x8, 0x2060, &(0x7f000001e340)={0x77359400}) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000002700)=ANY=[@ANYBLOB="00000800010506000300800006"], 0x1293) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) 5.763755733s ago: executing program 1 (id=740): unshare(0x2c020400) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x45, 0x0, 0x0) (fail_nth: 1) 5.324880641s ago: executing program 1 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000300), 0x4a, 0x20000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r6 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x4000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) shmctl$IPC_RMID(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r7, 0x3, 0x9, 0x3ffc}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000080601040000000000000000070000080500010007000000050001000700000005000100070000000900020073797a320000000005000100070000000900020073577a310000000005000100070000000900020073797a30000000000900020073797a30000000000500010007000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c0003", @ANYRES64=r0, @ANYRES8=r1], 0x10c}, 0x1, 0x0, 0x0, 0x4048084}, 0x4040) 5.177534433s ago: executing program 4 (id=742): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r5, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x34}}, 0x4) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x80, 0x0}, 0x24004059) close(r1) unshare(0x2c020400) socket$key(0xf, 0x3, 0x2) 5.020352452s ago: executing program 0 (id=743): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4000, @empty}, 0x1c) 4.591883906s ago: executing program 4 (id=744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000780)="0f20e06635000010000f22e0baf80c66b8a05e798f66efbafc0c66b8cba0c0dc66eff30fc7b7006066b8010000000f23c80f21f866350c0090000f23f80f76c92e3664660fda1f860a0f38c9b9af9bf20ff07437ba4200ec", 0x58}], 0xaaaaaaaaaaaab1d, 0x76, 0x0, 0xffffffffffffff03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth1_to_team\x00', &(0x7f0000001c40)=@ethtool_gstrings={0x1b, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$alg(0x26, 0x5, 0x0) 4.586190453s ago: executing program 0 (id=745): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000140)={0xc, 0x3, 0x6, {0x8, 0x7, 0x2, 0x2}}) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000009c0)=@IORING_OP_MSG_RING={0x28, 0x32, 0x0, r5, 0x1, &(0x7f0000000040)="5b0526a74d31f432d421d863af45725e7429eaa59d1a4c3e3a078b178743", 0x1e, 0x0, 0x1}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_enter(r5, 0x7a98, 0x1000000, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_PORT_SELF={0x28, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0a226f7b5c1fa666b739561bbbe47426"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}, @IFLA_MTU={0x8, 0x4, 0x13a}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x64}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2e9}]}}}]}, 0x4c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) 4.383784518s ago: executing program 2 (id=746): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) (async) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0xffff, 0x1}, 0xc) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) (async) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, 0x3}, {0xa, 0x4e20, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x0, {[0xffff56d1, 0x3, 0xff7, 0x8, 0x401, 0x4, 0x3, 0x5]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, 0x3}, {0xa, 0x4e20, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x0, {[0xffff56d1, 0x3, 0xff7, 0x8, 0x401, 0x4, 0x3, 0x5]}}, 0x5c) timer_settime(r5, 0x1, &(0x7f0000002300)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080), 0x0) timer_settime(r4, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, 0x0) unshare(0x5b3562707363a904) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000029ab2ad7ae7685f80411000300686173683a69702c706f727413000000050001000700000005000500020001000900020073797a310000000005000400000000000c0007800800064000"/88], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000029ab2ad7ae7685f80411000300686173683a69702c706f727413000000050001000700000005000500020001000900020073797a310000000005000400000000000c0007800800064000"/88], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xfffffffc, @empty}, {0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800086}, r11}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, {0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, r11}}, 0x48) 3.737550042s ago: executing program 3 (id=748): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304"], 0x0, 0x37}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600655800004c150280081511"], 0x1570}, 0x1, 0x0, 0xfd, 0x20000000}, 0xc800) 3.4563673s ago: executing program 3 (id=749): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x200000000000000}}, 0x1c) 2.858875165s ago: executing program 1 (id=750): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f000001e140)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/138, 0x8a}, {&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000019580)=""/154, 0x9a}, {&(0x7f0000019640)=""/160, 0xa0}, {&(0x7f0000000000)=""/4, 0x4}], 0x5, &(0x7f0000019700)=""/4096, 0x1000}, 0x2a97661e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/100, 0x64}, {&(0x7f0000000300)}, {&(0x7f000001a700)=""/208, 0xd0}, {&(0x7f000001a800)=""/162, 0xa2}, {&(0x7f000001e380)=""/4099, 0x135}, {&(0x7f000001b8c0)=""/4096, 0x1000}], 0x6}, 0xffffffff}, {{&(0x7f000001c8c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f000001cd00)=[{&(0x7f000001c940)=""/165, 0xa5}, {&(0x7f000001ca00)=""/247, 0xf7}, {&(0x7f000001cb00)=""/219, 0xdb}, {&(0x7f000001cc00)=""/206, 0xce}], 0x4, &(0x7f000001cd40)=""/136, 0x88}, 0xbac}, {{&(0x7f000001ce00)=@nfc, 0x80, &(0x7f000001cec0)=[{&(0x7f000001ce80)=""/1, 0x1}], 0x1, &(0x7f000001cf00)=""/154, 0x9a}, 0xfff}, {{&(0x7f000001cfc0)=@hci, 0x80, &(0x7f000001d580)=[{&(0x7f000001d040)=""/23, 0x17}, {&(0x7f000001d080)=""/174, 0xae}, {&(0x7f000001d140)=""/84, 0x54}, {&(0x7f000001d1c0)=""/165, 0xa5}, {&(0x7f000001d280)=""/166, 0xa6}, {&(0x7f000001d340)=""/242, 0xf2}, {&(0x7f000001d440)=""/161, 0xffffffffffffff08}, {&(0x7f000001d500)=""/77, 0x4d}], 0x8, &(0x7f000001d600)=""/121, 0x79}, 0x7ff}, {{&(0x7f000001d680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f000001d8c0)=[{&(0x7f000001d700)=""/71, 0x47}, {&(0x7f000001d780)=""/195, 0xc3}, {&(0x7f000001d880)=""/51, 0x33}], 0x3, &(0x7f000001d900)=""/98, 0x62}}, {{0xfffffffffffffffd, 0x0, &(0x7f000001df40)=[{&(0x7f000001d980)=""/85, 0x55}, {&(0x7f000001da00)=""/155, 0x9b}, {&(0x7f000001dac0)=""/139, 0x8b}, {&(0x7f000001db80)=""/242, 0xf2}, {&(0x7f000001dc80)=""/217, 0xd9}, {&(0x7f000001dd80)=""/201, 0xc9}, {&(0x7f000001de80)=""/159, 0x9f}], 0x7}, 0x7f}, {{&(0x7f000001dfc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000001e040)=[{0xfffffffffffffffe}], 0x1, &(0x7f000001e080)=""/149, 0x95}, 0x8}], 0x8, 0x2060, &(0x7f000001e340)={0x77359400}) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000002700)=ANY=[@ANYBLOB="00000800010506000300800006"], 0x1293) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) 2.796222472s ago: executing program 4 (id=751): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902", @ANYRESHEX], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002480), 0x20402, 0x0) r3 = syz_io_uring_setup(0x27e2, &(0x7f0000000940)={0x0, 0x6465, 0x1000, 0x2, 0x306}, &(0x7f00000009c0), &(0x7f0000000a00)) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x8400, 0x2, 0x3ad, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a40), 0x201, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000a80)={0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r8 = fanotify_init(0x200, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r8, 0x41, 0x8000038, r9, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x20) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x20, 0x5, 0x2c, {0x2c, 0x0, "9eeb86e1fb5317836f804ec5da89e30ae022ad20b9a58ef867a58e805d9d0e1011dabaefb68a87404dff"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000280)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0xc, 0x2}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x4, 0x80, 0x0, "43d32e2e", "73ac0341"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0xc, 0x2, 0x4, 0x5, 0x1}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x40, 0x31, 0x73, "e35b5fe38affcadb3358470ffbd9cbefa70d806ee7a06cf69f151f586e140e8f29960711e9265b52ffbdaa455c10d270755d6af05a998ecbc9902316c8362df8773a608a0e454d0afceca2e6ba099dcaa1c453075b318f7c354e4e5582ddf6bd67cf77e25bb2e1b21b58de27f04c21d85a9b83"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0xb, 0x2, "0bfc"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000700)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "01b1"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xcaaa}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xf4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x89}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000480)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000003"]}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) 2.652322673s ago: executing program 2 (id=752): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x213, @tick=0x3f, 0x3, {0x6, 0x8}, 0xf, 0x1, 0x80}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x300000000000000) 2.642062092s ago: executing program 1 (id=753): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 2.528868163s ago: executing program 2 (id=754): socket$inet6(0xa, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x3a}, {@rand_addr=0x64010105, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) munlockall() r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f00000001c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.412138131s ago: executing program 0 (id=755): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 2.411963341s ago: executing program 3 (id=756): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4000, @empty}, 0x1c) (fail_nth: 5) 2.288979756s ago: executing program 1 (id=757): unshare(0x2c020400) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x6, 0x4) 2.233603576s ago: executing program 0 (id=758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.819304285s ago: executing program 3 (id=759): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e20, 0x10, @mcast1, 0x2}}, 0x0, 0x0, 0x3f, 0x0, "ac3fe225b526349c87037e28cbb09cf166ec7ee3a27c78c5c47766a392b103bde812a58319191dbe395281d1c3273de1bc622b0e3b63c68163dd8e47c7cb9aec01a1ca417330fbe0fd6d0606d264d406"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff0000000000000fff58000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.740426264s ago: executing program 0 (id=760): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x1], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000580), 0x2320, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201e28b07ed9791b1d1030109021b0001000000000904000c012e459e000905", @ANYRES8, @ANYRESDEC], 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x27, 0xaf0, 0x71, 0x1, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) 1.592555447s ago: executing program 3 (id=761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000780)="0f20e06635000010000f22e0baf80c66b8a05e798f66efbafc0c66b8cba0c0dc66eff30fc7b7006066b8010000000f23c80f21f866350c0090000f23f80f76c92e3664660fda1f860a0f38c9b9af9bf20ff07437ba4200ec", 0x58}], 0xaaaaaaaaaaaab1d, 0x76, 0x0, 0xffffffffffffff03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth1_to_team\x00', &(0x7f0000001c40)=@ethtool_gstrings={0x1b, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$alg(0x26, 0x5, 0x0) 802.167418ms ago: executing program 2 (id=762): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) wait4(0xffffffffffffffff, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000040000000700b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x800c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x88}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) sendmsg$nl_netfilter(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0xe, 0x5, 0x801, 0x70bd2a, 0x25dfdbfe, {0x5, 0x0, 0x9}, [@typed={0x8, 0xa, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004014}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r6, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000140)={0x3, r8, 0x1}) 0s ago: executing program 3 (id=763): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f000001e140)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/138, 0x8a}, {&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000019580)=""/154, 0x9a}, {&(0x7f0000019640)=""/160, 0xa0}, {&(0x7f0000000000)=""/4, 0x4}], 0x5, &(0x7f0000019700)=""/4096, 0x1000}, 0x2a97661e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/100, 0x64}, {&(0x7f0000000300)}, {&(0x7f000001a700)=""/208, 0xd0}, {&(0x7f000001a800)=""/162, 0xa2}, {&(0x7f000001e380)=""/4099, 0x135}, {&(0x7f000001b8c0)=""/4096, 0x1000}], 0x6}, 0xffffffff}, {{&(0x7f000001c8c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f000001cd00)=[{&(0x7f000001c940)=""/165, 0xa5}, {&(0x7f000001ca00)=""/247, 0xf7}, {&(0x7f000001cb00)=""/219, 0xdb}, {&(0x7f000001cc00)=""/206, 0xce}], 0x4, &(0x7f000001cd40)=""/136, 0x88}, 0xbac}, {{&(0x7f000001ce00)=@nfc, 0x80, &(0x7f000001cec0)=[{&(0x7f000001ce80)=""/1, 0x1}], 0x1, &(0x7f000001cf00)=""/154, 0x9a}, 0xfff}, {{&(0x7f000001cfc0)=@hci, 0x80, &(0x7f000001d580)=[{&(0x7f000001d040)=""/23, 0x17}, {&(0x7f000001d080)=""/174, 0xae}, {&(0x7f000001d140)=""/84, 0x54}, {&(0x7f000001d1c0)=""/165, 0xa5}, {&(0x7f000001d280)=""/166, 0xa6}, {&(0x7f000001d340)=""/242, 0xf2}, {&(0x7f000001d440)=""/161, 0xffffffffffffff08}, {&(0x7f000001d500)=""/77, 0x4d}], 0x8, &(0x7f000001d600)=""/121, 0x79}, 0x7ff}, {{&(0x7f000001d680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f000001d8c0)=[{&(0x7f000001d700)=""/71, 0x47}, {&(0x7f000001d780)=""/195, 0xc3}, {&(0x7f000001d880)=""/51, 0x33}], 0x3, &(0x7f000001d900)=""/98, 0x62}}, {{0xfffffffffffffffd, 0x0, &(0x7f000001df40)=[{&(0x7f000001d980)=""/85, 0x55}, {&(0x7f000001da00)=""/155, 0x9b}, {&(0x7f000001dac0)=""/139, 0x8b}, {&(0x7f000001db80)=""/242, 0xf2}, {&(0x7f000001dc80)=""/217, 0xd9}, {&(0x7f000001dd80)=""/201, 0xc9}, {&(0x7f000001de80)=""/159, 0x9f}], 0x7}, 0x7f}, {{&(0x7f000001dfc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000001e040)=[{0xfffffffffffffffe}], 0x1, &(0x7f000001e080)=""/149, 0x95}, 0x8}], 0x8, 0x2060, &(0x7f000001e340)={0x77359400}) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000002700)=ANY=[@ANYBLOB="00000800010506000300800006"], 0x1293) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) kernel console output (not intermixed with test programs): 0][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 106.678022][ T9] usb 5-1: New USB device found, idVendor=2e81, idProduct=0898, bcdDevice= 0.40 [ 106.745727][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.827347][ T9] usb 5-1: Product: syz [ 106.852297][ T9] usb 5-1: Manufacturer: syz [ 106.968718][ T9] usb 5-1: SerialNumber: syz [ 107.050019][ T6730] binder: 6729:6730 ioctl c0306201 200000000240 returned -14 [ 107.302811][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.313560][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.736788][ T5926] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.135202][ T30] audit: type=1326 audit(1759594018.319:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 108.946052][ T5926] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 108.955174][ T30] audit: type=1326 audit(1759594018.329:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 108.977365][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.997573][ T5926] usb 1-1: config 0 has no interface number 0 [ 109.003872][ T5926] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 109.015476][ T30] audit: type=1326 audit(1759594018.329:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 109.039193][ T5926] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.062591][ T30] audit: type=1326 audit(1759594018.329:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 109.088950][ T30] audit: type=1326 audit(1759594018.329:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 109.140039][ T5926] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 109.258366][ T30] audit: type=1326 audit(1759594018.329:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 109.280574][ T30] audit: type=1326 audit(1759594018.329:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 109.302536][ T30] audit: type=1326 audit(1759594018.329:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 109.362671][ T30] audit: type=1326 audit(1759594018.329:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 109.413343][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.436664][ T5926] usb 1-1: Product: syz [ 109.440913][ T5926] usb 1-1: Manufacturer: syz [ 109.455103][ T5926] usb 1-1: SerialNumber: syz [ 109.512733][ T30] audit: type=1326 audit(1759594018.329:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 109.512797][ T5926] usb 1-1: config 0 descriptor?? [ 110.215837][ T6772] netlink: 108 bytes leftover after parsing attributes in process `syz.1.40'. [ 110.271177][ T6772] openvswitch: netlink: Unexpected mask (mask=400, allowed=10048) [ 110.439733][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 110.451964][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 110.529849][ T9] usb 5-1: USB disconnect, device number 2 [ 111.029553][ T6781] netlink: 'syz.1.42': attribute type 10 has an invalid length. [ 112.374558][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'. [ 112.696242][ T6793] openvswitch: netlink: Unknown nsh attribute 0 [ 112.735569][ T6793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.317030][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.485219][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 113.495473][ T9] usb 3-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.521182][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 113.551798][ T9] usb 3-1: New USB device found, idVendor=2e81, idProduct=0898, bcdDevice= 0.40 [ 113.562541][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.570891][ T9] usb 3-1: Product: syz [ 113.582439][ T9] usb 3-1: Manufacturer: syz [ 113.587859][ T9] usb 3-1: SerialNumber: syz [ 113.878882][ T6803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.891809][ T6803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.937885][ T6794] netlink: 60 bytes leftover after parsing attributes in process `syz.1.48'. [ 114.799563][ T6827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.57'. [ 115.081367][ T6834] fuse: Bad value for 'fd' [ 115.246309][ T5913] IPVS: starting estimator thread 0... [ 115.546776][ T6835] IPVS: using max 26 ests per chain, 62400 per kthread [ 115.641584][ T6838] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 115.666860][ T6837] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 115.678121][ T6838] netlink: 152 bytes leftover after parsing attributes in process `syz.1.60'. [ 115.714313][ T6837] netlink: 152 bytes leftover after parsing attributes in process `syz.1.60'. [ 115.738837][ T6838] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 115.785926][ T6837] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 116.236505][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 116.247668][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 116.348638][ T9] usb 3-1: USB disconnect, device number 3 [ 116.413264][ T5913] usb 1-1: USB disconnect, device number 2 [ 116.836182][ T6855] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.582211][ T6880] openvswitch: netlink: Unknown nsh attribute 0 [ 117.606993][ T6880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.054884][ T6893] syzkaller0: entered promiscuous mode [ 118.124875][ T6893] syzkaller0: entered allmulticast mode [ 118.180896][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 118.701332][ T6911] fuse: Bad value for 'fd' [ 118.858857][ T5926] IPVS: starting estimator thread 0... [ 119.458385][ T6917] IPVS: using max 38 ests per chain, 91200 per kthread [ 119.610435][ T6922] syzkaller0: entered promiscuous mode [ 119.638124][ T6922] syzkaller0: entered allmulticast mode [ 121.384563][ T6950] cgroup: fork rejected by pids controller in /syz0 [ 124.071121][ T8362] fuse: Bad value for 'fd' [ 124.199814][ T8363] openvswitch: netlink: Unknown nsh attribute 0 [ 124.207063][ T8363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.395675][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 124.552020][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 124.806823][ T5926] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.818150][ T8374] bond1: (slave veth3): Enslaving as an active interface with an up link [ 124.987368][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 124.997356][ T5926] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 125.016672][ T5926] usb 1-1: config 0 has no interface number 0 [ 125.033045][ T5926] usb 1-1: config 0 interface 184 has no altsetting 0 [ 125.110535][ T5926] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.119936][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.176668][ T5926] usb 1-1: Product: syz [ 125.235078][ T5926] usb 1-1: Manufacturer: syz [ 125.275623][ T5926] usb 1-1: SerialNumber: syz [ 125.313032][ T5926] usb 1-1: config 0 descriptor?? [ 125.322567][ T5926] smsc75xx v1.0.0 [ 125.803710][ T8393] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.828462][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 125.837427][ T8393] netlink: 'syz.4.121': attribute type 30 has an invalid length. [ 125.887681][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 125.926453][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 125.947066][ T8395] loop2: detected capacity change from 0 to 7 [ 125.956094][ T8393] Zero length message leads to an empty skb [ 125.962966][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 125.977203][ T6853] Dev loop2: unable to read RDB block 7 [ 125.994018][ T6853] loop2: unable to read partition table [ 126.001660][ T6853] loop2: partition table beyond EOD, truncated [ 126.017165][ T8395] Dev loop2: unable to read RDB block 7 [ 126.049082][ T8395] loop2: unable to read partition table [ 126.055230][ T8395] loop2: partition table beyond EOD, truncated [ 126.062116][ T8395] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.150388][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.169638][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.178310][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.225146][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.255324][ T8402] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 126.278777][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 126.288929][ T8402] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 126.317430][ T8410] netlink: 36 bytes leftover after parsing attributes in process `syz.4.128'. [ 126.332847][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 126.360056][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 126.360110][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 126.360843][ T5926] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 126.416381][ T5926] usb 1-1: USB disconnect, device number 3 [ 126.437612][ T8403] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 126.460395][ T8403] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 126.496841][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.514208][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.870712][ T5830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.002403][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 127.002417][ T30] audit: type=1326 audit(1759594037.299:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.0.132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64a1f8eec9 code=0x0 [ 127.030301][ T5830] usb 2-1: device descriptor read/64, error -71 [ 127.059489][ T8433] tipc: Enabling of bearer rejected, failed to enable media [ 127.095470][ T8433] netlink: 'syz.0.132': attribute type 9 has an invalid length. [ 127.103501][ T30] audit: type=1326 audit(1759594037.389:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 127.125740][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 127.140585][ T30] audit: type=1326 audit(1759594037.389:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 127.166539][ T30] audit: type=1326 audit(1759594037.389:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 127.196547][ T30] audit: type=1326 audit(1759594037.389:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 127.225678][ T30] audit: type=1326 audit(1759594037.389:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 127.247763][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.255892][ T30] audit: type=1326 audit(1759594037.389:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 127.284455][ T30] audit: type=1326 audit(1759594037.389:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 127.287395][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.326039][ T30] audit: type=1326 audit(1759594037.389:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc59e18d710 code=0x7ffc0000 [ 127.348218][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.367255][ T30] audit: type=1326 audit(1759594037.389:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 127.520393][ T5830] usb 2-1: device descriptor read/64, error -71 [ 127.727379][ T5830] usb usb2-port1: attempt power cycle [ 128.067596][ T5830] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 128.079538][ T5913] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.098562][ T5830] usb 2-1: device descriptor read/8, error -71 [ 128.236773][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 128.244121][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.261374][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.271643][ T5926] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.280305][ T5913] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 128.289523][ T5932] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.299187][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.311751][ T5913] usb 3-1: config 0 descriptor?? [ 128.336717][ T5830] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 128.357323][ T5830] usb 2-1: device descriptor read/8, error -71 [ 128.426724][ T5932] usb 1-1: device descriptor read/64, error -71 [ 128.447237][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 128.455172][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.466413][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.476262][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.477960][ T5830] usb usb2-port1: unable to enumerate USB device [ 128.490973][ T5926] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 128.505652][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.516348][ T5926] usb 5-1: config 0 descriptor?? [ 128.666795][ T5932] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.746416][ T5913] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 128.796932][ T5932] usb 1-1: device descriptor read/64, error -71 [ 128.909639][ T5932] usb usb1-port1: attempt power cycle [ 128.935974][ T5913] corsair 0003:1B1C:1B02.0001: Read invalid backlight brightness: ad. [ 129.092719][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 129.130617][ T5926] usbhid 5-1:0.0: can't add hid device: -71 [ 129.136914][ T5926] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 129.148984][ T5926] usb 5-1: USB disconnect, device number 3 [ 129.182439][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.221392][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.246773][ T5932] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.260260][ T5830] usb 3-1: USB disconnect, device number 4 [ 129.278626][ T5932] usb 1-1: device descriptor read/8, error -71 [ 129.285574][ T8458] syz.3.142 uses obsolete (PF_INET,SOCK_PACKET) [ 129.516752][ T5932] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.538558][ T5932] usb 1-1: device descriptor read/8, error -71 [ 129.647277][ T5932] usb usb1-port1: unable to enumerate USB device [ 129.685835][ T8460] openvswitch: netlink: Unknown nsh attribute 0 [ 129.694001][ T8460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.825622][ T8462] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 129.860562][ T8462] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 129.891103][ T8467] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 129.904116][ T8467] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 130.001736][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 130.066942][ T5926] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 130.142077][ T8479] syzkaller0: entered promiscuous mode [ 130.146892][ T8478] netlink: 'syz.4.149': attribute type 32 has an invalid length. [ 130.147859][ T8479] syzkaller0: entered allmulticast mode [ 130.164292][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 130.196153][ T8478] bond3: option coupled_control: invalid value (110) [ 130.205658][ T8478] bond3 (unregistering): Released all slaves [ 130.233400][ T8481] tipc: Started in network mode [ 130.240175][ T8481] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 130.248887][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 130.257086][ T5926] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 130.268521][ T5926] usb 2-1: config 0 has no interface number 0 [ 130.274881][ T5926] usb 2-1: config 0 interface 184 has no altsetting 0 [ 130.283246][ T8481] tipc: Enabled bearer , priority 10 [ 130.302353][ T5926] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 130.311929][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.320601][ T5926] usb 2-1: Product: syz [ 130.326266][ T5926] usb 2-1: Manufacturer: syz [ 130.338709][ T5926] usb 2-1: SerialNumber: syz [ 130.352346][ T5926] usb 2-1: config 0 descriptor?? [ 130.399474][ T5926] smsc75xx v1.0.0 [ 130.629331][ T5926] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 130.670361][ T5926] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 130.694755][ T5926] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 130.723557][ T5926] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 130.836747][ T5830] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.853638][ T44] usb 2-1: USB disconnect, device number 11 [ 130.876699][ T5844] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.976689][ T5830] usb 4-1: device descriptor read/64, error -71 [ 131.085823][ T5844] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.136153][ T5844] usb 5-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.193819][ T5844] usb 5-1: config 1 interface 0 has no altsetting 0 [ 131.212551][ T5844] usb 5-1: New USB device found, idVendor=2e81, idProduct=0898, bcdDevice= 0.40 [ 131.242519][ T5830] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.368089][ T5926] tipc: Node number set to 10136234 [ 131.416435][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.466799][ T5830] usb 4-1: device descriptor read/64, error -71 [ 131.536821][ T5844] usb 5-1: Product: syz [ 131.541041][ T5844] usb 5-1: Manufacturer: syz [ 131.545669][ T5844] usb 5-1: SerialNumber: syz [ 131.717454][ T5830] usb usb4-port1: attempt power cycle [ 131.727503][ T8502] syzkaller0: entered promiscuous mode [ 131.733012][ T8502] syzkaller0: entered allmulticast mode [ 132.056539][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 132.096697][ T5926] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 132.126920][ T5830] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.182274][ T8488] ip6erspan0: entered promiscuous mode [ 132.211056][ T5830] usb 4-1: device descriptor read/8, error -71 [ 132.261330][ T5926] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 132.291465][ T5926] usb 3-1: can't read configurations, error -22 [ 132.323181][ T8516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.380773][ T8516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.486856][ T5926] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 132.487085][ T5830] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.541461][ T5830] usb 4-1: device descriptor read/8, error -71 [ 132.584644][ T8522] syzkaller0: entered promiscuous mode [ 132.596740][ T5913] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 132.604715][ T8522] syzkaller0: entered allmulticast mode [ 132.650184][ T5926] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 132.660209][ T5926] usb 3-1: can't read configurations, error -22 [ 132.667274][ T5830] usb usb4-port1: unable to enumerate USB device [ 132.669356][ T5926] usb usb3-port1: attempt power cycle [ 132.756771][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 132.765068][ T5913] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 132.785085][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.800334][ T5913] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.811379][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.819879][ T5913] usb 2-1: Product: syz [ 132.824368][ T5913] usb 2-1: Manufacturer: syz [ 132.830110][ T5913] usb 2-1: SerialNumber: syz [ 132.897487][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.904147][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.016714][ T5926] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 133.048235][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 133.070332][ T5926] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 133.078776][ T5926] usb 3-1: can't read configurations, error -22 [ 133.080216][ T8518] gre1: entered promiscuous mode [ 133.152038][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.164862][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.173280][ T5830] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.196921][ T5913] usb 2-1: 0:2 : does not exist [ 133.215947][ T5913] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 133.242482][ T5913] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 133.263612][ T5913] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 133.271576][ T5926] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 133.300727][ T5926] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 133.310345][ T5926] usb 3-1: can't read configurations, error -22 [ 133.317591][ T5913] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 133.348097][ T5926] usb usb3-port1: unable to enumerate USB device [ 133.413835][ T5830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.414767][ T5913] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 133.431400][ T5830] usb 1-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.454250][ T5830] usb 1-1: config 1 interface 0 has no altsetting 0 [ 133.578216][ T5913] usb 2-1: USB disconnect, device number 12 [ 133.696377][ T5830] usb 1-1: New USB device found, idVendor=2e81, idProduct=0898, bcdDevice= 0.40 [ 133.708000][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.716027][ T5830] usb 1-1: Product: syz [ 133.735641][ T6853] udevd[6853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.766861][ T5830] usb 1-1: Manufacturer: syz [ 133.781088][ T5830] usb 1-1: SerialNumber: syz [ 133.914035][ T8529] loop2: detected capacity change from 0 to 7 [ 133.928802][ T6853] Dev loop2: unable to read RDB block 7 [ 133.934680][ T6853] loop2: unable to read partition table [ 133.941035][ T6853] loop2: partition table beyond EOD, truncated [ 133.950619][ T8529] Dev loop2: unable to read RDB block 7 [ 133.969761][ T8529] loop2: unable to read partition table [ 133.997131][ T8529] loop2: partition table beyond EOD, truncated [ 134.010823][ T8529] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.067209][ T5844] usbhid 5-1:1.0: can't add hid device: -71 [ 134.097703][ T8526] ip6erspan0: entered promiscuous mode [ 134.118173][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.128287][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.171630][ T5844] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 134.250158][ T5844] usb 5-1: USB disconnect, device number 4 [ 134.326472][ T8535] tipc: Started in network mode [ 134.345067][ T8535] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 134.369512][ T8535] tipc: Enabled bearer , priority 10 [ 135.637353][ T5844] tipc: Node number set to 10136234 [ 136.756776][ T5844] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.896735][ T5844] usb 3-1: device descriptor read/64, error -71 [ 136.989841][ T5830] usbhid 1-1:1.0: can't add hid device: -71 [ 137.012993][ T5830] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 137.064078][ T5830] usb 1-1: USB disconnect, device number 8 [ 137.084510][ T8561] mmap: syz.0.178 (8561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.157015][ T5844] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.306746][ T5844] usb 3-1: device descriptor read/64, error -71 [ 137.366019][ T8565] ======================================================= [ 137.366019][ T8565] WARNING: The mand mount option has been deprecated and [ 137.366019][ T8565] and is ignored by this kernel. Remove the mand [ 137.366019][ T8565] option from the mount to silence this warning. [ 137.366019][ T8565] ======================================================= [ 137.434054][ T8565] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000000x0000000000000009 [ 137.434054][ T8565] 2' [ 137.546462][ T5844] usb usb3-port1: attempt power cycle [ 137.811667][ T8567] cgroup: fork rejected by pids controller in /syz4 [ 137.931362][ T5844] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 138.597967][ T5844] usb 3-1: device descriptor read/8, error -71 [ 138.948303][ T5844] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 138.980223][ T5844] usb 3-1: device descriptor read/8, error -71 [ 139.087548][ T5844] usb usb3-port1: unable to enumerate USB device [ 139.327836][T10604] openvswitch: netlink: Unknown nsh attribute 0 [ 139.447213][T10604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.047169][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 140.429308][T11792] loop2: detected capacity change from 0 to 7 [ 140.455448][ T8413] Dev loop2: unable to read RDB block 7 [ 140.473016][ T8413] loop2: unable to read partition table [ 140.483730][ T8413] loop2: partition table beyond EOD, truncated [ 140.551228][T11792] Dev loop2: unable to read RDB block 7 [ 140.578729][T11792] loop2: unable to read partition table [ 140.628127][T11792] loop2: partition table beyond EOD, truncated [ 140.634410][T11792] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 140.711497][T11796] syzkaller0: entered promiscuous mode [ 140.741526][T11796] syzkaller0: entered allmulticast mode [ 140.993245][T11811] openvswitch: netlink: Unknown nsh attribute 0 [ 141.043517][T11811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.245887][T11819] loop2: detected capacity change from 0 to 7 [ 141.322542][ T8413] Dev loop2: unable to read RDB block 7 [ 141.343386][ T8413] loop2: AHDI p1 p2 [ 141.370780][ T8413] loop2: partition table partially beyond EOD, truncated [ 141.396417][ T8413] loop2: p1 start 1818582900 is beyond EOD, truncated [ 141.448411][T11819] Dev loop2: unable to read RDB block 7 [ 141.467178][T11819] loop2: AHDI p1 p2 [ 141.487356][T11819] loop2: partition table partially beyond EOD, truncated [ 141.497292][T11819] loop2: p1 start 1818582900 is beyond EOD, truncated [ 141.558265][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 141.992950][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 141.992969][ T30] audit: type=1326 audit(1759594052.289:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.2.205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc84df8eec9 code=0x0 [ 142.366710][ T5926] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 142.466718][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 142.526700][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 142.534399][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.555500][ T5926] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.596073][ T5926] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 142.632037][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.651475][T11856] openvswitch: netlink: Unknown nsh attribute 0 [ 142.666815][T11856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.678353][ T5926] usb 2-1: config 0 descriptor?? [ 142.895707][T11844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.910502][T11844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.096813][ T5926] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.286787][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 143.295586][ T5926] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 143.349436][ T5844] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.440548][ T5926] usb 1-1: config 0 has no interface number 0 [ 143.456755][ T5913] usb 2-1: USB disconnect, device number 13 [ 143.473085][ T5926] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.504836][ T5926] usb 1-1: config 0 interface 85 has no altsetting 0 [ 143.526154][ T5926] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 143.538948][ T5844] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 143.549821][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.567923][ T5926] usb 1-1: Product: syz [ 143.577412][ T5926] usb 1-1: Manufacturer: syz [ 143.591403][ T5844] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.601423][ T5926] usb 1-1: SerialNumber: syz [ 143.614162][ T5844] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.634380][ T5926] usb 1-1: config 0 descriptor?? [ 143.642373][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 143.676708][ T5844] usb 5-1: Product: syz [ 143.680952][ T5844] usb 5-1: Manufacturer: syz [ 143.698903][ T5844] usb 5-1: SerialNumber: syz [ 143.727972][ T5844] usb 5-1: config 0 descriptor?? [ 143.758150][ T5844] usb 5-1: selecting invalid altsetting 0 [ 143.901500][T11870] netlink: 'syz.3.216': attribute type 32 has an invalid length. [ 143.912749][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 143.963179][ T5844] usb 5-1: USB disconnect, device number 5 [ 144.110804][T11870] bond2: option coupled_control: invalid value (110) [ 144.168083][T11873] loop2: detected capacity change from 0 to 7 [ 144.175813][T11870] bond2 (unregistering): Released all slaves [ 144.197573][T11873] Dev loop2: unable to read RDB block 7 [ 144.238190][T11873] loop2: AHDI p1 p2 [ 144.243860][T11873] loop2: partition table partially beyond EOD, truncated [ 144.279900][ T5926] appletouch 1-1:0.85: Geyser mode initialized. [ 144.296151][T11873] loop2: p1 start 1818582900 is beyond EOD, truncated [ 144.301224][ T5926] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input6 [ 144.494070][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.519499][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.565789][ T5844] usb 1-1: USB disconnect, device number 9 [ 144.685506][ T5844] appletouch 1-1:0.85: input: appletouch disconnected [ 144.999090][ T5926] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 145.102820][T11892] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 145.235212][ T5926] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 145.257974][ T5926] usb 4-1: config 8 has no interface number 0 [ 145.287609][ T5926] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 145.312452][T11901] program syz.4.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.347956][T11892] gretap1: entered promiscuous mode [ 145.358775][T11900] Invalid logical block size (4) [ 145.390935][T11892] bond1: (slave gretap1): making interface the new active one [ 145.416682][ T5926] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 145.448863][ T5926] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 145.470067][ T5926] usb 4-1: config 8 interface 177 has no altsetting 0 [ 145.472343][T11892] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 145.490594][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 145.503489][T11903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.559520][T11906] netlink: 'syz.0.230': attribute type 32 has an invalid length. [ 145.567693][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 145.583870][T11903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.598042][ T5926] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 145.613611][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.654599][T11879] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.737356][ T5913] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 145.760718][T11906] bond1: option coupled_control: invalid value (110) [ 145.779718][T11906] bond1 (unregistering): Released all slaves [ 145.890162][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 145.975291][ T5913] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 145.993623][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.044342][ T5913] usb 2-1: config 0 descriptor?? [ 146.067623][T11904] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 146.416802][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 146.427920][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 146.611177][ T3471] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.628295][ T3471] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.648808][ T5913] bigben 0003:146B:0902.0002: unexpected rdesc, please submit for review [ 146.700605][ T3471] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.718485][ T5913] bigben 0003:146B:0902.0002: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 146.726707][ T3471] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.736718][ T5913] bigben 0003:146B:0902.0002: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 146.846669][ T89] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 146.966119][ T5913] bigben 0003:146B:0902.0002: no output report found [ 147.016664][ T89] usb 1-1: Using ep0 maxpacket: 8 [ 147.035716][ T89] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 147.048703][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 147.111526][ T5913] usb 2-1: USB disconnect, device number 14 [ 147.113155][ T89] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 147.138681][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.171290][ T89] usb 1-1: Product: syz [ 147.176871][ T89] usb 1-1: Manufacturer: syz [ 147.201738][ T89] usb 1-1: SerialNumber: syz [ 147.326933][ T89] usb 1-1: config 0 descriptor?? [ 147.421674][ T89] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 148.835437][T11947] loop2: detected capacity change from 0 to 7 [ 148.844266][T11947] Dev loop2: unable to read RDB block 7 [ 148.850961][T11947] loop2: AHDI p1 p2 [ 148.855114][T11947] loop2: partition table partially beyond EOD, truncated [ 148.872614][T11947] loop2: p1 start 1818582900 is beyond EOD, truncated [ 149.421523][T11948] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 149.432870][T11948] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 149.600837][T11950] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 149.635018][ T5913] usb 1-1: USB disconnect, device number 10 [ 149.656142][T11950] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 149.686912][T11959] input: syz0 as /devices/virtual/input/input7 [ 149.900719][T11962] loop2: detected capacity change from 0 to 7 [ 149.925824][T11962] Dev loop2: unable to read RDB block 7 [ 149.951783][T11962] loop2: unable to read partition table [ 150.007096][T11962] loop2: partition table beyond EOD, truncated [ 150.018975][T11962] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 150.344067][T11974] openvswitch: netlink: Unknown nsh attribute 0 [ 150.356841][T11974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.381063][ T30] audit: type=1326 audit(1759594060.669:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 150.457636][ T30] audit: type=1326 audit(1759594060.669:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 150.490190][ T5926] usb 4-1: string descriptor 0 read error: -71 [ 150.582053][ T5926] ir_toy 4-1:8.177: required endpoints not found [ 150.619023][ T5926] usb 4-1: USB disconnect, device number 6 [ 150.720833][ T30] audit: type=1326 audit(1759594060.669:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 150.986725][ T89] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 151.047185][ T30] audit: type=1326 audit(1759594060.669:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 151.141549][ T30] audit: type=1326 audit(1759594060.669:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 151.222197][ T30] audit: type=1326 audit(1759594060.669:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 151.244737][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.312277][ T30] audit: type=1326 audit(1759594060.669:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 151.358024][ T89] usb 5-1: config 7 has an invalid interface number: 252 but max is 0 [ 151.380785][ T30] audit: type=1326 audit(1759594060.679:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 151.416341][ T89] usb 5-1: config 7 has no interface number 0 [ 151.422533][T11990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.257'. [ 151.566747][ T30] audit: type=1326 audit(1759594060.679:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 151.595330][ T89] usb 5-1: config 7 interface 252 has no altsetting 0 [ 151.815994][ T89] usb 5-1: string descriptor 0 read error: -22 [ 151.828752][ T89] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 151.879113][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.990609][ T30] audit: type=1326 audit(1759594060.679:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 152.000142][T11999] loop2: detected capacity change from 0 to 7 [ 152.162513][ T5854] Dev loop2: unable to read RDB block 7 [ 152.170414][ T5854] loop2: AHDI p1 p2 [ 152.174504][ T5854] loop2: partition table partially beyond EOD, truncated [ 152.187968][ T5854] loop2: p1 start 1818582900 is beyond EOD, truncated [ 152.203886][T11999] Dev loop2: unable to read RDB block 7 [ 152.211514][T11999] loop2: AHDI p1 p2 [ 152.219964][T11999] loop2: partition table partially beyond EOD, truncated [ 153.021382][T11999] loop2: p1 start 1818582900 is beyond EOD, truncated [ 153.256399][T12016] openvswitch: netlink: Unknown nsh attribute 0 [ 153.265206][T12016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.926534][T12025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.269'. [ 153.943104][T12025] netlink: 'syz.2.269': attribute type 6 has an invalid length. [ 153.967070][T12025] netlink: 'syz.2.269': attribute type 5 has an invalid length. [ 153.977015][T12025] netlink: 'syz.2.269': attribute type 4 has an invalid length. [ 154.046813][ T89] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.176718][ T89] usb 4-1: device descriptor read/64, error -71 [ 154.209680][ T5926] usb 5-1: USB disconnect, device number 6 [ 154.417378][T12030] input: syz1 as /devices/virtual/input/input8 [ 154.427566][ T89] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.586723][ T89] usb 4-1: device descriptor read/64, error -71 [ 154.709162][ T89] usb usb4-port1: attempt power cycle [ 154.947137][ T5844] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 155.057783][ T89] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.094564][ T89] usb 4-1: device descriptor read/8, error -71 [ 155.125000][ T5844] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.150898][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 155.171614][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.193503][ T5844] usb 2-1: Product: Ñ [ 155.201157][ T5844] usb 2-1: Manufacturer: ੱ䈸䈎å¾è”ᵥ駉化ﹱᅣ嬶徕ꉪä­î“䇸庘ᤌ勳倧꫟⧮ã§ä¤Œæ²·ç”¤æŠë•†ã˜œÕ’냺î„腖뙇洿ସᴘí¡á¿£äƒ¾æ¡§æ±á“ºî¨á╩륀㗟虩㾒틮➋嚹ﴅä¬éšƒè¦‹ìŽ­à ‘㺕汎ㅴ碾ᓤ뒅í©ã¶’ê•š [ 155.247287][ T5844] usb 2-1: SerialNumber: ã  [ 155.350097][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 155.393465][ T89] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.403931][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 155.423778][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.432389][ T24] usb 3-1: Product: syz [ 155.437450][ T89] usb 4-1: device descriptor read/8, error -71 [ 155.443824][ T24] usb 3-1: Manufacturer: syz [ 155.466723][ T24] usb 3-1: SerialNumber: syz [ 155.797393][ T89] usb usb4-port1: unable to enumerate USB device [ 156.094045][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 156.101812][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 157.626847][ T5830] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.822386][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.856739][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.867649][ T5830] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 157.881552][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.901007][ T5830] usb 4-1: config 0 descriptor?? [ 158.123069][T12070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.141572][T12070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.213685][ T5830] usbhid 4-1:0.0: can't add hid device: -71 [ 158.222550][ T5830] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 158.251468][ T5830] usb 4-1: USB disconnect, device number 11 [ 158.404392][ T5844] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 158.537337][ T5844] usb 2-1: USB disconnect, device number 15 [ 158.683035][ T8413] udevd[8413]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.839718][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 158.849490][ T24] r8152-cfgselector 3-1: bad CDC descriptors [ 158.914964][ T24] r8152-cfgselector 3-1: USB disconnect, device number 14 [ 160.066691][ T5830] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.148641][T12112] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2307790675 (73849301600 ns) > initial count (32142752608 ns). Using initial count to start timer. [ 160.312487][ T5830] usb 4-1: unable to get BOS descriptor or descriptor too short [ 160.324690][ T5830] usb 4-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.358541][ T5830] usb 4-1: config 1 interface 0 has no altsetting 0 [ 160.420188][ T5830] usb 4-1: New USB device found, idVendor=2e81, idProduct=0898, bcdDevice= 0.40 [ 160.431508][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.566662][ T5830] usb 4-1: Product: syz [ 160.600695][ T5830] usb 4-1: Manufacturer: syz [ 160.605623][ T5830] usb 4-1: SerialNumber: syz [ 160.740239][T12124] loop2: detected capacity change from 0 to 7 [ 161.078343][T12124] Dev loop2: unable to read RDB block 7 [ 161.113584][T12111] ip6erspan0: entered promiscuous mode [ 161.128397][T12124] loop2: unable to read partition table [ 161.142374][T12124] loop2: partition table beyond EOD, truncated [ 161.159651][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.192871][T12124] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 161.203803][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.218832][ T5209] Dev loop2: unable to read RDB block 7 [ 161.224745][ T5209] loop2: unable to read partition table [ 161.230743][ T5209] loop2: partition table beyond EOD, truncated [ 161.543525][T12130] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.564885][T12130] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 161.726916][T12132] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 161.774021][T12132] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 161.926922][ T5913] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 162.223763][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 162.267922][ T5913] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.302531][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.456659][ T5913] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 162.520452][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.684857][ T5913] usb 2-1: config 0 descriptor?? [ 163.059635][T12156] input: syz1 as /devices/virtual/input/input9 [ 163.475250][T12153] IPVS: sh: FWM 3 0x00000003 - no destination available [ 163.482531][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 164.616649][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 164.625600][ T5830] usbhid 4-1:1.0: can't add hid device: -71 [ 164.801801][ T5830] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 164.848793][ T5830] usb 4-1: USB disconnect, device number 12 [ 164.903931][ T24] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 164.939243][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.980892][ T24] usb 3-1: config 0 descriptor?? [ 165.083730][ T5913] usbhid 2-1:0.0: can't add hid device: -71 [ 165.126955][ T5913] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 165.201596][ T5913] usb 2-1: USB disconnect, device number 16 [ 165.314353][T12169] loop2: detected capacity change from 0 to 7 [ 165.396975][T12169] Dev loop2: unable to read RDB block 7 [ 165.617015][T12169] loop2: unable to read partition table [ 165.623057][T12169] loop2: partition table beyond EOD, truncated [ 165.670576][T12169] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.820677][T12176] loop2: detected capacity change from 0 to 7 [ 165.852947][ T8413] Dev loop2: unable to read RDB block 7 [ 166.516749][ T8413] loop2: AHDI p1 p2 [ 166.696678][ T8413] loop2: partition table partially beyond EOD, truncated [ 166.724364][ T8413] loop2: p1 start 1818582900 is beyond EOD, truncated [ 167.457606][T12185] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 167.528190][T12185] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 167.566286][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.317'. [ 167.735664][T12188] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 167.746241][T12188] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 167.817781][T12201] netlink: 5464 bytes leftover after parsing attributes in process `syz.3.320'. [ 167.829839][T12201] openvswitch: netlink: Flow key attr not present in new flow. [ 168.160223][T12205] netlink: 'syz.1.322': attribute type 2 has an invalid length. [ 168.207077][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 168.243981][T12207] netlink: 'syz.3.323': attribute type 32 has an invalid length. [ 168.299396][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 168.411557][T12207] bond2: option coupled_control: invalid value (110) [ 168.435208][T12207] bond2 (unregistering): Released all slaves [ 168.537911][ T24] usb 3-1: Cannot set autoneg [ 168.545969][ T24] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 168.571128][ T24] usb 3-1: USB disconnect, device number 15 [ 169.611663][T12249] fuse: Unknown parameter 'ešì'' [ 169.691814][T12252] netlink: 'syz.2.331': attribute type 9 has an invalid length. [ 169.714875][T12252] netlink: 'syz.2.331': attribute type 6 has an invalid length. [ 169.864686][T12252] netlink: 'syz.2.331': attribute type 7 has an invalid length. [ 169.936179][T12252] netlink: 'syz.2.331': attribute type 8 has an invalid length. [ 170.161689][ T89] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 170.322830][ T89] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.359107][ T89] usb 4-1: config 0 has no interface number 0 [ 170.387453][ T89] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 170.426717][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.539495][ T89] usb 4-1: Product: syz [ 170.544353][ T89] usb 4-1: Manufacturer: syz [ 170.550437][ T89] usb 4-1: SerialNumber: syz [ 170.576130][ T89] usb 4-1: config 0 descriptor?? [ 170.676260][ T89] usb 4-1: selecting invalid altsetting 1 [ 170.761884][ T89] dvb_ttusb_budget: ttusb_init_controller: error [ 170.797234][ T89] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 170.952289][T12265] openvswitch: netlink: Message has 8 unknown bytes. [ 171.024014][ T89] DVB: Unable to find symbol stv0299_attach() [ 171.135226][T12266] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 171.187812][T12266] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 171.268966][ T89] DVB: Unable to find symbol tda8083_attach() [ 171.311380][ T89] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 171.332676][T12268] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 171.343382][T12268] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 171.390341][ T89] usb 4-1: USB disconnect, device number 13 [ 171.548329][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 172.630715][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'. [ 174.375033][T12337] syzkaller0: entered promiscuous mode [ 174.612272][T12337] syzkaller0: entered allmulticast mode [ 175.191987][T12346] loop2: detected capacity change from 0 to 7 [ 175.209560][T12346] Dev loop2: unable to read RDB block 7 [ 175.217308][T12346] loop2: unable to read partition table [ 175.235491][T12348] netlink: 'syz.0.366': attribute type 32 has an invalid length. [ 175.264389][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 175.306117][T12346] loop2: partition table beyond EOD, truncated [ 175.349049][T12348] bond1: option coupled_control: invalid value (110) [ 175.363367][T12348] bond1 (unregistering): Released all slaves [ 175.496435][T12346] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.699211][T12346] delete_channel: no stack [ 175.878678][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 177.206657][ T5932] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 177.425652][ T5932] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.448205][ T5932] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.502291][T12394] netlink: 'syz.2.383': attribute type 3 has an invalid length. [ 177.510395][T12394] netlink: 188 bytes leftover after parsing attributes in process `syz.2.383'. [ 177.524675][ T5932] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.544585][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.553989][ T5932] usb 4-1: SerialNumber: syz [ 177.970496][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 178.230383][T12404] random: crng reseeded on system resumption [ 178.621158][T12412] loop2: detected capacity change from 0 to 7 [ 178.635873][ T6853] Dev loop2: unable to read RDB block 7 [ 178.647773][ T6853] loop2: unable to read partition table [ 178.664056][ T6853] loop2: partition table beyond EOD, truncated [ 178.686343][T12412] Dev loop2: unable to read RDB block 7 [ 178.693251][T12412] loop2: unable to read partition table [ 178.714821][T12412] loop2: partition table beyond EOD, truncated [ 178.736807][T12412] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 179.673829][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.400'. [ 179.941790][T12447] loop2: detected capacity change from 0 to 7 [ 179.951456][ T6853] Dev loop2: unable to read RDB block 7 [ 179.957574][ T6853] loop2: unable to read partition table [ 179.963798][ T6853] loop2: partition table beyond EOD, truncated [ 179.973935][T12447] Dev loop2: unable to read RDB block 7 [ 179.983034][T12447] loop2: unable to read partition table [ 180.005646][ T5932] usb 4-1: 0:2 : does not exist [ 180.022492][T12447] loop2: partition table beyond EOD, truncated [ 180.040579][T12447] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.062371][ T5932] usb 4-1: USB disconnect, device number 14 [ 180.130547][ T8413] udevd[8413]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.250282][T12448] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.309578][T12448] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 180.401073][T12450] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 180.452396][T12450] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 180.513054][T12460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.410'. [ 180.905158][T12485] program syz.2.420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.192713][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 182.059698][T12509] sctp: [Deprecated]: syz.2.427 (pid 12509) Use of int in maxseg socket option. [ 182.059698][T12509] Use struct sctp_assoc_value instead [ 182.458612][T12512] loop2: detected capacity change from 0 to 7 [ 182.563649][T12512] Dev loop2: unable to read RDB block 7 [ 182.591979][T12512] loop2: unable to read partition table [ 182.633276][T12512] loop2: partition table beyond EOD, truncated [ 182.769835][T12512] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.322550][ T5830] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 183.369577][ T5830] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 183.381616][T12529] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.409871][ T5830] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 183.417996][T12529] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 183.465723][ T5830] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 183.546763][ T5830] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 183.575853][ T5830] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 183.583939][ T89] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 183.603543][T12526] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 183.635971][ T5830] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 183.644549][ T5830] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 183.652732][ T5830] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 183.693070][T12526] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 183.701938][ T5830] hid-generic 0000:0040:30383231.0003: hidraw0: HID v303038.78 Device [syz1] on syz0 [ 183.771531][ T89] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.785861][ T89] usb 4-1: not running at top speed; connect to a high speed hub [ 183.804075][ T89] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.814627][ T89] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 183.824013][ T89] usb 4-1: config 1 has no interface number 1 [ 183.837450][ T89] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 183.897931][ T89] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 4 [ 183.909395][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 183.935639][ T89] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 12540, setting to 1023 [ 183.961925][ T89] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.972579][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.987982][ T89] usb 4-1: Product: syz [ 183.992263][ T89] usb 4-1: Manufacturer: syz [ 183.997771][ T89] usb 4-1: SerialNumber: syz [ 184.099840][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.112043][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.125896][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.341405][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.397063][ T89] hub 4-1:1.0: Invalid hub with more than one config or interface [ 184.408284][ T89] hub 4-1:1.0: probe with driver hub failed with error -22 [ 184.440835][ T89] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 184.453302][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.546841][ T24] usb 5-1: config 0 descriptor?? [ 184.585209][ T89] usb 4-1: USB disconnect, device number 15 [ 185.105672][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.198633][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 185.974237][ T5913] usb 5-1: USB disconnect, device number 7 [ 186.396145][T12562] loop2: detected capacity change from 0 to 7 [ 186.426780][T12562] Dev loop2: unable to read RDB block 7 [ 186.432441][T12562] loop2: unable to read partition table [ 186.534781][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.443'. [ 186.620399][T12562] loop2: partition table beyond EOD, truncated [ 186.654315][T12562] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.820458][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.857053][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.036973][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 187.445331][T12588] ALSA: mixer_oss: invalid OSS volume '' [ 187.467522][T12589] netlink: 'syz.4.452': attribute type 1 has an invalid length. [ 187.600851][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 187.815069][T12595] : entered promiscuous mode [ 189.163967][T12626] loop2: detected capacity change from 0 to 7 [ 189.190622][T12626] Dev loop2: unable to read RDB block 7 [ 189.198803][T12626] loop2: AHDI p1 p2 [ 189.202795][T12626] loop2: partition table partially beyond EOD, truncated [ 189.212753][T12626] loop2: p1 start 1818582900 is beyond EOD, truncated [ 189.891789][ T5913] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 190.115213][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 190.130943][ T5913] usb 4-1: no configurations [ 190.147638][ T5913] usb 4-1: can't read configurations, error -22 [ 190.206700][ T5932] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.288321][ T5913] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 190.449990][ T5932] usb 5-1: unable to get BOS descriptor or descriptor too short [ 190.476707][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 190.488526][ T5932] usb 5-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.508109][ T5913] usb 4-1: no configurations [ 190.523368][ T5913] usb 4-1: can't read configurations, error -22 [ 190.537990][ T5932] usb 5-1: config 1 interface 0 has no altsetting 0 [ 190.545612][ T5913] usb usb4-port1: attempt power cycle [ 190.603144][ T5932] usb 5-1: New USB device found, idVendor=2e81, idProduct=0898, bcdDevice= 0.40 [ 190.654859][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.725752][ T5932] usb 5-1: Product: syz [ 190.849780][ T5932] usb 5-1: Manufacturer: syz [ 190.854567][ T5932] usb 5-1: SerialNumber: syz [ 190.896759][ T5913] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 190.938543][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 190.958109][ T5913] usb 4-1: no configurations [ 190.981873][ T5913] usb 4-1: can't read configurations, error -22 [ 191.130176][ T5913] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 191.236472][T12643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.263218][T12643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.339087][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 191.408943][ T5913] usb 4-1: no configurations [ 191.426680][ T5913] usb 4-1: can't read configurations, error -22 [ 191.451235][T12662] loop2: detected capacity change from 0 to 7 [ 191.490058][T12662] Dev loop2: unable to read RDB block 7 [ 191.501893][T12662] loop2: AHDI p1 p2 [ 191.508386][T12662] loop2: partition table partially beyond EOD, truncated [ 191.523795][ T5913] usb usb4-port1: unable to enumerate USB device [ 191.601608][T12662] loop2: p1 start 1818582900 is beyond EOD, truncated [ 192.497574][ T5830] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 192.733925][T12667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.479'. [ 192.753357][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 192.767780][ T5830] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.784248][ T5830] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c [ 192.800084][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.810058][ T5830] usb 2-1: Product: syz [ 192.814500][ T5830] usb 2-1: Manufacturer: syz [ 192.821519][ T5830] usb 2-1: SerialNumber: syz [ 193.427645][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.468904][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.870027][ T5932] usbhid 5-1:1.0: can't add hid device: -71 [ 193.879640][ T5932] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 193.893101][ T5932] usb 5-1: USB disconnect, device number 9 [ 193.910212][ T5830] empeg 2-1:1.0: empeg converter detected [ 193.921676][ T5830] empeg 2-1:1.0: probe with driver empeg failed with error -71 [ 194.173927][ T5830] usb 2-1: USB disconnect, device number 17 [ 194.362047][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.368673][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.515262][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.482'. [ 195.291104][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 195.300520][T12691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.534129][T12691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.628628][ T5932] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 195.786750][ T5932] usb 2-1: device descriptor read/64, error -71 [ 196.057064][ T5932] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 196.301324][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 196.402600][T12720] netlink: 'syz.4.496': attribute type 10 has an invalid length. [ 196.592317][T12727] fuse: Bad value for 'fd' [ 196.820067][ T5913] IPVS: starting estimator thread 0... [ 196.916708][T12732] IPVS: using max 37 ests per chain, 88800 per kthread [ 197.171745][T12741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.503'. [ 197.235821][T12736] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 197.823832][T12753] openvswitch: netlink: Unknown nsh attribute 0 [ 197.831974][T12753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.932947][T12755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.506'. [ 197.942815][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 198.072604][T12758] : entered promiscuous mode [ 198.333880][ T5913] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 198.420616][T12770] FAULT_INJECTION: forcing a failure. [ 198.420616][T12770] name failslab, interval 1, probability 0, space 0, times 0 [ 198.435704][T12770] CPU: 1 UID: 0 PID: 12770 Comm: syz.2.514 Not tainted syzkaller #0 PREEMPT(full) [ 198.435732][T12770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.435754][T12770] Call Trace: [ 198.435761][T12770] [ 198.435770][T12770] dump_stack_lvl+0x189/0x250 [ 198.435800][T12770] ? __pfx____ratelimit+0x10/0x10 [ 198.435830][T12770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.435853][T12770] ? __pfx__printk+0x10/0x10 [ 198.435886][T12770] ? __pfx___might_resched+0x10/0x10 [ 198.435906][T12770] ? fs_reclaim_acquire+0x7d/0x100 [ 198.435940][T12770] should_fail_ex+0x414/0x560 [ 198.435971][T12770] should_failslab+0xa8/0x100 [ 198.436004][T12770] __kmalloc_noprof+0xcb/0x7f0 [ 198.436031][T12770] ? io_cache_alloc_new+0x40/0x100 [ 198.436086][T12770] io_cache_alloc_new+0x40/0x100 [ 198.436118][T12770] io_msg_alloc_async+0x1b2/0x2d0 [ 198.436151][T12770] io_bind_prep+0x152/0x250 [ 198.436184][T12770] io_submit_sqes+0x935/0x1e60 [ 198.436238][T12770] __se_sys_io_uring_enter+0x2df/0x2b20 [ 198.436282][T12770] ? ksys_write+0x1cb/0x250 [ 198.436312][T12770] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 198.436331][T12770] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 198.436362][T12770] ? __pfx_vfs_write+0x10/0x10 [ 198.436391][T12770] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.436425][T12770] ? __fget_files+0x3a0/0x420 [ 198.436462][T12770] ? fput+0xa0/0xd0 [ 198.436483][T12770] ? ksys_write+0x22a/0x250 [ 198.436512][T12770] ? __pfx_ksys_write+0x10/0x10 [ 198.436535][T12770] ? rcu_is_watching+0x15/0xb0 [ 198.436567][T12770] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 198.436592][T12770] do_syscall_64+0xfa/0x3b0 [ 198.436609][T12770] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.436635][T12770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.436654][T12770] ? clear_bhb_loop+0x60/0xb0 [ 198.436677][T12770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.436696][T12770] RIP: 0033:0x7fc84df8eec9 [ 198.436715][T12770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.436731][T12770] RSP: 002b:00007fc84ee06038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 198.436762][T12770] RAX: ffffffffffffffda RBX: 00007fc84e1e5fa0 RCX: 00007fc84df8eec9 [ 198.436777][T12770] RDX: 000000000000c1dd RSI: 0000000000002d3e RDI: 0000000000000004 [ 198.436789][T12770] RBP: 00007fc84ee06090 R08: 0000000000000000 R09: 0000000000000000 [ 198.436801][T12770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.436812][T12770] R13: 00007fc84e1e6038 R14: 00007fc84e1e5fa0 R15: 00007fc84e30fa28 [ 198.436845][T12770] [ 198.496825][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 199.181446][ T5913] usb 2-1: config 0 has no interfaces? [ 199.192271][ T5913] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 199.211930][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.253570][ T5913] usb 2-1: config 0 descriptor?? [ 199.575442][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.633778][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.659054][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.731813][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.762541][ T5932] usb 2-1: USB disconnect, device number 20 [ 200.466776][ T5932] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 200.637937][ T5932] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.648209][ T5932] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 200.665707][T12797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.523'. [ 200.744877][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.761934][ T5932] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 200.780896][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.813453][ T5932] usb 2-1: config 0 descriptor?? [ 200.868461][ T5932] yurex 2-1:0.0: Could not submitting URB [ 200.925934][ T5932] yurex 2-1:0.0: probe with driver yurex failed with error -5 [ 201.175382][ T5932] usbhid 2-1:0.0: can't add hid device: -71 [ 201.198124][ T5932] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 201.287841][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 201.296058][ T5932] usb 2-1: USB disconnect, device number 21 [ 201.458925][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.470225][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.493207][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.527822][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 201.537769][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.612076][T12784] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 201.642222][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.834782][ T9] usb 3-1: USB disconnect, device number 16 [ 201.861138][T12812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.527'. [ 202.294615][T12816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.528'. [ 202.870427][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 203.310556][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.328775][ T9] usb 5-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.343900][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 203.361799][ T9] usb 5-1: New USB device found, idVendor=2e81, idProduct=0898, bcdDevice= 0.40 [ 203.372003][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.380311][ T9] usb 5-1: Product: syz [ 203.384651][ T9] usb 5-1: Manufacturer: syz [ 203.392606][ T9] usb 5-1: SerialNumber: syz [ 203.679477][T12822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.692354][T12822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.551905][T12832] openvswitch: netlink: Unknown nsh attribute 0 [ 204.622668][T12832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.984543][T12834] loop2: detected capacity change from 0 to 7 [ 204.994237][ T6853] Dev loop2: unable to read RDB block 7 [ 205.002441][ T6853] loop2: unable to read partition table [ 205.018086][ T6853] loop2: partition table beyond EOD, truncated [ 205.043246][T12834] Dev loop2: unable to read RDB block 7 [ 205.064934][T12834] loop2: unable to read partition table [ 205.085260][T12834] loop2: partition table beyond EOD, truncated [ 205.112558][T12834] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.392332][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 205.734206][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 205.756775][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 205.856474][T12843] loop2: detected capacity change from 0 to 7 [ 205.863879][ T9] usb 5-1: USB disconnect, device number 10 [ 205.905442][T12843] Dev loop2: unable to read RDB block 7 [ 205.934406][T12843] loop2: unable to read partition table [ 205.945973][T12843] loop2: partition table beyond EOD, truncated [ 205.960562][T12843] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 208.511556][ T5926] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 208.562805][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 208.562820][ T30] audit: type=1326 audit(1759594118.859:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 208.668179][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 208.701865][ T5926] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 208.726931][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.735222][ T5926] usb 3-1: Product: syz [ 208.739608][ T5926] usb 3-1: Manufacturer: syz [ 208.744233][ T5926] usb 3-1: SerialNumber: syz [ 208.764718][ T5926] usb 3-1: config 0 descriptor?? [ 209.059795][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.073716][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.116053][ T5926] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 209.577116][T12895] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 209.598558][T12895] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 209.630842][T12898] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 209.641376][T12898] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 209.798027][T12901] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 209.924401][T12906] loop2: detected capacity change from 0 to 7 [ 209.945322][T12906] Dev loop2: unable to read RDB block 7 [ 209.961839][T12906] loop2: AHDI p1 p2 [ 209.970633][T12906] loop2: partition table partially beyond EOD, truncated [ 209.979983][T12908] openvswitch: netlink: Unknown nsh attribute 0 [ 209.982388][T12906] loop2: p1 start 1818582900 is beyond EOD, truncated [ 210.008118][T12908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.311240][ T5926] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 210.796297][ T5844] usb 3-1: USB disconnect, device number 17 [ 210.877265][T12928] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 211.077641][ T30] audit: type=1326 audit(1759594121.329:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12926 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 211.143047][T12933] cifs: Unknown parameter 'f,' [ 211.151898][ T30] audit: type=1326 audit(1759594121.339:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12926 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 211.211561][T12928] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 211.286678][ T30] audit: type=1326 audit(1759594121.339:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12926 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 211.419904][ T30] audit: type=1326 audit(1759594121.339:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12926 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 211.491433][ T30] audit: type=1326 audit(1759594121.339:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12926 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 211.547971][ T30] audit: type=1326 audit(1759594121.339:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12926 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 211.710122][ T30] audit: type=1326 audit(1759594121.339:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12926 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 211.779888][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 211.786063][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 211.793680][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 211.800187][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 211.806281][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 211.888838][ T30] audit: type=1326 audit(1759594121.339:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12926 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 212.075099][ T30] audit: type=1326 audit(1759594121.339:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12926 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308278eec9 code=0x7ffc0000 [ 212.197374][T12960] loop2: detected capacity change from 0 to 7 [ 212.229786][T12958] netlink: 'syz.4.571': attribute type 10 has an invalid length. [ 212.262389][T12960] Dev loop2: unable to read RDB block 7 [ 212.396815][T12960] loop2: AHDI p1 p2 [ 212.401541][T12960] loop2: partition table partially beyond EOD, truncated [ 212.420092][T12960] loop2: p1 start 1818582900 is beyond EOD, truncated [ 213.236760][ T5830] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 213.429325][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 213.474851][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.531478][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.594551][ T5830] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 213.642647][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.712251][ T5830] usb 3-1: config 0 descriptor?? [ 213.741486][T12965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.575'. [ 213.743853][ T5830] hub 3-1:0.0: USB hub found [ 213.951772][ T5830] hub 3-1:0.0: 1 port detected [ 214.262374][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 214.462697][T12981] netlink: 'syz.4.578': attribute type 10 has an invalid length. [ 215.026788][ T89] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 215.219714][ T89] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 215.230676][ T89] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.240716][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.275788][ T89] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.294860][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 215.371289][ T5830] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 215.383607][ T5830] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 215.437294][ T5830] usbhid 3-1:0.0: can't add hid device: -32 [ 215.457104][ T5830] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 215.502198][ T89] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 215.590820][ T5830] usb 3-1: USB disconnect, device number 18 [ 217.465213][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 217.666721][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 217.687118][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.703919][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.725594][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 217.766194][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.779517][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.792201][ T9] usb 3-1: Product: syz [ 217.796459][ T9] usb 3-1: Manufacturer: syz [ 217.834888][ T9] usb 3-1: SerialNumber: syz [ 217.858263][T13039] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.885071][ T89] usb 4-1: USB disconnect, device number 20 [ 217.911806][T12998] delete_channel: no stack [ 218.256861][ T5932] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 218.298024][T13039] random: crng reseeded on system resumption [ 218.416800][ T5932] usb 5-1: device descriptor read/64, error -71 [ 218.656820][ T5932] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 218.837708][ T5932] usb 5-1: device descriptor read/64, error -71 [ 218.941073][ T9] usb 3-1: 0:2 : does not exist [ 218.965803][ T9] usb 3-1: USB disconnect, device number 19 [ 218.977149][ T5932] usb usb5-port1: attempt power cycle [ 218.995732][T13063] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 219.058491][T13062] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 219.154874][ T8413] udevd[8413]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.394098][ T5932] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 219.427400][ T5932] usb 5-1: device descriptor read/8, error -71 [ 219.666740][ T5932] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 219.687837][ T5932] usb 5-1: device descriptor read/8, error -71 [ 219.788139][ T5893] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 219.798113][ T5932] usb usb5-port1: unable to enumerate USB device [ 219.956644][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 219.966231][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 219.976322][ T5893] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 220.005141][ T5893] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 220.041729][ T5893] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 220.051827][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.060275][ T5893] usb 2-1: Product: syz [ 220.064741][ T5893] usb 2-1: Manufacturer: syz [ 220.069699][ T5893] usb 2-1: SerialNumber: syz [ 220.098345][ T5893] usb 2-1: config 0 descriptor?? [ 220.104331][T13072] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.236135][ T5893] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 220.262890][ T5893] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 220.277148][ T5893] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 220.293881][ T5893] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 220.305975][ T5893] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 220.343490][T13072] netlink: 'syz.1.608': attribute type 5 has an invalid length. [ 220.418344][T13072] ip6erspan0: entered promiscuous mode [ 220.455509][T13084] bridge0: port 3(macsec0) entered blocking state [ 220.464513][T13084] bridge0: port 3(macsec0) entered disabled state [ 220.475231][T13084] macsec0: entered allmulticast mode [ 220.481919][T13084] veth1_macvtap: entered allmulticast mode [ 220.503646][T13084] macsec0: entered promiscuous mode [ 220.515060][T13084] bridge0: port 3(macsec0) entered blocking state [ 220.521927][T13084] bridge0: port 3(macsec0) entered forwarding state [ 220.835685][T13090] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 220.888028][T13090] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 221.438282][T13083] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 221.450173][T13083] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 223.187386][T13131] netlink: 'syz.2.624': attribute type 10 has an invalid length. [ 223.456221][ T9] usb 2-1: USB disconnect, device number 22 [ 223.521119][ T9] mcba_usb 2-1:0.0 can0: device disconnected [ 224.456986][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 224.628652][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 224.706943][ T89] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 224.788461][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.806271][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 224.882094][ T9] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 224.900488][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.936734][ T89] usb 4-1: Using ep0 maxpacket: 16 [ 224.943574][ T9] usb 2-1: Product: syz [ 224.950629][ T9] usb 2-1: Manufacturer: syz [ 224.955298][ T9] usb 2-1: SerialNumber: syz [ 225.000043][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.012489][ T9] usb 2-1: config 0 descriptor?? [ 225.071550][ T9] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 225.134093][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.223774][T13162] sg_write: data in/out 134217696/14 bytes for SCSI command 0x0-- guessing data in; [ 225.223774][T13162] program syz.0.632 not setting count and/or reply_len properly [ 225.311617][ T9] usb 2-1: USB disconnect, device number 23 [ 225.348038][ T89] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 225.401302][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.496247][ T89] usb 4-1: config 0 descriptor?? [ 226.474786][ T89] usb 4-1: can't set config #0, error -71 [ 226.493830][ T89] usb 4-1: USB disconnect, device number 21 [ 226.859116][T13186] openvswitch: netlink: Unknown nsh attribute 0 [ 226.865526][T13186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.887617][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 226.888763][ T30] audit: type=1326 audit(1759594137.179:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13182 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 226.992477][ T30] audit: type=1326 audit(1759594137.179:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13182 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 227.236662][ T30] audit: type=1326 audit(1759594137.179:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13182 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 227.410270][ T30] audit: type=1326 audit(1759594137.179:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13182 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 227.606637][ T5830] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 227.784863][ T30] audit: type=1326 audit(1759594137.179:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13182 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 228.330141][ T30] audit: type=1326 audit(1759594137.179:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13182 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 228.371104][ T5830] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 228.489566][ T5830] usb 3-1: config 7 has no interface number 0 [ 228.495753][ T5830] usb 3-1: config 7 interface 252 has no altsetting 0 [ 228.536837][ T30] audit: type=1326 audit(1759594137.179:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13182 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 228.613404][ T30] audit: type=1326 audit(1759594137.179:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13182 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 228.687239][ T30] audit: type=1326 audit(1759594137.179:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13182 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 229.028406][ T5830] usb 3-1: string descriptor 0 read error: -22 [ 229.038692][ T5830] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 229.057508][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.066933][ T30] audit: type=1326 audit(1759594137.179:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13182 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 229.186684][ T44] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 229.339149][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 229.350327][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.362030][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.390061][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.399355][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.451725][ T44] usb 2-1: Product: syz [ 229.462832][ T44] usb 2-1: Manufacturer: syz [ 229.484335][ T44] usb 2-1: SerialNumber: syz [ 230.209444][T13233] loop2: detected capacity change from 0 to 7 [ 230.251944][ T6853] Dev loop2: unable to read RDB block 7 [ 230.274373][ T6853] loop2: unable to read partition table [ 230.299168][ T6853] loop2: partition table beyond EOD, truncated [ 230.578709][T13233] Dev loop2: unable to read RDB block 7 [ 230.595138][T13233] loop2: unable to read partition table [ 230.640591][T13233] loop2: partition table beyond EOD, truncated [ 230.672700][T13233] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.519197][ T5844] usb 3-1: USB disconnect, device number 20 [ 231.639701][T13245] openvswitch: netlink: Unknown nsh attribute 0 [ 231.665270][T13245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.749705][T13249] sctp: [Deprecated]: syz.3.658 (pid 13249) Use of int in max_burst socket option deprecated. [ 231.749705][T13249] Use struct sctp_assoc_value instead [ 231.916674][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 231.916733][ T30] audit: type=1326 audit(1759594142.209:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 231.955022][ T30] audit: type=1326 audit(1759594142.249:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 231.988530][ T30] audit: type=1326 audit(1759594142.249:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 232.033238][ T30] audit: type=1326 audit(1759594142.249:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 232.040205][T13257] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 232.056652][ T30] audit: type=1326 audit(1759594142.249:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 232.104754][T13257] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 232.229612][T13252] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 232.240526][ T30] audit: type=1326 audit(1759594142.249:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 232.264467][T13252] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 232.283098][ T30] audit: type=1326 audit(1759594142.249:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 232.453876][ T30] audit: type=1326 audit(1759594142.279:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 232.478641][ T30] audit: type=1326 audit(1759594142.279:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 232.505393][ T30] audit: type=1326 audit(1759594142.279:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84df8eec9 code=0x7ffc0000 [ 232.897691][ T44] usb 2-1: 0:192 : does not exist [ 233.048394][ T44] usb 2-1: USB disconnect, device number 24 [ 233.167632][T13275] loop2: detected capacity change from 0 to 7 [ 233.224476][ T6853] udevd[6853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.267160][ T8413] Dev loop2: unable to read RDB block 7 [ 233.276952][ T8413] loop2: unable to read partition table [ 233.297716][ T8413] loop2: partition table beyond EOD, truncated [ 233.323543][T13275] Dev loop2: unable to read RDB block 7 [ 233.353514][T13275] loop2: unable to read partition table [ 233.377334][T13275] loop2: partition table beyond EOD, truncated [ 233.406052][T13275] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 234.057150][ T5830] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 234.148048][T13292] openvswitch: netlink: Unknown nsh attribute 0 [ 234.173578][T13292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.285289][ T5830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.314865][ T5830] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 234.408786][ T5830] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.445712][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.493154][ T5830] usb 2-1: Product: syz [ 234.526604][ T5830] usb 2-1: Manufacturer: syz [ 234.541912][ T5830] usb 2-1: SerialNumber: syz [ 234.570321][ T5830] cdc_mbim 2-1:1.0: skipping garbage [ 234.773576][T13286] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 234.839613][T13303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.678'. [ 235.618766][T13286] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.626488][ T5830] cdc_mbim 2-1:1.0: setting tx_max = 48 [ 235.652040][ T5830] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 235.678266][T13591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.735541][ T5830] wwan wwan0: port wwan0mbim0 attached [ 235.916085][T13594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.949959][T13594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.966635][ T5830] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, ce:a8:62:7e:0e:41 [ 235.966849][T13286] netlink: 'syz.1.671': attribute type 5 has an invalid length. [ 236.469570][ T9] usb 2-1: USB disconnect, device number 25 [ 236.495426][ T9] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 236.631499][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 237.133275][T13611] netlink: 68 bytes leftover after parsing attributes in process `syz.3.685'. [ 238.213748][T13633] loop2: detected capacity change from 0 to 7 [ 238.233470][T13635] nfs: Unknown parameter ' ' [ 238.287233][T13633] Dev loop2: unable to read RDB block 7 [ 238.347176][T13633] loop2: AHDI p1 p2 [ 238.351169][T13633] loop2: partition table partially beyond EOD, truncated [ 238.372049][T13633] loop2: p1 start 1818582900 is beyond EOD, truncated [ 238.695752][T13647] netlink: 44 bytes leftover after parsing attributes in process `syz.3.695'. [ 238.745045][T13644] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 238.758539][T13644] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 238.850878][T13646] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 238.876687][T13646] bond7: (slave xfrm1): Error -95 calling set_mac_address [ 239.738187][ T30] audit: type=1326 audit(1759594149.689:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13657 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 239.815014][ T30] audit: type=1326 audit(1759594149.689:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13657 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 239.861990][ T30] audit: type=1326 audit(1759594149.689:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13657 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 239.884650][ T30] audit: type=1326 audit(1759594149.689:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13657 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 239.912814][T13673] fuse: Bad value for 'fd' [ 239.919196][ T30] audit: type=1326 audit(1759594149.689:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13657 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 240.148121][ T30] audit: type=1326 audit(1759594149.689:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13657 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 240.211311][ T5893] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 240.256720][ T30] audit: type=1326 audit(1759594149.689:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13657 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 240.309903][ T30] audit: type=1326 audit(1759594149.689:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13657 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 240.333841][ T30] audit: type=1326 audit(1759594149.689:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13657 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 240.386672][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 240.426705][ T5830] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 240.438117][ T5893] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 240.438345][ T30] audit: type=1326 audit(1759594149.699:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13657 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5138eec9 code=0x7ffc0000 [ 240.492282][ T5893] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 240.646660][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.677395][ T5830] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 240.697660][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.714988][ T5830] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 240.739060][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.774857][ T5830] usb 4-1: Product: syz [ 240.780250][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.780273][ T5830] usb 4-1: Manufacturer: syz [ 240.780293][ T5830] usb 4-1: SerialNumber: syz [ 240.811123][ T5830] usb 4-1: config 0 descriptor?? [ 240.854038][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.896615][ T5893] usb 2-1: Product: syz [ 240.916206][ T5893] usb 2-1: Manufacturer: syz [ 240.936623][ T5893] usb 2-1: SerialNumber: syz [ 241.212639][ T5893] usb 2-1: 0:2 : does not exist [ 241.374575][ T5893] usb 2-1: USB disconnect, device number 26 [ 241.509971][T13687] loop2: detected capacity change from 0 to 7 [ 241.519932][T13687] Dev loop2: unable to read RDB block 7 [ 241.587574][T13687] loop2: unable to read partition table [ 241.606483][T13687] loop2: partition table beyond EOD, truncated [ 241.618840][T13687] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 242.010199][T13696] FAULT_INJECTION: forcing a failure. [ 242.010199][T13696] name failslab, interval 1, probability 0, space 0, times 0 [ 242.058084][T13696] CPU: 0 UID: 0 PID: 13696 Comm: syz.4.714 Not tainted syzkaller #0 PREEMPT(full) [ 242.058106][T13696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.058116][T13696] Call Trace: [ 242.058121][T13696] [ 242.058128][T13696] dump_stack_lvl+0x189/0x250 [ 242.058157][T13696] ? __pfx____ratelimit+0x10/0x10 [ 242.058178][T13696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.058196][T13696] ? __pfx__printk+0x10/0x10 [ 242.058220][T13696] ? __pfx___might_resched+0x10/0x10 [ 242.058239][T13696] ? fs_reclaim_acquire+0x7d/0x100 [ 242.058266][T13696] should_fail_ex+0x414/0x560 [ 242.058289][T13696] should_failslab+0xa8/0x100 [ 242.058313][T13696] __kmalloc_cache_noprof+0x6f/0x6f0 [ 242.058333][T13696] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 242.058355][T13696] ? ip6_setup_cork+0x1d8/0x10e0 [ 242.058381][T13696] ip6_setup_cork+0x1d8/0x10e0 [ 242.058411][T13696] ip6_make_skb+0x1bd/0x410 [ 242.058432][T13696] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 242.058455][T13696] ? __pfx_ip6_make_skb+0x10/0x10 [ 242.058487][T13696] ? ip6_dst_hoplimit+0x65/0x3e0 [ 242.058502][T13696] ? ip6_dst_hoplimit+0x65/0x3e0 [ 242.058519][T13696] udpv6_sendmsg+0x1d1a/0x2510 [ 242.058550][T13696] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 242.058573][T13696] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 242.058599][T13696] ? __pfx___might_resched+0x10/0x10 [ 242.058627][T13696] ? aa_sk_perm+0x81e/0x950 [ 242.058653][T13696] ? inet_send_prepare+0x5c/0x270 [ 242.058676][T13696] ? inet6_sendmsg+0xe4/0x120 [ 242.058695][T13696] __sock_sendmsg+0xe5/0x270 [ 242.058718][T13696] __sys_sendto+0x3bd/0x520 [ 242.058734][T13696] ? __pfx___sys_sendto+0x10/0x10 [ 242.058746][T13696] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 242.058777][T13696] ? __fget_files+0x3a0/0x420 [ 242.058807][T13696] ? ksys_write+0x22a/0x250 [ 242.058828][T13696] ? __pfx_ksys_write+0x10/0x10 [ 242.058845][T13696] ? rcu_is_watching+0x15/0xb0 [ 242.058866][T13696] __x64_sys_sendto+0xde/0x100 [ 242.058883][T13696] do_syscall_64+0xfa/0x3b0 [ 242.058897][T13696] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.058917][T13696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.058932][T13696] ? clear_bhb_loop+0x60/0xb0 [ 242.058949][T13696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.058963][T13696] RIP: 0033:0x7fdf5138eec9 [ 242.058989][T13696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.059006][T13696] RSP: 002b:00007fdf52257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 242.059028][T13696] RAX: ffffffffffffffda RBX: 00007fdf515e5fa0 RCX: 00007fdf5138eec9 [ 242.059042][T13696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 242.059054][T13696] RBP: 00007fdf52257090 R08: 00002000000000c0 R09: 000000000000001c [ 242.059071][T13696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.059084][T13696] R13: 00007fdf515e6038 R14: 00007fdf515e5fa0 R15: 00007fdf5170fa28 [ 242.059116][T13696] [ 242.648312][T13713] loop2: detected capacity change from 0 to 7 [ 242.660521][T13713] Dev loop2: unable to read RDB block 7 [ 242.697288][T13713] loop2: unable to read partition table [ 242.703368][T13713] loop2: partition table beyond EOD, truncated [ 242.722797][T13713] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 242.763041][T13716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.719'. [ 242.877118][ T5932] usb 4-1: USB disconnect, device number 22 [ 242.914951][ T5209] Dev loop2: unable to read RDB block 7 [ 242.921253][ T5209] loop2: unable to read partition table [ 242.930706][ T5209] loop2: partition table beyond EOD, truncated [ 244.170810][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 244.190192][T13743] openvswitch: netlink: Message has 12 unknown bytes. [ 244.339449][T13749] fuse: Bad value for 'fd' [ 244.517638][ T44] IPVS: starting estimator thread 0... [ 244.616810][T13752] IPVS: using max 35 ests per chain, 84000 per kthread [ 244.656667][ T5844] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 244.894947][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.988087][ T5844] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.111947][ T5844] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 245.129845][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.139075][ T5844] usb 5-1: Product: syz [ 245.143394][ T5844] usb 5-1: Manufacturer: syz [ 245.148450][ T5844] usb 5-1: SerialNumber: syz [ 245.163702][ T5844] usb 5-1: config 0 descriptor?? [ 246.238345][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 246.238365][ T30] audit: type=1326 audit(1759594156.539:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 246.282704][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.369539][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.371038][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 246.387212][ T30] audit: type=1326 audit(1759594156.539:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 246.452636][ T30] audit: type=1326 audit(1759594156.539:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 246.533865][ T30] audit: type=1326 audit(1759594156.579:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 246.537195][ T5932] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 246.565936][ T30] audit: type=1326 audit(1759594156.579:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59e18eec9 code=0x7ffc0000 [ 246.642744][ T30] audit: type=1326 audit(1759594156.579:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc59e18d710 code=0x7ffc0000 [ 246.731739][T13779] FAULT_INJECTION: forcing a failure. [ 246.731739][T13779] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 246.747132][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 246.754802][T13779] CPU: 0 UID: 0 PID: 13779 Comm: syz.1.740 Not tainted syzkaller #0 PREEMPT(full) [ 246.754823][T13779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 246.754835][T13779] Call Trace: [ 246.754842][T13779] [ 246.754849][T13779] dump_stack_lvl+0x189/0x250 [ 246.754873][T13779] ? __pfx____ratelimit+0x10/0x10 [ 246.754894][T13779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.754912][T13779] ? __pfx__printk+0x10/0x10 [ 246.754942][T13779] should_fail_ex+0x414/0x560 [ 246.754964][T13779] _copy_to_user+0x31/0xb0 [ 246.754981][T13779] simple_read_from_buffer+0xe1/0x170 [ 246.755006][T13779] proc_fail_nth_read+0x1b3/0x220 [ 246.755026][T13779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.755046][T13779] ? rw_verify_area+0x2a6/0x4d0 [ 246.755065][T13779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.755083][T13779] vfs_read+0x200/0xa30 [ 246.755108][T13779] ? __pfx_vfs_read+0x10/0x10 [ 246.755127][T13779] ? aa_sk_perm+0x81e/0x950 [ 246.755144][T13779] ? kmem_cache_free+0x19b/0x690 [ 246.755167][T13779] ? __pfx_aa_sk_perm+0x10/0x10 [ 246.755191][T13779] ksys_read+0x145/0x250 [ 246.755216][T13779] ? __pfx_ksys_read+0x10/0x10 [ 246.755239][T13779] ? do_syscall_64+0xbe/0x3b0 [ 246.755255][T13779] do_syscall_64+0xfa/0x3b0 [ 246.755267][T13779] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.755288][T13779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.755302][T13779] ? clear_bhb_loop+0x60/0xb0 [ 246.755319][T13779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.755334][T13779] RIP: 0033:0x7f308278d8dc [ 246.755347][T13779] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 246.755360][T13779] RSP: 002b:00007f3083568030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.755376][T13779] RAX: ffffffffffffffda RBX: 00007f30829e5fa0 RCX: 00007f308278d8dc [ 246.755387][T13779] RDX: 000000000000000f RSI: 00007f30835680a0 RDI: 0000000000000004 [ 246.755396][T13779] RBP: 00007f3083568090 R08: 0000000000000000 R09: 0000000000000000 [ 246.755405][T13779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.755414][T13779] R13: 00007f30829e6038 R14: 00007f30829e5fa0 R15: 00007f3082b0fa28 [ 246.755445][T13779] [ 246.977237][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.077088][ T30] audit: type=1326 audit(1759594156.579:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc59e18eacb code=0x7ffc0000 [ 247.107543][ T5932] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.115747][ T5932] usb 4-1: config 0 has no interface number 0 [ 247.124505][ T5932] usb 4-1: config 0 interface 1 has no altsetting 0 [ 247.158214][ T30] audit: type=1326 audit(1759594156.579:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc59e18eacb code=0x7ffc0000 [ 247.225218][ T5893] usb 5-1: USB disconnect, device number 16 [ 247.235002][ T30] audit: type=1326 audit(1759594156.669:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc59e18eacb code=0x7ffc0000 [ 247.283780][ T5932] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 247.302291][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.310645][ T5932] usb 4-1: Product: syz [ 247.315064][ T30] audit: type=1326 audit(1759594156.669:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc59e18eacb code=0x7ffc0000 [ 247.337237][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.350484][ T5932] usb 4-1: Manufacturer: syz [ 247.375772][ T5932] usb 4-1: SerialNumber: syz [ 247.395009][ T5932] usb 4-1: config 0 descriptor?? [ 247.681502][ T5932] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 247.719158][ T5932] usb 4-1: USB disconnect, device number 23 [ 247.778746][T13788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 248.395642][T13798] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 248.439994][T13801] bridge1: entered promiscuous mode [ 248.446688][T13801] bridge1: entered allmulticast mode [ 248.486729][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 248.667891][ T9] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 248.677338][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.685758][ T9] usb 3-1: Product: syz [ 248.690702][ T9] usb 3-1: Manufacturer: syz [ 248.695594][ T9] usb 3-1: SerialNumber: syz [ 248.747612][ T9] usb 3-1: config 0 descriptor?? [ 248.763443][ T9] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 021 [ 249.231616][ T9] (null): failure reading functionality [ 249.245655][ T9] i2c i2c-1: failure reading functionality [ 249.278906][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 249.296248][ T9] usb 3-1: USB disconnect, device number 21 [ 249.948820][T13820] loop2: detected capacity change from 0 to 7 [ 249.976190][T13820] Dev loop2: unable to read RDB block 7 [ 249.985899][T13820] loop2: unable to read partition table [ 250.022765][T13820] loop2: partition table beyond EOD, truncated [ 250.038930][ T5932] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 250.057859][T13820] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 250.094819][T13824] FAULT_INJECTION: forcing a failure. [ 250.094819][T13824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.179969][T13824] CPU: 0 UID: 0 PID: 13824 Comm: syz.3.756 Not tainted syzkaller #0 PREEMPT(full) [ 250.180000][T13824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.180015][T13824] Call Trace: [ 250.180023][T13824] [ 250.180033][T13824] dump_stack_lvl+0x189/0x250 [ 250.180065][T13824] ? __pfx____ratelimit+0x10/0x10 [ 250.180097][T13824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.180123][T13824] ? __pfx__printk+0x10/0x10 [ 250.180166][T13824] should_fail_ex+0x414/0x560 [ 250.180199][T13824] _copy_to_user+0x31/0xb0 [ 250.180224][T13824] simple_read_from_buffer+0xe1/0x170 [ 250.180259][T13824] proc_fail_nth_read+0x1b3/0x220 [ 250.180288][T13824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.180317][T13824] ? rw_verify_area+0x2a6/0x4d0 [ 250.180342][T13824] ? __lock_acquire+0xab9/0xd20 [ 250.180370][T13824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.180397][T13824] vfs_read+0x200/0xa30 [ 250.180422][T13824] ? fdget_pos+0x247/0x320 [ 250.180446][T13824] ? __pfx___mutex_lock+0x10/0x10 [ 250.180478][T13824] ? __pfx_vfs_read+0x10/0x10 [ 250.180507][T13824] ? __fget_files+0x2a/0x420 [ 250.180542][T13824] ? __fget_files+0x3a0/0x420 [ 250.180572][T13824] ? __fget_files+0x2a/0x420 [ 250.180612][T13824] ksys_read+0x145/0x250 [ 250.180643][T13824] ? __pfx_ksys_read+0x10/0x10 [ 250.180668][T13824] ? rcu_is_watching+0x15/0xb0 [ 250.180699][T13824] ? do_syscall_64+0xbe/0x3b0 [ 250.180720][T13824] do_syscall_64+0xfa/0x3b0 [ 250.180738][T13824] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.180767][T13824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.180787][T13824] ? clear_bhb_loop+0x60/0xb0 [ 250.180814][T13824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.180835][T13824] RIP: 0033:0x7fc59e18d8dc [ 250.180853][T13824] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 250.180872][T13824] RSP: 002b:00007fc59efa9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.180894][T13824] RAX: ffffffffffffffda RBX: 00007fc59e3e5fa0 RCX: 00007fc59e18d8dc [ 250.180908][T13824] RDX: 000000000000000f RSI: 00007fc59efa90a0 RDI: 0000000000000004 [ 250.180922][T13824] RBP: 00007fc59efa9090 R08: 0000000000000000 R09: 000000000000001c [ 250.180935][T13824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.180948][T13824] R13: 00007fc59e3e6038 R14: 00007fc59e3e5fa0 R15: 00007fc59e50fa28 [ 250.180983][T13824] [ 250.279993][T13832] loop2: detected capacity change from 0 to 7 [ 250.281063][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.289901][T13832] Dev loop2: unable to read RDB block 7 [ 250.576835][T13832] loop2: AHDI p1 p2 [ 250.580996][T13832] loop2: partition table partially beyond EOD, truncated [ 250.588920][T13832] loop2: p1 start 1818582900 is beyond EOD, truncated [ 250.606688][ T44] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 250.727125][ T5932] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 250.853320][ T5932] usb 5-1: config 0 has no interface number 0 [ 250.868934][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.879248][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.893596][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 250.893745][ T5932] usb 5-1: config 0 interface 98 has no altsetting 0 [ 251.056689][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.067688][ T5932] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 251.076994][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.085064][ T5932] usb 5-1: Product: syz [ 251.105828][ T5932] usb 5-1: Manufacturer: syz [ 251.116656][ T5932] usb 5-1: SerialNumber: syz [ 251.143412][ T5932] usb 5-1: config 0 descriptor?? [ 251.368711][T13817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.386729][ T44] usb 2-1: usb_control_msg returned -32 [ 251.392395][ T44] usbtmc 2-1:16.0: can't read capabilities [ 251.396290][T13817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.586128][ T5932] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 251.817941][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 252.247532][ T5932] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 252.259876][ T5932] usb 5-1: device reset changed ep0 maxpacket size! [ 252.270291][ T5932] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 252.290980][ T5932] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 252.291560][ T9] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 252.398620][ T5932] usb 5-1: USB disconnect, device number 17 [ 252.422338][ T9] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 252.445146][ T9] ------------[ cut here ]------------ [ 252.451086][ T9] WARNING: CPU: 0 PID: 9 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 [ 252.459689][ T9] Modules linked in: [ 252.463851][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 252.473770][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.484228][ T9] Workqueue: events request_firmware_work_func [ 252.491584][ T9] RIP: 0010:kernfs_get+0x72/0x90 [ 252.497652][ T9] Code: e8 03 9f 5f ff 48 89 df be 04 00 00 00 e8 66 44 c5 ff f0 ff 03 eb 05 e8 ec 9e 5f ff 5b 5d c3 cc cc cc cc cc e8 df 9e 5f ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65 [ 252.517556][ T9] RSP: 0018:ffffc900000e75e0 EFLAGS: 00010293 [ 252.523687][ T9] RAX: ffffffff825ee081 RBX: ffff8880321e10f0 RCX: ffff88801c6c8000 [ 252.531785][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.539878][ T9] RBP: 0000000000000000 R08: ffff8880321e10f3 R09: 1ffff1100643c21e [ 252.548066][ T9] R10: dffffc0000000000 R11: ffffed100643c21f R12: ffff88807e3ce3a8 [ 252.556087][ T9] R13: 1ffff1100fc79c76 R14: ffff88807e3ce3b0 R15: 1ffff1100fc79c75 [ 252.564257][ T9] FS: 0000000000000000(0000) GS:ffff88812638a000(0000) knlGS:0000000000000000 [ 252.573620][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.580378][ T9] CR2: 00007fa2aab0c072 CR3: 00000000793a2000 CR4: 00000000003526f0 [ 252.588463][ T9] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 252.596498][ T9] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 252.605473][ T9] Call Trace: [ 252.609782][ T9] [ 252.612777][ T9] kobject_add_internal+0x632/0xb40 [ 252.618087][ T9] kobject_add+0x155/0x220 [ 252.622539][ T9] ? get_device_parent+0x255/0x3a0 [ 252.627714][ T9] ? __pfx_kobject_add+0x10/0x10 [ 252.632678][ T9] ? __kasan_kmalloc+0x93/0xb0 [ 252.637534][ T9] ? kobject_init+0x83/0x1e0 [ 252.642154][ T9] get_device_parent+0x316/0x3a0 [ 252.647355][ T9] device_add+0x2e1/0xb50 [ 252.651718][ T9] firmware_fallback_sysfs+0x2e4/0x9b0 [ 252.657456][ T9] ? kmem_cache_free+0x19b/0x690 [ 252.662485][ T9] _request_firmware+0xf83/0x15b0 [ 252.667651][ T9] ? __pfx__request_firmware+0x10/0x10 [ 252.673170][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 252.678986][ T9] request_firmware_work_func+0xaf/0x1c0 [ 252.684647][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 252.690546][ T9] process_scheduled_works+0xade/0x17b0 [ 252.697107][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.703144][ T9] worker_thread+0x8a0/0xda0 [ 252.709286][ T9] kthread+0x70e/0x8a0 [ 252.713429][ T9] ? __pfx_worker_thread+0x10/0x10 [ 252.718639][ T9] ? __pfx_kthread+0x10/0x10 [ 252.723361][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.728652][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.733895][ T9] ? __pfx_kthread+0x10/0x10 [ 252.738572][ T9] ret_from_fork+0x436/0x7d0 [ 252.743194][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 252.748386][ T9] ? __switch_to_asm+0x39/0x70 [ 252.753171][ T9] ? __switch_to_asm+0x33/0x70 [ 252.757984][ T9] ? __pfx_kthread+0x10/0x10 [ 252.762612][ T9] ret_from_fork_asm+0x1a/0x30 [ 252.767475][ T9] [ 252.770562][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.777852][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 252.786997][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.797099][ T9] Workqueue: events request_firmware_work_func [ 252.803297][ T9] Call Trace: [ 252.806677][ T9] [ 252.809637][ T9] dump_stack_lvl+0x99/0x250 [ 252.814252][ T9] ? __asan_memcpy+0x40/0x70 [ 252.818946][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.824169][ T9] ? __pfx__printk+0x10/0x10 [ 252.828814][ T9] vpanic+0x237/0x6d0 [ 252.832854][ T9] ? __pfx_vpanic+0x10/0x10 [ 252.837402][ T9] panic+0xb9/0xc0 [ 252.841137][ T9] ? __pfx_panic+0x10/0x10 [ 252.845579][ T9] __warn+0x31b/0x4b0 [ 252.849581][ T9] ? kernfs_get+0x72/0x90 [ 252.853951][ T9] ? kernfs_get+0x72/0x90 [ 252.858304][ T9] report_bug+0x2be/0x4f0 [ 252.862678][ T9] ? kernfs_get+0x72/0x90 [ 252.867018][ T9] ? kernfs_get+0x72/0x90 [ 252.871363][ T9] ? kernfs_get+0x74/0x90 [ 252.875732][ T9] handle_bug+0x84/0x160 [ 252.880027][ T9] exc_invalid_op+0x1a/0x50 [ 252.884546][ T9] asm_exc_invalid_op+0x1a/0x20 [ 252.889404][ T9] RIP: 0010:kernfs_get+0x72/0x90 [ 252.894351][ T9] Code: e8 03 9f 5f ff 48 89 df be 04 00 00 00 e8 66 44 c5 ff f0 ff 03 eb 05 e8 ec 9e 5f ff 5b 5d c3 cc cc cc cc cc e8 df 9e 5f ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65 [ 252.914141][ T9] RSP: 0018:ffffc900000e75e0 EFLAGS: 00010293 [ 252.920244][ T9] RAX: ffffffff825ee081 RBX: ffff8880321e10f0 RCX: ffff88801c6c8000 [ 252.928325][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.936397][ T9] RBP: 0000000000000000 R08: ffff8880321e10f3 R09: 1ffff1100643c21e [ 252.944380][ T9] R10: dffffc0000000000 R11: ffffed100643c21f R12: ffff88807e3ce3a8 [ 252.952365][ T9] R13: 1ffff1100fc79c76 R14: ffff88807e3ce3b0 R15: 1ffff1100fc79c75 [ 252.960362][ T9] ? kernfs_get+0x71/0x90 [ 252.964746][ T9] kobject_add_internal+0x632/0xb40 [ 252.969989][ T9] kobject_add+0x155/0x220 [ 252.974417][ T9] ? get_device_parent+0x255/0x3a0 [ 252.979644][ T9] ? __pfx_kobject_add+0x10/0x10 [ 252.984618][ T9] ? __kasan_kmalloc+0x93/0xb0 [ 252.989413][ T9] ? kobject_init+0x83/0x1e0 [ 252.994014][ T9] get_device_parent+0x316/0x3a0 [ 252.998986][ T9] device_add+0x2e1/0xb50 [ 253.003364][ T9] firmware_fallback_sysfs+0x2e4/0x9b0 [ 253.008863][ T9] ? kmem_cache_free+0x19b/0x690 [ 253.013837][ T9] _request_firmware+0xf83/0x15b0 [ 253.018912][ T9] ? __pfx__request_firmware+0x10/0x10 [ 253.024403][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 253.030169][ T9] request_firmware_work_func+0xaf/0x1c0 [ 253.035822][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 253.041588][ T9] process_scheduled_works+0xade/0x17b0 [ 253.047183][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 253.053192][ T9] worker_thread+0x8a0/0xda0 [ 253.057839][ T9] kthread+0x70e/0x8a0 [ 253.061985][ T9] ? __pfx_worker_thread+0x10/0x10 [ 253.067111][ T9] ? __pfx_kthread+0x10/0x10 [ 253.071841][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.077096][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.082346][ T9] ? __pfx_kthread+0x10/0x10 [ 253.086962][ T9] ret_from_fork+0x436/0x7d0 [ 253.091573][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 253.096816][ T9] ? __switch_to_asm+0x39/0x70 [ 253.101702][ T9] ? __switch_to_asm+0x33/0x70 [ 253.106571][ T9] ? __pfx_kthread+0x10/0x10 [ 253.111218][ T9] ret_from_fork_asm+0x1a/0x30 [ 253.116022][ T9] [ 253.119440][ T9] Kernel Offset: disabled [ 253.123786][ T9] Rebooting in 86400 seconds..