last executing test programs: 10.572223831s ago: executing program 4 (id=2862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101ffffffef00000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a3200000000090001"], 0xc4}}, 0x0) 10.285812478s ago: executing program 4 (id=2863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000700000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xc4}}, 0x0) 9.780012679s ago: executing program 4 (id=2867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000600a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240", @ANYRES16=r0], 0xc4}}, 0x0) 9.564107159s ago: executing program 4 (id=2870): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a00003f000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 8.789785856s ago: executing program 4 (id=2872): syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xf2, 0x6c, 0x44, 0x20, 0x84f, 0x1, 0xe0b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb2, 0x84, 0xbb}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000500414a02b884e1e783000002000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000200), &(0x7f00000002c0)=""/56}, 0x20) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket(0x18, 0x1, 0x0) r4 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x101243, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0xc700}, {r7, 0x4}, {r0, 0x423}], 0x3, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={[0x400000]}, 0x8) io_uring_enter(r4, 0x47f6, 0xb277, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xf2, 0x6c, 0x44, 0x20, 0x84f, 0x1, 0xe0b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb2, 0x84, 0xbb}}]}}]}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000500414a02b884e1e783000002000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000200), &(0x7f00000002c0)=""/56}, 0x20) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x18, 0x1, 0x0) (async) syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x101243, 0x0) (async) ppoll(&(0x7f0000000140)=[{r3, 0xc700}, {r7, 0x4}, {r0, 0x423}], 0x3, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={[0x400000]}, 0x8) (async) io_uring_enter(r4, 0x47f6, 0xb277, 0x0, 0x0, 0x0) (async) 7.476093078s ago: executing program 1 (id=2874): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x440a0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000080)={0x8, 0x8001, 0x10, 0x0, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000340)={0xd2, &(0x7f0000000240)=""/210}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000001, 0x59033, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000d87000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000003000)=""/4106, 0x100a}], 0x1, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x164}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a0000000000000000", @ANYRES32], 0x20) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000140)={0x4, r2, 0x23, {0x2, 0x4}, 0x1}, 0x1) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) 7.424665368s ago: executing program 4 (id=2875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000200)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2a, 0x80000, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0xc010) socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) shutdown(r1, 0x1) ppoll(&(0x7f0000000000)=[{r0, 0x8000}], 0x1, &(0x7f0000000040), 0x0, 0x0) 7.311043968s ago: executing program 2 (id=2876): io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x40, 0xfffffff9, 0xd4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x805, 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x7822, 0x400, 0x2, 0x105}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xdc, 0x47, 0xa3, 0x10, 0x1f38, 0x1, 0x29ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x1a, 0xd5, 0x0, 0x75, 0x90, 0x7d, 0x5}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000c300000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6.853817672s ago: executing program 1 (id=2878): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00001eb000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x9d, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) (fail_nth: 16) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5.888042057s ago: executing program 1 (id=2882): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000240)) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd=r4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000002c0)={0x8, @sliced={0x8001, [0x6, 0x6, 0x6, 0x400, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x6, 0x150a, 0x7fff, 0x7, 0x8, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x7, 0x80, 0x8000, 0x2, 0x4294, 0x4, 0x5, 0xeb95, 0x1, 0xa, 0x4, 0x5, 0x7, 0x0, 0x7f, 0xa62c, 0x7, 0xffff, 0x8, 0x40, 0x9, 0x6, 0x6, 0xf, 0x8, 0x193, 0x9, 0x7, 0xfcc4], 0x6}}) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept4(r0, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000080)=0x80, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26ff", 0x30) 5.570358976s ago: executing program 0 (id=2883): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0100001900010029bd70000000000000000000000000000000ffffe0000001ff01000000000000000000000000000100000000000080000200000087000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x4000) 5.363277267s ago: executing program 0 (id=2884): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988200000002800128009000100766c616e00000000180002800c0002001c0000001f00fe0f060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.191959633s ago: executing program 2 (id=2885): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'pimreg1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303078689f0d656709bc2efde4ca31f1", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}}, 0x4000) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r11, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000006000000000900000000000001000000000000000000000f0020000001000000020000000008"], 0x2a) syz_fuse_handle_req(r8, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0xb0, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x4, 0x3}, {0x4, 0xfff5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x14, 0x8670, 0x5, 0x1, 0x5c4}}, {0x4}}, {{0x1c, 0x1, {0x22, 0x0, 0x2, 0xf21, 0x0, 0x2, 0x0, 0x5}}, {0xe, 0x2, [0xc8, 0x1, 0x3, 0x8, 0x0]}}, {{0x1c, 0x1, {0x2, 0x9, 0x7fff, 0x101, 0x0, 0x4, 0x7, 0x6}}, {0x10, 0x2, [0x7, 0x9, 0x8, 0x8, 0x6, 0x7]}}]}]}, 0xb0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfc}}, 0x0) 5.130835606s ago: executing program 3 (id=2886): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 5.095593839s ago: executing program 0 (id=2887): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="8857f7fc3a84c51b000000200000000000000000", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="a0", 0x1}], 0x1}}], 0x3, 0x28048005) 4.874939214s ago: executing program 3 (id=2888): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xf8, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x4, 0x1}, {0x0, [0x4, 0x11, 0x5, 0x1, 0x5], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x600, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 4.874650592s ago: executing program 0 (id=2889): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x5ef8, 0xec84, 0x0, 0x0, 0x0) 4.658649687s ago: executing program 3 (id=2890): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000500)="1075bd1569185aa6a18558be87bda07bd6752937c3a16469dd608c378207a1e90180e04cd0159729bf114030f5c6fc6cead96d26a97c82e52be0ecf6f934869f77377a09adea9953a36f7a7680e038a2eed6907101ca34dd980d0a0e29336bfde4f42e05ebd9b7ac4c9fedcd0c55869a80b17e", 0x73}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x10000000000, 0x9}, {0x1fb, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x400, 0xfffffffd, 0xfffffffc}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)={'#! ', './file0', [{0x20, '.^[,**-'}, {0x20, '#! '}, {0x20, 'cpu.stat\x00'}, {0x20, '$[(\xcd'}, {0x20, '/^^'}]}, 0x2a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400000000000000ffffffffffffffe00000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x693ede4c7a1b2a94) syz_clone(0x8209311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000200)) 4.644639361s ago: executing program 0 (id=2891): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0), 0x0, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) pselect6(0x40, &(0x7f0000000100)={0xd, 0x0, 0x11f0, 0xb, 0x693, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1}, &(0x7f0000000080)={0x7, 0x7f, 0x80000000000000, 0x0, 0x100000001, 0x9, 0x1, 0x400000}, 0x0, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r4, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 2.948400942s ago: executing program 3 (id=2892): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00001eb000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x9d, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f20) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.88709079s ago: executing program 2 (id=2893): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0100001900010029bd70000000000000000000000000000000ffffe0000001ff01000000000000000000000000000100000000000080000200000087000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x4000) 2.763380616s ago: executing program 2 (id=2894): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffa400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) 2.680261177s ago: executing program 1 (id=2895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000002000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xc4}}, 0x0) 2.610930681s ago: executing program 1 (id=2896): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x10, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) dup2(r4, r0) 2.449780951s ago: executing program 1 (id=2897): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a4, &(0x7f0000000000)={{@any, 0xffff7dff}, @hyper, 0x0, 0x0, 0x4000000f8, 0x8, 0x0, 0x4000000, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x4040, &(0x7f0000000200)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000838f86806fe47036000a000400280000000b000002", @ANYRES32=0x0], 0x20, 0x2400e044}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) r9 = fanotify_init(0x202, 0x1000) fanotify_mark(r9, 0x1, 0x48000013, r5, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000000040)='N.::/', 0x0) 2.011821317s ago: executing program 2 (id=2898): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0), 0x0, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0xd, 0x0, 0x11f0, 0xb, 0x693, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1}, &(0x7f0000000080)={0x7, 0x7f, 0x80000000000000, 0x0, 0x100000001, 0x9, 0x1, 0x400000}, 0x0, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r4, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 1.815903306s ago: executing program 0 (id=2899): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180)="8ec5", 0x2, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0xf1a) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$uinput_user_dev(r7, &(0x7f0000000700)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x4374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x9b6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x89fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff]}, 0x45c) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/244, 0xf4}], 0x1, &(0x7f0000000300)=""/179, 0xb3}, 0x10000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0x5501, 0x0) writev(r7, &(0x7f0000000e00)=[{&(0x7f0000000100)="f723b2adb713f7328abf32cdbd250819ed16572fba8f84f2", 0x18}, {0x0, 0x18}], 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) 1.794599826s ago: executing program 3 (id=2900): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x5ef8, 0xec84, 0x0, 0x0, 0x0) 1.331652987s ago: executing program 3 (id=2901): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r8, 0xc054561d, &(0x7f00000003c0)={0x1, "16809f2e04865e4f0eb0f0a01415a98efac4e085ab9eeec24bf1362d808125d2", 0x2, 0x1000, 0xfffffffe, 0x140000, 0x4, 0x3, 0x7fff, 0x5}) 0s ago: executing program 2 (id=2902): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb0, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001600)={@flat=@binder={0x73622a85, 0x1100}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="1201510329fbf0403807ea52fd4045cec60102030109023300ba0db37c8301020610780904d4090078"], &(0x7f00000017c0)={0x54, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000015c0)=@lang_id={0x0, 0x3, 0x44f}}, {0x2, &(0x7f0000001680)=ANY=[@ANYRES64=r8]}, {0x0, &(0x7f0000001580)=@lang_id={0x0, 0x3, 0x3409}}, {0x0, &(0x7f0000001780)=@lang_id={0x0, 0x3, 0x1c01}}]}) kernel console output (not intermixed with test programs): .643523][T14004] loop6: detected capacity change from 0 to 524288000 [ 529.708440][T14004] support for the xor transformation has been removed. [ 529.747552][ T985] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 529.804307][T14025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.879159][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 529.897697][ T985] usb 2-1: Using ep0 maxpacket: 8 [ 529.907487][ T985] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 529.946443][ T985] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 530.005365][ T985] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 530.034163][ T985] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 530.045198][ T9] usb 3-1: device descriptor read/64, error -71 [ 530.116184][ T985] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.144267][ T985] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 530.179841][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.297584][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 530.431899][ T985] usb 2-1: usb_control_msg returned -32 [ 530.439313][ T9] usb 3-1: device descriptor read/64, error -71 [ 530.445694][ T985] usbtmc 2-1:16.0: can't read capabilities [ 530.560632][ T9] usb usb3-port1: attempt power cycle [ 530.851353][ T5888] usb 4-1: USB disconnect, device number 105 [ 530.897615][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 530.940229][ T9] usb 3-1: device descriptor read/8, error -71 [ 531.235365][ T985] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 531.319385][T14050] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 531.347593][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 531.364835][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2479'. [ 531.377082][T14043] netlink: 'syz.1.2479': attribute type 5 has an invalid length. [ 531.386905][T14043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2479'. [ 531.396524][ T9] usb 3-1: device descriptor read/8, error -71 [ 531.438384][T14043] geneve2: entered promiscuous mode [ 531.446020][T14043] geneve2: entered allmulticast mode [ 531.455435][ T985] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.465649][ T5900] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 531.474121][ T985] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 531.488077][T14050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.496615][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.507335][ T985] usb 5-1: config 0 descriptor?? [ 531.512938][ T9] usb usb3-port1: unable to enumerate USB device [ 531.520507][T14050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.532137][ T985] pwc: Askey VC010 type 2 USB webcam detected. [ 531.546564][ T6741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 531.584600][ T6741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 531.599670][ T6741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 531.611168][ T6741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 531.637744][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 531.644958][ T5900] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 531.653827][ T5900] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 531.665132][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 531.675652][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 531.687541][ T5900] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.702011][ T5900] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 531.715883][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.790856][ T985] pwc: recv_control_msg error -71 req 02 val 2b00 [ 531.799795][ T985] pwc: recv_control_msg error -71 req 02 val 2700 [ 531.806615][ T985] pwc: recv_control_msg error -71 req 02 val 2c00 [ 531.821668][ T985] pwc: recv_control_msg error -71 req 04 val 1000 [ 531.849936][ T985] pwc: recv_control_msg error -71 req 04 val 1300 [ 531.862074][ T985] pwc: recv_control_msg error -71 req 04 val 1400 [ 531.927822][ T985] pwc: recv_control_msg error -71 req 02 val 2000 [ 531.950448][ T5900] usb 4-1: usb_control_msg returned -32 [ 531.956673][ T5900] usbtmc 4-1:16.0: can't read capabilities [ 531.964705][ T985] pwc: recv_control_msg error -71 req 02 val 2100 [ 531.976156][ T985] pwc: recv_control_msg error -71 req 04 val 1500 [ 532.006347][ T985] pwc: recv_control_msg error -71 req 02 val 2500 [ 532.019054][T14058] tipc: Started in network mode [ 532.024454][T14058] tipc: Node identity 424ab54fbd62, cluster identity 4711 [ 532.032081][T14058] tipc: Enabled bearer , priority 0 [ 532.033219][ T985] pwc: recv_control_msg error -71 req 02 val 2400 [ 532.090979][ T985] pwc: recv_control_msg error -71 req 02 val 2600 [ 532.092906][T14058] syzkaller0: entered promiscuous mode [ 532.108532][ T985] pwc: recv_control_msg error -71 req 02 val 2900 [ 532.115391][ T985] pwc: recv_control_msg error -71 req 02 val 2800 [ 532.124341][ T985] pwc: recv_control_msg error -71 req 04 val 1100 [ 532.134249][T14058] syzkaller0: entered allmulticast mode [ 532.169347][ T985] pwc: recv_control_msg error -71 req 04 val 1200 [ 532.186070][ T985] pwc: Registered as video103. [ 532.211600][ T985] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input51 [ 532.247412][ T985] usb 5-1: USB disconnect, device number 74 [ 532.484006][T14057] tipc: Resetting bearer [ 532.509500][T14057] tipc: Disabling bearer [ 532.723260][T14066] FAULT_INJECTION: forcing a failure. [ 532.723260][T14066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.744009][T14066] CPU: 0 UID: 0 PID: 14066 Comm: syz.4.2492 Not tainted syzkaller #0 PREEMPT(full) [ 532.744033][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.744045][T14066] Call Trace: [ 532.744053][T14066] [ 532.744062][T14066] dump_stack_lvl+0x189/0x250 [ 532.744086][T14066] ? __pfx____ratelimit+0x10/0x10 [ 532.744117][T14066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.744136][T14066] ? __pfx__printk+0x10/0x10 [ 532.744156][T14066] ? __might_fault+0xb0/0x130 [ 532.744186][T14066] should_fail_ex+0x414/0x560 [ 532.744218][T14066] _copy_from_user+0x2d/0xb0 [ 532.744241][T14066] get_timespec64+0x8e/0x1a0 [ 532.744263][T14066] ? __pfx_get_timespec64+0x10/0x10 [ 532.744294][T14066] __se_sys_futex+0x188/0x400 [ 532.744319][T14066] ? ksys_write+0x22a/0x250 [ 532.744338][T14066] ? __pfx___se_sys_futex+0x10/0x10 [ 532.744358][T14066] ? __pfx_ksys_write+0x10/0x10 [ 532.744381][T14066] ? __x64_sys_futex+0x21/0xf0 [ 532.744404][T14066] do_syscall_64+0xfa/0xfa0 [ 532.744422][T14066] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.744440][T14066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.744458][T14066] ? clear_bhb_loop+0x60/0xb0 [ 532.744480][T14066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.744504][T14066] RIP: 0033:0x7f353bb8efc9 [ 532.744521][T14066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.744537][T14066] RSP: 002b:00007f353ca21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 532.744557][T14066] RAX: ffffffffffffffda RBX: 00007f353bde6090 RCX: 00007f353bb8efc9 [ 532.744571][T14066] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 000020000000cffc [ 532.744583][T14066] RBP: 00007f353ca21090 R08: 0000000000000000 R09: 0000000000000000 [ 532.744595][T14066] R10: 000020000000b000 R11: 0000000000000246 R12: 0000000000000001 [ 532.744607][T14066] R13: 00007f353bde6128 R14: 00007f353bde6090 R15: 00007f353bf0fa28 [ 532.744637][T14066] [ 533.227275][T14069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.250139][T14069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.481924][T14077] loop6: detected capacity change from 0 to 7 [ 533.509117][ T6041] Dev loop6: unable to read RDB block 7 [ 533.525862][ T6041] loop6: AHDI p1 p2 p3 [ 533.535917][ T6041] loop6: partition table partially beyond EOD, truncated [ 533.548114][ T6041] loop6: p1 start 4217409618 is beyond EOD, truncated [ 533.555014][ T6041] loop6: p2 size 108 extends beyond EOD, truncated [ 533.577730][T14077] Dev loop6: unable to read RDB block 7 [ 533.583529][T14077] loop6: AHDI p1 p2 p3 [ 533.599332][T14077] loop6: partition table partially beyond EOD, truncated [ 533.615716][T14077] loop6: p1 start 4217409618 is beyond EOD, truncated [ 533.625134][T14077] loop6: p2 size 108 extends beyond EOD, truncated [ 533.692017][ T6041] udevd[6041]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 533.720916][ T6041] udevd[6041]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 534.651196][T14096] bridge0: entered allmulticast mode [ 534.677247][T14096] team0: Port device bridge0 added [ 534.768874][T14096] bridge1: entered allmulticast mode [ 534.777207][T14096] team0: Port device bridge1 added [ 535.105854][T14106] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2502'. [ 536.016407][T14116] SET target dimension over the limit! [ 536.058264][ T5830] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 536.219015][ T5830] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 536.232626][ T5830] usb 3-1: config 0 interface 0 has no altsetting 0 [ 536.240339][ T5830] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 536.249780][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.261477][ T5830] usb 3-1: config 0 descriptor?? [ 536.267160][T14112] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 536.324268][T14123] geneve4: entered promiscuous mode [ 536.329996][T14123] geneve4: entered allmulticast mode [ 536.682250][ T5830] usbhid 3-1:0.0: can't add hid device: -71 [ 536.689662][ T5830] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 536.701574][ T5830] usb 3-1: USB disconnect, device number 112 [ 537.228452][T14135] netdevsim netdevsim0: Direct firmware load for . [ 537.228452][T14135] failed with error -2 [ 537.239150][T14135] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 537.239150][T14135] [ 538.067711][T14048] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 538.126976][ T24] usb 2-1: USB disconnect, device number 100 [ 538.413351][ T985] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 538.442931][T14145] x_tables: ip_tables: osf match: only valid for protocol 6 [ 538.479290][ T24] usb 4-1: USB disconnect, device number 106 [ 538.627728][ T985] usb 5-1: Using ep0 maxpacket: 32 [ 538.632423][T14149] fuse: Bad value for 'fd' [ 538.636798][ T985] usb 5-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 538.657555][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.760862][ T985] usb 5-1: Product: syz [ 538.778731][ T985] usb 5-1: Manufacturer: syz [ 538.800270][ T985] usb 5-1: SerialNumber: syz [ 538.822492][ T985] usb 5-1: config 0 descriptor?? [ 538.958300][T14158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.077491][ T5900] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 539.114990][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 539.299052][T14142] veth0: entered promiscuous mode [ 539.307610][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 539.314203][ T5900] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 539.334956][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.347344][T14142] veth0: left promiscuous mode [ 539.435130][ T5900] usb 4-1: config 0 has no interface number 0 [ 539.446872][ T5900] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 539.475310][T14167] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2522'. [ 539.495917][ T5900] usb 4-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 539.563929][ T985] usb 5-1: USB disconnect, device number 75 [ 539.644950][ T5900] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 539.661351][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.679514][ T5900] usb 4-1: Product: syz [ 539.703980][ T5900] usb 4-1: Manufacturer: syz [ 539.737192][ T5900] usb 4-1: SerialNumber: syz [ 540.009644][ T5900] usb 4-1: config 0 descriptor?? [ 540.021442][T14150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 540.227509][ T5888] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 540.393350][ T5888] usb 3-1: config 0 has no interfaces? [ 540.407303][ T5888] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 540.424930][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.437146][ T5888] usb 3-1: Product: syz [ 540.442044][ T5888] usb 3-1: Manufacturer: syz [ 540.446881][ T5888] usb 3-1: SerialNumber: syz [ 540.462368][ T5888] usb 3-1: config 0 descriptor?? [ 540.647715][ T985] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 540.667644][ T5830] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 540.683862][T14172] loop6: detected capacity change from 0 to 524288000 [ 540.737609][T14172] support for the xor transformation has been removed. [ 540.811446][ T985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.823522][ T985] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 540.830871][ T5830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 540.834594][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.844510][ T5830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 540.856348][ T985] usb 2-1: config 0 descriptor?? [ 540.869513][ T5830] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 540.881747][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.900046][ T5830] usb 5-1: config 0 descriptor?? [ 540.905767][T14181] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 541.322618][ T5830] usbhid 5-1:0.0: can't add hid device: -71 [ 541.328850][ T5830] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 541.341178][ T5830] usb 5-1: USB disconnect, device number 76 [ 541.480141][ T985] razer 0003:1532:010E.000F: failed to enable macro keys: -71 [ 541.489857][ T985] razer 0003:1532:010E.000F: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 541.507667][ T985] usb 2-1: USB disconnect, device number 101 [ 541.555891][T14184] fido_id[14184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 541.620124][ T5900] usb 4-1: probing VID:PID(0424:012C) [ 541.630692][ T5900] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B [ 541.641122][ T5900] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 541.651186][ T5900] vub300 4-1:0.133: probe with driver vub300 failed with error -22 [ 541.676570][ T5900] usb 4-1: USB disconnect, device number 107 [ 542.157492][ T5900] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 542.403093][ T5900] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 542.551303][ T5900] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 542.567345][ T5900] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 542.808529][ T5900] usb 4-1: Manufacturer: syz [ 542.823621][ T5900] usb 4-1: config 0 descriptor?? [ 542.979814][ T985] usb 3-1: USB disconnect, device number 113 [ 543.204307][T14217] loop6: detected capacity change from 0 to 7 [ 543.231821][ T6041] Dev loop6: unable to read RDB block 7 [ 543.237642][ T5900] rc_core: IR keymap rc-hauppauge not found [ 543.244108][ T6041] loop6: AHDI p1 p2 p3 [ 543.249380][ T6041] loop6: partition table partially beyond EOD, truncated [ 543.256556][ T5900] Registered IR keymap rc-empty [ 543.269708][ T5900] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 543.280306][ T6041] loop6: p1 start 4217409618 is beyond EOD, truncated [ 543.289370][ T6041] loop6: p2 size 108 extends beyond EOD, truncated [ 543.317793][ T5900] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52 [ 543.339639][T14217] Dev loop6: unable to read RDB block 7 [ 543.345607][T14217] loop6: AHDI p1 p2 p3 [ 543.357644][T14217] loop6: partition table partially beyond EOD, truncated [ 543.366008][T14217] loop6: p1 start 4217409618 is beyond EOD, truncated [ 543.377601][T14217] loop6: p2 size 108 extends beyond EOD, truncated [ 543.462685][ C0] igorplugusb 4-1:0.0: receive overflow, at least 13 lost [ 543.571612][ T6041] udevd[6041]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 543.819955][ T6041] udevd[6041]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 544.108902][T14230] FAULT_INJECTION: forcing a failure. [ 544.108902][T14230] name fail_futex, interval 1, probability 0, space 0, times 1 [ 544.148651][T14230] CPU: 0 UID: 0 PID: 14230 Comm: syz.2.2539 Not tainted syzkaller #0 PREEMPT(full) [ 544.148676][T14230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 544.148686][T14230] Call Trace: [ 544.148695][T14230] [ 544.148703][T14230] dump_stack_lvl+0x189/0x250 [ 544.148727][T14230] ? __pfx____ratelimit+0x10/0x10 [ 544.148757][T14230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.148775][T14230] ? __pfx__printk+0x10/0x10 [ 544.148808][T14230] should_fail_ex+0x414/0x560 [ 544.148840][T14230] get_futex_key+0xffc/0x1660 [ 544.148870][T14230] ? __pfx_get_futex_key+0x10/0x10 [ 544.148893][T14230] ? __lock_acquire+0xab9/0xd20 [ 544.148921][T14230] futex_wait_setup+0x4f/0x590 [ 544.148948][T14230] ? __futex_wait+0xb3/0x3d0 [ 544.148975][T14230] __futex_wait+0x148/0x3d0 [ 544.149006][T14230] ? __pfx___futex_wait+0x10/0x10 [ 544.149032][T14230] ? __pfx_futex_wake_mark+0x10/0x10 [ 544.149062][T14230] ? __hrtimer_setup+0x187/0x210 [ 544.149084][T14230] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 544.149111][T14230] ? ktime_add_safe+0x38/0x70 [ 544.149138][T14230] futex_wait+0x104/0x360 [ 544.149163][T14230] ? __pfx_futex_wait+0x10/0x10 [ 544.149188][T14230] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 544.149217][T14230] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 544.149236][T14230] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.149258][T14230] do_futex+0x333/0x420 [ 544.149284][T14230] ? __pfx_do_futex+0x10/0x10 [ 544.149307][T14230] ? read_tsc+0x9/0x20 [ 544.149329][T14230] __se_sys_futex+0x36f/0x400 [ 544.149355][T14230] ? __pfx___se_sys_futex+0x10/0x10 [ 544.149375][T14230] ? __pfx_ksys_write+0x10/0x10 [ 544.149399][T14230] ? __x64_sys_futex+0x21/0xf0 [ 544.149427][T14230] do_syscall_64+0xfa/0xfa0 [ 544.149444][T14230] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.149462][T14230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.149480][T14230] ? clear_bhb_loop+0x60/0xb0 [ 544.149502][T14230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.149520][T14230] RIP: 0033:0x7f0ee438efc9 [ 544.149536][T14230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.149551][T14230] RSP: 002b:00007f0ee5251038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 544.149571][T14230] RAX: ffffffffffffffda RBX: 00007f0ee45e6090 RCX: 00007f0ee438efc9 [ 544.149584][T14230] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 000020000000cffc [ 544.149595][T14230] RBP: 00007f0ee5251090 R08: 0000000000000000 R09: 0000000000000000 [ 544.149606][T14230] R10: 000020000000b000 R11: 0000000000000246 R12: 0000000000000001 [ 544.149618][T14230] R13: 00007f0ee45e6128 R14: 00007f0ee45e6090 R15: 00007f0ee470fa28 [ 544.149649][T14230] [ 544.707141][ T5900] usb 4-1: USB disconnect, device number 108 [ 545.083010][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2544'. [ 545.677879][ T5830] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 545.853052][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 545.862467][ T5830] usb 3-1: config 0 has no interfaces? [ 545.884801][ T5830] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 545.897565][ T5900] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 545.946485][ T5830] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 545.996881][ T5830] usb 3-1: Manufacturer: syz [ 546.052863][ T5900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.064206][ T5900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.073804][ T5830] usb 3-1: config 0 descriptor?? [ 546.084974][ T5900] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.094552][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.104150][ T5900] usb 2-1: Product: syz [ 546.104702][ T5888] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 546.149514][ T5900] usb 2-1: Manufacturer: syz [ 546.154247][ T5900] usb 2-1: SerialNumber: syz [ 546.317549][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 546.446778][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 546.488136][ T5888] usb 5-1: config 1 has an invalid interface number: 26 but max is 0 [ 546.496371][ T5888] usb 5-1: config 1 has no interface number 0 [ 546.608714][ T5888] usb 5-1: config 1 interface 26 has no altsetting 0 [ 546.619816][ T5888] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 546.636293][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.655841][ T5900] usb 2-1: cannot find UAC_HEADER [ 546.656587][ T5888] usb 5-1: Product: syz [ 546.668531][ T5888] usb 5-1: Manufacturer: syz [ 546.681981][ T5888] usb 5-1: SerialNumber: syz [ 546.750373][ T5900] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 546.784329][T14262] FAULT_INJECTION: forcing a failure. [ 546.784329][T14262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.800173][T14262] CPU: 1 UID: 0 PID: 14262 Comm: syz.0.2549 Not tainted syzkaller #0 PREEMPT(full) [ 546.800198][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 546.800209][T14262] Call Trace: [ 546.800217][T14262] [ 546.800229][T14262] dump_stack_lvl+0x189/0x250 [ 546.800257][T14262] ? __pfx____ratelimit+0x10/0x10 [ 546.800273][T14262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.800284][T14262] ? __pfx__printk+0x10/0x10 [ 546.800300][T14262] should_fail_ex+0x414/0x560 [ 546.800318][T14262] _copy_to_user+0x31/0xb0 [ 546.800333][T14262] copy_to_sockptr+0x5e/0xa0 [ 546.800348][T14262] do_ipv6_getsockopt+0x13ec/0x2300 [ 546.800366][T14262] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 546.800378][T14262] ? aa_label_sk_perm+0x4cd/0x630 [ 546.800419][T14262] ? __lock_acquire+0xab9/0xd20 [ 546.800440][T14262] ipv6_getsockopt+0xbd/0x290 [ 546.800455][T14262] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 546.800469][T14262] ? sock_common_getsockopt+0x2d/0xb0 [ 546.800481][T14262] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 546.800495][T14262] do_sock_getsockopt+0x372/0x450 [ 546.800511][T14262] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 546.800524][T14262] ? do_syscall_64+0xa0/0xfa0 [ 546.800534][T14262] ? __fget_files+0x2a/0x420 [ 546.800545][T14262] ? __fget_files+0x3a0/0x420 [ 546.800556][T14262] ? __fget_files+0x2a/0x420 [ 546.800571][T14262] __x64_sys_getsockopt+0x1a5/0x250 [ 546.800584][T14262] ? do_syscall_64+0xa0/0xfa0 [ 546.800595][T14262] ? do_syscall_64+0xa0/0xfa0 [ 546.800607][T14262] do_syscall_64+0xfa/0xfa0 [ 546.800616][T14262] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.800626][T14262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.800636][T14262] ? clear_bhb_loop+0x60/0xb0 [ 546.800648][T14262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.800658][T14262] RIP: 0033:0x7f85af38efc9 [ 546.800669][T14262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.800678][T14262] RSP: 002b:00007f85b01f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 546.800689][T14262] RAX: ffffffffffffffda RBX: 00007f85af5e5fa0 RCX: 00007f85af38efc9 [ 546.800697][T14262] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 546.800703][T14262] RBP: 00007f85b01f8090 R08: 0000200000000240 R09: 0000000000000000 [ 546.800710][T14262] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 546.800716][T14262] R13: 00007f85af5e6038 R14: 00007f85af5e5fa0 R15: 00007f85af70fa28 [ 546.800732][T14262] [ 547.088499][T14258] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2547'. [ 547.099322][T14264] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2547'. [ 547.114366][ T5830] usb 2-1: USB disconnect, device number 102 [ 547.135917][T14260] vlan0: entered promiscuous mode [ 547.162277][ T6103] udevd[6103]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.287350][ T5888] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 547.294582][ T5888] usb 5-1: cannot find UAC_HEADER [ 547.316647][ T5888] snd-usb-audio 5-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 547.359254][ T5888] usb 5-1: USB disconnect, device number 77 [ 547.385810][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.575729][T14272] FAULT_INJECTION: forcing a failure. [ 547.575729][T14272] name fail_futex, interval 1, probability 0, space 0, times 0 [ 547.591145][T14272] CPU: 0 UID: 0 PID: 14272 Comm: syz.3.2553 Not tainted syzkaller #0 PREEMPT(full) [ 547.591170][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 547.591181][T14272] Call Trace: [ 547.591189][T14272] [ 547.591197][T14272] dump_stack_lvl+0x189/0x250 [ 547.591214][T14272] ? __pfx____ratelimit+0x10/0x10 [ 547.591230][T14272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.591240][T14272] ? __pfx__printk+0x10/0x10 [ 547.591250][T14272] ? preempt_schedule+0xae/0xc0 [ 547.591261][T14272] ? try_to_wake_up+0x7f5/0x12b0 [ 547.591276][T14272] should_fail_ex+0x414/0x560 [ 547.591294][T14272] get_futex_key+0x1a8/0x1660 [ 547.591310][T14272] ? __pfx_get_futex_key+0x10/0x10 [ 547.591323][T14272] ? __lock_acquire+0xab9/0xd20 [ 547.591338][T14272] futex_wait_setup+0x4f/0x590 [ 547.591353][T14272] ? __futex_wait+0xb3/0x3d0 [ 547.591367][T14272] __futex_wait+0x148/0x3d0 [ 547.591386][T14272] ? __pfx___futex_wait+0x10/0x10 [ 547.591401][T14272] ? __pfx_futex_wake_mark+0x10/0x10 [ 547.591417][T14272] ? __hrtimer_setup+0x187/0x210 [ 547.591430][T14272] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 547.591445][T14272] ? ktime_add_safe+0x38/0x70 [ 547.591459][T14272] futex_wait_restart+0x1f2/0x4b0 [ 547.591473][T14272] ? __pfx_futex_wait_restart+0x10/0x10 [ 547.591487][T14272] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 547.591502][T14272] ? rcu_is_watching+0x15/0xb0 [ 547.591518][T14272] ? do_syscall_64+0xbe/0xfa0 [ 547.591530][T14272] do_syscall_64+0xfa/0xfa0 [ 547.591539][T14272] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.591549][T14272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.591559][T14272] ? clear_bhb_loop+0x60/0xb0 [ 547.591571][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.591581][T14272] RIP: 0033:0x7fee9ff8efc9 [ 547.591591][T14272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.591599][T14272] RSP: 002b:00007feea0df8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 547.591611][T14272] RAX: ffffffffffffffda RBX: 00007feea01e6090 RCX: 00007fee9ff8efc9 [ 547.591618][T14272] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 000020000000cffc [ 547.591625][T14272] RBP: 00007feea0df8090 R08: 0000000000000000 R09: 0000000000000000 [ 547.591631][T14272] R10: 000020000000b000 R11: 0000000000000246 R12: 0000000000000001 [ 547.591638][T14272] R13: 00007feea01e6128 R14: 00007feea01e6090 R15: 00007feea030fa28 [ 547.591654][T14272] [ 548.257473][ T24] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 548.469257][ T5888] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 548.499914][ T24] usb 2-1: config index 0 descriptor too short (expected 69, got 36) [ 548.509383][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.599950][ T24] usb 2-1: New USB device found, idVendor=093a, idProduct=2638, bcdDevice=b7.89 [ 548.610472][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.618567][ T24] usb 2-1: Product: syz [ 548.637081][ T24] usb 2-1: Manufacturer: syz [ 548.663798][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 548.674780][ T24] usb 2-1: SerialNumber: syz [ 548.684828][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 548.705797][ T24] usb 2-1: config 0 descriptor?? [ 548.712348][ T5888] usb 5-1: config 1 has an invalid interface number: 26 but max is 0 [ 548.724134][ T5888] usb 5-1: config 1 has no interface number 0 [ 548.734042][ T5888] usb 5-1: config 1 interface 26 has no altsetting 0 [ 548.759334][ T5888] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 548.772503][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.854489][ T5888] usb 5-1: Product: syz [ 548.861545][ T5888] usb 5-1: Manufacturer: syz [ 548.872906][ T5888] usb 5-1: SerialNumber: syz [ 549.025446][T14277] binder: 14274:14277 unknown command 0 [ 549.038205][ T5900] usb 3-1: USB disconnect, device number 114 [ 549.053697][T14277] binder: 14274:14277 ioctl c0306201 200000000080 returned -22 [ 549.093407][T14281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2555'. [ 549.236231][T14281] vlan0: entered promiscuous mode [ 549.448263][ T5888] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 549.485755][ T5888] usb 5-1: cannot find UAC_HEADER [ 549.527537][ T5900] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 549.563648][ T5888] snd-usb-audio 5-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 549.636345][ T5888] usb 5-1: USB disconnect, device number 78 [ 549.664604][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.707960][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 549.730667][ T5900] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 549.753853][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.796066][ T5900] usb 3-1: config 0 has no interface number 0 [ 549.806770][ T5900] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 549.826435][ T5900] usb 3-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 549.861276][ T5900] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 549.871595][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.939641][T14299] FAULT_INJECTION: forcing a failure. [ 549.939641][T14299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.957881][T14299] CPU: 1 UID: 0 PID: 14299 Comm: syz.4.2560 Not tainted syzkaller #0 PREEMPT(full) [ 549.957898][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 549.957905][T14299] Call Trace: [ 549.957910][T14299] [ 549.957915][T14299] dump_stack_lvl+0x189/0x250 [ 549.957930][T14299] ? __pfx____ratelimit+0x10/0x10 [ 549.957946][T14299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.957956][T14299] ? __pfx__printk+0x10/0x10 [ 549.957976][T14299] should_fail_ex+0x414/0x560 [ 549.957995][T14299] _copy_to_user+0x31/0xb0 [ 549.958010][T14299] simple_read_from_buffer+0xe1/0x170 [ 549.958025][T14299] proc_fail_nth_read+0x1b3/0x220 [ 549.958042][T14299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.958058][T14299] ? rw_verify_area+0x2a6/0x4d0 [ 549.958068][T14299] ? __lock_acquire+0xab9/0xd20 [ 549.958080][T14299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.958095][T14299] vfs_read+0x200/0xa30 [ 549.958105][T14299] ? fdget_pos+0x247/0x320 [ 549.958119][T14299] ? __pfx___mutex_lock+0x10/0x10 [ 549.958131][T14299] ? __pfx_vfs_read+0x10/0x10 [ 549.958142][T14299] ? __fget_files+0x2a/0x420 [ 549.958163][T14299] ? __fget_files+0x3a0/0x420 [ 549.958174][T14299] ? __fget_files+0x2a/0x420 [ 549.958190][T14299] ksys_read+0x145/0x250 [ 549.958202][T14299] ? __pfx_ksys_read+0x10/0x10 [ 549.958214][T14299] ? do_syscall_64+0xbe/0xfa0 [ 549.958226][T14299] do_syscall_64+0xfa/0xfa0 [ 549.958235][T14299] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.958246][T14299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.958256][T14299] ? clear_bhb_loop+0x60/0xb0 [ 549.958268][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.958277][T14299] RIP: 0033:0x7f353bb8d9dc [ 549.958287][T14299] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 549.958296][T14299] RSP: 002b:00007f353ca42030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 549.958308][T14299] RAX: ffffffffffffffda RBX: 00007f353bde5fa0 RCX: 00007f353bb8d9dc [ 549.958315][T14299] RDX: 000000000000000f RSI: 00007f353ca420a0 RDI: 0000000000000004 [ 549.958322][T14299] RBP: 00007f353ca42090 R08: 0000000000000000 R09: 0000000000000000 [ 549.958328][T14299] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 549.958334][T14299] R13: 00007f353bde6038 R14: 00007f353bde5fa0 R15: 00007f353bf0fa28 [ 549.958351][T14299] [ 549.963443][ T5900] usb 3-1: Product: syz [ 550.383967][ T5900] usb 3-1: Manufacturer: syz [ 550.391387][ T5900] usb 3-1: SerialNumber: syz [ 550.401332][ T5900] usb 3-1: config 0 descriptor?? [ 550.417805][T14297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 551.076374][ T5888] usb 2-1: USB disconnect, device number 103 [ 553.074155][ T5900] usb 3-1: probing VID:PID(0424:012C) [ 553.080925][ T5900] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 553.087486][ T5900] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 553.095398][ T5900] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 553.106855][ T5900] usb 3-1: USB disconnect, device number 115 [ 553.453277][T14335] FAULT_INJECTION: forcing a failure. [ 553.453277][T14335] name fail_futex, interval 1, probability 0, space 0, times 0 [ 553.540644][T14335] CPU: 0 UID: 0 PID: 14335 Comm: syz.2.2568 Not tainted syzkaller #0 PREEMPT(full) [ 553.540670][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 553.540680][T14335] Call Trace: [ 553.540686][T14335] [ 553.540692][T14335] dump_stack_lvl+0x189/0x250 [ 553.540708][T14335] ? __pfx____ratelimit+0x10/0x10 [ 553.540724][T14335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.540735][T14335] ? __pfx__printk+0x10/0x10 [ 553.540745][T14335] ? css_rstat_updated+0x23a/0x4f0 [ 553.540765][T14335] should_fail_ex+0x414/0x560 [ 553.540783][T14335] get_futex_key+0x900/0x1660 [ 553.540794][T14335] ? finish_task_switch+0x18b/0x950 [ 553.540813][T14335] ? __pfx_get_futex_key+0x10/0x10 [ 553.540825][T14335] ? __lock_acquire+0xab9/0xd20 [ 553.540841][T14335] futex_wait_setup+0x4f/0x590 [ 553.540856][T14335] ? __futex_wait+0xb3/0x3d0 [ 553.540870][T14335] __futex_wait+0x148/0x3d0 [ 553.540889][T14335] ? __pfx___futex_wait+0x10/0x10 [ 553.540913][T14335] ? __pfx_futex_wake_mark+0x10/0x10 [ 553.540941][T14335] ? __hrtimer_setup+0x187/0x210 [ 553.540962][T14335] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 553.540988][T14335] ? ktime_add_safe+0x38/0x70 [ 553.541012][T14335] futex_wait_restart+0x1f2/0x4b0 [ 553.541039][T14335] ? __pfx_futex_wait_restart+0x10/0x10 [ 553.541064][T14335] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 553.541106][T14335] do_syscall_64+0xfa/0xfa0 [ 553.541123][T14335] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.541142][T14335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.541160][T14335] ? clear_bhb_loop+0x60/0xb0 [ 553.541182][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.541200][T14335] RIP: 0033:0x7f0ee438efc9 [ 553.541217][T14335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.541232][T14335] RSP: 002b:00007f0ee5251038 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 553.541253][T14335] RAX: ffffffffffffffda RBX: 00007f0ee45e6090 RCX: 00007f0ee438efc9 [ 553.541267][T14335] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 000020000000cffc [ 553.541279][T14335] RBP: 00007f0ee5251090 R08: 0000000000000000 R09: 0000000000000000 [ 553.541290][T14335] R10: 000020000000b000 R11: 0000000000000246 R12: 0000000000000001 [ 553.541303][T14335] R13: 00007f0ee45e6128 R14: 00007f0ee45e6090 R15: 00007f0ee470fa28 [ 553.541334][T14335] [ 553.853825][T14340] x_tables: ip_tables: osf match: only valid for protocol 6 [ 554.269127][T14347] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 554.276425][T14347] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 554.305987][T14348] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 554.739217][T14362] geneve3: entered promiscuous mode [ 554.747490][T14362] geneve3: entered allmulticast mode [ 554.960243][ T985] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 555.118282][ T985] usb 5-1: Using ep0 maxpacket: 16 [ 555.132040][ T985] usb 5-1: unable to get BOS descriptor or descriptor too short [ 555.155313][ T985] usb 5-1: config 1 has an invalid interface number: 26 but max is 0 [ 555.436407][ T985] usb 5-1: config 1 has no interface number 0 [ 555.460555][ T985] usb 5-1: config 1 interface 26 has no altsetting 0 [ 555.474577][ T985] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 555.494201][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.512706][ T985] usb 5-1: Product: syz [ 555.527329][ T985] usb 5-1: Manufacturer: syz [ 555.537453][ T985] usb 5-1: SerialNumber: syz [ 555.773938][T14358] vlan0: entered promiscuous mode [ 555.911812][ T985] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 555.924401][ T985] usb 5-1: cannot find UAC_HEADER [ 555.931909][T14387] FAULT_INJECTION: forcing a failure. [ 555.931909][T14387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.946177][T14387] CPU: 1 UID: 0 PID: 14387 Comm: syz.1.2585 Not tainted syzkaller #0 PREEMPT(full) [ 555.946200][T14387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 555.946211][T14387] Call Trace: [ 555.946219][T14387] [ 555.946228][T14387] dump_stack_lvl+0x189/0x250 [ 555.946253][T14387] ? __pfx____ratelimit+0x10/0x10 [ 555.946279][T14387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.946357][T14387] ? __pfx__printk+0x10/0x10 [ 555.946372][T14387] ? __might_fault+0xb0/0x130 [ 555.946399][T14387] should_fail_ex+0x414/0x560 [ 555.946428][T14387] _copy_to_iter+0x1de/0x1790 [ 555.946449][T14387] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 555.946474][T14387] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.946493][T14387] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 555.946520][T14387] ? __pfx__copy_to_iter+0x10/0x10 [ 555.946537][T14387] ? remove_wait_queue+0x33/0x120 [ 555.946558][T14387] ? tipc_wait_for_rcvmsg+0x4ea/0x630 [ 555.946588][T14387] __skb_datagram_iter+0xf8/0x990 [ 555.946606][T14387] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 555.946624][T14387] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 555.946642][T14387] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 555.946658][T14387] ? __local_bh_enable_ip+0x12d/0x1c0 [ 555.946686][T14387] skb_copy_datagram_iter+0xc5/0x230 [ 555.946710][T14387] tipc_recvstream+0x72d/0xe70 [ 555.946742][T14387] ? __pfx_tipc_recvstream+0x10/0x10 [ 555.946759][T14387] sock_recvmsg+0x22c/0x270 [ 555.946783][T14387] ____sys_recvmsg+0x1c9/0x460 [ 555.946807][T14387] ? __pfx_____sys_recvmsg+0x10/0x10 [ 555.946838][T14387] ? import_iovec+0x74/0xa0 [ 555.946861][T14387] ___sys_recvmsg+0x1b5/0x510 [ 555.946882][T14387] ? __pfx____sys_recvmsg+0x10/0x10 [ 555.946926][T14387] ? __fget_files+0x3a0/0x420 [ 555.946957][T14387] __x64_sys_recvmsg+0x198/0x260 [ 555.946979][T14387] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 555.947009][T14387] ? __pfx_ksys_write+0x10/0x10 [ 555.947033][T14387] ? do_syscall_64+0xbe/0xfa0 [ 555.947055][T14387] do_syscall_64+0xfa/0xfa0 [ 555.947073][T14387] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.947091][T14387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.947109][T14387] ? clear_bhb_loop+0x60/0xb0 [ 555.947131][T14387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.947149][T14387] RIP: 0033:0x7f3de778efc9 [ 555.947167][T14387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.947183][T14387] RSP: 002b:00007f3de856c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 555.947203][T14387] RAX: ffffffffffffffda RBX: 00007f3de79e5fa0 RCX: 00007f3de778efc9 [ 555.947217][T14387] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 555.947229][T14387] RBP: 00007f3de856c090 R08: 0000000000000000 R09: 0000000000000000 [ 555.947240][T14387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.947251][T14387] R13: 00007f3de79e6038 R14: 00007f3de79e5fa0 R15: 00007f3de7b0fa28 [ 555.947282][T14387] [ 556.236891][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.280685][ T985] snd-usb-audio 5-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 556.320130][ T985] usb 5-1: USB disconnect, device number 79 [ 556.521872][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.570505][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2586'. [ 556.774815][T14401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2590'. [ 557.019868][T14411] netlink: 'syz.4.2594': attribute type 4 has an invalid length. [ 557.035414][T14411] netlink: 'syz.4.2594': attribute type 4 has an invalid length. [ 557.081815][T14411] loop9: detected capacity change from 0 to 7 [ 557.090024][ T6041] Dev loop9: unable to read RDB block 7 [ 557.101547][ T6041] loop9: unable to read partition table [ 557.112833][ T6041] loop9: partition table beyond EOD, truncated [ 557.132673][T14411] Dev loop9: unable to read RDB block 7 [ 557.144673][T14411] loop9: unable to read partition table [ 557.163591][T14411] loop9: partition table beyond EOD, truncated [ 557.180263][T14411] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 557.539568][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2600'. [ 557.595550][T14431] syz_tun: entered allmulticast mode [ 557.626990][T14431] pimreg: entered allmulticast mode [ 557.633101][T14432] netlink: 'syz.3.2601': attribute type 39 has an invalid length. [ 557.649299][T14431] netlink: 'syz.3.2601': attribute type 39 has an invalid length. [ 557.701954][T14431] syz_tun (unregistering): left allmulticast mode [ 557.880914][T14439] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 557.903578][T14444] FAULT_INJECTION: forcing a failure. [ 557.903578][T14444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.918997][T14444] CPU: 1 UID: 0 PID: 14444 Comm: syz.1.2603 Not tainted syzkaller #0 PREEMPT(full) [ 557.919021][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 557.919032][T14444] Call Trace: [ 557.919040][T14444] [ 557.919048][T14444] dump_stack_lvl+0x189/0x250 [ 557.919082][T14444] ? __pfx____ratelimit+0x10/0x10 [ 557.919109][T14444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.919128][T14444] ? __pfx__printk+0x10/0x10 [ 557.919147][T14444] ? __might_fault+0xb0/0x130 [ 557.919177][T14444] should_fail_ex+0x414/0x560 [ 557.919208][T14444] _copy_from_user+0x2d/0xb0 [ 557.919232][T14444] sock_do_ioctl+0x182/0x300 [ 557.919257][T14444] ? __pfx_sock_do_ioctl+0x10/0x10 [ 557.919293][T14444] sock_ioctl+0x576/0x790 [ 557.919314][T14444] ? __pfx_sock_ioctl+0x10/0x10 [ 557.919337][T14444] ? __fget_files+0x3a0/0x420 [ 557.919358][T14444] ? __fget_files+0x2a/0x420 [ 557.919382][T14444] ? bpf_lsm_file_ioctl+0x9/0x20 [ 557.919406][T14444] ? __pfx_sock_ioctl+0x10/0x10 [ 557.919425][T14444] __se_sys_ioctl+0xfc/0x170 [ 557.919444][T14444] do_syscall_64+0xfa/0xfa0 [ 557.919462][T14444] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.919480][T14444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.919497][T14444] ? clear_bhb_loop+0x60/0xb0 [ 557.919519][T14444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.919537][T14444] RIP: 0033:0x7f3de778efc9 [ 557.919554][T14444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.919569][T14444] RSP: 002b:00007f3de856c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.919588][T14444] RAX: ffffffffffffffda RBX: 00007f3de79e5fa0 RCX: 00007f3de778efc9 [ 557.919602][T14444] RDX: 0000200000000380 RSI: 0000000000008933 RDI: 0000000000000003 [ 557.919614][T14444] RBP: 00007f3de856c090 R08: 0000000000000000 R09: 0000000000000000 [ 557.919626][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.919642][T14444] R13: 00007f3de79e6038 R14: 00007f3de79e5fa0 R15: 00007f3de7b0fa28 [ 557.919674][T14444] [ 558.135448][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 558.187998][T14448] geneve3: entered promiscuous mode [ 558.193437][T14448] geneve3: entered allmulticast mode [ 558.253168][T14452] x_tables: ip_tables: osf match: only valid for protocol 6 [ 558.318529][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 558.325871][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 558.334649][ T9] usb 5-1: config 0 has no interface number 0 [ 558.355068][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 558.379209][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.388526][ T9] usb 5-1: Product: syz [ 558.392726][ T9] usb 5-1: Manufacturer: syz [ 558.397339][ T9] usb 5-1: SerialNumber: syz [ 558.433460][ T9] usb 5-1: config 0 descriptor?? [ 558.450402][ T9] smsc95xx v2.0.0 [ 558.747273][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 558.784784][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 558.818051][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 558.840995][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 558.864698][T14455] FAULT_INJECTION: forcing a failure. [ 558.864698][T14455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.894721][T14455] CPU: 1 UID: 0 PID: 14455 Comm: syz.1.2609 Not tainted syzkaller #0 PREEMPT(full) [ 558.894746][T14455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 558.894756][T14455] Call Trace: [ 558.894764][T14455] [ 558.894772][T14455] dump_stack_lvl+0x189/0x250 [ 558.894795][T14455] ? __pfx____ratelimit+0x10/0x10 [ 558.894822][T14455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.894837][T14455] ? __pfx__printk+0x10/0x10 [ 558.894854][T14455] ? __might_fault+0xb0/0x130 [ 558.894882][T14455] should_fail_ex+0x414/0x560 [ 558.894913][T14455] _copy_from_user+0x2d/0xb0 [ 558.894935][T14455] update_counters+0xe3/0x1b0 [ 558.894971][T14455] ? __pfx_update_counters+0x10/0x10 [ 558.895002][T14455] ? bpf_lsm_capable+0x9/0x20 [ 558.895018][T14455] ? security_capable+0x7e/0x2e0 [ 558.895043][T14455] do_ebt_set_ctl+0x17d/0xb60 [ 558.895066][T14455] ? __pfx___mutex_trylock_common+0x10/0x10 [ 558.895088][T14455] ? __local_bh_enable_ip+0x12d/0x1c0 [ 558.895109][T14455] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 558.895139][T14455] ? rcu_is_watching+0x15/0xb0 [ 558.895161][T14455] ? trace_contention_end+0x39/0x120 [ 558.895192][T14455] ? nf_setsockopt+0x221/0x290 [ 558.895215][T14455] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 558.895238][T14455] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 558.895261][T14455] ? __pfx___mutex_lock+0x10/0x10 [ 558.895289][T14455] nf_setsockopt+0x26f/0x290 [ 558.895309][T14455] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 558.895335][T14455] smc_setsockopt+0x232/0xab0 [ 558.895359][T14455] ? __pfx_smc_setsockopt+0x10/0x10 [ 558.895377][T14455] ? aa_sock_opt_perm+0xff/0x1b0 [ 558.895401][T14455] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 558.895422][T14455] ? __pfx_smc_setsockopt+0x10/0x10 [ 558.895442][T14455] do_sock_setsockopt+0x17c/0x1b0 [ 558.895473][T14455] __x64_sys_setsockopt+0x13f/0x1b0 [ 558.895511][T14455] do_syscall_64+0xfa/0xfa0 [ 558.895528][T14455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.895531][ T9] usb 5-1: USB disconnect, device number 80 [ 558.895546][T14455] ? asm_sysvec_call_function_single+0x1a/0x20 [ 558.895562][T14455] ? clear_bhb_loop+0x60/0xb0 [ 558.895578][T14455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.895592][T14455] RIP: 0033:0x7f3de778efc9 [ 558.895609][T14455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.895624][T14455] RSP: 002b:00007f3de856c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 558.895644][T14455] RAX: ffffffffffffffda RBX: 00007f3de79e5fa0 RCX: 00007f3de778efc9 [ 558.895657][T14455] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000006 [ 558.895668][T14455] RBP: 00007f3de856c090 R08: 0000000000000098 R09: 0000000000000000 [ 558.895679][T14455] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.895691][T14455] R13: 00007f3de79e6038 R14: 00007f3de79e5fa0 R15: 00007f3de7b0fa28 [ 558.895722][T14455] [ 559.687515][ T24] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 559.697759][ T985] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 559.787566][ T5888] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 559.837688][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 559.844409][ T24] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 559.856366][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.860053][ T985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.868262][ T24] usb 3-1: config 0 has no interface number 0 [ 559.884576][ T985] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 559.894111][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.895090][ T24] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 559.906459][ T985] usb 2-1: config 0 descriptor?? [ 559.912604][ T24] usb 3-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 559.920558][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 559.945828][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.955417][ T24] usb 3-1: Product: syz [ 559.960856][ T24] usb 3-1: Manufacturer: syz [ 559.967074][ T5888] usb 5-1: config 0 has no interfaces? [ 559.973008][ T24] usb 3-1: SerialNumber: syz [ 559.980954][ T5888] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 559.993558][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.006030][ T5888] usb 5-1: Product: syz [ 560.006082][ T24] usb 3-1: config 0 descriptor?? [ 560.015712][ T5888] usb 5-1: Manufacturer: syz [ 560.020691][ T5888] usb 5-1: SerialNumber: syz [ 560.025862][T14486] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 560.037556][ T5888] usb 5-1: config 0 descriptor?? [ 560.312767][T14487] veth1_vlan: left promiscuous mode [ 560.322402][ T9] usb 5-1: USB disconnect, device number 81 [ 560.383275][ T985] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 560.404806][ T985] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0010/input/input54 [ 560.543386][ T985] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 560.759583][T14501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2620'. [ 560.769859][T14501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2620'. [ 560.835836][T14503] geneve3: entered promiscuous mode [ 560.841953][T14503] geneve3: entered allmulticast mode [ 561.333454][ T985] usb 2-1: USB disconnect, device number 104 [ 561.350860][T13912] team0: Port device macvlan1 removed [ 561.405826][T14521] FAULT_INJECTION: forcing a failure. [ 561.405826][T14521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.433386][T14521] CPU: 1 UID: 0 PID: 14521 Comm: syz.4.2627 Not tainted syzkaller #0 PREEMPT(full) [ 561.433411][T14521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.433426][T14521] Call Trace: [ 561.433434][T14521] [ 561.433442][T14521] dump_stack_lvl+0x189/0x250 [ 561.433467][T14521] ? __pfx____ratelimit+0x10/0x10 [ 561.433493][T14521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.433512][T14521] ? __pfx__printk+0x10/0x10 [ 561.433543][T14521] should_fail_ex+0x414/0x560 [ 561.433574][T14521] _copy_to_user+0x31/0xb0 [ 561.433600][T14521] put_user_ifreq+0x6b/0xd0 [ 561.433620][T14521] sock_do_ioctl+0x25b/0x300 [ 561.433643][T14521] ? __pfx_sock_do_ioctl+0x10/0x10 [ 561.433680][T14521] sock_ioctl+0x576/0x790 [ 561.433702][T14521] ? __pfx_sock_ioctl+0x10/0x10 [ 561.433732][T14521] ? __fget_files+0x3a0/0x420 [ 561.433753][T14521] ? __fget_files+0x2a/0x420 [ 561.433777][T14521] ? bpf_lsm_file_ioctl+0x9/0x20 [ 561.433802][T14521] ? __pfx_sock_ioctl+0x10/0x10 [ 561.433822][T14521] __se_sys_ioctl+0xfc/0x170 [ 561.433841][T14521] do_syscall_64+0xfa/0xfa0 [ 561.433858][T14521] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.433877][T14521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.433894][T14521] ? clear_bhb_loop+0x60/0xb0 [ 561.433916][T14521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.433934][T14521] RIP: 0033:0x7f353bb8efc9 [ 561.433950][T14521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.433965][T14521] RSP: 002b:00007f353ca42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.433984][T14521] RAX: ffffffffffffffda RBX: 00007f353bde5fa0 RCX: 00007f353bb8efc9 [ 561.433998][T14521] RDX: 0000200000000380 RSI: 0000000000008933 RDI: 0000000000000003 [ 561.434010][T14521] RBP: 00007f353ca42090 R08: 0000000000000000 R09: 0000000000000000 [ 561.434021][T14521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.434033][T14521] R13: 00007f353bde6038 R14: 00007f353bde5fa0 R15: 00007f353bf0fa28 [ 561.434063][T14521] [ 562.298350][T14528] vivid-007: ================= START STATUS ================= [ 562.306199][T14528] vivid-007: Enable Output Cropping: true [ 562.312139][T14528] vivid-007: Enable Output Composing: true [ 562.318191][T14528] vivid-007: Enable Output Scaler: true [ 562.323823][T14528] vivid-007: Tx RGB Quantization Range: Automatic [ 562.330974][T14528] vivid-007: Transmit Mode: HDMI [ 562.336015][T14528] vivid-007: Hotplug Present: 0x00000000 [ 562.341921][T14528] vivid-007: RxSense Present: 0x00000000 [ 562.347734][T14528] vivid-007: EDID Present: 0x00000000 [ 562.353185][T14528] vivid-007: ================== END STATUS ================== [ 562.653002][ T24] usb 3-1: probing VID:PID(0424:012C) [ 562.663590][ T24] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 562.670689][ T24] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 562.680717][ T24] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 562.712343][ T24] usb 3-1: USB disconnect, device number 116 [ 562.737524][ T5888] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 562.810557][T14537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2631'. [ 562.849368][T14539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.865592][T14537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2631'. [ 562.873237][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.881285][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.095838][T14543] geneve3: entered promiscuous mode [ 563.102998][ T5888] usb 5-1: config 0 has no interfaces? [ 563.165911][T14543] geneve3: entered allmulticast mode [ 563.208200][ T5888] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 563.217282][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.217885][T14547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2634'. [ 563.251165][ T5888] usb 5-1: Product: syz [ 563.257061][ T5888] usb 5-1: Manufacturer: syz [ 563.262028][ T5888] usb 5-1: SerialNumber: syz [ 563.290177][ T5888] usb 5-1: config 0 descriptor?? [ 563.953752][T14556] tipc: Started in network mode [ 563.958846][T14556] tipc: Node identity , cluster identity 4711 [ 563.965648][T14556] tipc: Failed to obtain node identity [ 563.971573][T14556] tipc: Enabling of bearer rejected, failed to enable media [ 563.991726][T14556] syzkaller0: entered promiscuous mode [ 564.000467][T14556] syzkaller0: entered allmulticast mode [ 564.183412][T14560] x_tables: ip_tables: osf match: only valid for protocol 6 [ 564.476651][T14568] loop6: detected capacity change from 0 to 7 [ 564.485733][ T6041] Dev loop6: unable to read RDB block 7 [ 564.496028][ T6041] loop6: AHDI p1 p2 p3 [ 564.501761][ T6041] loop6: partition table partially beyond EOD, truncated [ 564.510678][ T6041] loop6: p1 start 4217409618 is beyond EOD, truncated [ 564.517982][ T6041] loop6: p2 size 108 extends beyond EOD, truncated [ 564.531285][T14568] Dev loop6: unable to read RDB block 7 [ 564.537292][T14568] loop6: AHDI p1 p2 p3 [ 564.545105][T14568] loop6: partition table partially beyond EOD, truncated [ 564.554208][T14568] loop6: p1 start 4217409618 is beyond EOD, truncated [ 564.562124][T14568] loop6: p2 size 108 extends beyond EOD, truncated [ 564.651381][ T6041] udevd[6041]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 564.747994][ T5888] usb 5-1: USB disconnect, device number 82 [ 564.845079][ T6041] udevd[6041]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 564.978831][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2643'. [ 565.238493][T14579] geneve4: entered promiscuous mode [ 565.244037][T14579] geneve4: entered allmulticast mode [ 565.396965][T14586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2647'. [ 565.478103][T14588] loop6: detected capacity change from 0 to 7 [ 565.511408][T14588] Dev loop6: unable to read RDB block 7 [ 565.517022][T14588] loop6: AHDI p1 p2 p3 [ 565.558791][T14588] loop6: partition table partially beyond EOD, truncated [ 565.566051][T14588] loop6: p1 start 4217409618 is beyond EOD, truncated [ 565.627807][T14588] loop6: p2 size 108 extends beyond EOD, truncated [ 565.801485][T14594] netlink: 'syz.3.2650': attribute type 27 has an invalid length. [ 566.382580][T14594] bridge0: port 4(macsec0) entered disabled state [ 566.389559][T14594] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.396952][T14594] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.410382][ T6041] udevd[6041]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 566.572652][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 566.605313][T14594] batman_adv: batadv0: Interface deactivated: dummy0 [ 566.714832][T14594] veth0_to_team: left promiscuous mode [ 566.741589][T14594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.926953][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 566.941495][T14594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.948253][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.987757][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.002648][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 567.014029][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.034444][ T24] usb 2-1: config 0 descriptor?? [ 567.126399][T14594] macvlan1: left allmulticast mode [ 567.164134][T14594] veth1_macvtap: left allmulticast mode [ 567.214545][T14594] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 567.229026][T14594] bridge1: left allmulticast mode [ 567.242187][T14594] geneve2: left promiscuous mode [ 567.250782][T14594] geneve2: left allmulticast mode [ 567.260915][T14594] bridge3: left promiscuous mode [ 567.265894][T14594] bridge3: left allmulticast mode [ 567.271732][T14609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.282437][T14609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.289936][T14594] vlan3: left promiscuous mode [ 567.295469][T14594] bridge0: left promiscuous mode [ 567.301978][T14594] vlan3: left allmulticast mode [ 567.306873][T14594] bridge0: left allmulticast mode [ 567.314019][T14594] macvlan2: left promiscuous mode [ 567.342514][ T6737] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.351992][ T6737] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 567.381805][ T6737] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.397307][ T6737] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 567.408446][ T6737] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.418590][ T6737] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 567.435193][ T6737] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.444397][ T6737] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 567.536773][ T24] logitech 0003:046D:C286.0011: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0 [ 567.556748][ T24] logitech 0003:046D:C286.0011: no inputs found [ 567.707966][ T24] usb 2-1: USB disconnect, device number 105 [ 567.847295][T14628] geneve3: entered promiscuous mode [ 567.877630][T14628] geneve3: entered allmulticast mode [ 568.027350][T14634] loop2: detected capacity change from 0 to 7 [ 568.041863][ T6041] Dev loop2: unable to read RDB block 7 [ 568.050092][ T6041] loop2: unable to read partition table [ 568.055987][ T6041] loop2: partition table beyond EOD, truncated [ 568.064767][T14634] Dev loop2: unable to read RDB block 7 [ 568.073289][T14634] loop2: unable to read partition table [ 568.447872][T14634] loop2: partition table beyond EOD, truncated [ 568.457647][T14634] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 568.938501][T14644] FAULT_INJECTION: forcing a failure. [ 568.938501][T14644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.957558][T14644] CPU: 1 UID: 0 PID: 14644 Comm: syz.3.2665 Not tainted syzkaller #0 PREEMPT(full) [ 568.957589][T14644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 568.957599][T14644] Call Trace: [ 568.957608][T14644] [ 568.957616][T14644] dump_stack_lvl+0x189/0x250 [ 568.957638][T14644] ? __pfx____ratelimit+0x10/0x10 [ 568.957662][T14644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.957679][T14644] ? __pfx__printk+0x10/0x10 [ 568.957702][T14644] should_fail_ex+0x414/0x560 [ 568.957732][T14644] _copy_to_user+0x31/0xb0 [ 568.957799][T14644] copy_to_sockptr+0x5e/0xa0 [ 568.957821][T14644] do_ipv6_getsockopt+0x13ec/0x2300 [ 568.957852][T14644] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 568.957875][T14644] ? aa_label_sk_perm+0x4cd/0x630 [ 568.957934][T14644] ? __lock_acquire+0xab9/0xd20 [ 568.957971][T14644] ipv6_getsockopt+0xbd/0x290 [ 568.958061][T14644] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 568.958083][T14644] ? sock_common_getsockopt+0x2d/0xb0 [ 568.958104][T14644] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 568.958127][T14644] do_sock_getsockopt+0x372/0x450 [ 568.958156][T14644] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 568.958182][T14644] ? do_syscall_64+0xa0/0xfa0 [ 568.958200][T14644] ? __fget_files+0x2a/0x420 [ 568.958221][T14644] ? __fget_files+0x3a0/0x420 [ 568.958238][T14644] ? __fget_files+0x2a/0x420 [ 568.958266][T14644] __x64_sys_getsockopt+0x1a5/0x250 [ 568.958292][T14644] ? do_syscall_64+0xa0/0xfa0 [ 568.958312][T14644] ? do_syscall_64+0xa0/0xfa0 [ 568.958334][T14644] do_syscall_64+0xfa/0xfa0 [ 568.958351][T14644] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.958369][T14644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.958388][T14644] ? clear_bhb_loop+0x60/0xb0 [ 568.958408][T14644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.958423][T14644] RIP: 0033:0x7fee9ff8efc9 [ 568.958440][T14644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.958455][T14644] RSP: 002b:00007feea0e19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 568.958474][T14644] RAX: ffffffffffffffda RBX: 00007feea01e5fa0 RCX: 00007fee9ff8efc9 [ 568.958486][T14644] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 568.958497][T14644] RBP: 00007feea0e19090 R08: 0000200000000240 R09: 0000000000000000 [ 568.958509][T14644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.958520][T14644] R13: 00007feea01e6038 R14: 00007feea01e5fa0 R15: 00007feea030fa28 [ 568.958550][T14644] [ 569.217762][ T5830] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 569.407249][T14648] SET target dimension over the limit! [ 569.439724][ T5830] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 569.448885][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.461136][ T5830] usb 2-1: config 0 descriptor?? [ 569.478369][ T5830] cp210x 2-1:0.0: cp210x converter detected [ 569.596513][T14655] program syz.4.2670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.663495][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 569.693409][ T5830] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 569.704374][ T5830] cp210x 2-1:0.0: querying part number failed [ 569.737692][ T5830] usb 2-1: cp210x converter now attached to ttyUSB0 [ 569.873011][T14659] loop9: detected capacity change from 0 to 7 [ 569.880774][T14659] Dev loop9: unable to read RDB block 7 [ 569.903080][T14659] loop9: unable to read partition table [ 569.913170][T14659] loop9: partition table beyond EOD, truncated [ 569.920039][T14612] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 569.924384][T14659] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 570.088334][T14612] usb 5-1: too many configurations: 16, using maximum allowed: 8 [ 570.098697][T14612] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 570.106383][T14612] usb 5-1: can't read configurations, error -61 [ 570.267549][T14612] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 570.418791][T14612] usb 5-1: too many configurations: 16, using maximum allowed: 8 [ 570.431293][T14612] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 570.439668][T14612] usb 5-1: can't read configurations, error -61 [ 570.452180][T14612] usb usb5-port1: attempt power cycle [ 570.480428][T14673] loop6: detected capacity change from 0 to 7 [ 570.494512][T14673] Dev loop6: unable to read RDB block 7 [ 570.500893][T14673] loop6: AHDI p1 p2 p3 [ 570.505531][T14673] loop6: partition table partially beyond EOD, truncated [ 570.514992][T14673] loop6: p1 start 4217409618 is beyond EOD, truncated [ 570.525652][T14673] loop6: p2 size 108 extends beyond EOD, truncated [ 570.592762][ T6041] udevd[6041]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 570.670845][T14675] tipc: Enabling of bearer rejected, failed to enable media [ 570.809452][T14612] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 570.848958][T14612] usb 5-1: too many configurations: 16, using maximum allowed: 8 [ 570.931816][T14612] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 570.942357][T14612] usb 5-1: can't read configurations, error -61 [ 571.064065][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 571.064081][ T30] audit: type=1326 audit(1760884796.410:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14677 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85af38efc9 code=0x7ffc0000 [ 571.085695][T14612] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 571.118768][T14612] usb 5-1: too many configurations: 16, using maximum allowed: 8 [ 571.155787][T14687] loop2: detected capacity change from 0 to 7 [ 571.171810][T14612] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 571.180094][T14612] usb 5-1: can't read configurations, error -61 [ 571.180518][T14687] Dev loop2: unable to read RDB block 7 [ 571.208031][T14612] usb usb5-port1: unable to enumerate USB device [ 571.222976][ T30] audit: type=1326 audit(1760884796.410:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14677 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85af38efc9 code=0x7ffc0000 [ 571.257845][ T30] audit: type=1326 audit(1760884796.480:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14677 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85af38efc9 code=0x7ffc0000 [ 571.277526][T14687] loop2: unable to read partition table [ 571.297071][T14687] loop2: partition table beyond EOD, truncated [ 571.355090][T14687] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 571.370961][T14678] block device autoloading is deprecated and will be removed. [ 571.678287][T14697] SET target dimension over the limit! [ 571.938174][T14703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2684'. [ 572.139963][ T5900] usb 2-1: USB disconnect, device number 106 [ 572.150893][ T5900] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 572.177983][ T5900] cp210x 2-1:0.0: device disconnected [ 572.187837][T14612] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 572.467558][T14612] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.517012][T14612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 572.557562][T14612] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.680661][T14612] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.be [ 572.818066][T14612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.074768][T14716] loop8: detected capacity change from 0 to 8 [ 573.085106][T14612] usb 3-1: Product: syz [ 573.086791][T14716] Dev loop8: unable to read RDB block 8 [ 573.100264][T14716] loop8: unable to read partition table [ 573.106150][T14716] loop8: partition table beyond EOD, truncated [ 573.120573][T14716] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 573.234751][T14612] usb 3-1: Manufacturer: syz [ 573.317460][T14612] usb 3-1: SerialNumber: syz [ 573.329258][T14612] usb 3-1: config 0 descriptor?? [ 573.340335][T14612] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 573.589405][T14703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.779533][T14703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.039042][ T5900] usb 3-1: USB disconnect, device number 117 [ 574.680265][T14730] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2689'. [ 575.675561][T14741] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 575.971681][T14743] fuse: Unknown parameter 'grow[sVK ]Uup_id-00000000000000000000' [ 576.248599][T14747] SET target dimension over the limit! [ 578.087544][ T5830] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 578.268023][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 578.305183][ T5830] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 578.690432][T14782] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 578.700770][T14782] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 578.709646][T14782] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 578.747623][ T5830] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 578.777581][ T5830] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 578.812775][ T5830] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 578.897654][ T5830] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.458094][ T5830] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 579.704813][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.882377][T14791] fuse: Unknown parameter 'grow[sVK ]Uup_id-00000000000000000000' [ 579.909506][ T5830] usb 3-1: can't set config #16, error -71 [ 579.959511][ T5830] usb 3-1: USB disconnect, device number 118 [ 581.032570][T14809] sctp: [Deprecated]: syz.1.2712 (pid 14809) Use of int in maxseg socket option. [ 581.032570][T14809] Use struct sctp_assoc_value instead [ 581.150431][T14810] lo: entered allmulticast mode [ 581.184036][T14816] loop2: detected capacity change from 0 to 7 [ 581.190896][T14816] Dev loop2: unable to read RDB block 7 [ 581.196458][T14816] loop2: unable to read partition table [ 581.233985][T14816] loop2: partition table beyond EOD, truncated [ 581.299300][T14816] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 581.887477][ T985] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 582.101506][T14834] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 582.111060][T14834] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 582.150687][T14834] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 582.248797][ T985] usb 5-1: Using ep0 maxpacket: 8 [ 582.299340][ T985] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 582.324220][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.371063][ T985] usb 5-1: Product: syz [ 582.380533][ T985] usb 5-1: Manufacturer: syz [ 582.393293][ T985] usb 5-1: SerialNumber: syz [ 582.410886][ T985] usb 5-1: config 0 descriptor?? [ 582.434542][ T985] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 582.901235][ T985] gspca_sonixj: reg_w1 err -71 [ 582.957777][ T985] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 582.968808][ T985] usb 5-1: USB disconnect, device number 87 [ 583.207511][ T5918] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 583.464895][T14860] fuse: Bad value for 'fd' [ 583.484032][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 583.498692][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.509925][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.556293][ T5918] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 583.617487][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.647303][ T5918] usb 2-1: config 0 descriptor?? [ 583.678055][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2728'. [ 583.730482][T14866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.810533][T14874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2731'. [ 583.838672][T14874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2731'. [ 584.165689][ T5918] playstation 0003:054C:05C4.0012: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 584.353104][ T5918] playstation 0003:054C:05C4.0012: Failed to retrieve feature with reportID 18: -32 [ 584.354423][T14891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.374054][ T5918] playstation 0003:054C:05C4.0012: Failed to retrieve DualShock4 pairing info: -32 [ 584.395798][T14891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.410520][ T5918] playstation 0003:054C:05C4.0012: Failed to get MAC address from DualShock4 [ 584.463073][ T5918] playstation 0003:054C:05C4.0012: Failed to create dualshock4. [ 584.536372][ T5918] playstation 0003:054C:05C4.0012: probe with driver playstation failed with error -32 [ 584.791073][ T985] usb 2-1: USB disconnect, device number 107 [ 584.864046][T14898] fuse: Unknown parameter 'grow[sVK ]Uup_id-00000000000000000000' [ 585.415340][T14905] loop6: detected capacity change from 0 to 7 [ 585.440484][ T6041] Dev loop6: unable to read RDB block 7 [ 585.446083][ T6041] loop6: AHDI p1 p2 p3 [ 585.504481][ T6041] loop6: partition table partially beyond EOD, truncated [ 585.534975][ T6041] loop6: p1 start 4217409618 is beyond EOD, truncated [ 585.570174][ T6041] loop6: p2 size 108 extends beyond EOD, truncated [ 585.605476][T14905] Dev loop6: unable to read RDB block 7 [ 585.617598][T14905] loop6: AHDI p1 p2 p3 [ 585.631039][T14905] loop6: partition table partially beyond EOD, truncated [ 585.681774][T14905] loop6: p1 start 4217409618 is beyond EOD, truncated [ 585.717065][T14905] loop6: p2 size 108 extends beyond EOD, truncated [ 585.818697][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2741'. [ 585.871824][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2741'. [ 585.912946][ T6041] udevd[6041]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 586.001729][ T6041] udevd[6041]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 587.190108][T14931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.741409][T14944] fuse: Unknown parameter 'grow[sVK ]Uup_id-00000000000000000000' [ 587.849493][T14946] xt_l2tp: wrong L2TP version: 7 [ 587.896392][T14946] xt_l2tp: wrong L2TP version: 7 [ 588.479425][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 588.510747][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.528738][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.565651][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.600517][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.639705][T14969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2759'. [ 588.650136][T14969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2759'. [ 588.650500][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 588.687668][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.699190][ T9] usb 2-1: config 0 descriptor?? [ 588.822604][T14974] fuse: Unknown parameter 'grow[sVK ]Uup_id-00000000000000000000' [ 588.931022][ T9] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 588.952549][T14984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2762'. [ 588.958322][ T9] usb 2-1: USB disconnect, device number 108 [ 588.989560][T14983] xt_TCPMSS: Only works on TCP SYN packets [ 589.235831][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'. [ 589.347542][ T985] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 589.457487][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 589.517652][ T985] usb 4-1: Using ep0 maxpacket: 32 [ 589.540599][ T985] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 589.634082][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 589.857069][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.865281][ T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.875762][ T985] usb 4-1: Product: syz [ 589.881251][ T9] usb 2-1: config 0 descriptor?? [ 589.887748][ T985] usb 4-1: Manufacturer: syz [ 590.121215][ T985] usb 4-1: SerialNumber: syz [ 590.131170][ T985] usb 4-1: config 0 descriptor?? [ 590.357553][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2764'. [ 590.392314][T14989] veth0: entered promiscuous mode [ 590.413214][T14989] veth0: left promiscuous mode [ 590.532500][T14986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.553550][T14986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.565420][ T9] usb 2-1: Cannot set autoneg [ 590.571058][ T9] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 590.595328][ T985] usb 4-1: USB disconnect, device number 109 [ 590.653513][ T9] usb 2-1: USB disconnect, device number 109 [ 591.257945][T15018] netlink: 'syz.2.2770': attribute type 25 has an invalid length. [ 591.316348][T15018] netlink: 'syz.2.2770': attribute type 7 has an invalid length. [ 591.805992][T15029] qrtr: Invalid version 25 [ 592.431884][ T30] audit: type=1326 audit(1760884817.780:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 592.472851][T15036] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 592.481309][T15036] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 592.497864][T15036] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 592.532292][ T30] audit: type=1326 audit(1760884817.810:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 592.565414][ T30] audit: type=1326 audit(1760884817.810:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 592.593338][ T30] audit: type=1326 audit(1760884817.810:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 592.630590][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.680487][ T30] audit: type=1326 audit(1760884817.810:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 592.723223][T15044] x_tables: ip_tables: osf match: only valid for protocol 6 [ 592.735348][ T30] audit: type=1326 audit(1760884817.810:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 592.770533][ T30] audit: type=1326 audit(1760884817.810:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 592.792889][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.906266][ T30] audit: type=1326 audit(1760884817.810:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 592.928642][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.976369][ T30] audit: type=1326 audit(1760884817.810:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 593.217414][ T30] audit: type=1326 audit(1760884817.810:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.3.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 593.496459][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2783'. [ 593.576913][T15059] loop6: detected capacity change from 0 to 7 [ 593.586878][T15059] Dev loop6: unable to read RDB block 7 [ 593.606646][T15059] loop6: AHDI p1 p2 p3 [ 593.624654][T15059] loop6: partition table partially beyond EOD, truncated [ 593.643224][T15059] loop6: p1 start 4217409618 is beyond EOD, truncated [ 593.652861][T15059] loop6: p2 size 108 extends beyond EOD, truncated [ 593.704068][T15061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2788'. [ 593.731154][ T6041] udevd[6041]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 593.765908][T15061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2788'. [ 593.838171][ T5830] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 593.997869][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 594.029454][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 594.225556][ T5830] usb 3-1: config 1 has an invalid interface number: 26 but max is 0 [ 594.234289][ T5830] usb 3-1: config 1 has no interface number 0 [ 594.330905][ T5830] usb 3-1: config 1 interface 26 has no altsetting 0 [ 594.435297][ T5830] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 594.445364][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.453420][ T5830] usb 3-1: Product: syz [ 594.457816][ T5830] usb 3-1: Manufacturer: syz [ 594.462427][ T5830] usb 3-1: SerialNumber: syz [ 594.705321][T15056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2784'. [ 594.798952][ T5830] usb 3-1: unknown interface protocol 0x7d, assuming v1 [ 594.805943][ T5830] usb 3-1: cannot find UAC_HEADER [ 594.929857][ T5830] snd-usb-audio 3-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 595.021414][ T5830] usb 3-1: USB disconnect, device number 119 [ 595.212723][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.260024][T15084] fuse: Unknown parameter 'f' [ 595.527643][T14612] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 595.898517][T14612] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 595.909037][T14612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.988441][T14612] usb 5-1: Product: syz [ 595.992762][T14612] usb 5-1: Manufacturer: syz [ 595.999794][T14612] usb 5-1: SerialNumber: syz [ 596.292580][T14612] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 596.498282][ T5918] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 597.164873][T15084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.179463][T15084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.236613][T15084] fuse: Bad value for 'user_id' [ 597.338741][T15084] fuse: Bad value for 'user_id' [ 597.681946][ T5900] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 597.848624][ T5918] usb 5-1: Service connection timeout for: 256 [ 597.858118][ T5918] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 597.882037][T14612] usb 5-1: USB disconnect, device number 88 [ 597.893302][ T5918] ath9k_htc: Failed to initialize the device [ 597.904131][T14612] usb 5-1: ath9k_htc: USB layer deinitialized [ 598.117535][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 598.168944][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 598.179017][ T5900] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 598.335751][T15109] loop2: detected capacity change from 0 to 7 [ 598.368605][ T5843] Dev loop2: unable to read RDB block 7 [ 598.374284][ T5843] loop2: unable to read partition table [ 598.384076][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 598.403728][ T5843] loop2: partition table beyond EOD, truncated [ 598.419440][ T5900] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 598.459340][ T5900] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 598.468665][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.517658][T15109] Dev loop2: unable to read RDB block 7 [ 598.525971][T15109] loop2: unable to read partition table [ 598.539445][T15109] loop2: partition table beyond EOD, truncated [ 598.552172][ T5900] usb 2-1: Product: syz [ 598.556545][T15109] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 598.580398][ T5900] usb 2-1: Manufacturer: syz [ 598.585034][ T5900] usb 2-1: SerialNumber: syz [ 598.609876][ T5900] usb 2-1: config 0 descriptor?? [ 598.625266][ T5900] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 598.645092][ T5900] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 598.781622][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2802'. [ 598.824348][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2802'. [ 599.066946][T15122] x_tables: ip_tables: osf match: only valid for protocol 6 [ 599.327508][ T5918] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 599.623249][ T5918] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 599.838287][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.847499][ T5918] usb 3-1: Product: syz [ 599.851727][ T5918] usb 3-1: Manufacturer: syz [ 599.856326][ T5918] usb 3-1: SerialNumber: syz [ 599.985719][T15137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2809'. [ 600.109433][T15138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.353100][T14612] usb 2-1: USB disconnect, device number 110 [ 600.369781][T14612] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 600.392975][T14612] omninet 2-1:0.0: device disconnected [ 600.469329][T15144] loop6: detected capacity change from 0 to 7 [ 600.487138][T15144] Dev loop6: unable to read RDB block 7 [ 600.495239][T15144] loop6: AHDI p1 p2 p3 [ 600.500098][T15144] loop6: partition table partially beyond EOD, truncated [ 600.510362][T15144] loop6: p1 start 4217409618 is beyond EOD, truncated [ 600.529752][T15144] loop6: p2 size 108 extends beyond EOD, truncated [ 600.615980][ T6103] udevd[6103]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 600.799153][T15153] x_tables: ip_tables: osf match: only valid for protocol 6 [ 600.825730][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2812'. [ 600.864763][T15147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.117540][ T985] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 601.269429][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.280612][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.291456][ T985] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 601.301831][ T985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.336945][ T985] usb 4-1: config 0 descriptor?? [ 601.482038][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 601.739749][T15167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2818'. [ 601.753576][T15167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2818'. [ 602.219235][T14612] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 602.482079][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 602.504616][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 602.537543][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 602.560524][ T985] hid-led 0003:27B8:01ED.0013: probe with driver hid-led failed with error -71 [ 602.581555][ T985] usb 4-1: USB disconnect, device number 110 [ 602.618291][T14612] usb 2-1: Using ep0 maxpacket: 8 [ 602.626435][T14612] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 602.640228][T14612] usb 2-1: config 0 has no interface number 0 [ 602.666497][T14612] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 602.680733][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 602.703852][T14612] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 602.718486][ T5918] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 602.948241][T14612] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 602.999056][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 602.999073][ T30] audit: type=1326 audit(1760884828.250:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.3.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7fc00000 [ 603.102391][ T5918] usb 3-1: USB disconnect, device number 120 [ 603.114104][T14612] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 603.156976][ T30] audit: type=1326 audit(1760884828.250:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.3.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fee9ff8efc9 code=0x7fc00000 [ 603.182291][T14612] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 603.220670][T14612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.229575][ T30] audit: type=1326 audit(1760884828.250:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.3.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7fc00000 [ 603.251918][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.258362][ T30] audit: type=1326 audit(1760884828.250:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.3.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7fc00000 [ 603.282932][T14612] usb 2-1: config 0 descriptor?? [ 603.289428][ T30] audit: type=1326 audit(1760884828.250:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.3.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7fc00000 [ 603.455303][T14612] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 603.521567][ T30] audit: type=1326 audit(1760884828.250:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.3.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7fc00000 [ 603.603153][T14612] usb 2-1: USB disconnect, device number 111 [ 603.660904][ T30] audit: type=1326 audit(1760884828.250:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.3.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7fc00000 [ 603.690306][ T30] audit: type=1326 audit(1760884828.250:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.3.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7fc00000 [ 603.716752][ T30] audit: type=1326 audit(1760884828.250:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.3.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7fc00000 [ 603.717120][T14612] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 603.739183][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.796845][ T30] audit: type=1326 audit(1760884828.250:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.3.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7fc00000 [ 603.986616][T15197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2826'. [ 604.384847][T14612] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 604.567476][T14612] usb 4-1: Using ep0 maxpacket: 32 [ 604.581490][T14612] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 604.590819][T14612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.599216][T14612] usb 4-1: Product: syz [ 604.607686][T14612] usb 4-1: Manufacturer: syz [ 604.612275][T14612] usb 4-1: SerialNumber: syz [ 604.670096][T14612] usb 4-1: config 0 descriptor?? [ 604.677614][ T5918] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 605.079384][ T5918] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.137692][ T5918] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 605.187202][ T5918] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 605.232393][ T5918] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 605.272863][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.331860][T15206] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 605.371888][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2828'. [ 605.401795][T15201] veth0: entered promiscuous mode [ 605.410735][T15201] veth0: left promiscuous mode [ 605.435665][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2832'. [ 605.493830][ T9] usb 4-1: USB disconnect, device number 111 [ 605.577551][ T5900] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 605.739176][ T5900] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 605.751344][ T5900] usb 5-1: config 0 interface 0 has no altsetting 0 [ 605.758713][ T5900] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 605.768193][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.780064][ T5900] usb 5-1: config 0 descriptor?? [ 605.785906][T15217] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 605.797538][T14612] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 605.949651][T14612] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.960130][T14612] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.973021][T14612] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.982763][T14612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.992453][T14612] usb 3-1: Product: syz [ 605.996920][T14612] usb 3-1: Manufacturer: syz [ 606.002349][T14612] usb 3-1: SerialNumber: syz [ 606.152062][T15231] x_tables: ip_tables: osf match: only valid for protocol 6 [ 606.218887][ T5900] usbhid 5-1:0.0: can't add hid device: -71 [ 606.226899][ T5900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 606.251491][T14612] usb 3-1: 0:2 : does not exist [ 606.273763][T14612] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 606.283610][ T5900] usb 5-1: USB disconnect, device number 89 [ 606.311901][T14612] usb 3-1: USB disconnect, device number 121 [ 606.384057][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.578394][ T6734] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 607.220821][ T5918] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 607.275071][ T5918] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input58 [ 607.331228][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 607.349027][ T5918] usb 2-1: USB disconnect, device number 112 [ 607.709024][T15264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2847'. [ 608.564452][T15274] FAULT_INJECTION: forcing a failure. [ 608.564452][T15274] name failslab, interval 1, probability 0, space 0, times 0 [ 608.578173][T15274] CPU: 1 UID: 0 PID: 15274 Comm: syz.1.2851 Not tainted syzkaller #0 PREEMPT(full) [ 608.578189][T15274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 608.578196][T15274] Call Trace: [ 608.578200][T15274] [ 608.578206][T15274] dump_stack_lvl+0x189/0x250 [ 608.578223][T15274] ? __pfx____ratelimit+0x10/0x10 [ 608.578240][T15274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.578250][T15274] ? __pfx__printk+0x10/0x10 [ 608.578263][T15274] ? __pfx___might_resched+0x10/0x10 [ 608.578277][T15274] ? fs_reclaim_acquire+0x7d/0x100 [ 608.578292][T15274] should_fail_ex+0x414/0x560 [ 608.578310][T15274] should_failslab+0xa8/0x100 [ 608.578324][T15274] kmem_cache_alloc_node_noprof+0x77/0x710 [ 608.578335][T15274] ? dup_task_struct+0x52/0x830 [ 608.578352][T15274] dup_task_struct+0x52/0x830 [ 608.578373][T15274] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.578386][T15274] copy_process+0x54b/0x3c00 [ 608.578414][T15274] ? __pfx_copy_process+0x10/0x10 [ 608.578434][T15274] vhost_task_create+0x1ce/0x320 [ 608.578445][T15274] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 608.578456][T15274] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 608.578467][T15274] ? __pfx_vhost_task_create+0x10/0x10 [ 608.578481][T15274] ? __pfx_vhost_task_fn+0x10/0x10 [ 608.578501][T15274] kvm_mmu_post_init_vm+0x14c/0x300 [ 608.578514][T15274] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 608.578529][T15274] ? __mutex_trylock_common+0x153/0x260 [ 608.578545][T15274] ? __pfx___mutex_trylock_common+0x10/0x10 [ 608.578559][T15274] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 608.578571][T15274] ? rcu_is_watching+0x15/0xb0 [ 608.578585][T15274] ? trace_contention_end+0x39/0x120 [ 608.578599][T15274] ? look_up_lock_class+0x74/0x170 [ 608.578610][T15274] ? register_lock_class+0x51/0x320 [ 608.578625][T15274] ? __lock_acquire+0xab9/0xd20 [ 608.578652][T15274] kvm_vcpu_ioctl+0x95c/0xe90 [ 608.578668][T15274] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 608.578690][T15274] ? __fget_files+0x2a/0x420 [ 608.578704][T15274] ? __fget_files+0x3a0/0x420 [ 608.578715][T15274] ? __fget_files+0x2a/0x420 [ 608.578728][T15274] ? bpf_lsm_file_ioctl+0x9/0x20 [ 608.578742][T15274] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 608.578752][T15274] __se_sys_ioctl+0xfc/0x170 [ 608.578763][T15274] do_syscall_64+0xfa/0xfa0 [ 608.578773][T15274] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.578783][T15274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.578792][T15274] ? clear_bhb_loop+0x60/0xb0 [ 608.578804][T15274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.578814][T15274] RIP: 0033:0x7f3de778efc9 [ 608.578825][T15274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.578834][T15274] RSP: 002b:00007f3de856c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.578845][T15274] RAX: ffffffffffffffda RBX: 00007f3de79e5fa0 RCX: 00007f3de778efc9 [ 608.578853][T15274] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 608.578859][T15274] RBP: 00007f3de856c090 R08: 0000000000000000 R09: 0000000000000000 [ 608.578865][T15274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.578871][T15274] R13: 00007f3de79e6038 R14: 00007f3de79e5fa0 R15: 00007f3de7b0fa28 [ 608.578888][T15274] [ 608.587584][ T9] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 608.677648][ T5918] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 609.207488][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 609.228009][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 609.247024][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 609.258593][ T9] usb 5-1: config 1 has an invalid interface number: 26 but max is 0 [ 609.267089][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 609.277006][ T9] usb 5-1: config 1 has no interface number 0 [ 609.283334][ T9] usb 5-1: config 1 interface 26 has no altsetting 0 [ 609.296967][ T5918] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 609.303955][T15277] input: syz1 as /devices/virtual/input/input60 [ 609.316061][ T9] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 609.325236][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.333487][ T9] usb 5-1: Product: syz [ 609.337684][ T9] usb 5-1: Manufacturer: syz [ 609.342258][ T9] usb 5-1: SerialNumber: syz [ 609.454776][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.481080][ T5918] usb 4-1: config 0 descriptor?? [ 609.692826][ T5918] ath6kl: Failed to submit usb control message: -71 [ 609.704975][ T5918] ath6kl: unable to send the bmi data to the device: -71 [ 609.713213][ T5918] ath6kl: Unable to send get target info: -71 [ 609.721488][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2848'. [ 609.783225][ T5918] ath6kl: Failed to init ath6kl core: -71 [ 609.796840][ T5918] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 609.818491][T15268] vlan0: entered promiscuous mode [ 609.951069][ T5918] usb 4-1: USB disconnect, device number 112 [ 610.167660][T15287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2855'. [ 610.209776][T15288] xt_TCPMSS: Only works on TCP SYN packets [ 610.350996][ T9] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 610.358137][ T9] usb 5-1: cannot find UAC_HEADER [ 610.379167][ T9] snd-usb-audio 5-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 610.395189][ T9] usb 5-1: USB disconnect, device number 90 [ 610.536127][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.747818][ T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 611.859779][T15311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2863'. [ 611.944873][T15311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2863'. [ 611.949841][ T9] usb 3-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 612.008852][ T9] usb 3-1: config 48 interface 0 altsetting 98 bulk endpoint 0x9 has invalid maxpacket 1024 [ 612.019609][ T9] usb 3-1: config 48 interface 0 has no altsetting 0 [ 612.033769][ T9] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 612.043278][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.099656][ T9] usb 3-1: Product: syz [ 612.104243][ T9] usb 3-1: Manufacturer: syz [ 612.109024][ T9] usb 3-1: SerialNumber: syz [ 612.117933][T15304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 612.125466][T15304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 612.175485][T15313] x_tables: ip_tables: osf match: only valid for protocol 6 [ 612.410284][ T9] usb 3-1: USB disconnect, device number 122 [ 612.795389][T15332] geneve4: entered promiscuous mode [ 612.872117][T15332] geneve4: entered allmulticast mode [ 612.878158][T15327] block device autoloading is deprecated and will be removed. [ 613.457537][ T5918] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 613.577535][ T5900] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 613.824699][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 613.832524][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 613.842585][ T5918] usb 3-1: config 1 has an invalid interface number: 26 but max is 0 [ 613.851761][ T5918] usb 3-1: config 1 has no interface number 0 [ 613.858266][ T5918] usb 3-1: config 1 interface 26 has no altsetting 0 [ 613.873890][ T5918] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 613.883464][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.892556][ T5918] usb 3-1: Product: syz [ 613.897026][ T5918] usb 3-1: Manufacturer: syz [ 613.902116][ T5918] usb 3-1: SerialNumber: syz [ 613.988364][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 613.999207][ T5900] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 614.008898][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.017704][ T5900] usb 5-1: Product: syz [ 614.022938][ T5900] usb 5-1: Manufacturer: syz [ 614.027890][ T5900] usb 5-1: SerialNumber: syz [ 614.046347][ T5900] usb 5-1: config 0 descriptor?? [ 614.057052][ T5900] empeg 5-1:0.0: empeg converter detected [ 614.063765][ T5900] usb 5-1: active config #0 != 1 ?? [ 614.134895][ T5918] usb 3-1: unknown interface protocol 0x7d, assuming v1 [ 614.146321][ T5918] usb 3-1: cannot find UAC_HEADER [ 614.177830][ T5918] snd-usb-audio 3-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 614.221346][ T5918] usb 3-1: USB disconnect, device number 123 [ 614.260903][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.341818][T15345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.356186][T15345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.400545][ T5900] usb 5-1: USB disconnect, device number 91 [ 614.643598][T15351] lo: Caught tx_queue_len zero misconfig [ 614.653611][T15351] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 614.997558][ T5918] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 615.148169][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 615.166140][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 615.176650][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 615.185823][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 615.213442][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 615.221814][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 615.229302][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 615.245913][ T5918] usb 3-1: config 1 has an invalid interface number: 26 but max is 0 [ 615.254247][ T5918] usb 3-1: config 1 has no interface number 0 [ 615.270143][ T5918] usb 3-1: config 1 interface 26 has no altsetting 0 [ 615.280765][ T5918] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 615.290267][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.298430][ T5918] usb 3-1: Product: syz [ 615.302749][ T5918] usb 3-1: Manufacturer: syz [ 615.309214][ T5918] usb 3-1: SerialNumber: syz [ 615.314222][T15358] FAULT_INJECTION: forcing a failure. [ 615.314222][T15358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 615.332341][T15358] CPU: 1 UID: 0 PID: 15358 Comm: syz.1.2878 Not tainted syzkaller #0 PREEMPT(full) [ 615.332367][T15358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 615.332378][T15358] Call Trace: [ 615.332386][T15358] [ 615.332395][T15358] dump_stack_lvl+0x189/0x250 [ 615.332419][T15358] ? __pfx____ratelimit+0x10/0x10 [ 615.332447][T15358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.332466][T15358] ? __pfx__printk+0x10/0x10 [ 615.332487][T15358] ? fs_reclaim_acquire+0x7d/0x100 [ 615.332517][T15358] should_fail_ex+0x414/0x560 [ 615.332550][T15358] prepare_alloc_pages+0x213/0x610 [ 615.332580][T15358] __alloc_frozen_pages_noprof+0x123/0x370 [ 615.332607][T15358] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 615.332640][T15358] ? policy_nodemask+0x27c/0x720 [ 615.332667][T15358] alloc_pages_mpol+0x232/0x4a0 [ 615.332695][T15358] vma_alloc_folio_noprof+0xe4/0x200 [ 615.332720][T15358] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 615.332756][T15358] folio_prealloc+0x30/0x180 [ 615.332785][T15358] do_wp_page+0x1231/0x5800 [ 615.332826][T15358] ? __pfx_do_wp_page+0x10/0x10 [ 615.332841][T15358] ? do_raw_spin_lock+0x121/0x290 [ 615.332864][T15358] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 615.332894][T15358] __handle_mm_fault+0x1033/0x5400 [ 615.332929][T15358] ? __pfx___handle_mm_fault+0x10/0x10 [ 615.332968][T15358] ? find_vma+0xe7/0x160 [ 615.332986][T15358] ? __pfx_find_vma+0x10/0x10 [ 615.333006][T15358] handle_mm_fault+0x40a/0x8e0 [ 615.333043][T15358] do_user_addr_fault+0x764/0x1380 [ 615.333082][T15358] exc_page_fault+0x82/0x100 [ 615.333105][T15358] asm_exc_page_fault+0x26/0x30 [ 615.333121][T15358] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 615.333144][T15358] Code: 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 35 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 615.333160][T15358] RSP: 0018:ffffc9000260f678 EFLAGS: 00050206 [ 615.333178][T15358] RAX: ffffffff848eac01 RBX: ffff88805eaa00e8 RCX: 00000000000025d0 [ 615.333191][T15358] RDX: 0000000000000000 RSI: ffff88805eaadce8 RDI: 000020000000e000 [ 615.333204][T15358] RBP: ffffc9000260f800 R08: ffff88805eab02b7 R09: 1ffff1100bd56056 [ 615.333218][T15358] R10: dffffc0000000000 R11: ffffed100bd56057 R12: 1ffff920004c1fbf [ 615.333232][T15358] R13: 0000200000000400 R14: ffffc9000260fe08 R15: 00000000000101d0 [ 615.333253][T15358] ? _copy_to_iter+0x131/0x1790 [ 615.333282][T15358] _copy_to_iter+0x24f/0x1790 [ 615.333302][T15358] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 615.333328][T15358] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.333347][T15358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 615.333379][T15358] ? __pfx__copy_to_iter+0x10/0x10 [ 615.333397][T15358] ? remove_wait_queue+0x33/0x120 [ 615.333420][T15358] ? tipc_wait_for_rcvmsg+0x4ea/0x630 [ 615.333452][T15358] __skb_datagram_iter+0xf8/0x990 [ 615.333470][T15358] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 615.333490][T15358] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 615.333509][T15358] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 615.333526][T15358] ? __local_bh_enable_ip+0x12d/0x1c0 [ 615.333555][T15358] skb_copy_datagram_iter+0xc5/0x230 [ 615.333579][T15358] tipc_recvstream+0x72d/0xe70 [ 615.333615][T15358] ? __pfx_tipc_recvstream+0x10/0x10 [ 615.333633][T15358] sock_recvmsg+0x22c/0x270 [ 615.333659][T15358] ____sys_recvmsg+0x1c9/0x460 [ 615.333687][T15358] ? __pfx_____sys_recvmsg+0x10/0x10 [ 615.333722][T15358] ? import_iovec+0x74/0xa0 [ 615.333749][T15358] ___sys_recvmsg+0x1b5/0x510 [ 615.333779][T15358] ? __pfx____sys_recvmsg+0x10/0x10 [ 615.333824][T15358] ? __fget_files+0x3a0/0x420 [ 615.333857][T15358] __x64_sys_recvmsg+0x198/0x260 [ 615.333878][T15358] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 615.333907][T15358] ? __pfx_ksys_write+0x10/0x10 [ 615.333930][T15358] ? do_syscall_64+0xbe/0xfa0 [ 615.333952][T15358] do_syscall_64+0xfa/0xfa0 [ 615.333969][T15358] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.333986][T15358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.334004][T15358] ? clear_bhb_loop+0x60/0xb0 [ 615.334026][T15358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.334042][T15358] RIP: 0033:0x7f3de778efc9 [ 615.334058][T15358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.334072][T15358] RSP: 002b:00007f3de856c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 615.334090][T15358] RAX: ffffffffffffffda RBX: 00007f3de79e5fa0 RCX: 00007f3de778efc9 [ 615.334104][T15358] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 615.334115][T15358] RBP: 00007f3de856c090 R08: 0000000000000000 R09: 0000000000000000 [ 615.334126][T15358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.334138][T15358] R13: 00007f3de79e6038 R14: 00007f3de79e5fa0 R15: 00007f3de7b0fa28 [ 615.334169][T15358] [ 616.010642][ T6734] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 616.022813][ T6734] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 616.063009][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2876'. [ 616.140717][ T5918] usb 3-1: unknown interface protocol 0x7d, assuming v1 [ 616.151293][ T5918] usb 3-1: cannot find UAC_HEADER [ 616.169866][ T5918] snd-usb-audio 3-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 616.180606][ T5918] usb 3-1: USB disconnect, device number 124 [ 616.203605][ T6734] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 616.214614][ T6734] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 616.356983][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.401219][ T6734] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 616.424419][ T6734] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 616.568428][ T48] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 616.612150][ T6734] bond0: (slave netdevsim0): Releasing backup interface [ 616.656645][ T6734] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 616.720726][ T6734] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 616.738122][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 616.755950][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.774999][ T48] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 616.800454][ T6734] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 616.829608][T15376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2884'. [ 616.882096][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.920639][ T48] usb 2-1: config 0 descriptor?? [ 616.964297][ T48] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 617.106564][T15388] x_tables: ip_tables: osf match: only valid for protocol 6 [ 617.155715][T15391] fuse: Bad value for 'rootmode' [ 617.316921][T15391] geneve3: entered allmulticast mode [ 617.347787][ T5839] Bluetooth: hci5: command tx timeout [ 617.451939][ T6734] batman_adv: batadv0: Interface deactivated: gretap1 [ 618.258838][T15372] openvswitch: netlink: IP tunnel dst address not specified [ 618.368666][ T48] gspca_vc032x: reg_w err -71 [ 618.374145][ T48] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 618.680995][ T48] usb 2-1: USB disconnect, device number 113 [ 618.707640][ T6734] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 619.192606][ T6734] batman_adv: batadv0: Removing interface: gretap1 [ 619.335258][T15416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2895'. [ 619.344581][T15416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2895'. [ 619.436723][ T5839] Bluetooth: hci5: command tx timeout [ 619.463419][ T6734] team0: Port device bridge0 removed [ 619.509271][ T6734] team0: Port device bridge1 removed [ 619.667984][ T6734] bond0 (unregistering): Released all slaves [ 619.775381][ T6734] bond1 (unregistering): Released all slaves [ 619.897656][ T6734] team0: Port device bond2 removed [ 619.904130][ T6734] bond2 (unregistering): Released all slaves [ 620.060252][T15364] chnl_net:caif_netlink_parms(): no params data found [ 620.076904][ T6734] tipc: Left network mode [ 620.481487][T15441] netlink: 'syz.0.2899': attribute type 21 has an invalid length. [ 620.541838][T15442] netlink: 'syz.0.2899': attribute type 21 has an invalid length. [ 620.717631][T15448] input: syz1 as /devices/virtual/input/input61 [ 620.764175][T15441] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2899'. [ 620.979745][T15442] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2899'. [ 621.154268][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 621.154288][ T30] audit: type=1326 audit(1760884846.180:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15449 comm="syz.3.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 621.183050][ T30] audit: type=1326 audit(1760884846.190:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15449 comm="syz.3.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 621.209196][ T30] audit: type=1326 audit(1760884846.190:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15449 comm="syz.3.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 621.334221][ T30] audit: type=1326 audit(1760884846.190:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15449 comm="syz.3.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 621.405146][T15453] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 621.438999][T15364] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.446482][T15453] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 621.457736][T15364] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.474689][T15453] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 621.484499][T15364] bridge_slave_0: entered allmulticast mode [ 621.492999][ T30] audit: type=1326 audit(1760884846.190:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15449 comm="syz.3.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 621.515783][ T5839] Bluetooth: hci5: command tx timeout [ 621.528960][T15364] bridge_slave_0: entered promiscuous mode [ 621.597634][ T30] audit: type=1326 audit(1760884846.190:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15449 comm="syz.3.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 621.620111][ T30] audit: type=1326 audit(1760884846.190:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15449 comm="syz.3.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 621.631680][T15364] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.650420][ T30] audit: type=1326 audit(1760884846.190:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15449 comm="syz.3.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 621.778167][ T30] audit: type=1326 audit(1760884846.360:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15449 comm="syz.3.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 621.803289][T15364] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.843182][ T30] audit: type=1326 audit(1760884846.360:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15449 comm="syz.3.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ff8efc9 code=0x7ffc0000 [ 621.848894][T15364] bridge_slave_1: entered allmulticast mode [ 622.031287][T15364] bridge_slave_1: entered promiscuous mode [ 622.054740][T15441] [ 622.057081][T15441] ============================================ [ 622.063211][T15441] WARNING: possible recursive locking detected [ 622.069361][T15441] syzkaller #0 Not tainted [ 622.073764][T15441] -------------------------------------------- [ 622.079903][T15441] syz.0.2899/15441 is trying to acquire lock: [ 622.086020][T15441] ffff888057164d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 622.097010][T15441] [ 622.097010][T15441] but task is already holding lock: [ 622.104378][T15441] ffff888057164d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 622.114251][T15441] and the lock comparison function returns 0: [ 622.120304][T15441] [ 622.120304][T15441] other info that might help us debug this: [ 622.128345][T15441] Possible unsafe locking scenario: [ 622.128345][T15441] [ 622.135780][T15441] CPU0 [ 622.139045][T15441] ---- [ 622.142307][T15441] lock(&dev_instance_lock_key#20); [ 622.147585][T15441] lock(&dev_instance_lock_key#20); [ 622.152866][T15441] [ 622.152866][T15441] *** DEADLOCK *** [ 622.152866][T15441] [ 622.160998][T15441] May be due to missing lock nesting notation [ 622.160998][T15441] [ 622.169298][T15441] 2 locks held by syz.0.2899/15441: [ 622.174476][T15441] #0: ffffffff8f4de608 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 622.183436][T15441] #1: ffff888057164d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 622.193695][T15441] [ 622.193695][T15441] stack backtrace: [ 622.199569][T15441] CPU: 1 UID: 0 PID: 15441 Comm: syz.0.2899 Not tainted syzkaller #0 PREEMPT(full) [ 622.199588][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 622.199597][T15441] Call Trace: [ 622.199606][T15441] [ 622.199613][T15441] dump_stack_lvl+0x189/0x250 [ 622.199632][T15441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.199647][T15441] ? __pfx__printk+0x10/0x10 [ 622.199660][T15441] ? is_bpf_text_address+0x26/0x2b0 [ 622.199681][T15441] ? print_lock_name+0xde/0x100 [ 622.199696][T15441] print_deadlock_bug+0x28b/0x2a0 [ 622.199717][T15441] validate_chain+0x1a3f/0x2140 [ 622.199737][T15441] ? stack_trace_save+0x9c/0xe0 [ 622.199750][T15441] ? __pfx_stack_trace_save+0x10/0x10 [ 622.199764][T15441] ? stack_depot_save_flags+0x40/0x860 [ 622.199780][T15441] __lock_acquire+0xab9/0xd20 [ 622.199798][T15441] ? __netdev_update_features+0xcb1/0x1be0 [ 622.199813][T15441] lock_acquire+0x120/0x360 [ 622.199829][T15441] ? __netdev_update_features+0xcb1/0x1be0 [ 622.199847][T15441] __mutex_lock+0x187/0x1350 [ 622.199863][T15441] ? __netdev_update_features+0xcb1/0x1be0 [ 622.199884][T15441] ? __lock_acquire+0xab9/0xd20 [ 622.199902][T15441] ? __netdev_update_features+0xcb1/0x1be0 [ 622.199917][T15441] ? __pfx___mutex_lock+0x10/0x10 [ 622.199938][T15441] __netdev_update_features+0xcb1/0x1be0 [ 622.199958][T15441] ? __pfx___netdev_update_features+0x10/0x10 [ 622.199973][T15441] ? __lock_acquire+0xab9/0xd20 [ 622.199992][T15441] ? __lock_acquire+0xab9/0xd20 [ 622.200015][T15441] netdev_change_features+0x72/0xd0 [ 622.200029][T15441] ? __pfx_netdev_change_features+0x10/0x10 [ 622.200043][T15441] ? __team_compute_features+0x23/0x4c0 [ 622.200063][T15441] ? __team_compute_features+0x488/0x4c0 [ 622.200082][T15441] ? __team_compute_features+0x23/0x4c0 [ 622.200102][T15441] team_device_event+0x400/0x600 [ 622.200116][T15441] notifier_call_chain+0x1b6/0x3e0 [ 622.200138][T15441] netdev_features_change+0x85/0xc0 [ 622.200156][T15441] ? __pfx_netdev_features_change+0x10/0x10 [ 622.200173][T15441] ? security_capable+0x7e/0x2e0 [ 622.200189][T15441] dev_ethtool+0x1541/0x19c0 [ 622.200206][T15441] ? __pfx_dev_ethtool+0x10/0x10 [ 622.200224][T15441] ? dev_load+0x21/0x1f0 [ 622.200242][T15441] dev_ioctl+0x392/0x1150 [ 622.200261][T15441] sock_do_ioctl+0x22c/0x300 [ 622.200278][T15441] ? __pfx_sock_do_ioctl+0x10/0x10 [ 622.200298][T15441] sock_ioctl+0x576/0x790 [ 622.200313][T15441] ? __pfx_sock_ioctl+0x10/0x10 [ 622.200329][T15441] ? __fget_files+0x3a0/0x420 [ 622.200345][T15441] ? __fget_files+0x2a/0x420 [ 622.200362][T15441] ? bpf_lsm_file_ioctl+0x9/0x20 [ 622.200380][T15441] ? __pfx_sock_ioctl+0x10/0x10 [ 622.200394][T15441] __se_sys_ioctl+0xfc/0x170 [ 622.200408][T15441] do_syscall_64+0xfa/0xfa0 [ 622.200422][T15441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.200436][T15441] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 622.200449][T15441] ? clear_bhb_loop+0x60/0xb0 [ 622.200464][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.200477][T15441] RIP: 0033:0x7f85af38efc9 [ 622.200491][T15441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.200503][T15441] RSP: 002b:00007f85b01b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.200519][T15441] RAX: ffffffffffffffda RBX: 00007f85af5e6180 RCX: 00007f85af38efc9 [ 622.200530][T15441] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 000000000000000b [ 622.200540][T15441] RBP: 00007f85af411f91 R08: 0000000000000000 R09: 0000000000000000 [ 622.200549][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.200558][T15441] R13: 00007f85af5e6218 R14: 00007f85af5e6180 R15: 00007f85af70fa28 [ 622.200574][T15441] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 623.587736][ T5839] Bluetooth: hci5: command tx timeout [ 624.309330][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.315642][ T1300] ieee802154 phy1 wpan1: encryption failed: -22