last executing test programs: 8.145875357s ago: executing program 2 (id=2281): unshare(0x22020600) r0 = socket$rds(0x15, 0x5, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r1, 0xa3ecd000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7cb, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x9, 0x0, 0xfffc}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@empty, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e22, 0x10, @mcast2}}]}, 0xd8}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4008, 0x3, 0x260, 0x0, 0x500b, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0xffffff00, 'lo\x00', 'team_slave_0\x00', {}, {}, 0x1, 0x3}, 0x0, 0x90, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xe, [0x0, 0x0, 0xa, 0x0, 0xfffe, 0x23, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) unshare(0x4008000) fstat(r1, &(0x7f0000000280)) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @local}, 0x10) 6.51491344s ago: executing program 2 (id=2288): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29d8, 0x10100, 0x200003, 0x60}, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) r8 = socket(0x21, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r8, 0x0, 0x0, 0x56, 0x200440c0, 0x1}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = syz_io_uring_setup(0x525, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x80800}) listen(r9, 0x5) clock_gettime(0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x120, 0x0) io_uring_enter(r10, 0x3517, 0xc2de, 0x9, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000001c0)=@generic={0x80}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x64, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2888}}, 0x20}}, 0x0) 6.191008352s ago: executing program 3 (id=2292): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0xa, 0x4e22, 0x7d17, @mcast1, 0x8}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="d1228fe9831f1b48c6b56c89a31a19f4236c33768c23e8e3a7d29d1a3fa0784c84befbe11522974ef59a3b49ae85c44aa2283f064da87da216d403f2fb2ee26b616d5ed8433a6a399d02e88702d340f9a16200011f137d668057ca17d56786b9cc4bad5ce87dca0dc2acf6d86aae7ad0abe0a883aaac42ecbffdd5b2d592f683b511409b09f577fe7caf71cbc72a718baf3798e0470b2dee4cf28057cfcda2a87910473b9fb2dcad01334dcca06e5ac20737", 0xb2}], 0x2}, 0x20040804) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (async) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) (async) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) (async, rerun: 64) r7 = socket$inet(0x2, 0x80001, 0x84) (async, rerun: 64) r8 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r8, 0x1, 0xf, 0x0, 0x0) bind$inet(r8, 0x0, 0x0) listen(r8, 0x3) (async) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) listen(r7, 0x3) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$TCFLSH(r9, 0x540b, 0x2) (async, rerun: 64) write$cgroup_int(r9, 0x0, 0x0) (async, rerun: 64) connect$unix(r9, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) execveat(r9, &(0x7f00000001c0)='./file0\x00', &(0x7f00000009c0)={[&(0x7f0000000300)='!+-{%:\x00', 0x0, &(0x7f0000000840)='log\x00', &(0x7f0000000880)='/dev/uinput\x00', &(0x7f00000008c0)='GPL\x00', &(0x7f0000000900)='*B$]-.-\x00']}, &(0x7f0000000a40)={[0x0]}, 0x1000) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x7}}) (async) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x80, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0x3, 0x7, 0x80, 0x1a, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x200, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xd, 0x7, 0x9, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0xffffffff, 0x1, 0x0, 0x1dbb20, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0xb, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x2004, 0x401, 0x80000001, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc7, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb10, 0x1e, 0x3, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfffffff7, 0x4, 0xe, 0x4649, 0x6, 0x2e7, 0x7ff, 0x200, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xfdff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x6, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x16], [0x10000010, 0x7, 0x7, 0x2, 0xa5e, 0xfe, 0xff, 0x8, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffa, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0xfffffffe, 0x7, 0x6, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) 5.838406865s ago: executing program 0 (id=2293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6(0x2d, 0x806, 0x0) r2 = socket(0x2a, 0x80000, 0x37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x59565955, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x2c}, {0x3ff, 0x7}], 0x1, 0xc, 0x7, 0x2, 0x3}}, 0x6b}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000801) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="785454f63ace2532535fe418e26a717fb1f470cbce39e577ca8ca7fd3ef37ed255183ecba11f47af7aa1364faffc4ee03a06f15a6820dc62c77184833387e7ea853629e0c1264b16a7a1d198e61169dd84177353318f34c8330206c6b1ff95ccdc52b4b09a3c38bb5314c7b8a59dd3d337900446898007996654daf9fee7e3fabc9a6cd459999a157381e71d5c6860ea752220"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = creat(&(0x7f0000000400)='./file0\x00', 0x6a) close(r7) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000280)={r9, 0x6, 0x20}, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r10 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000500)={0x6, 0x0, 0x4, 0x0, 0x70}) 5.534295132s ago: executing program 3 (id=2296): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000fbdbdf061d1f56ff", @ANYRES32=r4, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x1f, 0x10000, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4.848260124s ago: executing program 2 (id=2299): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x11}, 0x20) 4.552422737s ago: executing program 2 (id=2301): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e62, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x10001, 0xc}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.471797381s ago: executing program 2 (id=2302): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000000)={&(0x7f0000000080)=""/176, 0xb0}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) unshare(0x26020480) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[], 0x0) r5 = socket(0x2, 0x3, 0x2) connect$unix(r5, &(0x7f0000000000), 0x10) syz_extract_tcp_res(0x0, 0x8, 0x9) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYRES64=r7, @ANYRES16=r1], 0x0) 4.437302115s ago: executing program 0 (id=2303): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="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", 0x4fe, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xffffffff00000000, 0xd, 0xf22, 0xda}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x20, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000007000000000000ab5e9187710b6649000000000018", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000a51ffdff01000000352b0600fcffffffb7080000000000007b8af8ff00000000b7080000f6a900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000182a00", @ANYRES32, @ANYBLOB="00000000f4ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000004200)=@delchain={0x1fe8, 0x65, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6abcc9949752b900}, {0x4, 0x10}, {0x3, 0xb}}, [@f_rsvp={{0x9}, {0x1fb8, 0x2, [@TCA_RSVP_ACT={0x1fb4, 0x6, [@m_ctinfo={0xd0, 0xf, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x7ff, 0x0, 0x5065, 0x1000}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xc}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x10000, 0x10000000, 0x8, 0x80}}]}, {0x6b, 0x6, "2b06768d78e09cc4e7520b16a4b39931607655fdae5952ce288f520d104a48f0bbae9095730918d630af91b622c7e6d5a8d38307088025ce221ac6a6f66bddb85fdec84f4e841a00c84ef512f9a080de36eb6a64bf234c6d6b941a003e8a374a3e8865ab80e520"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1d7c, 0x0, 0x0, 0x0, {{0xa}, {0x1cbc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x401, 0x1, 0xffffffffffffffff, 0x80000001, 0x5}, 0x8, 0x80, [{0x80000000, 0x8001, 0x8, 0xfffffffc, 0x81, 0xa2e8}, {0x4, 0xd, 0x1, 0x401, 0x200, 0x7}, {0x8, 0x5, 0x4, 0x101, 0x16, 0x9}, {0x10, 0xfffffc00, 0x8, 0x7, 0xdf4f, 0x401}, {0x2, 0x5a2b, 0x1ff, 0x7fff, 0xd0cd, 0x401}]}, [{0x64fa, 0x5, 0x8, 0x7, 0x9}, {0x2, 0x5, 0x2, 0x6, 0xa}, {0x7fffffff, 0xff, 0xb472, 0x1, 0x981, 0xc7}, {0x1, 0x1, 0x8, 0x9, 0x0, 0x72}, {0x9, 0x8, 0x28, 0xf, 0x8001, 0x7fff}, {0x200, 0x101, 0xb9, 0xfffffffb, 0x1, 0x1540000}, {0x8, 0x3, 0xf53, 0x2, 0x4e, 0x1a7}, {0x6, 0x4, 0x4, 0x6, 0x3, 0x3}, {0x9fd, 0x80000001, 0x9, 0x9ba, 0xfffffff7, 0x3}, {0x80000001, 0x4, 0x10001, 0x3, 0xdd38, 0x3}, {0x8000, 0x80, 0xfffffffc, 0x4, 0x0, 0x7f}, {0x5, 0x8, 0x800, 0x2, 0xa49f, 0x75b4}, {0xfffffeff, 0x7f, 0x9, 0x52, 0xfffeffff, 0x4}, {0x7, 0x5, 0x80000000, 0x1, 0x9, 0x7fffffff}, {0x9, 0x8, 0x1ff, 0xff, 0x8, 0x7}, {0xb, 0x6, 0x170, 0x7, 0x1b7b, 0x8}, {0x2, 0x3, 0x0, 0x7, 0x2f3, 0x7}, {0x6, 0x3, 0x2, 0xff, 0x8}, {0x304b, 0x3, 0xfffffff8, 0x7, 0x5, 0x6}, {0x9, 0x1, 0xffff, 0x1, 0xd, 0x4}, {0xdf11, 0xc6, 0xa, 0x3, 0x3, 0x8}, {0x4, 0xc, 0x3, 0xd1cc, 0x4, 0x9}, {0x6, 0x8, 0x7fff, 0x200, 0x100}, {0x3fa2, 0x9, 0x800, 0x6, 0x10002000, 0x80000000}, {0x1f, 0xff4, 0x4, 0x2, 0x2, 0x5df}, {0x4, 0x8001, 0x7, 0x0, 0x4, 0x1}, {0x8, 0x8, 0x3e1f3cb1, 0x3, 0xb, 0x1}, {0x1000, 0x89000, 0x9, 0xc, 0x9, 0xfffffffb}, {0x7fffffff, 0x0, 0xafd, 0x200, 0x800, 0x1}, {0x9, 0xa20, 0x6, 0x10001, 0x0, 0x401}, {0x7, 0x5cb, 0x2, 0x6f5c7d2f, 0x2, 0x1}, {0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffe}, {0xffff, 0x1f, 0x9, 0xa91c, 0x0, 0x80000001}, {0x1, 0x81, 0x195, 0x274, 0x400c, 0x5}, {0x7, 0x0, 0x13ac, 0x1, 0xfffffff7, 0x5}, {0x80, 0x1ff, 0x47bd, 0x0, 0x6}, {0x3, 0xc0000000, 0x1f, 0x0, 0xb, 0x492}, {0x526c0000, 0x6, 0x0, 0x8, 0x6, 0x1}, {0xb86f, 0xfffffffc, 0x4, 0x4, 0x1, 0xfffffffb}, {0x6, 0x2, 0x10000, 0x6, 0x6, 0x9}, {0x6, 0x8000, 0x5, 0x2, 0x10000, 0x5}, {0x2, 0xfff, 0x80000000, 0xfffffe01, 0x80000001, 0x3}, {0x6, 0x0, 0x80000000, 0x7, 0x8, 0x6}, {0x80000000, 0xffffffff, 0x2, 0x6, 0x100, 0xfffffbff}, {0xdd8d, 0x9, 0x8, 0x7, 0x3, 0x7}, {0x2, 0x10001, 0x1ff, 0x1, 0x9, 0x3}, {0x7f, 0x59, 0x0, 0x7f, 0x3, 0xadf}, {0x3, 0x81, 0xffff, 0x8, 0x8, 0x6}, {0x7f, 0x2, 0x5, 0x4, 0x5, 0x401}, {0x100, 0x1, 0xffffffff, 0x7, 0x7, 0x4}, {0x9, 0x6, 0x8b6, 0xfffffff9, 0x1, 0x5}, {0x800000, 0x3, 0x1, 0x7, 0x0, 0x58}, {0x7, 0xa, 0xd, 0xa, 0xc0000000, 0x1}, {0x5, 0xffff7418, 0x80, 0x7b00d444, 0x9, 0x1}, {0x200, 0x6, 0x1c00000, 0x5, 0x4, 0xfff}, {0x3, 0x1, 0x7fff, 0x80000000, 0x2}, {0x0, 0x3, 0x3, 0x1, 0x8, 0x9}, {0x1ff, 0xffff, 0x1000, 0x5, 0xed98, 0x401}, {0x0, 0x0, 0x0, 0x6, 0x3, 0xd9}, {0x3, 0x6, 0x100, 0x9, 0x4, 0x6}, {0x81, 0x1ff, 0xffffffff, 0x4, 0xee, 0x837}, {0x7, 0x8, 0xa, 0x4, 0xc, 0x8}, {0x3, 0x4, 0x8, 0x6, 0x4, 0x80000001}, {0x89b, 0x5, 0xbdd, 0x7, 0x0, 0x7}, {0x2, 0x7, 0x8000, 0x2, 0x1, 0x2}, {0x7, 0x6, 0x2, 0x4, 0x0, 0xea64}, {0x10, 0x81, 0xf90, 0x0, 0x3, 0x9}, {0x7, 0x7ff, 0xd1a, 0x24d8, 0x50bc, 0xd}, {0x72, 0x2208, 0xffffffff, 0x3, 0xfe5a, 0x3}, {0x3, 0x7f, 0x7, 0x1, 0xaba, 0xcc3}, {0x40, 0x7, 0x3, 0xed8, 0xc7c3, 0xff}, {0x100, 0x5, 0x7, 0x8, 0x9, 0x1}, {0x7f, 0x2, 0xfff, 0x1, 0x1, 0x6}, {0x4, 0xfffffffa, 0x8000, 0x8001, 0x4, 0x5e}, {0x101, 0x60, 0x6, 0x8, 0x4c39, 0x6}, {0x5b9d, 0x30000000, 0xee, 0x6, 0x80, 0xb0}, {0x8, 0x100, 0x0, 0x101, 0x9, 0x7}, {0xb, 0xa, 0x7, 0x3, 0x2, 0x3}, {0x5, 0x1, 0x7, 0xfffffffd, 0x8001, 0x9}, {0x3, 0xffffffff, 0x3, 0x1ff, 0x6ad9, 0x18bf}, {0x59, 0x3, 0x2, 0x30, 0x3, 0x40fff}, {0x2, 0xffffff0e, 0x8, 0x8, 0x2, 0xb7e2}, {0x8, 0x200, 0x98db, 0xfff, 0x5}, {0x1, 0x4, 0x1000, 0x1, 0x3, 0xa6f6}, {0x82, 0x6, 0x8, 0x401, 0x0, 0x1}, {0x7fff, 0x4, 0xa7, 0xffff7d61, 0x5, 0x2}, {0xa, 0x81, 0x1, 0x8, 0x3, 0x2}, {0x9, 0xe, 0x6, 0x6, 0x0, 0x5}, {0x81, 0x1, 0x81, 0x6, 0x1, 0x4}, {0xa8, 0xa59, 0x6, 0x5, 0x9d, 0x198}, {0xd4e, 0x3ff, 0x3ff, 0x4, 0xc, 0x7}, {0x6, 0x30, 0xf7, 0x8, 0x8, 0x2}, {0x4e, 0x0, 0x8000, 0xffffffff, 0x80000001, 0x8000}, {0x1, 0x9, 0x0, 0x3, 0xfffff117, 0x3}, {0xe, 0x800, 0x4, 0x6, 0x2, 0x1}, {0x8, 0x59, 0x7, 0x5, 0x200, 0x9}, {0x0, 0x749, 0x5, 0x3, 0xffffffff, 0xfffffff7}, {0x6, 0xe, 0x4, 0x200, 0x0, 0x6}, {0x6, 0x8, 0x1000, 0x3, 0x4, 0x10001}, {0x4, 0x5, 0x9, 0x4, 0x6, 0x3}, {0x4, 0x9, 0x3, 0x8, 0x9, 0x6}, {0x8000, 0x80, 0x7, 0x3, 0xdb, 0x40cb}, {0x10001, 0xc, 0xbb, 0xc, 0x200, 0x6}, {0xffff434d, 0x6, 0x2, 0x6, 0x7, 0xc}, {0x101, 0x8a5, 0x0, 0x1, 0x8, 0xd}, {0x8, 0x0, 0x200, 0x1, 0x1ff, 0x62}, {0x4, 0x7fff, 0x906, 0x5, 0x2, 0x9}, {0xfffffd42, 0x9, 0xff8000, 0x9, 0x10, 0x1}, {0x4, 0x1, 0x0, 0x6, 0xff, 0x8}, {0xb, 0x0, 0x6}, {0x5, 0x9, 0x7, 0x9, 0x6, 0xfffffffb}, {0x5, 0x3, 0x7, 0x1, 0x6, 0x2}, {0x3, 0x101, 0x3, 0x4, 0x0, 0x9}, {0x7, 0xfffffffc, 0x5db8, 0x4, 0x1, 0x9}, {0x2, 0x9, 0xb, 0x2, 0x3, 0x3594836}, {0x2, 0x8269, 0xfffffffe, 0x3, 0xdcd1, 0x3}, {0x5, 0x8, 0xffff, 0x4}, {0xff, 0x6, 0xffff753e, 0x10001, 0x1, 0xfe08}, {0xf76, 0xffffffff, 0xffff1b5d, 0x7157, 0x9}, {0x0, 0x7, 0x8, 0x6, 0x9, 0x3}, {0xfffffff9, 0x100, 0x80, 0x5, 0x7f, 0xd}, {0x3, 0x79, 0x7, 0x9ac, 0x81, 0x7fff}, {0xffffffcb, 0x15c8cda6, 0x8, 0x5, 0x3b000, 0x2}, {0x40, 0x4, 0x8, 0x0, 0x0, 0x8}, {0x8000, 0x8, 0x2, 0x40, 0x2, 0x27e9}, {0xb, 0xfffffff3, 0x3, 0x9, 0xfdf, 0x101}, {0x341, 0x0, 0x2, 0x2, 0x1, 0xe}, {0x800, 0x6, 0x0, 0xfff, 0x1000, 0x4}], [{0x3}, {0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x3}, {0x5}, {}, {}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {}, {0x5}, {0x3}, {0x419ef45d7ac6b0d4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x53d41069764da263}, {0x6, 0x1}, {0x4}, {0x2}, {0x3}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x1}, {0x87ebe96eb2afddb5, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x1}, {}, {0x4}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x2f83910c97d29da1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x5}, {0x1}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xbc97, 0x2, 0x8, 0x6dd000, 0x1}, 0x2, 0x10}, [{0x7, 0x4, 0x5, 0x4, 0x2, 0xd9a}, {0xfffffffa, 0x3, 0x6, 0x6, 0x2, 0xf}, {0x8001, 0x3, 0x4, 0x4, 0xd, 0x1}, {0x80000000, 0x7, 0x5, 0xce7, 0x2, 0x3}, {0xc6, 0x5, 0x8, 0xccb, 0xfffffff0, 0x9}, {0x7, 0x5, 0x80000001, 0x2, 0x48, 0x8000}, {0x7, 0x3, 0x101, 0x9, 0x7f, 0x4}, {0x8, 0x80, 0xffffffff, 0x9, 0x7f, 0x8000}, {0x1, 0x49b, 0xffff0000, 0x401, 0x5, 0x7}, {0x2, 0x3, 0x8, 0x5, 0x81, 0xb2}, {0x1ff, 0xfffffff9, 0x401, 0xb, 0x9, 0x3}, {0x0, 0x10001, 0x6, 0xf4, 0x4, 0x1}, {0x0, 0x401, 0x6, 0x10001, 0x9, 0x4}, {0x7, 0x80000001, 0xfae, 0x40, 0x1, 0x7}, {0x0, 0xf0, 0x0, 0x4, 0x2, 0x1858}, {0xfe000000, 0x6, 0x2, 0x4, 0xfffffff9}, {0x7fffffff, 0x101, 0x0, 0x771b, 0x0, 0x2}, {0xf67, 0xf, 0xdf9, 0x4, 0x1, 0x8}, {0x4, 0x7, 0xacf, 0x7, 0xff, 0x1ff}, {0x9, 0x10000, 0x2000000e, 0x80000000, 0x9, 0x80000001}, {0x8, 0x314, 0xfffffff2, 0x8, 0x711, 0x1}, {0x5, 0x800, 0x5, 0x8, 0x6, 0x71}, {0xb30, 0x3, 0x7, 0x9, 0x7, 0xffff58fa}, {0x2, 0x6, 0x9, 0x9c, 0x9, 0x78}, {0x13, 0x8, 0x2, 0x0, 0x101, 0x9}, {0x1, 0x1, 0x6, 0x200, 0x6, 0x5}, {0x3, 0x7ff, 0x5, 0xe, 0x578, 0x5}, {0x5, 0x3, 0x0, 0x81, 0xe21, 0x100}, {0x9, 0x100, 0x8, 0x8, 0x2, 0x1ff}, {0x7, 0xde2, 0x3, 0x2, 0x2, 0x4}, {0x0, 0x0, 0x81, 0x0, 0x1b, 0xc2b}, {0x5ceb, 0x8001, 0x32, 0x511, 0x0, 0x80000000}, {0x2, 0x7, 0xa0d9, 0x0, 0x6, 0x2}, {0xb69, 0x4, 0x3, 0x77fcd246, 0x0, 0x17e}, {0x1, 0x4, 0x2, 0x88, 0x5, 0x9}, {0x8, 0x0, 0x7, 0x7, 0x401, 0x9}, {0x9, 0xc382, 0x1, 0xd, 0x800, 0xbbe}, {0x3, 0x56, 0x8, 0xb, 0x8000, 0x6}, {0x5, 0xf, 0x2, 0x549, 0x3, 0x3}, {0x5, 0x4, 0x800, 0xb3, 0xda61, 0x9}, {0x3, 0x7, 0x8, 0x2, 0x8, 0x2}, {0x7, 0x4, 0xd37, 0x200, 0x5, 0x2}, {0x9, 0x9, 0x6, 0x9, 0x4, 0xa5ff}, {0x5, 0x7, 0x0, 0x3, 0x7f, 0x3}, {0x101, 0x7, 0x7, 0x51752d31, 0x0, 0x81}, {0x4, 0x8a4, 0xffff, 0x7, 0x1, 0x4}, {0xadf, 0x4, 0xfd1, 0x7, 0x543, 0x8}, {0x18f, 0xfff, 0x100, 0x9, 0x5a3}, {0x1000, 0x7c, 0x1, 0x9, 0x4, 0x3}, {0x8, 0x3, 0x10000, 0xfffffff8, 0x7fff, 0x9}, {0xfffffc00, 0x5, 0xffff, 0x1, 0x185bdce3, 0xffff}, {0x9, 0x5, 0x5, 0x80, 0x2, 0x9}, {0x8, 0x1, 0xfffffff5, 0x7f, 0x7, 0x1}, {0x2f7e, 0x8, 0x0, 0x3, 0xb, 0x7}, {0xaca, 0x6, 0x7, 0x1, 0x8001, 0x7}, {0xffffffff, 0x8, 0x9, 0x2, 0x4, 0x9}, {0xffff, 0xb, 0x0, 0x8, 0x2, 0x7}, {0x6, 0x0, 0xb70, 0x3, 0x1}, {0x3f6, 0x2, 0x3, 0x4, 0x200, 0x5}, {0x2b701590, 0xc, 0x8c, 0xffffff76, 0x3, 0x5e}, {0x2c2, 0x400, 0x1, 0x2, 0x7fffffff, 0x7}, {0x6, 0xb8b6, 0x6, 0x5, 0xd8, 0xf2c}, {0xf28, 0xf80, 0x1, 0x5, 0xa55, 0x6}, {0x359, 0x3, 0x53, 0x8, 0x0, 0x5}, {0x9, 0x6, 0x4f0, 0x8, 0x4, 0x6}, {0x4, 0x7, 0xffffff68, 0x8, 0x6, 0xfffffff8}, {0x1000, 0xe, 0x8, 0x7, 0x80000001, 0xc}, {0x800, 0x4, 0xfff, 0x6, 0xff, 0x20000}, {0xd, 0x5, 0x0, 0x3b72, 0xc1, 0x2}, {0x7fff, 0x8, 0xa4, 0xffff89f6, 0x1}, {0x1, 0x2, 0x10, 0x6, 0x126a67d5, 0x1ff8}, {0xfffffbff, 0x3, 0x6, 0xfffff001, 0x1f9cf6e8, 0x9}, {0x0, 0xd75b, 0xfffffffd, 0xf, 0x6, 0x7}, {0x1, 0x4, 0xac, 0x9, 0x3, 0x3}, {0x0, 0x5, 0x6, 0x0, 0x1, 0x8}, {0x7ff, 0x9, 0x8, 0x6, 0x5, 0xe00000}, {0x7ff, 0x7, 0x8, 0xe, 0x1ff, 0x6}, {0x2080, 0x1, 0x4, 0x5, 0xffffffff, 0x8}, {0xfff, 0x570c248a, 0xc45, 0x1, 0x6}, {0x5a9c20b9, 0xf, 0x5, 0x6, 0xffffffff, 0x8}, {0x1, 0x4, 0x81, 0x1ff, 0x7, 0x1ff}, {0x6, 0x7, 0x800, 0xa, 0x205, 0x2}, {0x650, 0x3, 0x7, 0xe, 0xe, 0x100}, {0xffffff85, 0xff, 0x3, 0x857, 0x9, 0x9}, {0x2, 0xc9a1, 0xc26f, 0x3, 0x0, 0xff}, {0x8001, 0x7ff, 0x5, 0x7, 0x81, 0x6}, {0x5, 0x279, 0x4, 0x0, 0x1000, 0x380000}, {0x4e0b, 0x7, 0x20000000, 0x5, 0x6, 0x2}, {0x3, 0x0, 0x2000002, 0x8, 0x1, 0x683a0ca}, {0x0, 0xfff, 0x9, 0x5, 0x1, 0xe}, {0x1, 0x6, 0x78, 0x4, 0x2, 0x3}, {0x8, 0xb, 0xffffff00, 0x6, 0x3, 0x5}, {0x1, 0x9, 0x139, 0x8, 0x2, 0x6}, {0x9, 0x2, 0x9, 0x3ff, 0x0, 0xe}, {0x732, 0xffffffff, 0x2, 0x7d5e, 0x1981788a, 0x2}, {0x0, 0x9, 0x200, 0xaa9, 0x5, 0x7bc}, {0x1ff, 0x3, 0xfffffff0, 0x11, 0xb, 0x1}, {0x3, 0x3, 0x1, 0x0, 0x5, 0x3}, {0x0, 0x200, 0x3, 0x7f, 0x8}, {0x0, 0x9, 0x5e4c, 0x1ff, 0x0, 0x1c0000}, {0xd, 0x8, 0xd, 0x6, 0x5, 0x1}, {0xe, 0x2, 0x5, 0x3, 0x28, 0x8}, {0x2e06, 0xfffffffd, 0xdba1, 0xb, 0x5, 0x1}, {0x9d7, 0x100, 0x2, 0xde, 0x7, 0x4}, {0x4, 0x8001, 0xe6a, 0xa2f7, 0x15122214, 0x10}, {0x6, 0x80, 0x3, 0x7, 0x46ac, 0x4}, {0x5, 0x48c5ac70, 0x1, 0x3, 0x7, 0x41}, {0x4, 0x1, 0x6, 0x2, 0x3, 0x4}, {0x6, 0x1, 0x0, 0x1, 0x237}, {0x9, 0xde2a1e64, 0x1, 0x8, 0x7fffffff, 0x6}, {0xe2bf, 0x6, 0xb, 0x100, 0x1cd, 0x3e}, {0x6, 0x101, 0xff, 0xe09b, 0x2, 0x4}, {0x8, 0x1, 0x8e4c, 0x2, 0x80000000, 0x5}, {0x9, 0x4, 0xf, 0x88, 0x8, 0x8}, {0x3, 0x80000001, 0x9af4, 0x6, 0x2, 0x7fffffff}, {0x80000001, 0x1, 0x8, 0xfffffffe, 0x6, 0x3}, {0x22, 0x4, 0xebf2, 0x0, 0x5, 0x9}, {0x0, 0x4, 0x696, 0x7f, 0x80000000, 0x6}, {0x6, 0x9, 0x7d, 0xe45, 0x3, 0x3}, {0x7, 0xae, 0xfff, 0x1000, 0xb, 0x1}, {0x3, 0x0, 0x1, 0xb, 0x0, 0x6de7}, {0x4c1, 0x3, 0x8001, 0x5, 0x400, 0x4}, {0x1, 0xfffffff9, 0x92, 0x100, 0x9, 0x9}, {0x9, 0x6, 0x5, 0x1, 0x183d, 0x100}, {0x9, 0xffff, 0x5, 0x9, 0x10001, 0x7ff}, {0x9, 0x1f1, 0x2, 0x4, 0x3ff, 0x200}, {0x81, 0x8, 0x1, 0x401, 0x9, 0x8}, {0x7fffffff, 0x4, 0x9, 0x9, 0x9, 0x3}], [{0x4, 0x1}, {0x6}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x4}, {0x4}, {}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x4f3d6b5ca114768e}, {0x5, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}], 0x1}}]}, {0x98, 0x6, "52aecf1b607387f8f61277759926537aa6431fe48b40698456daa6baefe5f141ba91fd9b314e9415b170ab98611287c95736c6f48dc6191987820bf7093dd258958e2fc0c7b6d590c04a7777e344c65b96698d916e892fb3c08fa1b9f42751e84951e867c620b7ec4d595439c592c3b4131f2de7d35d5a9bc7ee7f93fa33f645d61ad147f84c98e81a8efb185e187a202a5451da"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x164, 0x1d, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x0, 0x2, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xdce, 0x3, 0xd, 0x7, 0xe}, 0x1}}]}, {0xf7, 0x6, "ce5269993f2180ecededd09fc5173697707a4d7e19763219a205965aa64b07fe29424a10a224b2205ae04b06b6ff912efcc12c165329c7b0779af3cd687c3d8a336b08777c6075e25a515dc6b98a680d36b0c7e7d490d6dfe6a21180162ab0fe87127577f976f30731d52f64015d85d4e031cfdb3895bfe48d9591286e057c50e3813519cbcc489fd06a91c4d21ee5a0d061282b9e15d86813b8de0242fe78c98170b4c098f85e2738e04d1f7e80b6b5e72c8d931c1952ac93888b26769b9fd796ded458b262b836c377908e114170f8b8fa7d0b1eaef0769a5df9a742ce5086bca4348718fd28688f1e552df309c0f5be1c04"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1fe8}, 0x1, 0x0, 0x0, 0x888}, 0x20000040) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000100)={0x30, r8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, 0x0) ioctl$SNDCTL_SEQ_PANIC(r9, 0x5100) 3.744201064s ago: executing program 3 (id=2304): syz_clone3(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1f8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) setrlimit(0xa, &(0x7f00000002c0)={0xa8c000000000, 0x8}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000002a80)=""/4096}) 3.544195107s ago: executing program 3 (id=2306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000800000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000214000400fe8800000000000000000000000000010c0002800500010000000000080007400000000020000d80080002000a01010214000400fe8000000000000000000000000000bb"], 0xb4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x23c}}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) fsync(r3) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x1, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000095, 0x0, 0x85}]}) 3.451645189s ago: executing program 0 (id=2307): sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe95, 0x20004880, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe, 0x8000, 0x9}, 0x10}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r6 = bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r5, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ec0625bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92e67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcdee6"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000200)="240000001e005f80004000000000000003000000000000000000080008000100000000ff", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) 2.429554733s ago: executing program 1 (id=2308): socket$can_raw(0x1d, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x5, 0xe, 0x42, 0xa8}, {0x9, 0x3, 0x5, 0x8}, {0xc, 0x1f, 0x0, 0x37}, {0x62e, 0xb8, 0x2}, {0x9, 0x6, 0x6, 0x9}, {0x800, 0x6, 0x7}, {0x8, 0xba, 0x5, 0xe3}, {0x4, 0x2, 0xe6, 0x8001}]}) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) 2.292522386s ago: executing program 1 (id=2309): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfefc) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) unshare(0x24040400) landlock_restrict_self(r3, 0x2) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x24000084) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4f, 0x0, 0xffffffd6}, 0x28000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x0, 0x8, 0xa}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/freeze_filesystems', 0x40000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) timerfd_create(0x7, 0x0) mmap$qrtrtun(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x4010, r5, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0x800, 0xfffffffffffffffe, 0x10, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x406, 0x0, 0x0, 0x5, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x2, 0x0, 0x1}}, 0x2e) 2.200477784s ago: executing program 0 (id=2310): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xd, 0x3a, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x80, 0xfffffffc, 0xdc67}}) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) listxattr(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xb) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffea7, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c0000180037801300030071722834"], 0x2c}}, 0xc1) 2.148562848s ago: executing program 3 (id=2311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000080)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) unshare(0x22020600) unshare(0x2a020400) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r2, 0x100000001, 0x0, 0x0, 0x2, 0x1}) socket$rds(0x15, 0x5, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.572560396s ago: executing program 4 (id=2312): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000580080002001000fd00080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.160225455s ago: executing program 4 (id=2313): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.028534271s ago: executing program 1 (id=2314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x5, 0xb}, {0x4, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x2, 0x5390, 0x0, 0x32f}, 0x7, 0x0, 0x3, 0x0, 0x3, 0x17, 0x11, 0xb, 0x0, 0x2, {0x10001, 0x8, 0x8, 0x3, 0x3, 0xc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 944.499285ms ago: executing program 2 (id=2315): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0x31, 0x19, {0x19, 0x2, "c679946830a02c561a358689a3c104dbc33414ee877eac"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000040), 0xff, 0x2001) 906.301103ms ago: executing program 4 (id=2316): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98, 0x29}, {0x28}}}}, 0x228) 754.347748ms ago: executing program 0 (id=2317): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000026c0), 0x2, 0x0) writev(r0, &(0x7f0000002b40)=[{0x0}, {&(0x7f0000002980)="13", 0x1}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2d, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0xa}]}]}, 0x30}}, 0x40) 636.166541ms ago: executing program 4 (id=2318): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110, 0x0, {0x1e010000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 633.689004ms ago: executing program 1 (id=2319): pipe(&(0x7f0000000080)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004e80)=ANY=[@ANYBLOB="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"], 0x7e0}, 0x1, 0x0, 0x0, 0x4000091}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xfee8}, {0x94, 0x2, [@TCA_FLOWER_ACT={0x90, 0x3, [@m_ife={0x8c, 0xf, 0x0, 0x0, {{0x8}, {0x4}, {0x62, 0x6, "e34012fe1f7f4012d13f1b24c9f299531b9aa1064d866ea3d1bb0b9920d06a6667d4431caeedb8090f1a8a627cdc05ab0d89edc49c15fcdbe0a34d4ec5b58fcbb0d3a3dcb65de13bdf8bbe4a7abe443e7fb22c3d347a5a0232a759262c7e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 544.512556ms ago: executing program 0 (id=2320): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5fd) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5fd) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x5, 0x7, 0x9, 0x3, 0x12, "4bf8269dc8c718c9d46b6fed87700d14836709"}) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) 531.102934ms ago: executing program 4 (id=2321): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x0, 0x10, 0xca, 0x5}, {0xfffc, 0x2, 0x3, 0x9}, {0x7, 0xd, 0x6, 0x8}, {0x8001, 0x5, 0x1, 0x6}, {0x4, 0x6, 0xfa}, {0x4, 0x7, 0x6, 0x8}, {0x9, 0x2, 0x1, 0xfffffac0}]}) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x6, 0x13ffff, 0x0, 0x0, 0x1c, 0x8, "339f020bbea2b798000000010d0ec0c1b4e9b1c4369d03747950ceaac594b1b300000000c1c50d38ef2a565ef1e83333611c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) (async) write$UHID_INPUT(r2, 0x0, 0x0) 475.834262ms ago: executing program 3 (id=2322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0xffffffff, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x24000010) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="54fe91205f7570598cd8f9f7ac038b032727650f4b2b3bf9ee678af5225e3c47a1e0a333d1af5d4efa4862f8cb576b0cfec0b1f8e43992eda69054c0502ad355935f6a0014dcc83d257b5b26f3f4c57ea7a1de3a449fc32d769fcef776210421039acc3ffb1e8026aaf8fb3a5e3a0c667d7dffe16383b5c0903c751470a54cf4fa2b429f59b23fa9aa27154529a14c52336c7c8863e18ef94b6f14daba12f2a56bc0a4a809c21bfeb125ed3846a2bc87c4c1e381714c8b16564117f7dd865df0f71e3718ab9233ba18762a051b80fb690b9585e9d4285cda0a5984fc2693ee2e", @ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) 333.060165ms ago: executing program 1 (id=2323): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff07000400000001000000040048801400018010001080040005800800020010000050080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 169.245218ms ago: executing program 4 (id=2324): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0xfffffffffffffec4, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000012c0)={0x24, &(0x7f0000000d80)={0x40, 0x0, 0x4, "5e54b339"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000804"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0xd, 0x2, 0x4, 0x800, 0x9, {0x0, 0x2710}, {0x4, 0x8, 0xba, 0x5, 0x9f, 0x7c, "39418c5e"}, 0x3, 0x4, {}, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="da8410b783d8674d4d43f6c5058e8680066acfabd02733f2bb131c11b8e0a5bc881534e0e5e49a3324ccd235440424b48b682d59bf9e049c8e4f79ffa1e0d4505e27abdb8e563fce1ed014b99d3d5bab482f04a1dd160a8d6d50fe91eb7f749827539d7c7a245b7394ecb12f966bebf0f9240ec91b0667532391045a810a3cfc0a8b334f5674feda8520848701ee16872bafc5b266179c44d452f5f9bbe4b402d50b26fc7e1ce25cc6a14ed598b45bcdf27230870fd524988f657fc78071f2099f8fa5a16804566f640898e7733abc7c2ce02c5354d4655f8767a6", 0xdb, r1}, 0x68) 0s ago: executing program 1 (id=2325): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000000)={&(0x7f0000000080)=""/176, 0xb0}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) unshare(0x26020480) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[], 0x0) r5 = socket(0x2, 0x3, 0x2) connect$unix(r5, &(0x7f0000000000), 0x10) syz_extract_tcp_res(0x0, 0x8, 0x9) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYRES64=r7, @ANYRES16=r1], 0x0) kernel console output (not intermixed with test programs): 391.916328][T12130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.178030][ T5955] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 392.344153][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 392.354098][ T5955] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 392.363112][ T5955] usb 3-1: config 0 has no interface number 0 [ 392.445519][ T5955] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 392.551004][ T5955] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 392.554893][T12156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 392.569898][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.578272][ T5955] usb 3-1: Product: syz [ 392.582449][ T5955] usb 3-1: Manufacturer: syz [ 392.587140][ T5955] usb 3-1: SerialNumber: syz [ 392.600626][ T5955] usb 3-1: config 0 descriptor?? [ 392.610944][T12144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 392.687096][T12156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 392.724142][T12156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 392.754072][T12156] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 392.771180][T12156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 392.835262][T12144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 393.526629][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.558451][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.984542][ T5831] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 394.144209][ T5831] usb 2-1: Invalid ep0 maxpacket: 64 [ 394.274388][ T5831] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 394.469551][T12207] loop6: detected capacity change from 0 to 524287487 [ 394.485240][T12207] buffer_io_error: 7 callbacks suppressed [ 394.485257][T12207] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.514174][ T5831] usb 2-1: Invalid ep0 maxpacket: 64 [ 394.519950][ T5831] usb usb2-port1: attempt power cycle [ 394.537686][T12207] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.638789][T12207] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.639360][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 394.714346][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 394.749547][T12207] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.768758][T12207] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.777031][T12207] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.785380][T12207] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.793510][T12207] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.801563][T12207] ldm_validate_partition_table(): Disk read failed. [ 394.808393][T12207] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.816579][T12207] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.824945][T12207] Dev loop6: unable to read RDB block 0 [ 394.831358][T12207] loop6: unable to read partition table [ 394.837537][T12207] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 394.852236][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 394.858432][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 394.868642][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 394.904010][ T5831] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 394.934608][ T5831] usb 2-1: Invalid ep0 maxpacket: 64 [ 395.000546][ T5955] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 395.288876][ T5955] asix 3-1:0.188: probe with driver asix failed with error -71 [ 395.294437][T12213] openvswitch: netlink: IP tunnel TTL not specified. [ 395.374193][ T5831] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 395.395739][ T5206] ldm_validate_partition_table(): Disk read failed. [ 395.397267][ T5831] usb 2-1: Invalid ep0 maxpacket: 64 [ 395.402707][ T5206] Dev loop6: unable to read RDB block 0 [ 395.414293][ T5831] usb usb2-port1: unable to enumerate USB device [ 395.435777][ T5955] usb 3-1: USB disconnect, device number 48 [ 395.458580][ T5206] loop6: unable to read partition table [ 395.724044][ T5920] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 395.772911][T12221] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 395.855640][ T5920] usb 5-1: device descriptor read/64, error -71 [ 396.093914][ T5920] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 396.105247][ T5955] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 396.223901][ T5920] usb 5-1: device descriptor read/64, error -71 [ 396.279525][ T5955] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 396.289760][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.297877][ T5955] usb 4-1: Product: syz [ 396.302483][ T5955] usb 4-1: Manufacturer: syz [ 396.310585][ T5955] usb 4-1: SerialNumber: syz [ 396.344280][ T5920] usb usb5-port1: attempt power cycle [ 396.369588][ T5955] usb 4-1: config 0 descriptor?? [ 396.383446][ T5955] ch341 4-1:0.0: ch341-uart converter detected [ 396.674019][ T7343] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 396.702212][ T5920] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 396.868671][ T5920] usb 5-1: device descriptor read/8, error -71 [ 396.934375][ T7343] usb 1-1: Using ep0 maxpacket: 16 [ 396.980469][ T7343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.001577][ T7343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.028210][ T7343] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 397.061738][ T7343] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 397.075318][ T7343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.091303][ T7343] usb 1-1: config 0 descriptor?? [ 397.187082][ T5920] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 397.214445][ T5920] usb 5-1: device descriptor read/8, error -71 [ 397.369274][ T5920] usb usb5-port1: unable to enumerate USB device [ 397.453737][ T5955] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 397.843909][ T5920] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 397.911260][ T7343] HID 045e:07da: Invalid code 65791 type 1 [ 397.933454][ T7343] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0012/input/input33 [ 397.985819][ T7343] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 397.994030][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 398.005824][ T5920] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.051903][ T5920] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.065117][ T5920] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.076037][ T5920] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.097123][ T5920] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.106871][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.368770][ T5920] usb 2-1: GET_CAPABILITIES returned 0 [ 398.378062][ T5920] usbtmc 2-1:16.0: can't read capabilities [ 398.478279][ T5920] usb 4-1: USB disconnect, device number 72 [ 398.486317][ T5920] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 398.507356][ T5920] ch341 4-1:0.0: device disconnected [ 398.841444][T12262] openvswitch: netlink: IP tunnel dst address not specified [ 399.274943][T12267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1941'. [ 399.344686][T12268] loop6: detected capacity change from 0 to 524287487 [ 399.354254][T12268] ldm_validate_partition_table(): Disk read failed. [ 399.361587][T12268] Dev loop6: unable to read RDB block 0 [ 399.368553][T12268] loop6: unable to read partition table [ 399.374715][T12268] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 399.698305][ T5831] usb 1-1: USB disconnect, device number 61 [ 399.860735][ T30] audit: type=1326 audit(1764726256.211:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc98f749 code=0x7ffc0000 [ 399.904734][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1945'. [ 399.914127][T12280] openvswitch: netlink: Message has 8 unknown bytes. [ 399.923947][ T30] audit: type=1326 audit(1764726256.241:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc3dc98f749 code=0x7ffc0000 [ 399.923990][ T5830] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 399.984819][ T30] audit: type=1326 audit(1764726256.241:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc98f749 code=0x7ffc0000 [ 400.035022][ T30] audit: type=1326 audit(1764726256.241:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fc3dc98f749 code=0x7ffc0000 [ 400.077945][ T30] audit: type=1326 audit(1764726256.241:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc98f749 code=0x7ffc0000 [ 400.078962][T12284] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.1947'. [ 400.103341][ T30] audit: type=1326 audit(1764726256.241:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3dc98f749 code=0x7ffc0000 [ 400.142713][ T30] audit: type=1326 audit(1764726256.241:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc98f749 code=0x7ffc0000 [ 400.166435][ T30] audit: type=1326 audit(1764726256.241:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3dc98f749 code=0x7ffc0000 [ 400.183909][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 400.194685][ T30] audit: type=1326 audit(1764726256.241:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc98f749 code=0x7ffc0000 [ 400.269137][ T7343] usb 2-1: USB disconnect, device number 71 [ 400.313246][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1948'. [ 400.325596][ T5830] usb 4-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 400.338912][ T5830] usb 4-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 400.358239][ T30] audit: type=1326 audit(1764726256.241:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3dc98f749 code=0x7ffc0000 [ 400.401112][ T5830] usb 4-1: config 0 interface 0 has no altsetting 0 [ 400.408401][ T5830] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 400.418130][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.439368][ T5830] usb 4-1: config 0 descriptor?? [ 400.585884][ T5922] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 400.753931][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 400.761109][ T5922] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 400.798619][ T5922] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 400.863954][ T7343] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 400.989094][T12274] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 401.044120][ T5922] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 401.161427][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.184003][ T7343] usb 5-1: Using ep0 maxpacket: 16 [ 401.191195][ T7343] usb 5-1: config 222 has an invalid interface number: 31 but max is 0 [ 401.206288][T12305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.212653][T12305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.213500][ T7343] usb 5-1: config 222 has no interface number 0 [ 401.251424][T12305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 401.257758][T12305] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 401.264118][T12305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.306322][ T7343] usb 5-1: config 222 interface 31 altsetting 11 bulk endpoint 0xE has invalid maxpacket 16 [ 401.342187][ T7343] usb 5-1: config 222 interface 31 has no altsetting 0 [ 401.516321][ T7343] usb 5-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 401.526713][ T7343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.536746][ T7343] usb 5-1: Product: syz [ 401.540995][ T7343] usb 5-1: Manufacturer: syz [ 401.546504][ T7343] usb 5-1: SerialNumber: syz [ 401.554994][T12299] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 401.941480][T12299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.961455][T12299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.997050][ T7343] ldusb 5-1:222.31: Interrupt out endpoint not found (using control endpoint instead) [ 402.016004][ T7343] ldusb 5-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 402.068244][ T7343] usb 5-1: USB disconnect, device number 70 [ 402.099161][ T7343] ldusb 5-1:222.31: LD USB Device #0 now disconnected [ 402.623168][T12316] openvswitch: netlink: IP tunnel dst address not specified [ 402.654754][ T5830] usbhid 4-1:0.0: can't add hid device: -71 [ 402.663383][ T5830] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 402.712120][ T5830] usb 4-1: USB disconnect, device number 73 [ 402.958368][T12321] FAULT_INJECTION: forcing a failure. [ 402.958368][T12321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.005777][T12321] CPU: 1 UID: 0 PID: 12321 Comm: syz.3.1960 Not tainted syzkaller #0 PREEMPT(full) [ 403.005804][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.005815][T12321] Call Trace: [ 403.005823][T12321] [ 403.005831][T12321] dump_stack_lvl+0x189/0x250 [ 403.005853][T12321] ? __pfx____ratelimit+0x10/0x10 [ 403.005876][T12321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.005893][T12321] ? __pfx__printk+0x10/0x10 [ 403.005914][T12321] ? __might_fault+0xb0/0x130 [ 403.005946][T12321] should_fail_ex+0x414/0x560 [ 403.005969][T12321] _copy_from_user+0x2d/0xb0 [ 403.005988][T12321] __sys_connect+0x123/0x440 [ 403.006011][T12321] ? __fget_files+0x3a0/0x420 [ 403.006028][T12321] ? __pfx___sys_connect+0x10/0x10 [ 403.006061][T12321] ? __pfx_ksys_write+0x10/0x10 [ 403.006090][T12321] __x64_sys_connect+0x7a/0x90 [ 403.006111][T12321] do_syscall_64+0xfa/0xf80 [ 403.006125][T12321] ? lockdep_hardirqs_on+0x98/0x140 [ 403.006148][T12321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.006162][T12321] ? clear_bhb_loop+0x60/0xb0 [ 403.006181][T12321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.006197][T12321] RIP: 0033:0x7f151cb8f749 [ 403.006212][T12321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.006227][T12321] RSP: 002b:00007f151da90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 403.006245][T12321] RAX: ffffffffffffffda RBX: 00007f151cde5fa0 RCX: 00007f151cb8f749 [ 403.006257][T12321] RDX: 0000000000000058 RSI: 00002000000001c0 RDI: 0000000000000003 [ 403.006267][T12321] RBP: 00007f151da90090 R08: 0000000000000000 R09: 0000000000000000 [ 403.006277][T12321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.006287][T12321] R13: 00007f151cde6038 R14: 00007f151cde5fa0 R15: 00007f151cf0fa28 [ 403.006316][T12321] [ 403.288728][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 403.288806][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.294924][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 403.342833][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 403.349043][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 403.474552][T12325] loop3: detected capacity change from 0 to 7 [ 403.517160][T12325] Dev loop3: unable to read RDB block 7 [ 403.545234][T12326] loop6: detected capacity change from 0 to 524287487 [ 403.560177][T12325] loop3: unable to read partition table [ 403.571883][T12325] loop3: partition table beyond EOD, truncated [ 403.580523][T12326] buffer_io_error: 40 callbacks suppressed [ 403.580541][T12326] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.598052][T12325] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 403.672545][T12326] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.697886][T12326] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.726370][T12326] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.736428][T12326] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.745517][T12326] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.754530][T12326] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.764336][T12326] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.772952][T12326] ldm_validate_partition_table(): Disk read failed. [ 403.780508][T12326] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.826551][T12326] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.877996][ T5955] usb 3-1: USB disconnect, device number 49 [ 403.956707][T12326] Dev loop6: unable to read RDB block 0 [ 403.970053][T12326] loop6: unable to read partition table [ 403.989837][T12326] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 404.097727][ T5206] ldm_validate_partition_table(): Disk read failed. [ 404.114114][ T5206] Dev loop6: unable to read RDB block 0 [ 404.146139][ T5206] loop6: unable to read partition table [ 404.383911][ T5955] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 404.523946][ T5955] usb 4-1: device descriptor read/64, error -71 [ 404.691140][T12348] openvswitch: netlink: IP tunnel dst address not specified [ 404.763892][ T5955] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 404.904206][ T5955] usb 4-1: device descriptor read/64, error -71 [ 404.979471][T12363] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 405.024790][ T5955] usb usb4-port1: attempt power cycle [ 405.031764][T12365] FAULT_INJECTION: forcing a failure. [ 405.031764][T12365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.045542][T12365] CPU: 1 UID: 0 PID: 12365 Comm: syz.1.1973 Not tainted syzkaller #0 PREEMPT(full) [ 405.045567][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.045579][T12365] Call Trace: [ 405.045589][T12365] [ 405.045597][T12365] dump_stack_lvl+0x189/0x250 [ 405.045621][T12365] ? __pfx____ratelimit+0x10/0x10 [ 405.045642][T12365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.045658][T12365] ? __pfx__printk+0x10/0x10 [ 405.045690][T12365] should_fail_ex+0x414/0x560 [ 405.045716][T12365] _copy_to_user+0x31/0xb0 [ 405.045736][T12365] simple_read_from_buffer+0xe1/0x170 [ 405.045761][T12365] proc_fail_nth_read+0x1b3/0x220 [ 405.045790][T12365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.045824][T12365] ? rw_verify_area+0x2a6/0x4d0 [ 405.045848][T12365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.045873][T12365] vfs_read+0x200/0xa30 [ 405.045895][T12365] ? fdget_pos+0x247/0x320 [ 405.045919][T12365] ? __pfx___mutex_lock+0x10/0x10 [ 405.045941][T12365] ? __pfx_vfs_read+0x10/0x10 [ 405.045967][T12365] ? __fget_files+0x2a/0x420 [ 405.045991][T12365] ? __fget_files+0x3a0/0x420 [ 405.046010][T12365] ? __fget_files+0x2a/0x420 [ 405.046039][T12365] ksys_read+0x145/0x250 [ 405.046066][T12365] ? __pfx_ksys_read+0x10/0x10 [ 405.046095][T12365] ? do_syscall_64+0xbe/0xf80 [ 405.046116][T12365] do_syscall_64+0xfa/0xf80 [ 405.046132][T12365] ? lockdep_hardirqs_on+0x98/0x140 [ 405.046160][T12365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.046178][T12365] ? clear_bhb_loop+0x60/0xb0 [ 405.046199][T12365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.046216][T12365] RIP: 0033:0x7f890e78e15c [ 405.046233][T12365] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 405.046248][T12365] RSP: 002b:00007f890f5d0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 405.046267][T12365] RAX: ffffffffffffffda RBX: 00007f890e9e5fa0 RCX: 00007f890e78e15c [ 405.046280][T12365] RDX: 000000000000000f RSI: 00007f890f5d00a0 RDI: 0000000000000004 [ 405.046291][T12365] RBP: 00007f890f5d0090 R08: 0000000000000000 R09: 0000000000000000 [ 405.046302][T12365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.046312][T12365] R13: 00007f890e9e6038 R14: 00007f890e9e5fa0 R15: 00007f890eb0fa28 [ 405.046340][T12365] [ 405.280943][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.449479][T12372] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 405.449479][T12372] The task syz.4.1975 (12372) triggered the difference, watch for misbehavior. [ 405.553896][ T5955] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 405.574462][ T5955] usb 4-1: device descriptor read/8, error -71 [ 405.813929][ T5955] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 405.834533][ T5955] usb 4-1: device descriptor read/8, error -71 [ 405.946214][ T5955] usb usb4-port1: unable to enumerate USB device [ 406.154471][ T5830] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 406.314275][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 406.329871][ T5830] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 406.363988][ T5831] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 406.372004][ T5830] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 406.382491][ T5830] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 406.409052][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.471164][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 406.471181][ T30] audit: type=1326 audit(1764726262.821:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.4.1980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89c698f749 code=0x0 [ 406.536268][ T5831] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 406.546547][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.555930][ T5831] usb 2-1: Product: syz [ 406.560323][ T5831] usb 2-1: Manufacturer: syz [ 406.565655][ T5831] usb 2-1: SerialNumber: syz [ 406.581646][ T5831] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 406.601380][ T5830] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 407.057640][ T5920] usb 2-1: USB disconnect, device number 72 [ 407.713213][T12398] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.720606][T12398] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.727643][T12398] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 407.736647][T12398] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 407.743226][T12398] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.751025][ T5830] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 407.758172][ T5830] ath9k_htc: Failed to initialize the device [ 407.770082][ T5920] usb 2-1: ath9k_htc: USB layer deinitialized [ 408.992497][ T7343] usb 3-1: USB disconnect, device number 50 [ 409.434012][ T7343] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 409.584005][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 409.598235][ T7343] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 409.609538][ T7343] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 409.661618][ T7343] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 409.688731][ T7343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.723461][T12421] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 409.737214][ T7343] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.747984][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 409.754620][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 409.824048][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 409.830161][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 409.874023][ T5955] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 409.938925][T12421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.950344][T12421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.981050][T12421] SET target dimension over the limit! [ 410.024057][ T5955] usb 5-1: device descriptor read/64, error -71 [ 410.265065][ T5955] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 410.423903][ T5955] usb 5-1: device descriptor read/64, error -71 [ 410.548601][ T5955] usb usb5-port1: attempt power cycle [ 411.003939][ T5955] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 411.024503][ T5955] usb 5-1: device descriptor read/8, error -71 [ 411.077358][T12449] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1996'. [ 411.275743][ T5955] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 411.308561][ T5955] usb 5-1: device descriptor read/8, error -71 [ 411.344013][ T5920] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 411.424958][ T5955] usb usb5-port1: unable to enumerate USB device [ 411.484104][ T5830] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 411.494591][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 411.502653][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.519116][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.531511][ T5920] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 411.542338][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.644210][ T5920] usb 2-1: config 0 descriptor?? [ 411.655207][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 411.681282][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.697427][ T5830] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 411.713913][ T5830] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 411.723083][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.881639][ T5830] usb 4-1: config 0 descriptor?? [ 411.902027][ T5830] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 411.916803][ T5830] dvb-usb: bulk message failed: -22 (3/0) [ 411.931954][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.947418][ T5830] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 411.955018][ T5830] usb 4-1: media controller created [ 412.105973][T12454] dvb-usb: bulk message failed: -22 (2/0) [ 412.134309][T12454] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.151601][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 412.163054][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 412.181719][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.222270][ T5920] usb 2-1: USB disconnect, device number 73 [ 412.271866][ T5830] dvb-usb: bulk message failed: -22 (6/0) [ 412.281118][ T5830] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 412.341141][ T5955] usb 3-1: USB disconnect, device number 51 [ 412.378797][ T5830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 412.465973][ T5830] dvb-usb: schedule remote query interval to 150 msecs. [ 412.480514][ T5830] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 412.505336][ T5830] usb 4-1: USB disconnect, device number 78 [ 412.598249][ T5830] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 412.642652][T12470] netlink: 'syz.4.2002': attribute type 14 has an invalid length. [ 412.899399][T12477] loop3: detected capacity change from 0 to 7 [ 412.935309][T12477] Dev loop3: unable to read RDB block 7 [ 412.956728][T12477] loop3: unable to read partition table [ 413.038990][T12477] loop3: partition table beyond EOD, truncated [ 413.063927][T12477] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 413.123723][ T5830] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 413.213898][T11452] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 413.227543][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'. [ 413.237158][T12483] openvswitch: netlink: Message has 8 unknown bytes. [ 413.284266][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 413.290942][ T5830] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 413.300649][ T5830] usb 4-1: config 0 has no interface number 0 [ 413.306899][ T5830] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 413.319160][ T5830] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 413.328847][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.338787][ T5830] usb 4-1: Product: syz [ 413.342974][ T5830] usb 4-1: Manufacturer: syz [ 413.349518][ T5830] usb 4-1: SerialNumber: syz [ 413.358409][ T5830] usb 4-1: config 0 descriptor?? [ 413.365715][T12476] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 413.380153][T11452] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 413.393174][T11452] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 413.445101][T11452] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.468902][T11452] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 413.478142][T11452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 413.487439][T11452] usb 5-1: Product: syz [ 413.494032][T11452] usb 5-1: Manufacturer: syz [ 413.500029][T11452] usb 5-1: SerialNumber: syz [ 413.598117][T12476] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 413.725607][T11452] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 413.738977][T11452] usb 5-1: USB disconnect, device number 75 [ 413.784708][T11452] usblp0: removed [ 414.290403][T12489] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.2010'. [ 414.302179][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.312522][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.321093][T12489] FAULT_INJECTION: forcing a failure. [ 414.321093][T12489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.346195][T12489] CPU: 0 UID: 0 PID: 12489 Comm: syz.1.2010 Not tainted syzkaller #0 PREEMPT(full) [ 414.346221][T12489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.346233][T12489] Call Trace: [ 414.346241][T12489] [ 414.346249][T12489] dump_stack_lvl+0x189/0x250 [ 414.346272][T12489] ? __pfx____ratelimit+0x10/0x10 [ 414.346288][T12489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.346301][T12489] ? __pfx__printk+0x10/0x10 [ 414.346321][T12489] should_fail_ex+0x414/0x560 [ 414.346337][T12489] _copy_to_user+0x31/0xb0 [ 414.346349][T12489] simple_read_from_buffer+0xe1/0x170 [ 414.346363][T12489] proc_fail_nth_read+0x1b3/0x220 [ 414.346380][T12489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.346396][T12489] ? rw_verify_area+0x2a6/0x4d0 [ 414.346410][T12489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.346425][T12489] vfs_read+0x200/0xa30 [ 414.346438][T12489] ? fdget_pos+0x247/0x320 [ 414.346451][T12489] ? __pfx___mutex_lock+0x10/0x10 [ 414.346462][T12489] ? __pfx_vfs_read+0x10/0x10 [ 414.346476][T12489] ? __fget_files+0x2a/0x420 [ 414.346489][T12489] ? __fget_files+0x3a0/0x420 [ 414.346498][T12489] ? __fget_files+0x2a/0x420 [ 414.346514][T12489] ksys_read+0x145/0x250 [ 414.346529][T12489] ? __pfx_ksys_read+0x10/0x10 [ 414.346544][T12489] ? do_syscall_64+0xbe/0xf80 [ 414.346556][T12489] do_syscall_64+0xfa/0xf80 [ 414.346565][T12489] ? lockdep_hardirqs_on+0x98/0x140 [ 414.346588][T12489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.346605][T12489] ? clear_bhb_loop+0x60/0xb0 [ 414.346627][T12489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.346640][T12489] RIP: 0033:0x7f890e78e15c [ 414.346650][T12489] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 414.346665][T12489] RSP: 002b:00007f890f5d0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 414.346677][T12489] RAX: ffffffffffffffda RBX: 00007f890e9e5fa0 RCX: 00007f890e78e15c [ 414.346685][T12489] RDX: 000000000000000f RSI: 00007f890f5d00a0 RDI: 0000000000000007 [ 414.346691][T12489] RBP: 00007f890f5d0090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 414.346698][T12489] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 414.346704][T12489] R13: 00007f890e9e6038 R14: 00007f890e9e5fa0 R15: 00007f890eb0fa28 [ 414.346722][T12489] [ 414.816277][ T30] audit: type=1326 audit(1764726271.171:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f890e7865e7 code=0x7ffc0000 [ 414.896710][ T30] audit: type=1326 audit(1764726271.191:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f890e72b829 code=0x7ffc0000 [ 414.960720][ T30] audit: type=1326 audit(1764726271.191:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 415.003934][ T5955] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 415.048342][ T30] audit: type=1326 audit(1764726271.191:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 415.096159][ T30] audit: type=1326 audit(1764726271.191:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f890e7865e7 code=0x7ffc0000 [ 415.151011][ T30] audit: type=1326 audit(1764726271.191:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f890e72b829 code=0x7ffc0000 [ 415.173320][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.182350][ T30] audit: type=1326 audit(1764726271.201:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 415.209948][ T30] audit: type=1326 audit(1764726271.201:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 415.232762][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.245301][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.262234][ T5955] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 415.272279][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.280819][ T30] audit: type=1326 audit(1764726271.201:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 415.307406][ T30] audit: type=1326 audit(1764726271.201:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 415.331049][ T5955] usb 3-1: config 0 descriptor?? [ 415.475096][ T5955] usbhid 3-1:0.0: can't add hid device: -71 [ 415.481208][ T5955] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 415.517936][ T5955] usb 3-1: USB disconnect, device number 52 [ 415.557421][T12507] netlink: 'syz.1.2016': attribute type 20 has an invalid length. [ 415.579282][T12511] loop3: detected capacity change from 0 to 7 [ 415.590683][T12508] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 415.604192][T12511] Dev loop3: unable to read RDB block 7 [ 415.609934][T12511] loop3: unable to read partition table [ 415.616027][T12511] loop3: partition table beyond EOD, truncated [ 415.632303][T12511] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 415.752243][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 415.774624][T12518] openvswitch: netlink: Message has 8 unknown bytes. [ 416.180671][ T5830] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 416.215311][ T5830] asix 4-1:0.188: probe with driver asix failed with error -71 [ 416.269194][ T5830] usb 4-1: USB disconnect, device number 79 [ 416.275307][T11452] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 416.319358][T12530] netlink: 'syz.3.2022': attribute type 10 has an invalid length. [ 416.327544][T12530] bridge0: port 3(hsr0) entered disabled state [ 416.333918][T12530] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.376789][T12530] bridge0: port 3(hsr0) entered blocking state [ 416.383059][T12530] bridge0: port 3(hsr0) entered forwarding state [ 416.389632][T12530] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.396773][T12530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.421823][T12530] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 416.430618][ T5955] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 416.444040][T11452] usb 3-1: Using ep0 maxpacket: 8 [ 416.461524][T11452] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 416.630691][T11452] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 416.641042][T11452] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 416.650413][T11452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.663954][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 416.689792][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.702337][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.748477][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.782309][ T5955] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 416.814671][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.835878][ T5955] usb 2-1: config 0 descriptor?? [ 417.712106][ T5955] koneplus 0003:1E7D:2E22.0013: item fetching failed at offset 0/2 [ 417.726231][ T5955] koneplus 0003:1E7D:2E22.0013: parse failed [ 417.732369][ T5955] koneplus 0003:1E7D:2E22.0013: probe with driver koneplus failed with error -22 [ 417.917774][ T5955] usb 2-1: USB disconnect, device number 74 [ 418.004624][T12501] delete_channel: no stack [ 418.344557][ T5955] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 418.494662][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 418.504751][ T5955] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 418.526666][ T5955] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 418.613551][ T5955] usb 1-1: config 1 has no interface number 1 [ 418.642643][ T5955] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 418.672602][ T5955] usb 1-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 418.690918][ T5955] usb 1-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 418.722440][T12551] openvswitch: netlink: Key 3 has unexpected len 12 expected 4 [ 418.735131][ T5955] usb 1-1: config 1 interface 2 has no altsetting 0 [ 418.765439][ T5955] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.835226][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.849085][ T5955] usb 1-1: Product: syz [ 418.859956][ T5955] usb 1-1: Manufacturer: syz [ 418.866541][ T5955] usb 1-1: SerialNumber: syz [ 418.873280][T12553] loop3: detected capacity change from 0 to 7 [ 418.905911][T12553] Dev loop3: unable to read RDB block 7 [ 418.937347][T12553] loop3: unable to read partition table [ 418.968700][T12553] loop3: partition table beyond EOD, truncated [ 418.984873][T12553] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 419.231547][ T5831] usb 3-1: USB disconnect, device number 53 [ 419.376932][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 419.404744][T12559] openvswitch: netlink: Message has 8 unknown bytes. [ 419.438995][T12556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.453084][T12556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.996315][ T5955] usb 1-1: 0:8 : does not exist [ 420.070737][ T5955] usb 1-1: USB disconnect, device number 62 [ 420.145774][ T8899] udevd[8899]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.336273][T12579] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.2037'. [ 420.856117][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 420.856133][ T30] audit: type=1326 audit(1764726277.211:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12580 comm="syz.2.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b7b7865e7 code=0x7ffc0000 [ 420.866304][T12593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 420.994390][ T30] audit: type=1326 audit(1764726277.241:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12580 comm="syz.2.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b7b72b829 code=0x7ffc0000 [ 421.243478][T12605] loop6: detected capacity change from 0 to 524287487 [ 421.255760][T12605] buffer_io_error: 24 callbacks suppressed [ 421.255787][T12605] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.269811][T12605] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.277913][T12605] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.286011][T12605] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.294107][T12605] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.302494][T12605] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.310754][T12605] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.318921][T12605] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.326936][T12605] ldm_validate_partition_table(): Disk read failed. [ 421.338430][T12605] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.346898][T12605] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.355356][T12605] Dev loop6: unable to read RDB block 0 [ 421.361937][T12605] loop6: unable to read partition table [ 421.368135][T12605] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 421.415099][ T30] audit: type=1326 audit(1764726277.241:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12580 comm="syz.2.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b7b7865e7 code=0x7ffc0000 [ 421.890511][ T30] audit: type=1326 audit(1764726277.241:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12580 comm="syz.2.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b7b72b829 code=0x7ffc0000 [ 421.952141][ T30] audit: type=1326 audit(1764726277.241:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12580 comm="syz.2.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b7b7865e7 code=0x7ffc0000 [ 422.053405][ T30] audit: type=1326 audit(1764726277.241:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12580 comm="syz.2.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b7b72b829 code=0x7ffc0000 [ 422.147824][ T30] audit: type=1326 audit(1764726277.241:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12580 comm="syz.2.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b7b7865e7 code=0x7ffc0000 [ 422.180448][ T30] audit: type=1326 audit(1764726277.241:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12580 comm="syz.2.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b7b72b829 code=0x7ffc0000 [ 422.210865][ T30] audit: type=1326 audit(1764726277.241:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12580 comm="syz.2.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b7b7865e7 code=0x7ffc0000 [ 422.234178][ T30] audit: type=1326 audit(1764726277.241:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12580 comm="syz.2.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b7b72b829 code=0x7ffc0000 [ 422.681368][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 422.709537][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 422.748299][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 422.847799][T12631] openvswitch: netlink: Key 32 has unexpected len 12 expected 2 [ 422.983965][ T5831] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 423.153880][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 423.161008][ T5831] usb 4-1: config 15 has too many interfaces: 255, using maximum allowed: 32 [ 423.178706][ T5831] usb 4-1: config 15 has an invalid descriptor of length 1, skipping remainder of the config [ 423.213927][ T5831] usb 4-1: config 15 has 1 interface, different from the descriptor's value: 255 [ 423.223184][ T5831] usb 4-1: config 15 interface 0 altsetting 2 endpoint 0x6 has invalid maxpacket 42752, setting to 1024 [ 423.254432][ T5831] usb 4-1: config 15 interface 0 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 1024 [ 423.270457][ T5831] usb 4-1: config 15 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.283890][ T5831] usb 4-1: config 15 interface 0 has no altsetting 0 [ 423.303963][ T5831] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 423.313141][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=35 [ 423.321503][ T5831] usb 4-1: Product: syz [ 423.328057][ T5831] usb 4-1: SerialNumber: syz [ 423.351573][T12625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 423.368938][ T5831] gs_usb 4-1:15.0: Required endpoints not found [ 423.475242][T12653] loop3: detected capacity change from 0 to 7 [ 423.505009][ T8899] Dev loop3: unable to read RDB block 7 [ 423.524049][ T8899] loop3: unable to read partition table [ 423.543683][ T8899] loop3: partition table beyond EOD, truncated [ 423.554937][T12653] Dev loop3: unable to read RDB block 7 [ 423.577849][ T5831] usb 4-1: USB disconnect, device number 80 [ 423.595019][T12653] loop3: unable to read partition table [ 423.607748][T12653] loop3: partition table beyond EOD, truncated [ 423.628389][T12653] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 423.892203][T12658] loop6: detected capacity change from 0 to 524287487 [ 423.901963][T12658] ldm_validate_partition_table(): Disk read failed. [ 423.909456][T12658] Dev loop6: unable to read RDB block 0 [ 423.916117][T12658] loop6: unable to read partition table [ 423.922241][T12658] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 424.355283][ T5920] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 424.529203][ T5206] ldm_validate_partition_table(): Disk read failed. [ 424.554447][ T5206] Dev loop6: unable to read RDB block 0 [ 424.574435][ T5206] loop6: unable to read partition table [ 424.594916][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 424.656253][ T5955] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 424.675453][ T5920] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 424.684094][ T5920] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 424.695366][ T5920] usb 5-1: config 127 has no interface number 1 [ 424.701800][ T5920] usb 5-1: config 127 interface 171 has no altsetting 0 [ 424.747378][ T5920] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 424.756935][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.807447][ T5920] usb 5-1: Product: syz [ 424.811628][ T5920] usb 5-1: Manufacturer: syz [ 424.873865][ T5920] usb 5-1: SerialNumber: syz [ 424.938621][ T5955] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 424.968519][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.992915][ T5955] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 425.016121][ T5955] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 425.044733][ T5955] usb 3-1: Manufacturer: syz [ 425.070798][ T5955] usb 3-1: config 0 descriptor?? [ 425.334289][ T5955] rc_core: IR keymap rc-hauppauge not found [ 425.347567][ T5955] Registered IR keymap rc-empty [ 425.376010][ T5955] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 425.500775][T12685] loop6: detected capacity change from 0 to 524287487 [ 425.544653][T12685] ldm_validate_partition_table(): Disk read failed. [ 425.568001][ T5955] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37 [ 425.614324][T12685] Dev loop6: unable to read RDB block 0 [ 425.620785][T12685] loop6: unable to read partition table [ 425.626969][T12685] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 425.644094][ T5831] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 425.824900][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 425.832840][ T5831] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 425.842844][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.927269][ T5831] usb 1-1: config 0 descriptor?? [ 425.969239][ T5831] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 426.158166][ T5831] gspca_vc032x: reg_r err -32 [ 426.165434][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.199492][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.218291][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.246884][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.267766][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.290211][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.358841][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.373289][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.388743][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.399944][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.419774][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.432969][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.460964][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.472966][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.493936][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.577771][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.587552][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.603642][ T5831] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.663958][ T5831] gspca_vc032x: Unknown sensor... [ 426.674520][ T5831] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 426.981050][ T5920] xr_serial 5-1:127.171: xr_serial converter detected [ 426.993601][ T5920] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 427.000520][ T5920] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 427.062180][ T5920] usb 5-1: USB disconnect, device number 76 [ 427.121614][ T5920] xr_serial 5-1:127.171: device disconnected [ 427.242673][ T7343] usb 3-1: USB disconnect, device number 54 [ 427.680573][T12699] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 427.833977][ T5955] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 428.018396][ T5955] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 428.030053][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.039282][ T5955] usb 3-1: Product: syz [ 428.045153][ T5955] usb 3-1: Manufacturer: syz [ 428.049862][ T5955] usb 3-1: SerialNumber: syz [ 428.058052][ T5955] usb 3-1: config 0 descriptor?? [ 428.071379][ T5955] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 428.173934][ T5831] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 428.343891][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 428.354863][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.394260][ T5920] usb 1-1: USB disconnect, device number 63 [ 428.430759][ T5831] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 428.471244][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.490725][ T5831] usb 4-1: config 0 descriptor?? [ 428.725608][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.741657][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.759185][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.771194][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.870309][T12723] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.878127][T12723] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.919187][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.935876][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2078'. [ 428.993194][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.005917][T12722] openvswitch: netlink: Message has 8 unknown bytes. [ 429.054952][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.065310][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.076312][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.090733][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.173922][ T5920] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 429.208446][T12707] ip6t_rpfilter: unknown options [ 429.288196][ T5831] usbhid 4-1:0.0: can't add hid device: -71 [ 429.296097][ T5831] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 429.344925][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 429.357207][ T5920] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 429.365833][ T5920] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 429.386898][ T5831] usb 4-1: USB disconnect, device number 81 [ 429.395698][ T5920] usb 1-1: config 127 has no interface number 1 [ 429.402047][ T5920] usb 1-1: config 127 interface 171 has no altsetting 0 [ 429.420968][ T5920] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 429.430866][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.452406][ T5920] usb 1-1: Product: syz [ 429.458527][ T5920] usb 1-1: Manufacturer: syz [ 429.468997][ T5920] usb 1-1: SerialNumber: syz [ 429.496998][T12735] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2081'. [ 429.550960][ T5955] gspca_sunplus: reg_w_riv err -71 [ 429.559326][ T5955] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 429.606254][ T5955] usb 3-1: USB disconnect, device number 55 [ 429.628274][ T8899] udevd[8899]: setting mode of /dev/bus/usb/003/055 to 020664 failed: No such file or directory [ 429.662097][ T8899] udevd[8899]: setting owner of /dev/bus/usb/003/055 to uid=0, gid=0 failed: No such file or directory [ 431.595284][T12763] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 431.804286][ T5920] xr_serial 1-1:127.171: xr_serial converter detected [ 431.941324][ T5920] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 431.949217][ T5920] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 431.968186][ T5920] usb 1-1: USB disconnect, device number 64 [ 432.006052][ T5920] xr_serial 1-1:127.171: device disconnected [ 432.277360][T12778] loop3: detected capacity change from 0 to 7 [ 432.293219][ T8899] Dev loop3: unable to read RDB block 7 [ 432.299263][ T8899] loop3: unable to read partition table [ 432.305503][ T8899] loop3: partition table beyond EOD, truncated [ 432.312752][T12778] Dev loop3: unable to read RDB block 7 [ 432.322808][T12778] loop3: unable to read partition table [ 432.330442][T12778] loop3: partition table beyond EOD, truncated [ 432.356906][T12778] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 432.376697][ T5920] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 432.528903][ T5920] usb 1-1: device descriptor read/64, error -71 [ 432.716675][T12792] xt_hashlimit: size too large, truncated to 1048576 [ 432.776006][T12798] netlink: 'syz.3.2100': attribute type 1 has an invalid length. [ 432.794490][ T5920] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 432.817514][T12798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 432.820476][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2102'. [ 432.903880][ T7343] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 432.947003][ T5920] usb 1-1: device descriptor read/64, error -71 [ 433.053879][ T7343] usb 2-1: Using ep0 maxpacket: 16 [ 433.054238][ T5920] usb usb1-port1: attempt power cycle [ 433.061416][ T7343] usb 2-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 433.076195][ T7343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 433.094038][ T7343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 125, changing to 10 [ 433.108791][ T7343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58243, setting to 1024 [ 433.120087][ T7343] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.137850][ T7343] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 433.150868][ T7343] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 433.158940][ T7343] usb 2-1: Manufacturer: syz [ 433.167262][ T7343] usb 2-1: config 0 descriptor?? [ 433.339898][T12815] loop3: detected capacity change from 0 to 7 [ 433.347034][T12815] Dev loop3: unable to read RDB block 7 [ 433.352656][T12815] loop3: unable to read partition table [ 433.360725][T12815] loop3: partition table beyond EOD, truncated [ 433.367224][T12815] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 433.380526][T12789] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2099'. [ 433.413956][ T5920] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 433.447034][ T5920] usb 1-1: device descriptor read/8, error -71 [ 433.524603][ T7343] rc_core: IR keymap rc-hauppauge not found [ 433.533513][ T7343] Registered IR keymap rc-empty [ 433.551856][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.587165][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.625541][ T7343] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 433.649872][ T7343] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 433.672951][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.680549][T12821] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 433.694071][ T5920] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 433.714261][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.727005][ T5920] usb 1-1: device descriptor read/8, error -71 [ 433.744764][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.765499][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.794355][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.825158][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.844457][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.846460][ T5920] usb usb1-port1: unable to enumerate USB device [ 433.864295][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.889399][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2113'. [ 433.901150][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.924570][ T7343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 433.959003][ T7343] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 433.991378][ T7343] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 434.026471][ T7343] usb 2-1: USB disconnect, device number 75 [ 434.067190][T12837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2116'. [ 434.169959][T12841] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 434.221529][T12843] loop3: detected capacity change from 0 to 7 [ 434.245599][T12843] Dev loop3: unable to read RDB block 7 [ 434.259549][T12843] loop3: unable to read partition table [ 434.269823][T12843] loop3: partition table beyond EOD, truncated [ 434.286936][T12843] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 434.673515][T12864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2124'. [ 434.932284][T12880] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 434.945338][ T5920] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 435.222939][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 435.250962][ T5920] usb 5-1: not running at top speed; connect to a high speed hub [ 435.283044][ T5920] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 435.313047][ T5920] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 435.342596][ T5920] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 435.363729][ T5920] usb 5-1: config 2 has no interface number 0 [ 435.379018][ T5920] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 435.407102][ T5920] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 435.433534][ T5920] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 435.493125][ T5920] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 435.506685][T12894] loop3: detected capacity change from 0 to 7 [ 435.514877][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.528182][T12894] Dev loop3: unable to read RDB block 7 [ 435.534000][ T5920] usb 5-1: Product: syz [ 435.541664][T12894] loop3: unable to read partition table [ 435.547596][ T5920] usb 5-1: Manufacturer: syz [ 435.553217][ T5920] usb 5-1: SerialNumber: syz [ 435.563100][T12894] loop3: partition table beyond EOD, truncated [ 435.593929][T12894] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 435.593931][ T5922] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 435.784861][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 435.787033][T12862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.800660][ T5922] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 435.803051][T12862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.813818][ T5922] usb 2-1: config 0 has no interface number 0 [ 435.891751][ T5922] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 435.917888][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.934111][ T5922] usb 2-1: Product: syz [ 435.938399][ T5922] usb 2-1: Manufacturer: syz [ 435.944116][ T5922] usb 2-1: SerialNumber: syz [ 435.961158][ T5922] usb 2-1: config 0 descriptor?? [ 435.963922][T12862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.104357][T12862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.164035][ T7343] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 436.206269][ T5922] speedtch 2-1:0.235: speedtch_bind: data interface not found! [ 436.229790][ T5922] speedtch 2-1:0.235: usbatm_usb_probe: bind failed: -19! [ 436.243751][ T5922] usb 2-1: USB disconnect, device number 76 [ 436.335582][ T7343] usb 1-1: Using ep0 maxpacket: 8 [ 436.344925][ T7343] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 436.374126][ T5920] usb 5-1: USB disconnect, device number 77 [ 436.381569][ T7343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.445907][ T7343] usb 1-1: config 0 descriptor?? [ 436.694141][T12896] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 436.827597][T12914] tipc: Cannot configure node identity twice [ 436.838155][ T7343] usb 1-1: string descriptor 0 read error: -71 [ 436.852437][ T7343] uvcvideo 1-1:0.0: Found multiple Units with ID 1 [ 436.871702][ T7343] uvcvideo 1-1:0.0: Found UVC 0.00 device (2833:0201) [ 436.888526][ T7343] uvcvideo 1-1:0.0: No valid video chain found. [ 436.904163][ T7343] usb 1-1: USB disconnect, device number 69 [ 436.967147][T12921] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 436.973761][T12921] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 436.996708][T12921] vhci_hcd vhci_hcd.0: Device attached [ 437.046849][T12929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.158304][T12929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.190668][T12929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.209870][T12929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.253544][T12929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.266941][T12929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.284587][T11452] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 437.293928][ T5920] usb 38-1: SetAddress Request (2) to port 0 [ 437.300464][ T5920] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 437.389880][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 437.389897][ T30] audit: type=1326 audit(1764726293.741:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f890e7865e7 code=0x7ffc0000 [ 437.434861][T11452] usb 5-1: device descriptor read/64, error -71 [ 437.457800][ T30] audit: type=1326 audit(1764726293.771:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f890e72b829 code=0x7ffc0000 [ 437.480079][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.536965][T12936] loop3: detected capacity change from 0 to 7 [ 437.551273][ T8899] Dev loop3: unable to read RDB block 7 [ 437.557353][ T8899] loop3: unable to read partition table [ 437.564151][ T30] audit: type=1326 audit(1764726293.771:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 437.588503][ T8899] loop3: partition table beyond EOD, truncated [ 437.607209][T12936] Dev loop3: unable to read RDB block 7 [ 437.613163][T12936] loop3: unable to read partition table [ 437.622888][T12936] loop3: partition table beyond EOD, truncated [ 437.630624][T12936] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 437.654581][ T30] audit: type=1326 audit(1764726293.771:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 437.678933][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.685135][T11452] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 437.695268][T12922] vhci_hcd: connection reset by peer [ 437.705226][ T30] audit: type=1326 audit(1764726293.781:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f890e7865e7 code=0x7ffc0000 [ 437.727516][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.727781][ T3440] vhci_hcd: stop threads [ 437.727805][ T3440] vhci_hcd: release socket [ 437.728922][ T3440] vhci_hcd: disconnect device [ 437.735330][ T30] audit: type=1326 audit(1764726293.781:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f890e72b829 code=0x7ffc0000 [ 437.791591][ T30] audit: type=1326 audit(1764726293.781:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f890e7865e7 code=0x7ffc0000 [ 437.813948][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.822763][ T30] audit: type=1326 audit(1764726293.781:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f890e72b829 code=0x7ffc0000 [ 437.845027][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.852225][T11452] usb 5-1: device descriptor read/64, error -71 [ 437.888876][ T30] audit: type=1326 audit(1764726293.781:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f890e7865e7 code=0x7ffc0000 [ 437.911179][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.974670][T11452] usb usb5-port1: attempt power cycle [ 437.976496][T12938] FAULT_INJECTION: forcing a failure. [ 437.976496][T12938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.000253][ T30] audit: type=1326 audit(1764726293.781:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f890e72b829 code=0x7ffc0000 [ 438.043155][T12938] CPU: 1 UID: 0 PID: 12938 Comm: syz.0.2145 Not tainted syzkaller #0 PREEMPT(full) [ 438.043173][T12938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.043180][T12938] Call Trace: [ 438.043185][T12938] [ 438.043191][T12938] dump_stack_lvl+0x189/0x250 [ 438.043206][T12938] ? __pfx____ratelimit+0x10/0x10 [ 438.043221][T12938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.043232][T12938] ? __pfx__printk+0x10/0x10 [ 438.043257][T12938] should_fail_ex+0x414/0x560 [ 438.043273][T12938] _copy_from_user+0x2d/0xb0 [ 438.043285][T12938] copy_from_sockptr_offset+0x66/0xa0 [ 438.043301][T12938] do_arpt_set_ctl+0x8db/0xf10 [ 438.043317][T12938] ? __pfx___mutex_trylock_common+0x10/0x10 [ 438.043328][T12938] ? __local_bh_enable_ip+0x12d/0x1c0 [ 438.043343][T12938] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 438.043356][T12938] ? rcu_is_watching+0x15/0xb0 [ 438.043367][T12938] ? trace_contention_end+0x39/0x100 [ 438.043387][T12938] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 438.043401][T12938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 438.043413][T12938] ? __pfx___mutex_lock+0x10/0x10 [ 438.043429][T12938] nf_setsockopt+0x26f/0x290 [ 438.043441][T12938] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 438.043455][T12938] smc_setsockopt+0x232/0xab0 [ 438.043473][T12938] ? __pfx_smc_setsockopt+0x10/0x10 [ 438.043487][T12938] ? aa_sock_opt_perm+0xff/0x1a0 [ 438.043501][T12938] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 438.043511][T12938] ? __pfx_smc_setsockopt+0x10/0x10 [ 438.043526][T12938] do_sock_setsockopt+0x17c/0x1b0 [ 438.043543][T12938] __x64_sys_setsockopt+0x13f/0x1b0 [ 438.043560][T12938] do_syscall_64+0xfa/0xf80 [ 438.043572][T12938] ? lockdep_hardirqs_on+0x98/0x140 [ 438.043586][T12938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.043596][T12938] ? clear_bhb_loop+0x60/0xb0 [ 438.043608][T12938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.043618][T12938] RIP: 0033:0x7fc3dc98f749 [ 438.043628][T12938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.043637][T12938] RSP: 002b:00007fc3dd75e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 438.043648][T12938] RAX: ffffffffffffffda RBX: 00007fc3dcbe5fa0 RCX: 00007fc3dc98f749 [ 438.043656][T12938] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 438.043663][T12938] RBP: 00007fc3dd75e090 R08: 0000000000000440 R09: 0000000000000000 [ 438.043669][T12938] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.043675][T12938] R13: 00007fc3dcbe6038 R14: 00007fc3dcbe5fa0 R15: 00007fc3dcd0fa28 [ 438.043692][T12938] [ 438.354143][T11452] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 438.404528][T11452] usb 5-1: device descriptor read/8, error -71 [ 438.487465][T12941] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 438.664225][T11452] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 438.707321][T11452] usb 5-1: device descriptor read/8, error -71 [ 438.868893][T11452] usb usb5-port1: unable to enumerate USB device [ 439.283959][ T5922] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 439.433852][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 439.442014][ T5922] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 439.453937][ T5922] usb 1-1: config 179 has no interface number 0 [ 439.460446][ T5922] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 439.476951][ T5922] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 439.508437][ T5922] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 439.534020][ T5922] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 439.556717][T12973] pim6reg: entered allmulticast mode [ 439.562152][ T5922] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 439.576013][ T5922] usb 1-1: config 179 interface 65 has no altsetting 0 [ 439.602553][ T5922] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 439.616129][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.646470][ T5922] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input39 [ 439.738166][T12973] pim6reg: left allmulticast mode [ 439.804265][ T5191] input input39: unable to receive magic message: -110 [ 439.822451][ T5191] input input39: unable to receive magic message: -32 [ 439.849909][ T5191] input input39: unable to receive magic message: -32 [ 439.863452][ T5191] input input39: unable to receive magic message: -32 [ 439.879388][ T8899] input input39: unable to receive magic message: -32 [ 439.940031][ T5191] input input39: unable to receive magic message: -32 [ 439.969221][ T5191] input input39: unable to receive magic message: -32 [ 439.989777][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.996312][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.132704][T12977] FAULT_INJECTION: forcing a failure. [ 440.132704][T12977] name failslab, interval 1, probability 0, space 0, times 0 [ 440.145984][T12977] CPU: 0 UID: 0 PID: 12977 Comm: syz.3.2157 Not tainted syzkaller #0 PREEMPT(full) [ 440.146010][T12977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.146022][T12977] Call Trace: [ 440.146030][T12977] [ 440.146039][T12977] dump_stack_lvl+0x189/0x250 [ 440.146064][T12977] ? __pfx____ratelimit+0x10/0x10 [ 440.146089][T12977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.146109][T12977] ? __pfx__printk+0x10/0x10 [ 440.146137][T12977] ? __pfx___might_resched+0x10/0x10 [ 440.146154][T12977] ? fs_reclaim_acquire+0x7d/0x100 [ 440.146178][T12977] should_fail_ex+0x414/0x560 [ 440.146205][T12977] should_failslab+0xa8/0x100 [ 440.146226][T12977] __kvmalloc_node_noprof+0x158/0x900 [ 440.146243][T12977] ? do_arpt_set_ctl+0x8ae/0xf10 [ 440.146271][T12977] ? nf_setsockopt+0x26f/0x290 [ 440.146289][T12977] ? translate_table+0x1a8/0x1f90 [ 440.146310][T12977] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 440.146341][T12977] translate_table+0x1a8/0x1f90 [ 440.146393][T12977] ? __pfx_translate_table+0x10/0x10 [ 440.146435][T12977] ? _copy_from_user+0x94/0xb0 [ 440.146459][T12977] do_arpt_set_ctl+0x993/0xf10 [ 440.146488][T12977] ? __pfx___mutex_trylock_common+0x10/0x10 [ 440.146507][T12977] ? __local_bh_enable_ip+0x12d/0x1c0 [ 440.146531][T12977] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 440.146554][T12977] ? rcu_is_watching+0x15/0xb0 [ 440.146574][T12977] ? trace_contention_end+0x39/0x100 [ 440.146612][T12977] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 440.146637][T12977] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 440.146659][T12977] ? __pfx___mutex_lock+0x10/0x10 [ 440.146690][T12977] nf_setsockopt+0x26f/0x290 [ 440.146711][T12977] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 440.146735][T12977] smc_setsockopt+0x232/0xab0 [ 440.146768][T12977] ? __pfx_smc_setsockopt+0x10/0x10 [ 440.146792][T12977] ? aa_sock_opt_perm+0xff/0x1a0 [ 440.146817][T12977] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 440.146836][T12977] ? __pfx_smc_setsockopt+0x10/0x10 [ 440.146862][T12977] do_sock_setsockopt+0x17c/0x1b0 [ 440.146891][T12977] __x64_sys_setsockopt+0x13f/0x1b0 [ 440.146920][T12977] do_syscall_64+0xfa/0xf80 [ 440.146936][T12977] ? lockdep_hardirqs_on+0x98/0x140 [ 440.146960][T12977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.146977][T12977] ? clear_bhb_loop+0x60/0xb0 [ 440.146999][T12977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.147016][T12977] RIP: 0033:0x7f151cb8f749 [ 440.147032][T12977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.147048][T12977] RSP: 002b:00007f151da90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 440.147069][T12977] RAX: ffffffffffffffda RBX: 00007f151cde5fa0 RCX: 00007f151cb8f749 [ 440.147083][T12977] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 440.147096][T12977] RBP: 00007f151da90090 R08: 0000000000000440 R09: 0000000000000000 [ 440.147108][T12977] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.147120][T12977] R13: 00007f151cde6038 R14: 00007f151cde5fa0 R15: 00007f151cf0fa28 [ 440.147153][T12977] [ 440.497970][T12981] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 440.544244][T12984] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 441.504409][ T5955] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 441.663968][ T5955] usb 5-1: Using ep0 maxpacket: 8 [ 441.676658][ T5955] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 441.690571][T13000] netlink: 468 bytes leftover after parsing attributes in process `syz.1.2166'. [ 441.699957][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.708212][T13000] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 441.723710][ T5955] usb 5-1: Product: syz [ 441.733631][ T5955] usb 5-1: Manufacturer: syz [ 441.748180][ T5955] usb 5-1: SerialNumber: syz [ 441.764392][ T5955] usb 5-1: config 0 descriptor?? [ 441.793506][ T5831] usb 1-1: USB disconnect, device number 70 [ 441.793549][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 441.814575][ T5955] gspca_main: 2770:9120 too many config [ 441.926553][T13013] FAULT_INJECTION: forcing a failure. [ 441.926553][T13013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.939790][T13013] CPU: 1 UID: 0 PID: 13013 Comm: syz.0.2170 Not tainted syzkaller #0 PREEMPT(full) [ 441.939815][T13013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.939826][T13013] Call Trace: [ 441.939835][T13013] [ 441.939843][T13013] dump_stack_lvl+0x189/0x250 [ 441.939868][T13013] ? __pfx____ratelimit+0x10/0x10 [ 441.939893][T13013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.939912][T13013] ? __pfx__printk+0x10/0x10 [ 441.939935][T13013] ? __might_fault+0xb0/0x130 [ 441.939970][T13013] should_fail_ex+0x414/0x560 [ 441.939999][T13013] _copy_from_user+0x2d/0xb0 [ 441.940019][T13013] smc_setsockopt+0x3b8/0xab0 [ 441.940050][T13013] ? __pfx_smc_setsockopt+0x10/0x10 [ 441.940073][T13013] ? aa_sock_opt_perm+0xff/0x1a0 [ 441.940102][T13013] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 441.940120][T13013] ? __pfx_smc_setsockopt+0x10/0x10 [ 441.940147][T13013] do_sock_setsockopt+0x17c/0x1b0 [ 441.940176][T13013] __x64_sys_setsockopt+0x13f/0x1b0 [ 441.940210][T13013] do_syscall_64+0xfa/0xf80 [ 441.940226][T13013] ? lockdep_hardirqs_on+0x98/0x140 [ 441.940251][T13013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.940269][T13013] ? clear_bhb_loop+0x60/0xb0 [ 441.940291][T13013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.940308][T13013] RIP: 0033:0x7fc3dc98f749 [ 441.940325][T13013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.940346][T13013] RSP: 002b:00007fc3dd75e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 441.940366][T13013] RAX: ffffffffffffffda RBX: 00007fc3dcbe5fa0 RCX: 00007fc3dc98f749 [ 441.940380][T13013] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 441.940392][T13013] RBP: 00007fc3dd75e090 R08: 0000000000000440 R09: 0000000000000000 [ 441.940405][T13013] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.940417][T13013] R13: 00007fc3dcbe6038 R14: 00007fc3dcbe5fa0 R15: 00007fc3dcd0fa28 [ 441.940449][T13013] [ 442.157139][ T5922] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 442.180741][T11452] usb 5-1: USB disconnect, device number 82 [ 442.389689][ T5920] usb 38-1: device descriptor read/8, error -110 [ 442.433885][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 442.441044][ T5922] usb 2-1: config 2 has an invalid interface number: 15 but max is 0 [ 442.449712][ T5922] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 442.459719][ T5922] usb 2-1: config 2 has no interface number 1 [ 442.466602][ T5922] usb 2-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.480338][ T5922] usb 2-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 442.493813][ T5922] usb 2-1: config 2 interface 0 has no altsetting 0 [ 442.503551][ T5922] usb 2-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 442.513733][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.521928][ T5922] usb 2-1: Product: syz [ 442.526663][ T5922] usb 2-1: Manufacturer: syz [ 442.531417][ T5922] usb 2-1: SerialNumber: syz [ 442.558324][ T5922] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 442.634010][ T5831] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 442.761842][ T5922] pwc: Failed to set LED on/off time (-71) [ 442.770013][ T5922] pwc: send_video_command error -71 [ 442.775452][ T5922] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 442.783445][ T5922] Philips webcam 2-1:2.0: probe with driver Philips webcam failed with error -71 [ 442.785258][ T5920] usb usb38-port1: attempt power cycle [ 442.824095][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 442.833297][ T5831] usb 1-1: config 0 has no interfaces? [ 442.834332][ T5922] usb 2-1: USB disconnect, device number 77 [ 442.846114][ T5831] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 442.856408][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.888782][ T5831] usb 1-1: config 0 descriptor?? [ 442.983917][ T6247] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 443.139154][T13029] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 443.164849][ T6247] usb 4-1: Using ep0 maxpacket: 16 [ 443.171849][ T6247] usb 4-1: unable to get BOS descriptor or descriptor too short [ 443.180812][ T6247] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.197691][ T6247] usb 4-1: config 1 interface 0 has no altsetting 0 [ 443.205819][ T5922] usb 1-1: USB disconnect, device number 71 [ 443.207507][ T6247] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 443.221979][ T6247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.230338][ T6247] usb 4-1: Product: syz [ 443.234870][ T6247] usb 4-1: Manufacturer: syz [ 443.239511][ T6247] usb 4-1: SerialNumber: syz [ 443.375524][ T5920] usb usb38-port1: unable to enumerate USB device [ 443.515936][T13022] i2c i2c-0: Invalid block write size 255 [ 443.566882][ T6247] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input40 [ 443.588075][ T5191] bcm5974 4-1:1.0: could not read from device [ 443.609949][ T5191] bcm5974 4-1:1.0: could not read from device [ 443.610189][ T6247] usb 4-1: USB disconnect, device number 82 [ 443.793671][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 443.982405][T13039] netlink: 'syz.0.2179': attribute type 32 has an invalid length. [ 444.234428][ T6247] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 444.376949][T13053] FAULT_INJECTION: forcing a failure. [ 444.376949][T13053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.394236][T13053] CPU: 1 UID: 0 PID: 13053 Comm: syz.3.2182 Not tainted syzkaller #0 PREEMPT(full) [ 444.394262][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.394273][T13053] Call Trace: [ 444.394282][T13053] [ 444.394290][T13053] dump_stack_lvl+0x189/0x250 [ 444.394314][T13053] ? __pfx____ratelimit+0x10/0x10 [ 444.394339][T13053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.394358][T13053] ? __pfx__printk+0x10/0x10 [ 444.394394][T13053] should_fail_ex+0x414/0x560 [ 444.394423][T13053] _copy_to_user+0x31/0xb0 [ 444.394449][T13053] simple_read_from_buffer+0xe1/0x170 [ 444.394474][T13053] proc_fail_nth_read+0x1b3/0x220 [ 444.394499][T13053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.394526][T13053] ? rw_verify_area+0x2a6/0x4d0 [ 444.394548][T13053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.394573][T13053] vfs_read+0x200/0xa30 [ 444.394595][T13053] ? fdget_pos+0x247/0x320 [ 444.394618][T13053] ? __pfx___mutex_lock+0x10/0x10 [ 444.394634][T13053] ? __pfx_vfs_read+0x10/0x10 [ 444.394659][T13053] ? __fget_files+0x2a/0x420 [ 444.394682][T13053] ? __fget_files+0x3a0/0x420 [ 444.394700][T13053] ? __fget_files+0x2a/0x420 [ 444.394730][T13053] ksys_read+0x145/0x250 [ 444.394757][T13053] ? __pfx_ksys_read+0x10/0x10 [ 444.394784][T13053] ? do_syscall_64+0xbe/0xf80 [ 444.394806][T13053] do_syscall_64+0xfa/0xf80 [ 444.394822][T13053] ? lockdep_hardirqs_on+0x98/0x140 [ 444.394847][T13053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.394865][T13053] ? clear_bhb_loop+0x60/0xb0 [ 444.394895][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.394912][T13053] RIP: 0033:0x7f151cb8e15c [ 444.394930][T13053] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 444.394945][T13053] RSP: 002b:00007f151da90030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.394965][T13053] RAX: ffffffffffffffda RBX: 00007f151cde5fa0 RCX: 00007f151cb8e15c [ 444.394979][T13053] RDX: 000000000000000f RSI: 00007f151da900a0 RDI: 0000000000000004 [ 444.394992][T13053] RBP: 00007f151da90090 R08: 0000000000000000 R09: 0000000000000000 [ 444.395003][T13053] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.395016][T13053] R13: 00007f151cde6038 R14: 00007f151cde5fa0 R15: 00007f151cf0fa28 [ 444.395049][T13053] [ 444.466517][ T6247] usb 5-1: device descriptor read/64, error -71 [ 444.723900][ T5922] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 444.900213][ T6247] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 444.915753][ T5922] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 444.928235][ T5922] usb 1-1: config 5 has no interface number 0 [ 444.943956][ T5922] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 444.972401][T13067] IPVS: fo: FWM 3 0x00000003 - no destination available [ 444.998580][T13062] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 445.071535][ T5922] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 445.089424][ T5922] usb 1-1: config 5 interface 123 has no altsetting 0 [ 445.214144][ T6247] usb 5-1: device descriptor read/64, error -71 [ 445.306196][ T5922] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 445.320906][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.324316][ T6247] usb usb5-port1: attempt power cycle [ 445.437124][ T5922] usb 1-1: Product: syz [ 445.449665][ T5922] usb 1-1: Manufacturer: syz [ 445.490953][ T5922] usb 1-1: SerialNumber: syz [ 445.693987][ T6247] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 445.723153][ T6247] usb 5-1: device descriptor read/8, error -71 [ 445.798964][ T5922] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 445.843616][ T5922] usb 1-1: USB disconnect, device number 72 [ 445.984202][ T6247] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 446.004634][ T6247] usb 5-1: device descriptor read/8, error -71 [ 446.115255][ T6247] usb usb5-port1: unable to enumerate USB device [ 446.473966][ T5922] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 446.640084][ T43] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 446.675545][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2193'. [ 446.766077][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 446.773182][ T5922] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 446.783810][ T5922] usb 4-1: config 0 has no interface number 0 [ 446.795763][ T5922] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 446.807836][ T5922] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 446.817018][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.825623][ T43] usb 1-1: device descriptor read/64, error -71 [ 446.853896][ T5922] usb 4-1: Product: syz [ 446.858242][ T5922] usb 4-1: Manufacturer: syz [ 446.863693][ T5922] usb 4-1: SerialNumber: syz [ 446.882713][ T5922] usb 4-1: config 0 descriptor?? [ 446.899650][T13077] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 447.083937][ T43] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 447.116801][T13077] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 447.213996][ T43] usb 1-1: device descriptor read/64, error -71 [ 447.324328][ T43] usb usb1-port1: attempt power cycle [ 447.667222][ T43] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 447.694883][ T43] usb 1-1: device descriptor read/8, error -71 [ 447.812843][T13102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.856698][T13102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.933960][ T43] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 447.954544][ T43] usb 1-1: device descriptor read/8, error -71 [ 448.064322][ T43] usb usb1-port1: unable to enumerate USB device [ 448.918782][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 448.918799][ T30] audit: type=1326 audit(1764726305.271:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.1.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 448.970169][ T30] audit: type=1326 audit(1764726305.301:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.1.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 448.994080][ T30] audit: type=1326 audit(1764726305.301:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.1.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 449.016807][ T30] audit: type=1326 audit(1764726305.301:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.1.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 449.041491][ T30] audit: type=1326 audit(1764726305.301:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.1.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 449.065073][ T30] audit: type=1326 audit(1764726305.301:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.1.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890e78f749 code=0x7ffc0000 [ 449.143897][ T5920] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 449.296521][ T5920] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 449.313831][ T5920] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 449.342463][ T5920] usb 3-1: config 0 has no interface number 0 [ 449.350707][ T5920] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.376167][ T5920] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 449.527728][ T5920] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.530219][ T5922] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 449.566959][ T5922] asix 4-1:0.188: probe with driver asix failed with error -71 [ 449.585504][ T5920] usb 3-1: config 0 interface 52 has no altsetting 0 [ 449.627267][ T5920] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 449.677602][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 449.690910][ T5922] usb 4-1: USB disconnect, device number 83 [ 449.713894][ T5920] usb 3-1: Product: syz [ 449.728582][ T5920] usb 3-1: SerialNumber: syz [ 449.768110][ T5920] usb 3-1: config 0 descriptor?? [ 450.021416][T13113] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 450.062612][T13113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.074420][T13113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.998618][T13138] netlink: 'syz.4.2204': attribute type 5 has an invalid length. [ 451.683916][ T6247] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 451.921971][ T5920] usb 3-1: Can not set alternate setting to 1, error: -71 [ 451.934968][ T6247] usb 5-1: Using ep0 maxpacket: 32 [ 451.943826][ T5920] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 451.974598][ T6247] usb 5-1: unable to get BOS descriptor or descriptor too short [ 451.984286][ T6247] usb 5-1: config 5 has an invalid interface number: 52 but max is 0 [ 451.992392][ T6247] usb 5-1: config 5 has no interface number 0 [ 452.013521][ T6247] usb 5-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 452.033345][ T5920] usb 3-1: USB disconnect, device number 56 [ 452.066438][ T6247] usb 5-1: string descriptor 0 read error: -22 [ 452.072730][ T6247] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 452.093307][ T6247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.110480][T13147] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 452.126852][ T6247] aircable 5-1:5.52: aircable converter detected [ 452.174274][ T6247] usb 5-1: aircable converter now attached to ttyUSB0 [ 452.224141][ T5922] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 452.253607][T13168] fuse: Unknown parameter 'roYtmode' [ 452.570511][ T5922] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 452.580240][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.589697][ T5922] usb 2-1: Product: syz [ 452.596483][ T5922] usb 2-1: Manufacturer: syz [ 452.601208][ T5922] usb 2-1: SerialNumber: syz [ 452.606688][ T5920] usb 5-1: USB disconnect, device number 87 [ 452.615861][ T5920] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 452.633101][ T5920] aircable 5-1:5.52: device disconnected [ 452.693453][ T5922] usb 2-1: config 0 descriptor?? [ 453.799879][ T5922] usb 2-1: non-Atmel transceiver xxxx5401 [ 453.997258][ T5922] usb 2-1: Firmware version (0.0) predates our first public release. [ 454.017832][ T5922] usb 2-1: Please update to version 0.2 or newer [ 454.047749][T13194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.057660][ T5922] usb 2-1: atusb_probe: initialization failed, error = -19 [ 454.071502][T13194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.081066][ T5920] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 454.206808][ T5922] usb 2-1: USB disconnect, device number 78 [ 454.299908][ T5920] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 454.315599][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 454.326763][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 454.366140][ T5920] usb 1-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 454.395153][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.434650][ T5920] usb 1-1: config 0 descriptor?? [ 454.440472][T13190] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 454.473920][ T43] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 454.603949][ T43] usb 3-1: device descriptor read/64, error -71 [ 454.846478][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 454.858619][T13190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.871984][T13190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.885111][T13190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.897564][T13190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.922095][ T5920] usbhid 1-1:0.0: can't add hid device: -71 [ 454.933361][ T5920] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 454.956856][ T5920] usb 1-1: USB disconnect, device number 77 [ 454.984337][ T5922] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 454.994045][ T43] usb 3-1: device descriptor read/64, error -71 [ 455.114426][ T43] usb usb3-port1: attempt power cycle [ 455.156735][ T5922] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 455.167886][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 455.179083][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.188951][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 455.209722][ T5922] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 455.222376][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.239854][ T5922] usb 2-1: config 0 descriptor?? [ 455.293841][ T5920] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 455.444580][ T5920] usb 1-1: too many configurations: 116, using maximum allowed: 8 [ 455.456141][ T5920] usb 1-1: config index 0 descriptor too short (expected 6140, got 72) [ 455.470308][ T5920] usb 1-1: config index 1 descriptor too short (expected 6140, got 72) [ 455.473887][ T43] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 455.522389][ T5920] usb 1-1: config index 2 descriptor too short (expected 6140, got 72) [ 455.531152][ T43] usb 3-1: device descriptor read/8, error -71 [ 455.532548][ T5920] usb 1-1: config index 3 descriptor too short (expected 6140, got 72) [ 455.553093][ T5920] usb 1-1: config index 4 descriptor too short (expected 6140, got 72) [ 455.567432][ T5920] usb 1-1: config index 5 descriptor too short (expected 6140, got 72) [ 455.583077][ T5920] usb 1-1: config index 6 descriptor too short (expected 6140, got 72) [ 455.594067][ T5920] usb 1-1: config index 7 descriptor too short (expected 6140, got 72) [ 455.606351][ T5920] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 455.623104][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.638720][ T5920] usb 1-1: Product: syz [ 455.647364][ T5920] usb 1-1: Manufacturer: syz [ 455.658935][ T5922] steelseries 0003:1038:1410.0014: missing HID_OUTPUT_REPORT 0 [ 455.667305][ T5920] usb 1-1: SerialNumber: syz [ 455.697595][ T5920] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 455.717157][ T6247] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 455.784556][ T43] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 455.815921][ T43] usb 3-1: device descriptor read/8, error -71 [ 455.859705][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2231'. [ 455.870280][ T5922] usb 2-1: USB disconnect, device number 79 [ 455.950819][ T43] usb usb3-port1: unable to enumerate USB device [ 456.589775][T13225] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 456.638621][T13225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.731240][T13239] netlink: 'syz.1.2238': attribute type 10 has an invalid length. [ 456.741047][T13225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.802698][T13239] team0: Port device netdevsim0 added [ 456.846874][ T5922] usb 1-1: USB disconnect, device number 78 [ 457.424059][ T6247] usb 1-1: Service connection timeout for: 258 [ 457.433857][ T6247] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 457.501590][T13251] loop6: detected capacity change from 0 to 524287487 [ 457.511213][T13251] buffer_io_error: 57 callbacks suppressed [ 457.511230][T13251] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.525289][T13251] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.533349][T13251] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.541509][T13251] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.549675][T13251] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.557895][T13251] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.566375][T13251] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.585017][ T6247] ath9k_htc: Failed to initialize the device [ 457.602003][T13251] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.611475][T13251] ldm_validate_partition_table(): Disk read failed. [ 457.621636][T13251] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.629843][T13251] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.638430][T13251] Dev loop6: unable to read RDB block 0 [ 457.644982][T13251] loop6: unable to read partition table [ 457.651143][T13251] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 457.781783][ T5922] usb 1-1: ath9k_htc: USB layer deinitialized [ 458.124141][ T5922] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 458.343910][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 458.369899][ T5922] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 458.408006][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.443643][ T5922] usb 1-1: Product: syz [ 458.458368][ T5922] usb 1-1: Manufacturer: syz [ 458.477602][ T5922] usb 1-1: SerialNumber: syz [ 458.511964][ T5922] usb 1-1: config 0 descriptor?? [ 458.631556][T13266] loop3: detected capacity change from 0 to 7 [ 458.675120][ T5838] Dev loop3: unable to read RDB block 7 [ 458.680708][ T5838] loop3: unable to read partition table [ 458.706546][ T5838] loop3: partition table beyond EOD, truncated [ 458.721886][T13266] Dev loop3: unable to read RDB block 7 [ 458.732928][T13266] loop3: unable to read partition table [ 458.754437][T13266] loop3: partition table beyond EOD, truncated [ 458.774190][T13266] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 458.974413][ T5920] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 459.133838][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 459.145686][ T5920] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 459.155660][ T5920] usb 4-1: config 179 has no interface number 0 [ 459.162332][ T5920] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 459.347427][ T5920] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 459.406624][ T5920] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 459.430644][ T5920] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 459.478645][ T5920] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 459.520332][T13288] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2252'. [ 459.530818][ T5920] usb 4-1: config 179 interface 65 has no altsetting 0 [ 459.542817][ T5920] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 459.561489][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.573679][T13288] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2252'. [ 459.583053][ T5831] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 459.638360][ T5920] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input41 [ 459.723903][ T5831] usb 5-1: device descriptor read/64, error -71 [ 459.965551][ T5831] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 460.078561][ T5922] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 460.092045][ T5922] gspca_sunplus: reg_w_riv err -71 [ 460.111121][ T5922] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 460.138548][ T5831] usb 5-1: device descriptor read/64, error -71 [ 460.148699][ T5922] usb 1-1: USB disconnect, device number 79 [ 460.179405][T13297] binder: 13295:13297 ioctl c0306201 200000000640 returned -22 [ 460.288836][ T5831] usb usb5-port1: attempt power cycle [ 460.584538][T13306] loop6: detected capacity change from 0 to 524287487 [ 460.594782][T13306] ldm_validate_partition_table(): Disk read failed. [ 460.601732][T13306] Dev loop6: unable to read RDB block 0 [ 460.664289][ T5831] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 460.678825][T13306] loop6: unable to read partition table [ 460.685373][T13306] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 460.764420][ T5831] usb 5-1: device descriptor read/8, error -71 [ 460.764433][ T5922] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 460.948150][ T5922] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 460.962997][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.997786][ T5922] usb 1-1: config 0 descriptor?? [ 461.044016][ T5831] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 461.079521][ T5831] usb 5-1: device descriptor read/8, error -71 [ 461.088797][ T5920] usb 4-1: USB disconnect, device number 85 [ 461.261516][ T5831] usb usb5-port1: unable to enumerate USB device [ 461.286527][T13310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.074378][ T5922] ath6kl: Failed to submit usb control message: -110 [ 462.086637][ T5922] ath6kl: unable to send the bmi data to the device: -110 [ 462.094680][ T5922] ath6kl: Unable to send get target info: -110 [ 462.101883][ T5922] ath6kl: Failed to init ath6kl core: -110 [ 462.123161][ T5922] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 462.293896][ T5920] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 462.375893][T13321] loop3: detected capacity change from 0 to 7 [ 462.391047][T13321] Dev loop3: unable to read RDB block 7 [ 462.397330][T13321] loop3: unable to read partition table [ 462.403927][T13321] loop3: partition table beyond EOD, truncated [ 462.410522][T13321] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 462.691535][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.702373][ T5920] usb 2-1: config 0 has no interface number 0 [ 462.716100][ T5920] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 462.738223][ T5920] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 462.755453][ T5920] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 462.764709][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.774917][ T5920] usb 2-1: config 0 descriptor?? [ 462.787984][ T5920] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 462.991647][T13313] iowarrior 2-1:0.1: Error -90 while submitting URB [ 463.005891][T13313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.017937][T13313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.035039][T13332] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 463.126349][ T30] audit: type=1326 audit(1764726319.481:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13330 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151cb8f749 code=0x7ffc0000 [ 463.162540][ T5922] usb 1-1: USB disconnect, device number 80 [ 463.171606][ T30] audit: type=1326 audit(1764726319.481:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13330 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f151cb8f749 code=0x7ffc0000 [ 463.210718][ T30] audit: type=1326 audit(1764726319.501:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13330 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151cb8f749 code=0x7ffc0000 [ 463.233443][ T30] audit: type=1326 audit(1764726319.501:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13330 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f151cb8f749 code=0x7ffc0000 [ 463.258817][ T30] audit: type=1326 audit(1764726319.501:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13330 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151cb8f749 code=0x7ffc0000 [ 463.333040][ T30] audit: type=1326 audit(1764726319.501:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13330 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151cb8f749 code=0x7ffc0000 [ 463.472509][T13337] openvswitch: netlink: IP tunnel TTL not specified. [ 464.020314][T13350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 464.027462][T13350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 464.034305][T13350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 464.041087][T13350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 464.047955][T13350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 464.860262][ T7343] usb 2-1: USB disconnect, device number 80 [ 465.809522][T13374] tipc: Enabled bearer , priority 0 [ 465.816817][T13374] syzkaller0: entered promiscuous mode [ 465.822284][T13374] syzkaller0: entered allmulticast mode [ 465.833052][T13374] tipc: Resetting bearer [ 465.838422][ T30] audit: type=1326 audit(1764726322.191:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7b78f749 code=0x7ffc0000 [ 465.862918][T13373] tipc: Resetting bearer [ 465.883290][ T30] audit: type=1326 audit(1764726322.231:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7b78f749 code=0x7ffc0000 [ 465.906946][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 465.959553][ T30] audit: type=1326 audit(1764726322.231:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f8b7b78f749 code=0x7ffc0000 [ 465.987626][T13373] tipc: Disabling bearer [ 466.010113][ T30] audit: type=1326 audit(1764726322.231:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.2.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b7b7865e7 code=0x7ffc0000 [ 466.064376][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 466.151007][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 466.151018][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 466.163475][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 466.457356][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2280'. [ 466.702999][ T7343] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 466.867297][ T7343] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 466.876336][ T7343] usb 3-1: config 0 has no interface number 0 [ 466.882597][ T7343] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 466.895899][ T7343] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 466.906452][ T7343] usb 3-1: config 0 interface 113 has no altsetting 0 [ 466.919314][ T7343] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 466.923188][T13390] loop3: detected capacity change from 0 to 7 [ 466.928631][ T7343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.936688][T13390] Dev loop3: unable to read RDB block 7 [ 466.944396][ T7343] usb 3-1: Product: syz [ 466.948651][T13390] loop3: unable to read partition table [ 466.952517][ T7343] usb 3-1: Manufacturer: syz [ 466.958439][T13390] loop3: partition table beyond EOD, truncated [ 466.963501][ T7343] usb 3-1: SerialNumber: syz [ 466.969428][T13390] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 466.983859][ T5955] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 467.022504][ T7343] usb 3-1: config 0 descriptor?? [ 467.032311][ C1] usb 3-1: NFC: Urb failure (status -71) [ 467.039340][ T7343] usb 3-1: NFC: Unable to get FW version [ 467.049958][ T7343] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 467.145485][ T5955] usb 5-1: config 8 has an invalid interface number: 101 but max is 0 [ 467.153948][ T5955] usb 5-1: config 8 has no interface number 0 [ 467.160920][ T5955] usb 5-1: config 8 interface 101 has no altsetting 0 [ 467.168500][ T5955] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 467.178161][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.297924][T13380] No such timeout policy "syz0" [ 467.396978][ T5955] usb 5-1: string descriptor 0 read error: -71 [ 467.420464][ T5955] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 467.431756][ T5955] gspca_sunplus: reg_w_riv err -71 [ 467.439555][ T5955] sunplus 5-1:8.101: probe with driver sunplus failed with error -71 [ 467.457953][ T5955] usb 5-1: USB disconnect, device number 92 [ 467.575752][T13399] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 467.885785][ T7343] usb 3-1: USB disconnect, device number 61 [ 468.268074][T13410] fuse: Unknown parameter 'gro]¶X{00000000000000000000' [ 469.021852][T13427] tipc: Enabled bearer , priority 0 [ 469.095440][T13429] syzkaller0: entered promiscuous mode [ 469.119184][T13429] syzkaller0: entered allmulticast mode [ 469.168019][T13427] tipc: Resetting bearer [ 469.177877][T13426] tipc: Resetting bearer [ 469.347588][T13426] tipc: Disabling bearer [ 469.460191][ T6247] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 469.634159][ T6247] usb 4-1: Using ep0 maxpacket: 16 [ 469.643358][ T6247] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 469.659928][ T6247] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 469.699302][ T6247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.747323][ T6247] usb 4-1: config 0 descriptor?? [ 469.790442][T13435] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1888403899 (3776807798 ns) > initial count (2457403978 ns). Using initial count to start timer. [ 469.803957][ T6247] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input42 [ 470.006346][ T5191] bcm5974 4-1:0.0: could not read from device [ 470.020950][ T6247] bcm5974 4-1:0.0: could not read from device [ 470.039671][ T5191] bcm5974 4-1:0.0: could not read from device [ 470.046095][T13428] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.2296'. [ 470.064060][ T5955] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 470.112665][ T6247] input: failed to attach handler mousedev to device input42, error: -5 [ 470.147794][ T5191] bcm5974 4-1:0.0: could not read from device [ 470.165146][ T5191] bcm5974 4-1:0.0: could not read from device [ 470.180630][T13449] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 470.204395][ T6247] usb 4-1: USB disconnect, device number 86 [ 470.214067][ T5955] usb 5-1: Using ep0 maxpacket: 8 [ 470.222197][ T5955] usb 5-1: config 4 has an invalid interface number: 244 but max is 0 [ 470.235619][ T5955] usb 5-1: config 4 has no interface number 0 [ 470.251253][ T5955] usb 5-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 470.265087][ T5955] usb 5-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 470.277165][ T5955] usb 5-1: config 4 interface 244 has no altsetting 0 [ 470.290351][ T5955] usb 5-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 470.300533][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.309523][ T5955] usb 5-1: Product: syz [ 470.320514][ T5955] usb 5-1: Manufacturer: syz [ 470.326504][ T5955] usb 5-1: SerialNumber: syz [ 470.453932][ T5831] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 470.585661][ T5831] usb 3-1: device descriptor read/64, error -71 [ 470.833919][ T5831] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 470.974163][ T5831] usb 3-1: device descriptor read/64, error -71 [ 471.104313][ T5831] usb usb3-port1: attempt power cycle [ 471.513899][ T5831] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 471.546445][ T5831] usb 3-1: device descriptor read/8, error -71 [ 471.804016][ T5831] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 471.859628][ T5831] usb 3-1: device descriptor read/8, error -71 [ 471.984163][ T5831] usb usb3-port1: unable to enumerate USB device [ 472.764282][ T5955] ipheth 5-1:4.244: Unable to find endpoints [ 472.800710][ T5955] usb 5-1: USB disconnect, device number 93 [ 472.880256][T13484] openvswitch: netlink: IP tunnel TTL not specified. [ 473.441024][T13486] IPVS: fo: FWM 3 0x00000003 - no destination available [ 473.508993][T13488] tipc: Enabled bearer , priority 0 [ 473.520366][T13488] syzkaller0: entered promiscuous mode [ 473.543978][T13488] syzkaller0: entered allmulticast mode [ 473.561516][T13488] tipc: Resetting bearer [ 473.655230][T13487] tipc: Resetting bearer [ 473.704052][T13487] tipc: Disabling bearer [ 473.894312][ T5922] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 473.981038][T13504] loop4: detected capacity change from 0 to 2559 [ 473.981687][T13504] buffer_io_error: 24 callbacks suppressed [ 473.981700][T13504] Buffer I/O error on dev loop4, logical block 0, async page read [ 473.981802][T13504] Buffer I/O error on dev loop4, logical block 0, async page read [ 473.981896][T13504] Buffer I/O error on dev loop4, logical block 0, async page read [ 473.981988][T13504] Buffer I/O error on dev loop4, logical block 0, async page read [ 473.982080][T13504] Buffer I/O error on dev loop4, logical block 0, async page read [ 473.982204][T13504] Buffer I/O error on dev loop4, logical block 0, async page read [ 473.982310][T13504] Buffer I/O error on dev loop4, logical block 0, async page read [ 473.982408][T13504] Buffer I/O error on dev loop4, logical block 0, async page read [ 473.982473][T13504] ldm_validate_partition_table(): Disk read failed. [ 473.982514][T13504] Buffer I/O error on dev loop4, logical block 0, async page read [ 473.982606][T13504] Buffer I/O error on dev loop4, logical block 0, async page read [ 473.982829][T13504] Dev loop4: unable to read RDB block 0 [ 473.983230][T13504] loop4: unable to read partition table [ 473.983433][T13504] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾¢·˜) failed (rc=-5) [ 473.994946][T13502] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2319'. [ 473.995717][T13502] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2319'. [ 474.057299][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.057331][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.057367][ T5922] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 474.057393][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.060145][ T5922] usb 3-1: config 0 descriptor?? [ 474.236982][T13507] dummy0: entered promiscuous mode [ 474.238353][T13507] bond0: entered promiscuous mode [ 474.238383][T13507] bond_slave_0: entered promiscuous mode [ 474.238585][T13507] bond_slave_1: entered promiscuous mode [ 474.238766][T13507] team0: entered promiscuous mode [ 474.238782][T13507] team_slave_0: entered promiscuous mode [ 474.238984][T13507] team_slave_1: entered promiscuous mode [ 474.239325][T13507] bridge0: entered promiscuous mode [ 474.242295][T13507] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 474.242535][T13507] hsr1: entered allmulticast mode [ 474.242551][T13507] dummy0: entered allmulticast mode [ 474.242566][T13507] bond0: entered allmulticast mode [ 474.242579][T13507] bond_slave_0: entered allmulticast mode [ 474.242594][T13507] bond_slave_1: entered allmulticast mode [ 474.242607][T13507] team0: entered allmulticast mode [ 474.242619][T13507] team_slave_0: entered allmulticast mode [ 474.242633][T13507] team_slave_1: entered allmulticast mode [ 474.242652][T13507] bridge0: entered allmulticast mode [ 474.339590][T13510] openvswitch: netlink: IP tunnel TTL not specified. [ 474.454354][ C1] [ 474.454369][ C1] ============================================ [ 474.454377][ C1] WARNING: possible recursive locking detected [ 474.454393][ C1] syzkaller #0 Not tainted [ 474.454405][ C1] -------------------------------------------- [ 474.454414][ C1] syz.0.2320/13499 is trying to acquire lock: [ 474.454428][ C1] ffff88807dbbcf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 474.454496][ C1] [ 474.454496][ C1] but task is already holding lock: [ 474.454504][ C1] ffff888079646f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 474.454558][ C1] [ 474.454558][ C1] other info that might help us debug this: [ 474.454566][ C1] Possible unsafe locking scenario: [ 474.454566][ C1] [ 474.454574][ C1] CPU0 [ 474.454581][ C1] ---- [ 474.454588][ C1] lock(&hsr->seqnr_lock); [ 474.454605][ C1] lock(&hsr->seqnr_lock); [ 474.454622][ C1] [ 474.454622][ C1] *** DEADLOCK *** [ 474.454622][ C1] [ 474.454629][ C1] May be due to missing lock nesting notation [ 474.454629][ C1] [ 474.454637][ C1] 15 locks held by syz.0.2320/13499: [ 474.454650][ C1] #0: ffff888056fdb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 474.454706][ C1] #1: ffff888056fdb130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x211/0xa20 [ 474.454760][ C1] #2: ffff888056fdb2e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1e0/0x1200 [ 474.454819][ C1] #3: ffffc90004c5b380 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0xde6/0x1200 [ 474.454877][ C1] #4: ffffffff8df352c0 (console_lock){+.+.}-{0:0}, at: do_con_write+0x116/0x5210 [ 474.454933][ C1] #5: ffffc90000a08be0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x590 [ 474.454983][ C1] #6: ffffffff8df414c0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x83/0x360 [ 474.455037][ C1] #7: ffff888079646f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 474.455094][ C1] #8: ffffffff8df414c0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 474.455159][ C1] #9: ffffffff8df41520 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x259/0x3b10 [ 474.455213][ C1] #10: ffffffff8df414c0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xf8/0x1a10 [ 474.455272][ C1] #11: ffffffff8df41520 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x259/0x3b10 [ 474.455324][ C1] #12: ffffffff8df414c0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 474.455382][ C1] #13: ffffffff8df41520 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x259/0x3b10 [ 474.455435][ C1] #14: ffffffff8df414c0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 474.455489][ C1] [ 474.455489][ C1] stack backtrace: [ 474.455501][ C1] CPU: 1 UID: 0 PID: 13499 Comm: syz.0.2320 Not tainted syzkaller #0 PREEMPT(full) [ 474.455519][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.455532][ C1] Call Trace: [ 474.455541][ C1] [ 474.455550][ C1] dump_stack_lvl+0x189/0x250 [ 474.455573][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.455594][ C1] ? __pfx__printk+0x10/0x10 [ 474.455624][ C1] print_deadlock_bug+0x279/0x290 [ 474.455646][ C1] __lock_acquire+0x2540/0x2cf0 [ 474.455677][ C1] ? __pfx_skb_network_protocol+0x10/0x10 [ 474.455699][ C1] ? netif_skb_features+0xa69/0x1540 [ 474.455719][ C1] ? hsr_dev_xmit+0x237/0x360 [ 474.455740][ C1] lock_acquire+0x117/0x340 [ 474.455765][ C1] ? hsr_dev_xmit+0x237/0x360 [ 474.455788][ C1] ? rcu_is_watching+0x15/0xb0 [ 474.455810][ C1] ? hsr_dev_xmit+0x237/0x360 [ 474.455832][ C1] _raw_spin_lock_bh+0x36/0x50 [ 474.455859][ C1] ? hsr_dev_xmit+0x237/0x360 [ 474.455881][ C1] hsr_dev_xmit+0x237/0x360 [ 474.455903][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 474.455927][ C1] dev_hard_start_xmit+0x2cd/0x800 [ 474.455953][ C1] __dev_queue_xmit+0x1b5b/0x3b10 [ 474.455978][ C1] ? __dev_queue_xmit+0x259/0x3b10 [ 474.455998][ C1] ? check_path+0x21/0x40 [ 474.456020][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 474.456049][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 474.456080][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 474.456103][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 474.456135][ C1] ? ebt_do_table+0x2655/0x2810 [ 474.456177][ C1] br_dev_queue_push_xmit+0x6c5/0x890 [ 474.456204][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 474.456228][ C1] ? NF_HOOK+0x9e/0x3c0 [ 474.456250][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 474.456273][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 474.456294][ C1] NF_HOOK+0x320/0x3c0 [ 474.456317][ C1] ? NF_HOOK+0x9e/0x3c0 [ 474.456338][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 474.456360][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 474.456388][ C1] br_forward_finish+0xd3/0x130 [ 474.456409][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 474.456431][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 474.456453][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 474.456475][ C1] NF_HOOK+0x320/0x3c0 [ 474.456499][ C1] ? NF_HOOK+0x9e/0x3c0 [ 474.456520][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 474.456542][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 474.456568][ C1] __br_forward+0x41e/0x600 [ 474.456590][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 474.456614][ C1] ? __pfx___br_forward+0x10/0x10 [ 474.456635][ C1] ? skb_clone+0x246/0x3a0 [ 474.456650][ C1] maybe_deliver+0xb5/0x160 [ 474.456668][ C1] br_flood+0x31a/0x6a0 [ 474.456688][ C1] ? br_dev_xmit+0x185/0x1840 [ 474.456708][ C1] br_dev_xmit+0x11b3/0x1840 [ 474.456728][ C1] ? br_dev_xmit+0x185/0x1840 [ 474.456750][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 474.456770][ C1] ? validate_xmit_xfrm+0xbf/0x1160 [ 474.456790][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 474.456812][ C1] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 474.456834][ C1] ? pr_cont_work+0x2a0/0x560 [ 474.456847][ C1] ? __kernel_text_address+0xd/0x40 [ 474.456865][ C1] ? unwind_get_return_address+0x4d/0x90 [ 474.456884][ C1] dev_hard_start_xmit+0x2cd/0x800 [ 474.456903][ C1] __dev_queue_xmit+0x1b5b/0x3b10 [ 474.456922][ C1] ? __dev_queue_xmit+0x259/0x3b10 [ 474.456936][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 474.456956][ C1] ? irq_exit_rcu+0x9/0x30 [ 474.456976][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 474.456996][ C1] ? queue_work_on+0x1f7/0x270 [ 474.457010][ C1] ? bit_putcs+0x1865/0x1bd0 [ 474.457031][ C1] ? do_con_write+0x50d7/0x5210 [ 474.457048][ C1] ? con_put_char+0x82/0xc0 [ 474.457064][ C1] ? tty_put_char+0xce/0x160 [ 474.457081][ C1] ? do_output_char+0x6ac/0x970 [ 474.457101][ C1] ? n_tty_write+0xdfc/0x1200 [ 474.457125][ C1] ? file_tty_write+0x559/0xa20 [ 474.457142][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 474.457160][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 474.457187][ C1] ? __pfx_bond_get_slave_by_id+0x10/0x10 [ 474.457205][ C1] bond_start_xmit+0xdc7/0x1a10 [ 474.457228][ C1] ? bond_start_xmit+0xf8/0x1a10 [ 474.457248][ C1] ? __pfx_bond_start_xmit+0x10/0x10 [ 474.457269][ C1] ? netif_skb_features+0xa69/0x1540 [ 474.457284][ C1] ? validate_xmit_xfrm+0xbf/0x1160 [ 474.457304][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 474.457326][ C1] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 474.457346][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 474.457361][ C1] ? __kernel_text_address+0xd/0x40 [ 474.457380][ C1] ? arch_stack_walk+0xfc/0x150 [ 474.457399][ C1] dev_hard_start_xmit+0x2cd/0x800 [ 474.457424][ C1] __dev_queue_xmit+0x1b5b/0x3b10 [ 474.457439][ C1] ? kasan_save_track+0x4f/0x80 [ 474.457461][ C1] ? kasan_save_track+0x3e/0x80 [ 474.457483][ C1] ? __dev_queue_xmit+0x259/0x3b10 [ 474.457498][ C1] ? fbcon_putcs+0x3a6/0x580 [ 474.457517][ C1] ? do_con_write+0x50d7/0x5210 [ 474.457535][ C1] ? con_put_char+0x82/0xc0 [ 474.457552][ C1] ? do_output_char+0x6ac/0x970 [ 474.457572][ C1] ? n_tty_write+0xdfc/0x1200 [ 474.457591][ C1] ? vfs_write+0x5c9/0xb30 [ 474.457611][ C1] ? ksys_write+0x145/0x250 [ 474.457630][ C1] ? do_syscall_64+0xfa/0xf80 [ 474.457644][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.457661][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 474.457680][ C1] ? __copy_skb_header+0xa7/0x550 [ 474.457702][ C1] ? __asan_memcpy+0x40/0x70 [ 474.457724][ C1] ? hsr_addr_subst_dest+0x30d/0xa90 [ 474.457742][ C1] ? skb_clone+0x246/0x3a0 [ 474.457757][ C1] hsr_forward_skb+0x158b/0x2860 [ 474.457780][ C1] ? hsr_forward_skb+0x9e/0x2860 [ 474.457801][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 474.457820][ C1] ? do_raw_spin_lock+0x121/0x290 [ 474.457840][ C1] ? __asan_memset+0x22/0x50 [ 474.457859][ C1] ? __skb_pad+0x405/0x610 [ 474.457874][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 474.457897][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 474.457916][ C1] hsr_announce+0x1d5/0x360 [ 474.457933][ C1] ? hsr_announce+0x83/0x360 [ 474.457950][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 474.457971][ C1] call_timer_fn+0x16e/0x590 [ 474.457984][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 474.458001][ C1] ? call_timer_fn+0xbe/0x590 [ 474.458014][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 474.458031][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.458050][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 474.458071][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 474.458089][ C1] __run_timer_base+0x61a/0x860 [ 474.458118][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 474.458137][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 474.458161][ C1] run_timer_softirq+0xb7/0x180 [ 474.458182][ C1] handle_softirqs+0x27d/0x850 [ 474.458204][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 474.458227][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 474.458251][ C1] __irq_exit_rcu+0xca/0x1f0 [ 474.458271][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 474.458295][ C1] irq_exit_rcu+0x9/0x30 [ 474.458315][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 474.458336][ C1] [ 474.458342][ C1] [ 474.458348][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 474.458367][ C1] RIP: 0010:queue_work_on+0x1f7/0x270 [ 474.458383][ C1] Code: 4d 85 ff 75 16 e8 b9 b6 36 00 eb 15 e8 b2 b6 36 00 e8 5d 03 bc 09 4d 85 ff 74 ea e8 a3 b6 36 00 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 2e 00 00 00 00 66 43 c7 44 2e 09 00 00 43 c6 44 2e 0b 00 [ 474.458397][ C1] RSP: 0018:ffffc900033f7120 EFLAGS: 00000293 [ 474.458412][ C1] RAX: ffffffff818a304d RBX: ffff8881423bb901 RCX: ffff88802de61e80 [ 474.458424][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.458435][ C1] RBP: ffffc900033f7210 R08: ffffffff8f801377 R09: 1ffffffff1f0026e [ 474.458447][ C1] R10: dffffc0000000000 R11: fffffbfff1f0026f R12: 0000000000000000 [ 474.458458][ C1] R13: dffffc0000000000 R14: 1ffff9200067ee2c R15: 0000000000000200 [ 474.458473][ C1] ? queue_work_on+0x1ed/0x270 [ 474.458490][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 474.458517][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 474.458533][ C1] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 474.458551][ C1] bit_putcs+0x1865/0x1bd0 [ 474.458585][ C1] ? __pfx_bit_putcs+0x10/0x10 [ 474.458608][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 474.458625][ C1] ? fb_get_color_depth+0x162/0x280 [ 474.458648][ C1] fbcon_putcs+0x3a6/0x580 [ 474.458668][ C1] ? __pfx_bit_putcs+0x10/0x10 [ 474.458690][ C1] do_con_write+0x50d7/0x5210 [ 474.458723][ C1] ? __pfx_do_con_write+0x10/0x10 [ 474.458745][ C1] ? __mutex_trylock_common+0x153/0x260 [ 474.458763][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 474.458779][ C1] ? up+0xde/0x150 [ 474.458794][ C1] ? rcu_is_watching+0x15/0xb0 [ 474.458810][ C1] ? trace_contention_end+0x39/0x100 [ 474.458827][ C1] ? __mutex_lock+0x335/0x1350 [ 474.458842][ C1] con_put_char+0x82/0xc0 [ 474.458859][ C1] ? __pfx_con_put_char+0x10/0x10 [ 474.458877][ C1] ? n_tty_write+0xde6/0x1200 [ 474.458897][ C1] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 474.458911][ C1] ? __pfx_con_put_char+0x10/0x10 [ 474.458928][ C1] tty_put_char+0xce/0x160 [ 474.458947][ C1] ? __pfx_tty_put_char+0x10/0x10 [ 474.458968][ C1] do_output_char+0x6ac/0x970 [ 474.458990][ C1] n_tty_write+0xdfc/0x1200 [ 474.459017][ C1] ? __pfx_n_tty_write+0x10/0x10 [ 474.459037][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 474.459057][ C1] ? file_tty_write+0x328/0xa20 [ 474.459072][ C1] ? rcu_is_watching+0x15/0xb0 [ 474.459086][ C1] ? file_tty_write+0x328/0xa20 [ 474.459103][ C1] ? __pfx_n_tty_write+0x10/0x10 [ 474.459127][ C1] file_tty_write+0x559/0xa20 [ 474.459146][ C1] vfs_write+0x5c9/0xb30 [ 474.459167][ C1] ? __pfx_tty_write+0x10/0x10 [ 474.459182][ C1] ? __pfx_vfs_write+0x10/0x10 [ 474.459206][ C1] ? __fget_files+0x2a/0x420 [ 474.459225][ C1] ksys_write+0x145/0x250 [ 474.459246][ C1] ? __pfx_ksys_write+0x10/0x10 [ 474.459267][ C1] ? do_syscall_64+0xbe/0xf80 [ 474.459282][ C1] do_syscall_64+0xfa/0xf80 [ 474.459295][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 474.459316][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.459330][ C1] ? clear_bhb_loop+0x60/0xb0 [ 474.459347][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.459362][ C1] RIP: 0033:0x7fc3dc98f749 [ 474.459376][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.459388][ C1] RSP: 002b:00007fc3dd75e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 474.459403][ C1] RAX: ffffffffffffffda RBX: 00007fc3dcbe5fa0 RCX: 00007fc3dc98f749 [ 474.459415][ C1] RDX: 0000000000000375 RSI: 0000200000001040 RDI: 0000000000000003 [ 474.459426][ C1] RBP: 00007fc3dca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 474.459436][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.459445][ C1] R13: 00007fc3dcbe6038 R14: 00007fc3dcbe5fa0 R15: 00007fc3dcd0fa28 [ 474.459462][ C1] [ 474.543875][ T5831] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 474.704739][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 474.734755][ T5831] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 474.734782][ T5831] usb 5-1: config 0 has no interface number 0 [ 474.751387][ T5922] samsung 0003:0419:0600.0015: unknown global tag 0xc [ 474.763402][ T5831] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 474.765718][ T5922] samsung 0003:0419:0600.0015: item 0 2 1 12 parsing failed [ 474.767662][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.772619][ T5922] samsung 0003:0419:0600.0015: parse failed [ 474.778029][ T5831] usb 5-1: Product: syz [ 474.787077][ T5922] samsung 0003:0419:0600.0015: probe with driver samsung failed with error -22 [ 474.788010][ T5831] usb 5-1: Manufacturer: syz [ 474.863867][ T7343] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 474.867903][ T5831] usb 5-1: SerialNumber: syz [ 474.969954][ T5922] usb 3-1: USB disconnect, device number 66 [ 474.972408][ T5831] usb 5-1: config 0 descriptor?? [ 475.013873][ T7343] usb 2-1: device descriptor read/64, error -71 [ 475.020780][ T5831] smsc95xx v2.0.0 [ 475.263865][ T7343] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 475.470388][ T5831] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 475.623895][ T7343] usb 2-1: device descriptor read/64, error -71 [ 475.625797][ T5831] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 475.747141][ T7343] usb usb2-port1: attempt power cycle [ 476.323888][ T7343] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 476.344430][ T7343] usb 2-1: device descriptor read/8, error -71 [ 476.584091][ T7343] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 476.604332][ T7343] usb 2-1: device descriptor read/8, error -71 [ 476.714367][ T7343] usb usb2-port1: unable to enumerate USB device [ 477.308618][ T5831] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 477.325953][ T5831] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 477.337655][ T5831] usb 5-1: USB disconnect, device number 94