last executing test programs: 16.439843689s ago: executing program 3 (id=1296): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0xc}, {0x0, 0x24}], 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x8, 0x7}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000300)={r1, 0xfffffffe, 0x5, 0x7f, 0x0, [], [0x10, 0x4, 0xf11c, 0x1], [0x1, 0x5, 0x7fff, 0x7], [0x3, 0xffff, 0x0, 0x9]}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) r9 = dup(r7) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = getpgid(0x0) syz_pidfd_open(r12, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000001400)={0x0, 0xffff}, 0x8) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r16) getsockname$packet(r16, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) socket$inet6(0xa, 0x4, 0x800) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x215}, [@IFLA_MASTER={0x8, 0xa, r13}]}, 0x28}, 0x1, 0xba01}, 0x0) open(&(0x7f0000001380)='./file1\x00', 0x50f0c2, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000001480)={&(0x7f0000001440)=[r5, r3, r2, r4], 0x4, 0x1800}) r18 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x42200) ioctl$CEC_RECEIVE(r18, 0xc0386106, &(0x7f0000000100)={0x5, 0x4, 0x4, 0x7, 0xfffffffa, 0x7, "0954e532bdf4a4260d1e7e6b449f235e", 0x8, 0x28, 0xd3, 0xf, 0x6, 0x3}) 16.357827274s ago: executing program 0 (id=1297): socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x8000000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0xec62, 0x4) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7a6e, 0x4, 0x20000000000, 0x0, 0x8, 0xc0, 0x0, 0x5], 0x8000000, 0x8340}) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) (async) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000340)={'security\x00', 0x0, [0x0, 0x6, 0x1, 0x100000ff, 0x10001]}, &(0x7f0000000200)=0x54) 16.183492617s ago: executing program 3 (id=1298): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r2, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28, 0x4}, 0x28) write$FUSE_OPEN(r2, &(0x7f00000002c0)={0x20, 0x0, r3}, 0x20) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000003000/0x3000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$IPC_RMID(r4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 15.908008543s ago: executing program 0 (id=1299): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0xc}, {0x0, 0x24}], 0x2, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000005dc0)=0x0) sendmmsg(r0, &(0x7f00000072c0)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002640)="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", 0xfe0}, {&(0x7f0000003640)="6aa98856c6158bd209116536f9ba7aeb86e8855cf75a4fb63b12aaf6411df8c7a63fc024b6ee23913f507fc749b3e20cef89b825d9f2793cf79d0f77907afcf05858bdd50d7650723a00a7bbf1674dbef6a183c1d7816f9318dfa5ab33ae856c90031a16dc34baac9c8dfe7a43dfaa043df697c0f5ece4a290cb768e86685ca641d1eabdb7daa627e9774e6491081b592edcd6c93a9ff3b9c19d818d57446b22be61a4466cdf1c0ff60c1ba89eec32b3f8b1b7267f077d60710ece2958c114de90a7d7edae75103d69042938305ea115ab69e66fd0bf477b4442bf11", 0xdc}, {&(0x7f0000003740)}], 0x3}}, {{&(0x7f0000003800)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000005c80)=ANY=[@ANYBLOB="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"], 0x138}}, {{&(0x7f0000005e00)=@nfc={0x27, r2, 0x1, 0x4}, 0x80, &(0x7f0000007080)=[{&(0x7f0000005e80)="3d89ce4d9e62a0d05ee033812f529f88c39d84b82c40fe106a95936863ffa64859f10d07804accb40485f7136d3f9a16bbb9157a457b9059e16728987008b4e645530f8949eaa43bbf63463d3429b0d88756ae65afd4a74dafbe160e16c1afea", 0x60}, {&(0x7f0000005f00)="9e1063be89cfb333d5de5ebd109cb24bc7a0b6abc8b139e2449925b8ab231aa75d736ede3b88018425f86590ec81c124ebe393071138040329f7362e6dd1e9b1d9f9f7f63852f043e3ee0e7cab5a968222317de15e5db3fd4363ddd53c257a9f3c63528389185d495dc17809a23112496d88fe5189da807468a2237e906ad0d9c5b1cc245d4c2b898a78e76b8d7b2e5180a5d6a9fe71b16a2423ceff99eb1e0c5ce236d98951cef5e5ca526ba7792a1821a48079904cf6ae1a649497eb7ff3294b7a0397fe57695f6ee9", 0xca}, {&(0x7f0000006000)="1d824d13758cbc93f11cfb6568bbe84b1947a8f6484191800efc2fa899961481b61253cba749510546b2ac6116f1502d7daa8e54cf1fbb5c883d6194160fb8a745186912149c849c390300fdbbb179b0d8b15ad6ea74a9cc388a7b9a1fb90bba9de7f6b93141d3d050a4", 0x6a}, {&(0x7f0000007ac0)="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", 0xfdf}], 0x4, &(0x7f00000070c0)=[{0x60, 0x114, 0x80000000, "34566765f3da255a892f9e7bac01673b4edba49d3bc8afb558b13fee8ba65523b88fb1670eb3fa7cc442daf3aebb0cb1f10786e190bb03c8d2777aa132129ce219a7d177c8bc5e19d67c"}, {0xa0, 0x118, 0x40, "4104117bf7d68734d640f36d2922360d10d5921ad351b69f2e808b35c349086e28f6d3f8e054388103dec63014296343540255c0e0240d9255b9fa30deb5dd3eb54e72d753dc64117ca66d5f2153db1597233f773bc2e924a11f7366eca0df70969245c0945fddcd2b56e10f5b8a4b4c4641e8dede52f032b9da50b844f22b01a708997fbd953794201455eaa276a436"}, {0x18, 0x115, 0x2, "96"}, {0xb0, 0x0, 0x9, "77947c6f5d6c72cd2dba30f6839ee6123f6f30a0d44f72ef787e2b91dbf0c66f7c2d60bf2353afca23dc620f9b52c6b964a1d53897e51b79f800e290cc4509e45675851919af840d7e3739d34bf09b07b89e007203dabcd043bf074d55c756e27e9c1464c943fe9a2d379f5f5fd154a98c41d6a7f34e54d83d065ddd6b90476d0f519da8c84fa12aeae020beeae996e663d75f3356914e0ae1"}], 0x1c8}}], 0x3, 0x10) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f00000000c0)) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000d40)={0x0, 0x0, 0x1ff, 0x7fffffffffffffff}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) r5 = syz_usb_connect$uac1(0x5, 0xcf, &(0x7f0000007480)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x5b, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x95f, 0x4, "115596c31297"}, @as_header={0x7, 0x24, 0x1, 0xd6, 0x9, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x0, "20ff", "e47e3b"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x2, 0x7, 0x9, "4d20cf0865bc7e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x16, 0x4, {0x7, 0x25, 0x1, 0x2, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x9, "3bbaea"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0x3ff, 0x4, '['}, @as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xa5, 0x5, 0x80, {0x7, 0x25, 0x1, 0x2, 0xb, 0x2}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_disconnect(r3) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') preadv(r6, 0x0, 0x0, 0x2004c, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 14.114345087s ago: executing program 3 (id=1304): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b70200000090ff00bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r2) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x23, 0x9, 0x6}, {0x3, 0x1, 0x9, 0xef17e523}, {0x1000, 0xb, 0x3, 0x8000}]}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcf, 0x69, 0x54, 0x10, 0x403, 0xf850, 0x17b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x0, 0x0, 0x5, 0x7d, 0x44}}]}}]}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) 11.71208391s ago: executing program 0 (id=1310): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x9a, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f0000000540), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@acquire={0x1ac, 0x17, 0x2, 0x5c7, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x32}, @in=@remote, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x9, 0x4e24, 0x80, 0x2, 0x0, 0x0, 0x3b, r0, 0xee01}, {{@in6=@private1, @in6=@private1, 0x4e24, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x20, 0x5e, r0, r2}, {0x80, 0x5, 0xfffffffffffff001, 0x1, 0x2, 0x1748, 0x6d25413c, 0xfffffffffffffff9}, {0xfbc0, 0x1, 0x1, 0x7f}, 0x2, 0x6e6bbd, 0x1, 0x1}, 0x1ff, 0x1, 0xa, 0x70bd28}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @sec_ctx={0x3f, 0x8, {0x3b, 0x8, 0x0, 0x6, 0x33, "a479dba6ea29d079e542be682a888819c4ec8008bb8c4c425bcd9f38ac5dfe9267091fea916c49f80a76ff8b4e9045115355af"}}, @etimer_thresh={0x8, 0xc, 0x1}, @replay_thresh={0x8, 0xb, 0x9}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@loopback, 0x0, 0xa}}]}, 0x1ac}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x27, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0xd}, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) sendfile(r4, r6, 0x0, 0xfffffffffffffaac) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/kernel/oops_count', 0x400, 0x1) read$FUSE(r9, &(0x7f00000011c0)={0x2020}, 0x2020) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 11.348070847s ago: executing program 4 (id=1311): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_pidfd_open(r3, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) process_mrelease(r4, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) syz_usb_connect$uac1(0x3, 0x78, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0xf0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xbc, 0x66, 0x8, {0x7, 0x25, 0x1, 0x1, 0x3, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x80, 0x8, 0xdf, {0x7, 0x25, 0x1, 0x80, 0x41, 0x8}}}}}}}]}}, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) syz_usb_disconnect(r5) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}}) recvmmsg$unix(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000480)) 9.810957788s ago: executing program 3 (id=1318): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r0) (async) dup(r0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8008af26, &(0x7f0000000680)={0x22f}) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private2}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private2}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, 0x0, 0xc044) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 9.695729743s ago: executing program 2 (id=1320): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00810000000800463300400065fa"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x100022a6, &(0x7f0000001c40)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000280)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000140)) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 7.184383935s ago: executing program 0 (id=1322): socket(0x10, 0x3, 0x0) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000040)) r3 = syz_io_uring_setup(0xbdb, &(0x7f0000000640)={0x0, 0xff14, 0x8, 0x1, 0x4000032e}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x1, 0x80, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "cb2842aac5a7"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0xffff, 0x5}, {0x6, 0x24, 0x1a, 0x8000}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x2, 0x8, 0xb}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xf8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf2, 0x7, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x430, 0x4, 0x48, 0x3}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7, 0x3, 0xff, 0x8, 0x46}, 0xc, &(0x7f00000002c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x9, 0x4}]}, 0x6, [{0x5c, &(0x7f0000000340)=@string={0x5c, 0x3, "f9243a700394be930f615f66b1cc08a8640e8eef41017a49af1e3c84a885dc74402c576c8c2ca3760d911d8d4cd0a51f680e17b6f6c220e9af173a01a3015ae53bed1024997cb4356af7a6faf5819706cbe1b9d08188a5922220"}}, {0x0, 0x0}, {0x39, &(0x7f0000000400)=@string={0x39, 0x3, "4beead30e4e9084a88cd7870d7ed7c3ed5c6e8bf0a224d046b99adfbd3cc6922d43ffc1d1b3508fcbffa96f959a942d686c8c98a00ddd9"}}, {0xef, &(0x7f00000004c0)=@string={0xef, 0x3, "527809d9ba79e87a781e82e6b430ed0ed1f7d5640244f20b05ec47b3383cf53233e18221187d5559508e6389f757fb689445eee7cb85b0213617d9eeda4903483507a2f7c61eeb1131df6db9a590b87e5de83401dd6de5fdf1f3432f8071445de5753e5ed95ba1689b6cc38f25d9f6d0c32571f908308cb5a44d69ba5bbdca4cd25fba13a6585a347742a7ad625efc835d192cae4372a3e3b29769576f9ee6b6d4f91b296c4a87c4a9d2a739a5f5f7288301e6374e1d47121ebe92b841d1620d9ccf9d602aed10617402cd7d1740eff62f7d41cb906e791970ccecc67a5a3c84bf819efc78e5b1e345dd1bd38e"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x82, &(0x7f00000006c0)=@string={0x82, 0x3, "0e547999b9efe0df4ec06d808a413cc71b8bb0e094017042b4e5d0949c75bdfa7031f9c1cd090c49b351f5359224d124bbd497cc16dfdba5539944017d61508f900f661d6fae80b051b461b987a384d1f033453a9d6124d437e8fe9e100b7a29e36bdd82719d27dc4d778223a504712b780d5352a9e04c7aedc1f3042ea0dad6"}}]}) syz_usb_ep_read(r6, 0x7, 0x11, &(0x7f0000000800)=""/17) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x20, 0xe, 0x0, 0x0) 7.03591908s ago: executing program 4 (id=1323): syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000002480)=""/4110) 6.980263378s ago: executing program 3 (id=1324): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc010000190001000000000003000000ac141425000000000000000000000000fe8080ff0000000000000000000000aa00000000000000060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000020000000000000000000000000000000000000000000000000000000000020000000000000000000044010500fe880000000000000000000000000101000004d62b00000002"], 0x1fc}}, 0x0) 6.771073081s ago: executing program 2 (id=1325): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3fffffff}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x3a, @rand_addr=0x64010100, 0x4e23, 0x2, 'fo\x00', 0x9, 0xb77, 0x7c}, 0x2c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0xff87, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x2242) lseek(r2, 0xffff, 0x1) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0x5460, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6.643462539s ago: executing program 3 (id=1326): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {0x0, 0x0, 0x2}}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x142840, 0x0) sendfile(r6, r4, &(0x7f0000000200)=0xf, 0x6) syz_usb_control_io$hid(r5, &(0x7f0000001000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200119"], 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB="005705"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000060d05013200000000000109022400010008100009040000210300030009210030950122280001058103ff0300000069cdf52b11d4b6d1a63d64cf369c8e1fd811bd128bb1ef845191927061a57c3f17b2fb0099be50"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="001187000000870f3d3df816ccbed257f8315bb983af3140e45c1caf7232241919da1bd474f4cbe03934fb0bbc73a133e989e5f978bb9288856823e84cd2d9f93fb1bef8f084aef269047d40d0d8536136a134a3bda2596112f205e2726bc6a13b69b42f0f28efd8aaf12c035eaa764567e22bd454bf61d73f5929127e8016989cb15e47b2bbb10c8a1f726516"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.507366614s ago: executing program 2 (id=1327): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{&(0x7f0000000740)={0xa, 0x4e24, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000000780)="598092", 0x3}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) (fail_nth: 1) 6.001816647s ago: executing program 1 (id=1328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x3}]}, {0x0, [0x61, 0x2e, 0x30]}}, &(0x7f0000000600), 0x29, 0x0, 0x1, 0x37e, 0x40ee77c8de60e1a1, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x5380, 0xd, 0x295f, 0x202, 0x1, 0x2, '\x00', r3, r4, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000020000040"]) r6 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x10010, r6, 0x0) syz_io_uring_setup(0x1190, &(0x7f0000000000)={0x0, 0x6d21, 0x80, 0x0, 0x15e}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="4000000000000000000000000700000044107a50000000070080000000000fff00940401004414be63ac1414aa8a000008ac1e00010000e769440420c30000001400000000000000000000000200000010000000000023001100"], 0x70}, 0x80) 6.000554239s ago: executing program 2 (id=1329): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x830824, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x15, 0x5, 0x0) connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401, 0x5}, 0x20) getsockname$l2tp6(r5, 0x0, &(0x7f0000000f40)) setsockopt$inet_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000140)=0x5, 0x4) bind$inet(r4, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003740)="b75a28e01f0203d65c249e7f4226f8c2cebebc9ae1def584a2e69409648cf418f7ac75ca95edd01b152d88a4182aa772bd00099d6457bd1fbe2e1150a5e25ce5c5680dd867c022c06eaaef46bb84a057b7d5517534636e1580bbe8f1ccc629191df5e5d266e7c2669016008629277ad81fa1a657fb4f7b07fffc2c227efe844cc770776444a83e07f0c7dac8fe0e1eec02db119493944cbd33391c0abdea7b9c0b20abe23c5f0e7a03af0e02097b66876fd002eccd737e07b1ec7d454a115f878a30c55e0c6d41439b886baf6afcfbb728a3deda73246ae623a639eee05f889b09fcded46b1b7fccb93993f06da67354e4e3d34ec61c3001f0b8c9234228aa6eabf6a80ca36a4ca0581e19a80e611bb71715c190a9b51f35caf2649c4b71fac03585ba57e9e06461f89a43cba5dd7f5f66bd5f123bcc48bc51f560ca23f21b67369e5a5b6da95d55764041ed1b202488ca995df8144d570d581ed360229e3e08c6e2e8a0528ae3a6658722bd956b5a89f0a11e20b9934c9556976fe1e3e2ee454f2930759a2209b92cb19bfe89a5891443b0e6bd494e630aabbee61c94f25138c48b812a9818d24834e68916ec5956e0b99990d597c12a928143a01c054a46cf248d7e1fb9ea8a70163ae9d434cb7f47b3378c0659ba5915295fd948e70bf0c07755b184b4f2543e9362d4faff88c86a805467b50a5032362e5e608d3ff2cc6640be56e9ff13001647821febad678ec24e300278a224218b1c5beb550fa01d794579df6fdaba64611f0ccc6848d143e8097bf71d5180d4a28b2c4ae9e1c8ecd82c5865cf00ccffc76a2b7bef216bffddb15876160f11b11f5c3097fc9b9fcddbe2f37a7cfa1723b332f69d16871b600cc6827cca7f470f868df991874a89845135656cb30e8aae62c3df3c880b8b54ac4659c794cd5842c7e73d0241e1e68b4e7d50894d7e6c0ed1b49b05a1a0354a080d1500b58e062d52031dd756dd157373d69f6cf7bd5927baa882cac9447f236571cae47a6e34f2896d425c68d3b91847b82a9bd1af98c24add0428d75606f8f39b89e9451801b08778b06c91e47a24d38a2c36a41419ca36e53d606908a6793b3743ab245c7e1ab202c5c86afd0dee19f2148f0fe5e367bd14870b56520a58451d2453529345a1880758fbadc8d06c4de4e7506338d04d8edb1e1cb890551cd1bbffa72bec31cdef80344ebe17cbd9abd35a641a815bb1093d76d9a65db757e5f1a4842431194deea69692e88781db959281da66aae3a80721d0c53664cae9ea0e9478a7805747005724aa607b27f28a4aa1b4343d2baeb808292b1d61056e55e8db489d9ad57a66f087fb2840de3e11ebf6b6524071ad93da25da6dc1379e6315f4bf268a09ef7e521863aeab33c5738ea1407f9d78ee1e3b0941e60e5cce5bf79ee8e51f12a36e08c320bdc9a73ebd7e1cb4815deb4ae46e02c758eb3a5bde6d1b02cd653eab4c7a855a65b44e759dc9b662650fe7ef31eceb99fc357c54a1517f1ae9c93ff9911cedcff26143cacf9bcfa80845e88435eadb52fb36903aeda14c9c5ab46b067bec3cac5caa5cbb5d9011e8a73eec471572a020fb25a68d28dcd6d2073ea3e6ce6529cce9467b319d5ed0135fdf967b6cfb72ffdab9ca6ae5118a9f2be67f8533336bb9a6fe51a21643746478737f1eb22bd214cbcb7a04a4e3c0b8c346ee4a0be9a025c7bd2ee05149625743b5be88ad5d8d9d8343a0eb049467c035994ff83a8d6bad25f74689d3c981a8ceb1396bb35d8fa06f3900df0ccc55360dd8df40d65c3d4b22cc99ab4cac80eb66522ee457090e65c0f313b04cd27ed242888a3e4d024658a46e5fae327dd912bf278df954ce444f9ee5d7b4e768ad31d19901715d7349546db64dc30dccec50c9818c89d69545c426f95a3666598414c009f570fce6576d37755b64c519d7f0b1747fa2ecb94da5b5022497f2a03c354525599f4ada3a0a1d0813c0803c6be5b8eaa660fa5570801ef49fc14fc1b122a7a4801e82c4f720c7ab26174ecc61eed8fb340d6152502449fb1b225d16ea9f50aa416f9ee679902b96a526d8fe", 0x5c1}], 0x1}}], 0x2, 0x240080a0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x800000, 0x0, 0x400, 0x335, 0x0, r3}, 0x0, 0x0) r6 = epoll_create1(0x0) r7 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xb2a9, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x3516, 0x300, 0x0, 0x0, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x40000) epoll_wait(r6, &(0x7f00000000c0)=[{}], 0x1, 0x7922) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000100)) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5.913596035s ago: executing program 4 (id=1330): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{&(0x7f0000000740)={0xa, 0x4e24, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000000780)="598092", 0x3}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @remote}}}, 0x108) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000002c0)={0x10000005}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r9 = gettid() tkill(r9, 0x12) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_open_procfs(r9, &(0x7f0000000680)='net/sctp\x00') ioctl$KVM_SET_CLOCK(r11, 0x4048aec9, &(0x7f0000000040)={0x10000, 0x0, 0x80000000, 0x100000000, 0x40004}) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r12 = syz_io_uring_setup(0x73a0, &(0x7f0000000400)={0x0, 0x831, 0xc608, 0x1, 0x391}, &(0x7f0000000180), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_PROBE(r12, 0x8, &(0x7f00000004c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x34) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000000)={r5, 0x8, 0x7, 0x5b7, 0xa4, 0x9, 0x9, 0x8, {r5, @in6={{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}}, 0x0, 0xfffffffe, 0x8, 0x60, 0x7}}, &(0x7f00000000c0)=0xb0) 5.436169769s ago: executing program 1 (id=1331): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r2, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28, 0x4}, 0x28) write$FUSE_OPEN(r2, &(0x7f00000002c0)={0x20, 0x0, r3}, 0x20) mkdir(0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r4, &(0x7f0000004380)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x7, 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000003000/0x3000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$IPC_RMID(r5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3.543895626s ago: executing program 0 (id=1332): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect(r3, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x46, 0xb, "30baaf652685f9a25cdf20e68a81fb0d8c073a4cf9d07ebc2b5cc2e689b17668bc65fedd36417d7cb483ec614c4645b290e4739fe43eaeb37bfc11d4ca0998", 0x37}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r6) sendmmsg$inet(r4, &(0x7f0000000640)=[{{&(0x7f0000000280)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f00000006c0)="e50e3e1cd4a914c96ef579f604ebc082289056d0136c1cd1e09c91fab010b63bdc95a3af5c3092a03256ab5bf281d526c189cdfe68c87dff5b746f0478777114013eedebedd2941d3a2241d3954e0632a4d5d051aeee2d22a6c073c2410d9206399b70ad48a9930c01fc8d35fe0444a730af5d861b7d8968641c81b9e5d76c69b4b05954d284cbc115a740708b0774371ffc782f18f442c9f8b225fd99e166ce7af46ad5", 0xa4}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="14631b0c7603aa81991f95bc2e29f7c0c3a07154c057131c74b1fbeffc21ed583bff055b641466a40078e6526c9f954bff2a71d10e5cec83d1480115a5e7db9da9473e698db570d4dd16b4ad1b7bfb54851e1cd73d53005a0fea83055668be8590b1174a3531b7aad7813f0bbd995e885a17b122a11a25ee07f599dec373c11ac4b32c79a9b4a1050cc972c39cda87adc4d51a2e9f22d383459dad56f8f557fbd88497d126ba92eb452c07b7e3cbfe9b1626dfcc5675fc5d479ab5548f7a9e85", 0xc0}, {&(0x7f0000000540)="06d7994ef86b77c0c21a872b0946f38c529e8ffd74505e13c1f978a2379280d93254cbf040adb9f0facfcfe22ccebd2879567fd2096e9ba903842e056540149d87bcc75f4639ee5e5b0416e28ec633f3d2bebb065ed1fe9e9d72b65b5e0f0f", 0x5f}, {&(0x7f00000005c0)="a7f4edafe38d82c989d1b9f1cd6c25931e1d448cf0553e9d016fd30caed52f45ee49d2f670fa554f8f62dba9be12817c8522d03941d5288e58b3d9226379f19882c0e385e6f150b75b9b17f4d9597a23f9e296c697f3aa32e9c9e89e151fc9d23ef77d03a8a850721b2b15b4e4", 0x6d}], 0x3}}], 0x2, 0xf00) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r8, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="070000000000000000008002000000ff07010003000000"], 0x17) 3.521452681s ago: executing program 1 (id=1333): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000440)=@allocspi={0x120, 0x16, 0x401, 0x70bd2a, 0x0, {{{@in6=@private0, @in6=@private0, 0x0, 0x200}, {@in6=@mcast2, 0x0, 0x33}, @in=@private=0xa010100, {0x0, 0xfffffffffffffffc, 0x3}, {0x8, 0x0, 0x0, 0x6}, {0x0, 0x0, 0xa}}, 0x8, 0xffffffff}, [@address_filter={0x28, 0x1a, {@in6=@loopback, @in6=@loopback, 0x2, 0x0, 0xc}}]}, 0x120}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 3.342989281s ago: executing program 1 (id=1334): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)={0x6, 0x0, [{0x1000, 0xc5, &(0x7f0000000480)=""/197}, {0x100000, 0xb9, &(0x7f0000000740)=""/185}, {0x2, 0xb7, &(0x7f0000000880)=""/183}, {0x8000000, 0xd, &(0x7f0000000080)=""/13}, {0x2000, 0xf2, &(0x7f0000000b40)=""/242}, {0x33391006, 0x0, &(0x7f0000000280)}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0x2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffe) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x0, &(0x7f0000002e00)=""/4098}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000840), 0x20000, 0x0) mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x2, 0x73) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r2, 0x407, 0x0) read$FUSE(r2, &(0x7f0000002440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x29, 0x5, 0xa83c7d988dbb7531, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80, 0x3}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xb) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x8081, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020731a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 2.572081453s ago: executing program 4 (id=1335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00810000000800463300400065fa"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x100022a6, &(0x7f0000001c40)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000280)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000140)) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.066006929s ago: executing program 1 (id=1336): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x310, 0x25, 0x148, 0x310, 0x60, 0x408, 0x2a8, 0x2a8, 0x408, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@connlabel={{0x28}, {0xc0, 0x3}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x3d, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {0x400000000000000}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x500) 1.825292114s ago: executing program 2 (id=1337): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000003010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 1.583970982s ago: executing program 1 (id=1338): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @mcast1, 0x80000001}, 0x1c) r2 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='d', 0x1, 0x3, 0x0, 0x0, r3}]) fsopen(0x0, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) epoll_create1(0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) write$cgroup_devices(r5, 0x0, 0xffdd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x48}, {0x6, 0x0, 0x0, 0xfffff14c}]}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) 1.454853438s ago: executing program 2 (id=1339): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x30, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x80, 0xd, [{{0x9, 0x4, 0x0, 0xa6, 0x1, 0x7, 0x1, 0x3, 0x5d, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x5, 0xf9}}}}}]}}]}}, 0x0) syz_io_uring_setup(0x9c2, &(0x7f00000000c0)={0x0, 0x7079, 0x1, 0x3, 0x288}, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0xac24, 0x10000, 0x2}, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x54}}, 0x0) 404.760754ms ago: executing program 4 (id=1340): r0 = socket(0x840000000002, 0x3, 0xff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)="9d7fcf3efc63f4a2a555ba8b4726d7ccaf8a20", 0x13}], 0x1, 0x0, 0x6b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000006a000700"], 0x18}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) 207.983051ms ago: executing program 4 (id=1341): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x101c}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041", 0x2b}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140034000800"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1000001fd, r4}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100021dc435207beba268b9aa928bb72013073f4e0102030109021200010900000609972edf8eb54481f022b36681a7c54e02bf97b8ecccd8ccf95388eac89fd2bd3d5196a3b6dd1d0db80b73b782a464201db61c178438f30fb733166a8836d41694b66c546f4f4dc2c6583b35c6bd31ece19d3375ae040a468ac05297dc226f717d5e41eebb20daa0c02948a78efb5b94fe8c0c2358e676582d629dd9184857a6dfef5ba212df710ef4d21d38200f8edf74a4af851ef8537c"], 0x0) 0s ago: executing program 0 (id=1342): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 320.103617][ T10] usb 1-1: USB disconnect, device number 51 [ 320.442230][ T8644] loop8: detected capacity change from 0 to 1 [ 320.493301][ T1209] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 320.495204][ T8644] Dev loop8: unable to read RDB block 1 [ 320.508364][ T8644] loop8: unable to read partition table [ 320.567080][ T8644] loop8: partition table beyond EOD, truncated [ 320.653333][ T8644] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 320.673380][ T5887] tipc: Node number set to 2130706433 [ 320.683804][ T1209] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 320.773575][ T1209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.845674][ T5835] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 320.854515][ T24] usb 3-1: USB disconnect, device number 56 [ 320.883232][ T1209] usb 5-1: config 0 has no interfaces? [ 321.018583][ T1209] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 321.227597][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.245923][ T1209] usb 5-1: Product: syz [ 321.272452][ T1209] usb 5-1: Manufacturer: syz [ 321.282670][ T1209] usb 5-1: SerialNumber: syz [ 321.301160][ T1209] usb 5-1: config 0 descriptor?? [ 321.503363][ T5887] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 321.656460][ T5887] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.666397][ T5887] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 321.714047][ T5887] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.777594][ T5887] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 321.792710][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 321.818438][ T5887] usb 4-1: Product: syz [ 321.841532][ T5887] usb 4-1: Manufacturer: syz [ 321.849165][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'. [ 321.853137][ T5887] usb 4-1: SerialNumber: syz [ 322.092687][ T5887] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 322.232703][ T8675] loop2: detected capacity change from 0 to 7 [ 322.241733][ T8675] Dev loop2: unable to read RDB block 7 [ 322.253610][ T8675] loop2: unable to read partition table [ 322.259656][ T8675] loop2: partition table beyond EOD, truncated [ 322.267451][ T8675] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 322.355007][ T5887] usb 4-1: USB disconnect, device number 58 [ 322.387428][ T8680] loop7: detected capacity change from 0 to 6 [ 322.405737][ T8680] Dev loop7: unable to read RDB block 6 [ 322.411536][ T8662] usblp0: removed [ 322.430665][ T8680] loop7: unable to read partition table [ 322.451543][ T8680] loop7: partition table beyond EOD, truncated [ 322.481382][ T8680] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 322.701018][ T8688] binder: 8687:8688 ioctl c0306201 200000000ac0 returned -14 [ 322.816134][ T8690] netlink: 68 bytes leftover after parsing attributes in process `syz.2.823'. [ 322.848390][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 322.997684][ T1209] usb 5-1: USB disconnect, device number 44 [ 323.113804][ T24] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 323.236265][ T8701] tipc: Enabling of bearer rejected, already enabled [ 323.301674][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.312087][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 323.327609][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.343513][ T5887] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 323.372307][ T24] usb 3-1: config 0 descriptor?? [ 323.507505][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 323.526629][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 323.563442][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.582118][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 323.626308][ T5887] usb 2-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 323.635866][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.649640][ T5887] usb 2-1: Product: syz [ 323.661282][ T5887] usb 2-1: Manufacturer: syz [ 323.669479][ T5887] usb 2-1: SerialNumber: syz [ 323.713608][ T5887] usb 2-1: config 0 descriptor?? [ 323.735113][ T5887] ti_usb_3410_5052 2-1:0.0: TI USB 3410 1 port adapter converter detected [ 323.839652][ T5887] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 323.943510][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.955202][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.023922][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 324.050872][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.050920][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 324.114278][ T24] usb 3-1: USB disconnect, device number 57 [ 324.155519][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.515719][ T24] usb 2-1: USB disconnect, device number 43 [ 324.549315][ T24] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 324.626865][ T24] ti_usb_3410_5052 2-1:0.0: device disconnected [ 324.819196][ T8716] bridge1: entered allmulticast mode [ 324.866757][ T8723] batman_adv: batadv0: Adding interface: dummy0 [ 324.908827][ T8723] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.988432][ T8723] batman_adv: batadv0: Interface activated: dummy0 [ 325.160248][ T8717] batadv0: mtu less than device minimum [ 325.199300][ T8717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.211396][ T8717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.223510][ T8717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.235537][ T8717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.247597][ T8717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.259644][ T8717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.271076][ T8717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.282527][ T8717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.293962][ T8717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.452196][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 325.543751][ T8739] vlan2: entered promiscuous mode [ 325.623282][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 325.828045][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 325.833309][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 325.888367][ T24] usb 2-1: config 0 has no interfaces? [ 325.896944][ T24] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 325.936516][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.988112][ T24] usb 2-1: Product: syz [ 326.009704][ T24] usb 2-1: Manufacturer: syz [ 326.064360][ T8745] team2: entered promiscuous mode [ 326.069477][ T24] usb 2-1: SerialNumber: syz [ 326.074425][ T8745] team2: entered allmulticast mode [ 326.092669][ T24] usb 2-1: config 0 descriptor?? [ 326.109408][ T8745] 8021q: adding VLAN 0 to HW filter on device team2 [ 326.142069][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.840'. [ 326.170345][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 326.219777][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 326.230326][ T8750] netlink: 5 bytes leftover after parsing attributes in process `syz.3.840'. [ 326.321676][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.834'. [ 326.495081][ T24] usb 2-1: USB disconnect, device number 44 [ 327.076510][ T8780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.849'. [ 327.415610][ T8787] netlink: 368 bytes leftover after parsing attributes in process `syz.0.849'. [ 328.474110][ T1209] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 328.514660][ T8796] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 328.606729][ T8798] netlink: 'syz.4.855': attribute type 23 has an invalid length. [ 328.655594][ T1209] usb 4-1: config 0 has no interfaces? [ 328.686846][ T1209] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 328.711180][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.722101][ T1209] usb 4-1: Product: syz [ 328.740588][ T1209] usb 4-1: Manufacturer: syz [ 328.773424][ T1209] usb 4-1: SerialNumber: syz [ 328.785906][ T1209] usb 4-1: config 0 descriptor?? [ 328.999695][ T8784] x_tables: duplicate underflow at hook 3 [ 329.213653][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 329.434396][ T24] usb 5-1: config 0 has no interfaces? [ 329.449328][ T24] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 329.521738][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.599192][ T24] usb 5-1: config 0 descriptor?? [ 330.079464][ T24] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 330.246784][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.296960][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 330.303219][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.444021][ T1209] usb 4-1: USB disconnect, device number 59 [ 330.444021][ T24] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 330.444048][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.644541][ T24] usb 1-1: config 0 descriptor?? [ 330.696471][ T8834] tipc: Started in network mode [ 330.701430][ T8834] tipc: Node identity 7f000001, cluster identity 4711 [ 330.709363][ T8834] tipc: New replicast peer: 0.0.0.0 [ 330.722973][ T8834] tipc: Enabled bearer , priority 7 [ 330.868348][ T24] usb 1-1: string descriptor 0 read error: -71 [ 330.876436][ T8835] fuse: Bad value for 'user_id' [ 330.882820][ T24] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 330.906486][ T8835] fuse: Bad value for 'user_id' [ 330.992440][ T24] usb 1-1: USB disconnect, device number 52 [ 331.002931][ T8835] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 331.009468][ T8835] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 331.060528][ T8835] vhci_hcd vhci_hcd.0: Device attached [ 331.238241][ T8836] vhci_hcd: connection closed [ 331.239885][ T49] vhci_hcd: stop threads [ 331.256617][ T30] audit: type=1326 audit(1748854993.526:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.1.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd26d8e969 code=0x7fc00000 [ 331.258199][ T49] vhci_hcd: release socket [ 331.341687][ T1209] usb 40-1: SetAddress Request (6) to port 0 [ 331.348035][ T1209] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 331.613453][ T49] vhci_hcd: disconnect device [ 331.618522][ T1209] usb 40-1: enqueue for inactive port 0 [ 331.853180][ T24] tipc: Node number set to 2130706433 [ 331.933552][ T24] usb 5-1: USB disconnect, device number 45 [ 332.065635][ T1209] usb usb40-port1: attempt power cycle [ 332.216491][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 332.674798][ T1209] usb usb40-port1: unable to enumerate USB device [ 332.813847][ T5890] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 332.858605][ T8872] netlink: 676 bytes leftover after parsing attributes in process `syz.3.878'. [ 332.867821][ T5887] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 332.892628][ T8872] netlink: 676 bytes leftover after parsing attributes in process `syz.3.878'. [ 333.044865][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.063168][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 333.095363][ T5890] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 333.113740][ T5887] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 333.133018][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.162327][ T5890] usb 3-1: Product: syz [ 333.168192][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.173379][ T5890] usb 3-1: Manufacturer: syz [ 333.196928][ T5887] usb 5-1: Product: syz [ 333.201260][ T5890] usb 3-1: SerialNumber: syz [ 333.218850][ T5887] usb 5-1: Manufacturer: syz [ 333.226357][ T5887] usb 5-1: SerialNumber: syz [ 333.243596][ T5890] r8152-cfgselector 3-1: Unknown version 0x0000 [ 333.252696][ T5887] usb 5-1: config 0 descriptor?? [ 333.260110][ T5890] r8152-cfgselector 3-1: config 0 descriptor?? [ 333.275334][ T5887] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 333.326023][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 333.389438][ T5887] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 333.444190][ T5887] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 333.462829][ T5887] usb 5-1: media controller created [ 333.471132][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.483299][ T5888] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 333.492773][ T8861] dvb-usb: bulk message failed: -22 (4/0) [ 333.499158][ T8861] dibusb: i2c wr: len=62 is too big! [ 333.499158][ T8861] [ 333.523844][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 333.524516][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.544650][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.559216][ T5887] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 333.653137][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 333.693182][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 333.714608][ T5888] usb 4-1: config 0 has no interfaces? [ 333.727107][ T5888] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 333.740007][ T5887] dvb-usb: schedule remote query interval to 150 msecs. [ 333.746493][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.787191][ T5888] usb 4-1: Product: syz [ 333.805697][ T5888] usb 4-1: Manufacturer: syz [ 333.813279][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 333.829228][ T5888] usb 4-1: SerialNumber: syz [ 333.854461][ T5887] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 333.870334][ T5890] r8152-cfgselector 3-1: Unknown version 0x0000 [ 333.879065][ T5888] usb 4-1: config 0 descriptor?? [ 333.902040][ T5890] r8152-cfgselector 3-1: bad CDC descriptors [ 333.935641][ T5890] r8152-cfgselector 3-1: USB disconnect, device number 58 [ 333.975259][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 333.981139][ T1209] dvb-usb: error while querying for an remote control event. [ 334.143706][ T5887] usb 4-1: USB disconnect, device number 60 [ 334.166269][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 334.175794][ T1209] dvb-usb: error while querying for an remote control event. [ 334.354068][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 334.382526][ T5887] dvb-usb: error while querying for an remote control event. [ 334.573988][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 334.602367][ T5887] dvb-usb: error while querying for an remote control event. [ 334.783314][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 334.806788][ T5887] dvb-usb: error while querying for an remote control event. [ 335.013520][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 335.042054][ T1209] dvb-usb: error while querying for an remote control event. [ 335.233592][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 335.264838][ T1209] dvb-usb: error while querying for an remote control event. [ 335.268481][ T5890] usb 5-1: USB disconnect, device number 46 [ 335.489833][ T5890] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 336.242928][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 336.252565][ T8922] netlink: 'syz.3.890': attribute type 5 has an invalid length. [ 336.261310][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.890'. [ 336.316977][ T8922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 336.325920][ T8922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 336.333355][ T1209] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 336.342549][ T8922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 336.359435][ T8922] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 336.385792][ T8922] geneve2: entered promiscuous mode [ 336.391206][ T8922] geneve2: entered allmulticast mode [ 336.615154][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 336.651846][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 336.687973][ T1209] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 336.719680][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 336.744313][ T1209] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 336.793196][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 336.838906][ T1209] usb 5-1: Product: syz [ 336.877194][ T1209] usb 5-1: Manufacturer: syz [ 336.884043][ T5887] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 336.952986][ T1209] usb 5-1: SerialNumber: syz [ 336.970898][ T1209] usb 5-1: config 0 descriptor?? [ 337.013202][ T5887] usb 1-1: device descriptor read/64, error -71 [ 337.279658][ T5887] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 337.300930][ T8936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.311028][ T8936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.319905][ T8936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.453232][ T5887] usb 1-1: device descriptor read/64, error -71 [ 337.584092][ T5887] usb usb1-port1: attempt power cycle [ 337.933179][ T5887] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 337.954656][ T5887] usb 1-1: device descriptor read/8, error -71 [ 338.083298][ T5888] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 338.194290][ T5887] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 338.213900][ T5887] usb 1-1: device descriptor read/8, error -71 [ 338.258498][ T5888] usb 4-1: not running at top speed; connect to a high speed hub [ 338.270600][ T5888] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 338.289580][ T5888] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 338.302636][ T5888] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 338.317499][ T5888] usb 4-1: config 1 interface 0 has no altsetting 0 [ 338.328764][ T5888] usb 4-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.40 [ 338.333702][ T5887] usb usb1-port1: unable to enumerate USB device [ 338.338814][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.356653][ T5888] usb 4-1: Product: ꀶⲭ們蕂⛲፛▧꾡관ᖮ淋ꈪ캋 [ 338.366581][ T5888] usb 4-1: Manufacturer: ї [ 338.371144][ T5888] usb 4-1: SerialNumber: < [ 338.386227][ T8943] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 338.401677][ T8943] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 338.494864][ T30] audit: type=1326 audit(1748855000.776:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.1.904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd26d8e969 code=0x0 [ 338.821759][ T5888] usbhid 4-1:1.0: can't add hid device: -71 [ 338.829320][ T5888] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 338.845820][ T5888] usb 4-1: USB disconnect, device number 61 [ 338.913234][ T5890] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 339.057933][ T5887] usb 5-1: USB disconnect, device number 47 [ 339.074549][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 339.097702][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 339.118687][ T5890] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 339.130408][ T5890] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 339.156790][ T5890] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 339.195662][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.205003][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.219441][ T5890] usb 2-1: Product: キ䨈춈灸㹼웕뿨∊э饫ﮭ쳓≩㿔᷼㔛ﰈ謹練꥙홂좆諉 [ 339.230592][ T5890] usb 2-1: SerialNumber: 硒禺竨Ṹゴ໭擕䐂௲덇㰸㋵ↂ紘奕蹐襣執棻䖔藋↰᜶䧚䠃ܵỆᇫ륭邥纸Ĵ淝﷥⽃熀嵄痥帾寙梡沛迃탶◃辰〈떌䶤멩뵛䳊忒Ꮊ墦㑚䉷궧幢菼ᥝ긬牃鞲坩鹯뛦倫⤛䩬쒇튩㦧⣷ƃ㟦ᵎቇ븞뢒텁ൢ쾜悝愐ɴ緍䀗累쭁源᥹챰웬婺萼膿ﲞ팛 [ 339.408572][ T8970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.909'. [ 339.592814][ T5890] cdc_ncm 2-1:1.0: bind() failure [ 339.604984][ T5890] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 339.611865][ T5890] cdc_ncm 2-1:1.1: bind() failure [ 339.638776][ T5890] usb 2-1: USB disconnect, device number 45 [ 340.125286][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 340.181234][ T8990] team3: entered promiscuous mode [ 340.186651][ T8990] team3: entered allmulticast mode [ 340.192817][ T8990] 8021q: adding VLAN 0 to HW filter on device team3 [ 340.550267][ T8993] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 340.700969][ T8993] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.858617][ T8993] bond0: (slave team0): Enslaving as an active interface with an up link [ 340.991513][ T5890] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 341.247258][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 341.293960][ T5890] usb 2-1: no configurations [ 341.298626][ T5890] usb 2-1: can't read configurations, error -22 [ 341.473307][ T5890] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 341.654434][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 341.662655][ T5890] usb 2-1: no configurations [ 341.699074][ T5890] usb 2-1: can't read configurations, error -22 [ 341.706225][ T5890] usb usb2-port1: attempt power cycle [ 342.093166][ T5890] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 342.114231][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 342.120482][ T5890] usb 2-1: no configurations [ 342.126139][ T5890] usb 2-1: can't read configurations, error -22 [ 342.168569][ T5888] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 342.277936][ T5890] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 342.320580][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 342.334983][ T5890] usb 2-1: no configurations [ 342.350859][ T5890] usb 2-1: can't read configurations, error -22 [ 342.365185][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 342.384224][ T5890] usb usb2-port1: unable to enumerate USB device [ 342.407138][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 342.481377][ T5888] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 342.547421][ T5888] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 342.601196][ T9021] block device autoloading is deprecated and will be removed. [ 342.622041][ T9021] syz.2.926: attempt to access beyond end of device [ 342.622041][ T9021] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 342.674429][ T5888] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 342.799159][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.810017][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.818312][ T5888] usb 4-1: Product: キ䨈춈灸㹼웕뿨∊э饫ﮭ쳓≩㿔᷼㔛ﰈ謹練꥙홂좆諉 [ 343.196197][ T5888] usb 4-1: SerialNumber: 硒禺竨Ṹゴ໭擕䐂௲덇㰸㋵ↂ紘奕蹐襣執棻䖔藋↰᜶䧚䠃ܵỆᇫ륭邥纸Ĵ淝﷥⽃熀嵄痥帾寙梡沛迃탶◃辰〈떌䶤멩뵛䳊忒Ꮊ墦㑚䉷궧幢菼ᥝ긬牃鞲坩鹯뛦倫⤛䩬쒇튩㦧⣷ƃ㟦ᵎቇ븞뢒텁ൢ쾜悝愐ɴ緍䀗累쭁源᥹챰웬婺萼膿ﲞ팛 [ 343.880634][ T5888] cdc_ncm 4-1:1.0: bind() failure [ 343.924196][ T5888] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 343.968215][ T5888] cdc_ncm 4-1:1.1: bind() failure [ 344.017005][ T5888] usb 4-1: USB disconnect, device number 62 [ 344.663244][ T5887] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 344.825892][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 344.850467][ T5887] usb 5-1: not running at top speed; connect to a high speed hub [ 344.883375][ T5887] usb 5-1: config 1 has an invalid interface number: 94 but max is 0 [ 344.908287][ T5887] usb 5-1: config 1 has no interface number 0 [ 344.955525][ T5887] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=51.70 [ 345.032762][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.054738][ T5887] usb 5-1: Product: syz [ 345.058971][ T5887] usb 5-1: Manufacturer: syz [ 345.082019][ T5887] usb 5-1: SerialNumber: syz [ 345.319261][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.352723][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.511159][ T9069] vlan2: entered promiscuous mode [ 345.594796][ T5888] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 345.704790][ T9073] netlink: 88 bytes leftover after parsing attributes in process `syz.3.945'. [ 345.753222][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 345.762956][ T5888] usb 1-1: config 0 has no interfaces? [ 345.778799][ T5888] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 345.794767][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.803744][ T5890] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 345.812031][ T5888] usb 1-1: Product: syz [ 345.817406][ T5888] usb 1-1: Manufacturer: syz [ 345.822177][ T5888] usb 1-1: SerialNumber: syz [ 345.832931][ T5888] usb 1-1: config 0 descriptor?? [ 345.943390][ T5890] usb 2-1: device descriptor read/64, error -71 [ 346.183258][ T5890] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 346.296167][ T9077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.940'. [ 346.333337][ T5890] usb 2-1: device descriptor read/64, error -71 [ 346.345903][ T9077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.940'. [ 346.382117][ T9077] batadv0: entered promiscuous mode [ 346.463597][ T5890] usb usb2-port1: attempt power cycle [ 346.813185][ T5890] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 346.833895][ T5890] usb 2-1: device descriptor read/8, error -71 [ 347.073487][ T5890] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 347.099221][ T5890] usb 2-1: device descriptor read/8, error -71 [ 347.213610][ T5890] usb usb2-port1: unable to enumerate USB device [ 347.417213][ T5887] usb 5-1: Invalid firmware size=18. [ 347.443389][ T5887] usb 5-1: USB disconnect, device number 48 [ 348.081833][ T9091] netlink: 212 bytes leftover after parsing attributes in process `syz.4.950'. [ 348.271910][ T30] audit: type=1326 audit(1748855010.546:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fbad8e969 code=0x7fc00000 [ 348.339075][ T9095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 348.368412][ T5890] usb 1-1: USB disconnect, device number 57 [ 349.314103][ T9125] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 349.323026][ T9125] bridge0: port 3(gretap0) entered blocking state [ 349.333314][ T9125] bridge0: port 3(gretap0) entered disabled state [ 349.339878][ T9125] gretap0: entered allmulticast mode [ 349.413843][ T9125] gretap0: entered promiscuous mode [ 349.426356][ T9125] bridge0: port 3(gretap0) entered blocking state [ 349.433368][ T9125] bridge0: port 3(gretap0) entered forwarding state [ 349.538336][ T1209] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 350.017442][ T1209] usb 4-1: config 0 has no interfaces? [ 350.023002][ T1209] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 350.198718][ T9129] sit0: entered promiscuous mode [ 350.203473][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.231637][ T1209] usb 4-1: config 0 descriptor?? [ 350.517233][ T9129] netlink: 'syz.0.962': attribute type 3 has an invalid length. [ 350.537153][ T9129] netlink: 1 bytes leftover after parsing attributes in process `syz.0.962'. [ 350.748410][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.966'. [ 350.765511][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.966'. [ 351.150792][ T30] audit: type=1326 audit(1748855013.426:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f38e969 code=0x7fc00000 [ 351.475015][ T9156] loop2: detected capacity change from 0 to 7 [ 351.486536][ T6700] Dev loop2: unable to read RDB block 7 [ 351.495143][ T6700] loop2: unable to read partition table [ 351.505123][ T6700] loop2: partition table beyond EOD, truncated [ 351.512209][ T9156] Dev loop2: unable to read RDB block 7 [ 351.530257][ T9156] loop2: unable to read partition table [ 351.544463][ T9156] loop2: partition table beyond EOD, truncated [ 351.563319][ T9156] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 351.742253][ T9154] block device autoloading is deprecated and will be removed. [ 352.070256][ T5890] usb 4-1: USB disconnect, device number 63 [ 352.126159][ T9166] 8021q: VLANs not supported on vxcan0 [ 352.269299][ T9157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 352.314792][ T9157] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 352.358709][ T9157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 352.392139][ T9157] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 352.420803][ T9157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 352.456473][ T9157] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 352.489913][ T9157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 352.518261][ T9157] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 352.559435][ T9157] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 352.586986][ T9157] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 353.098227][ T9183] binder: 9182:9183 ioctl c0306201 200000000ac0 returned -14 [ 353.223190][ T1209] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 353.383396][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 353.394231][ T1209] usb 5-1: config 0 has no interfaces? [ 353.406310][ T1209] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 353.425753][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.444775][ T1209] usb 5-1: Product: syz [ 353.453649][ T1209] usb 5-1: Manufacturer: syz [ 353.492859][ T1209] usb 5-1: SerialNumber: syz [ 353.514495][ T1209] usb 5-1: config 0 descriptor?? [ 353.633411][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 353.752100][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.980'. [ 353.761489][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.980'. [ 353.866027][ T9193] netlink: 44 bytes leftover after parsing attributes in process `syz.0.984'. [ 353.926161][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 354.067962][ T9201] netlink: 'syz.1.986': attribute type 1 has an invalid length. [ 354.261999][ T9201] bond2: entered promiscuous mode [ 354.267991][ T9201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.411989][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 354.486220][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 354.573187][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 354.573385][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 354.823452][ T1209] usb 5-1: USB disconnect, device number 49 [ 356.003225][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 356.173978][ T5888] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 356.354028][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 356.364335][ T5888] usb 2-1: config 0 has no interfaces? [ 356.397021][ T5888] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 356.425644][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.603369][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 356.609456][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 356.643899][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 356.643934][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 356.651223][ T5888] usb 2-1: Product: syz [ 356.786687][ T5888] usb 2-1: Manufacturer: syz [ 356.802579][ T5888] usb 2-1: SerialNumber: syz [ 356.866028][ T5888] usb 2-1: config 0 descriptor?? [ 357.248823][ T5888] usb 2-1: USB disconnect, device number 54 [ 357.683639][ T9240] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 357.802440][ T9239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1000'. [ 357.811598][ T9239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1000'. [ 357.833126][ T30] audit: type=1800 audit(1748855020.106:49): pid=9248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.999" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 358.370396][ T30] audit: type=1800 audit(1748855020.646:50): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1003" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 359.509091][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 359.518425][ T9270] netlink: 'syz.2.1007': attribute type 5 has an invalid length. [ 359.526448][ T9270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1007'. [ 360.432244][ T30] audit: type=1326 audit(1748855022.706:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f38e969 code=0x7fc00000 [ 360.549909][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 361.008175][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1016'. [ 361.168333][ T9291] vlan2: entered allmulticast mode [ 361.173895][ T5888] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 361.193328][ T9291] bond2: entered allmulticast mode [ 361.369432][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1018'. [ 361.369579][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 361.401163][ T9297] net_ratelimit: 10 callbacks suppressed [ 361.401197][ T9297] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 361.465502][ T5888] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 361.476157][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.499102][ T5888] usb 5-1: config 0 descriptor?? [ 361.516710][ T5888] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 362.003497][ T9312] loop8: detected capacity change from 0 to 8 [ 362.030177][ T5888] gp8psk: usb out operation failed. [ 362.045156][ T5888] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 362.056403][ T9312] Dev loop8: unable to read RDB block 8 [ 362.062303][ T9312] loop8: unable to read partition table [ 362.069313][ T5888] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 362.090007][ T9312] loop8: partition table beyond EOD, truncated [ 362.097910][ T9312] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 362.258340][ T5888] usb 5-1: USB disconnect, device number 50 [ 362.773161][ T5890] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 363.005408][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 363.019959][ T5890] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 363.043468][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.072571][ T5890] usb 3-1: Product: syz [ 363.096109][ T5890] usb 3-1: Manufacturer: syz [ 363.100798][ T5890] usb 3-1: SerialNumber: syz [ 363.148283][ T5890] usb 3-1: config 0 descriptor?? [ 363.176107][ T5890] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 363.749955][ T9336] IPv6: Can't replace route, no match found [ 364.336599][ T9346] netlink: 'syz.1.1035': attribute type 23 has an invalid length. [ 364.453784][ T9330] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[9330] [ 365.003393][ T1209] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 365.063197][ T5887] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 365.184457][ T1209] usb 2-1: config 0 has no interfaces? [ 365.203395][ T1209] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 365.256547][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.340878][ T5887] usb 4-1: config 0 has no interfaces? [ 365.353309][ T5887] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 365.375616][ T1209] usb 2-1: config 0 descriptor?? [ 365.391367][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.393441][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.451314][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.557392][ T5887] usb 4-1: config 0 descriptor?? [ 365.679991][ T5890] gspca_sonixj: reg_w1 err -71 [ 365.723470][ T5890] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 365.838376][ T5890] usb 3-1: USB disconnect, device number 59 [ 366.247805][ T5890] usb 2-1: USB disconnect, device number 55 [ 366.289321][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 366.333018][ T9368] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1042'. [ 366.569624][ T9372] vlan2: entered promiscuous mode [ 366.593547][ T5888] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 366.795397][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.825913][ T5888] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 366.840582][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.894145][ T5888] usb 5-1: config 0 descriptor?? [ 366.918079][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 367.166301][ T9384] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 367.314358][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 367.326597][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 367.359080][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 367.385444][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 367.401212][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 367.415419][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 367.432429][ T5888] pwc: recv_control_msg error -32 req 02 val 2000 [ 367.433684][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 367.456780][ T9392] vlan2: entered promiscuous mode [ 367.652697][ T5888] pwc: recv_control_msg error -32 req 04 val 1500 [ 367.663486][ T5890] usb 4-1: USB disconnect, device number 64 [ 367.668599][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 367.711364][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 367.772210][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 367.825169][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 367.836580][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 367.849551][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 367.861123][ T9396] loop8: detected capacity change from 0 to 7 [ 367.869607][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 367.883801][ T10] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 367.893230][ T9396] Dev loop8: unable to read RDB block 7 [ 367.898307][ T5888] pwc: recv_control_msg error -71 req 02 val 2400 [ 367.898840][ T9396] loop8: unable to read partition table [ 367.911765][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.929856][ T5888] pwc: recv_control_msg error -71 req 02 val 2600 [ 367.935705][ T10] usb 3-1: Product: syz [ 367.940507][ T10] usb 3-1: Manufacturer: syz [ 367.947523][ T9396] loop8: partition table beyond EOD, truncated [ 367.963440][ T10] usb 3-1: SerialNumber: syz [ 367.967094][ T5888] pwc: recv_control_msg error -71 req 02 val 2900 [ 367.968722][ T9396] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 367.990882][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 368.005328][ T10] usb 3-1: config 0 descriptor?? [ 368.022316][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 368.079756][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 368.119037][ T5888] pwc: Registered as video103. [ 368.148392][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 368.215417][ T5888] usb 5-1: USB disconnect, device number 51 [ 368.312461][ T10] usb 3-1: USB disconnect, device number 60 [ 368.633655][ T5887] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 368.671267][ T9419] binder: 9418:9419 ioctl c0306201 200000000ac0 returned -14 [ 368.826872][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 368.839547][ T5887] usb 2-1: config 0 has no interfaces? [ 368.884539][ T5887] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 368.893909][ T1209] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 368.926449][ T9424] fuse: Unknown parameter '0x00000000000000040x0000000000000006' [ 368.934583][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.942859][ T5887] usb 2-1: Product: syz [ 368.953200][ T5887] usb 2-1: Manufacturer: syz [ 368.971975][ T5887] usb 2-1: SerialNumber: syz [ 368.992303][ T9426] IPv6: Can't replace route, no match found [ 369.006069][ T5887] usb 2-1: config 0 descriptor?? [ 369.119619][ T1209] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 369.128681][ T1209] usb 4-1: config 0 has no interface number 0 [ 369.139818][ T1209] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 369.150682][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.163904][ T1209] usb 4-1: Product: syz [ 369.168203][ T1209] usb 4-1: Manufacturer: syz [ 369.172978][ T1209] usb 4-1: SerialNumber: syz [ 369.181350][ T1209] usb 4-1: config 0 descriptor?? [ 369.201731][ T1209] ftdi_sio 4-1:0.23: FTDI USB Serial Device converter detected [ 369.218092][ T9409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1060'. [ 369.228139][ T9409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1060'. [ 369.271258][ T1209] usb 4-1: Detected SIO [ 369.292616][ T1209] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 369.311541][ T5888] usb 2-1: USB disconnect, device number 56 [ 369.365148][ T5887] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 369.525164][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 369.538169][ T5887] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 369.547951][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.564100][ T9432] vlan2: entered promiscuous mode [ 369.570128][ T5887] usb 3-1: config 0 descriptor?? [ 369.581199][ T9428] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 370.119261][ T5887] bigben 0003:146B:0902.0007: unexpected rdesc, please submit for review [ 370.174563][ T5887] bigben 0003:146B:0902.0007: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 370.215599][ T9439] netlink: 'syz.4.1073': attribute type 23 has an invalid length. [ 370.223547][ T1209] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 370.241451][ T5887] bigben 0003:146B:0902.0007: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 370.264814][ T5887] bigben 0003:146B:0902.0007: no output report found [ 370.393245][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 370.402370][ T1209] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.428168][ T1209] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 370.504543][ T1209] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 370.542614][ T1209] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.568612][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 370.595404][ T1209] usb 1-1: SerialNumber: syz [ 370.636197][ T9437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 370.648287][ T9437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 370.717193][ T1209] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 370.779635][ T1209] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 370.805277][ T1209] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 370.959872][ T9452] netlink: 'syz.4.1077': attribute type 3 has an invalid length. [ 370.985345][ T1209] usb 1-1: USB disconnect, device number 58 [ 371.008924][ T5887] usb 3-1: USB disconnect, device number 61 [ 371.087996][ T9454] FAULT_INJECTION: forcing a failure. [ 371.087996][ T9454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.105100][ T9454] CPU: 0 UID: 0 PID: 9454 Comm: syz.4.1078 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 371.105130][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.105147][ T9454] Call Trace: [ 371.105155][ T9454] [ 371.105168][ T9454] dump_stack_lvl+0x189/0x250 [ 371.105205][ T9454] ? __pfx____ratelimit+0x10/0x10 [ 371.105231][ T9454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.105261][ T9454] ? __pfx__printk+0x10/0x10 [ 371.105283][ T9454] ? __might_fault+0xb0/0x130 [ 371.105322][ T9454] should_fail_ex+0x414/0x560 [ 371.105353][ T9454] _copy_from_user+0x2d/0xb0 [ 371.105375][ T9454] ___sys_sendmsg+0x158/0x2a0 [ 371.105398][ T9454] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.105456][ T9454] ? __fget_files+0x2a/0x420 [ 371.105474][ T9454] ? __fget_files+0x3a0/0x420 [ 371.105503][ T9454] __x64_sys_sendmsg+0x19b/0x260 [ 371.105526][ T9454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.105556][ T9454] ? __pfx_ksys_write+0x10/0x10 [ 371.105589][ T9454] ? do_syscall_64+0xbe/0x3b0 [ 371.105617][ T9454] do_syscall_64+0xfa/0x3b0 [ 371.105643][ T9454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.105673][ T9454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 371.105710][ T9454] ? clear_bhb_loop+0x60/0xb0 [ 371.105735][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.105754][ T9454] RIP: 0033:0x7fde6f38e969 [ 371.105776][ T9454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.105793][ T9454] RSP: 002b:00007fde702ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.105821][ T9454] RAX: ffffffffffffffda RBX: 00007fde6f5b5fa0 RCX: 00007fde6f38e969 [ 371.105836][ T9454] RDX: 00000000040040d0 RSI: 0000200000000100 RDI: 0000000000000003 [ 371.105848][ T9454] RBP: 00007fde702ac090 R08: 0000000000000000 R09: 0000000000000000 [ 371.105860][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.105872][ T9454] R13: 0000000000000000 R14: 00007fde6f5b5fa0 R15: 00007fde6f6dfa28 [ 371.105903][ T9454] [ 371.506075][ T10] usb 4-1: USB disconnect, device number 65 [ 371.519653][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 371.527217][ T9456] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1079'. [ 371.530223][ T10] ftdi_sio 4-1:0.23: device disconnected [ 372.236748][ T9478] fuse: Bad value for 'fd' [ 372.248401][ T30] audit: type=1800 audit(1748855034.526:52): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1085" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 372.417990][ T10] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 372.451878][ T9482] vivid-000: disconnect [ 372.518692][ T9485] vivid-000: reconnect [ 372.583183][ T1209] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 372.613303][ T5888] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 372.623872][ T10] usb 5-1: config 0 has an invalid interface number: 81 but max is 0 [ 372.652413][ T10] usb 5-1: config 0 has no interface number 0 [ 372.696814][ T10] usb 5-1: config 0 interface 81 has no altsetting 0 [ 372.710556][ T9488] vlan2: entered promiscuous mode [ 372.733126][ T10] usb 5-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=40.a8 [ 372.757077][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.773305][ T10] usb 5-1: Product: syz [ 372.783256][ T10] usb 5-1: Manufacturer: syz [ 372.790225][ T1209] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 372.803158][ T10] usb 5-1: SerialNumber: syz [ 372.804549][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 372.819479][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.828477][ T5888] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.841267][ T5888] usb 1-1: config 0 has no interface number 0 [ 372.850882][ T10] usb 5-1: config 0 descriptor?? [ 372.852839][ T5888] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.901982][ T5888] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 372.928438][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.929299][ T1209] usb 4-1: config 0 descriptor?? [ 372.996146][ T5888] usb 1-1: config 0 descriptor?? [ 373.006230][ T1209] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 373.022041][ T5888] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 373.239366][ T5888] usb 1-1: USB disconnect, device number 59 [ 373.325952][ T9494] fuse: Bad value for 'fd' [ 373.409827][ T1209] gp8psk: usb out operation failed. [ 373.417106][ T1209] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 373.448392][ T1209] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 373.507689][ T1209] usb 4-1: USB disconnect, device number 66 [ 373.572766][ T9498] input: syz1 as /devices/virtual/input/input18 [ 373.874142][ T5890] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 374.042208][ T9508] binder: 9506:9508 ioctl c0306201 200000000ac0 returned -14 [ 374.051404][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 374.080723][ T5890] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 374.105396][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.136954][ T5890] usb 2-1: config 0 descriptor?? [ 374.370416][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 374.403928][ T5890] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 374.447852][ T5890] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 374.498168][ T5890] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 374.562442][ T9520] vlan2: entered promiscuous mode [ 374.923152][ T5888] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 374.945798][ T9499] program syz.1.1096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.002119][ T30] audit: type=1326 audit(1748855037.256:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812b98e969 code=0x7ffc0000 [ 375.033494][ T30] audit: type=1326 audit(1748855037.256:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812b98e969 code=0x7ffc0000 [ 375.060543][ T10] HFC-S_USB 5-1:0.81: probe with driver HFC-S_USB failed with error -5 [ 375.115315][ T5888] usb 3-1: config 0 has no interfaces? [ 375.129135][ T5888] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 375.153388][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.190972][ T5888] usb 3-1: Product: syz [ 375.443763][ T5888] usb 3-1: Manufacturer: syz [ 375.448433][ T5888] usb 3-1: SerialNumber: syz [ 375.458369][ T10] usb 5-1: USB disconnect, device number 52 [ 375.474087][ T5888] usb 3-1: config 0 descriptor?? [ 375.488982][ T30] audit: type=1326 audit(1748855037.256:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f812b98e969 code=0x7ffc0000 [ 375.630878][ T30] audit: type=1326 audit(1748855037.256:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812b98e969 code=0x7ffc0000 [ 375.798173][ T30] audit: type=1326 audit(1748855037.256:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f812b98e969 code=0x7ffc0000 [ 375.924887][ T30] audit: type=1326 audit(1748855037.256:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812b98e969 code=0x7ffc0000 [ 376.045832][ T9538] netlink: 'syz.0.1110': attribute type 1 has an invalid length. [ 376.053728][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 376.161486][ T9538] bond2: entered promiscuous mode [ 376.167123][ T9538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.449199][ T30] audit: type=1326 audit(1748855037.256:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f812b98e969 code=0x7ffc0000 [ 376.479825][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 376.485628][ T30] audit: type=1326 audit(1748855037.256:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812b98e969 code=0x7ffc0000 [ 376.534225][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 376.545601][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.561328][ T30] audit: type=1326 audit(1748855037.266:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f812b98e969 code=0x7ffc0000 [ 376.587465][ T10] usb 5-1: Product: syz [ 376.951726][ T10] usb 5-1: Manufacturer: syz [ 376.984922][ T10] usb 5-1: SerialNumber: syz [ 377.075458][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 377.081835][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 377.559189][ T9533] Cannot find del_set index 0 as target [ 377.627797][ T5888] r8152-cfgselector 5-1: USB disconnect, device number 53 [ 377.670100][ T9547] trusted_key: syz.3.1113 sent an empty control message without MSG_MORE. [ 378.046389][ T10] usb 3-1: USB disconnect, device number 62 [ 378.566137][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 378.630086][ T9587] vlan2: entered promiscuous mode [ 378.646429][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.660696][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.743169][ T1209] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 378.750913][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 378.876396][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 378.907475][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 378.933425][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 378.979748][ T10] usb 3-1: Product: syz [ 378.986727][ T1209] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 379.010763][ T10] usb 3-1: Manufacturer: syz [ 379.056544][ T10] usb 3-1: SerialNumber: syz [ 379.061276][ T1209] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 379.175868][ T1209] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.189995][ T10] usb 3-1: config 0 descriptor?? [ 379.235338][ T9568] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 379.251540][ T1209] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.290672][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 379.299556][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.312348][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 379.345400][ T1209] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 379.408196][ T1209] usb 5-1: invalid MIDI out EP 0 [ 379.503194][ T5888] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 379.515417][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.640889][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.652017][ T9581] delete_channel: no stack [ 379.698231][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 379.721786][ T5888] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 379.767822][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.817965][ T1209] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 379.835629][ T5888] usb 4-1: config 0 descriptor?? [ 379.878708][ T9592] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 379.896627][ T1209] usb 5-1: USB disconnect, device number 54 [ 380.243657][ T10] usb 3-1: USB disconnect, device number 63 [ 380.302283][ T5888] bigben 0003:146B:0902.0008: unexpected rdesc, please submit for review [ 380.354014][ T5888] bigben 0003:146B:0902.0008: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 380.403218][ T5888] bigben 0003:146B:0902.0008: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 380.421357][ T5888] bigben 0003:146B:0902.0008: no output report found [ 380.518784][ T5888] usb 4-1: USB disconnect, device number 67 [ 380.578659][ T9595] fido_id[9595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 381.155147][ T9603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1130'. [ 381.243148][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 381.419462][ T10] usb 5-1: config 0 has no interfaces? [ 381.434512][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 381.458699][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.477070][ T10] usb 5-1: Product: syz [ 381.486983][ T10] usb 5-1: Manufacturer: syz [ 381.492344][ T10] usb 5-1: SerialNumber: syz [ 381.522723][ T10] usb 5-1: config 0 descriptor?? [ 381.732852][ T9611] loop8: detected capacity change from 0 to 8 [ 381.748313][ T9611] Dev loop8: unable to read RDB block 8 [ 381.779168][ T9611] loop8: unable to read partition table [ 381.853386][ T9611] loop8: partition table beyond EOD, truncated [ 381.895119][ T9611] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 382.101825][ T9614] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 383.054285][ T5888] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 383.337218][ T5888] usb 1-1: config 0 has no interfaces? [ 383.343477][ T5888] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 383.356917][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.383927][ T5888] usb 1-1: config 0 descriptor?? [ 383.924072][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 384.014485][ T1209] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 384.353166][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 384.361237][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 384.378155][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.406468][ T10] usb 3-1: config 0 descriptor?? [ 384.423994][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 384.434337][ T1209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.464285][ T5887] usb 5-1: USB disconnect, device number 55 [ 384.523155][ T1209] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 384.549291][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.561606][ T1209] usb 4-1: config 0 descriptor?? [ 384.577707][ T1209] pwc: Askey VC010 type 2 USB webcam detected. [ 384.988648][ T1209] pwc: recv_control_msg error -32 req 02 val 2b00 [ 385.003149][ T1209] pwc: recv_control_msg error -32 req 02 val 2700 [ 385.043971][ T1209] pwc: recv_control_msg error -32 req 02 val 2c00 [ 385.051734][ T1209] pwc: recv_control_msg error -32 req 04 val 1000 [ 385.101273][ T1209] pwc: recv_control_msg error -32 req 04 val 1300 [ 385.110695][ T1209] pwc: recv_control_msg error -32 req 04 val 1400 [ 385.325661][ T1209] pwc: recv_control_msg error -32 req 02 val 2100 [ 385.393711][ T1209] pwc: recv_control_msg error -32 req 04 val 1500 [ 385.498637][ T5888] usb 1-1: USB disconnect, device number 60 [ 385.606772][ T1209] pwc: recv_control_msg error -71 req 02 val 2400 [ 385.656639][ T1209] pwc: recv_control_msg error -71 req 02 val 2600 [ 385.680943][ T1209] pwc: recv_control_msg error -71 req 02 val 2900 [ 385.731297][ T1209] pwc: recv_control_msg error -71 req 02 val 2800 [ 385.776461][ T1209] pwc: recv_control_msg error -71 req 04 val 1100 [ 385.842885][ T1209] pwc: recv_control_msg error -71 req 04 val 1200 [ 385.942635][ T10] usb 3-1: USB disconnect, device number 64 [ 385.950313][ T1209] videodev: could not get a free minor [ 385.987059][ T1209] pwc: Failed to register as video device (-23). [ 386.008986][ T1209] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -23 [ 386.064382][ T1209] usb 4-1: USB disconnect, device number 68 [ 386.266052][ T5888] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 386.545331][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 386.565685][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.577575][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.606588][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 386.615906][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.628262][ T5888] usb 5-1: config 0 descriptor?? [ 387.196837][ T5888] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 387.223303][ T5909] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 387.403780][ T5909] usb 3-1: config 0 has no interfaces? [ 387.442115][ T5909] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 387.451521][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.463736][ T5909] usb 3-1: Product: syz [ 387.467937][ T5909] usb 3-1: Manufacturer: syz [ 387.482792][ T5909] usb 3-1: SerialNumber: syz [ 387.495808][ T5888] usb 5-1: USB disconnect, device number 56 [ 387.554254][ T5909] usb 3-1: config 0 descriptor?? [ 387.637045][ T9680] fido_id[9680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 388.461911][ T9693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.700289][ T9703] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 390.749408][ T9710] vlan2: entered promiscuous mode [ 390.843691][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.883949][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.924508][ T10] usb 3-1: USB disconnect, device number 65 [ 390.943391][ T1209] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 391.147027][ T1209] usb 5-1: unable to get BOS descriptor or descriptor too short [ 391.214125][ T1209] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 391.241336][ T1209] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 391.261720][ T1209] usb 5-1: config 63 has no interface number 0 [ 391.279059][ T1209] usb 5-1: config 63 interface 66 has no altsetting 0 [ 391.346293][ T1209] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 391.372351][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.399446][ T1209] usb 5-1: Product: syz [ 391.418258][ T1209] usb 5-1: Manufacturer: syz [ 391.427492][ T1209] usb 5-1: SerialNumber: syz [ 391.617232][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 391.617251][ T30] audit: type=1326 audit(1748855053.896:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 391.646123][ T5888] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 391.649440][ T9731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.730449][ T30] audit: type=1326 audit(1748855053.906:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 391.734276][ T9731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.818786][ T30] audit: type=1326 audit(1748855053.906:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 391.858399][ T5888] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 391.879833][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.880055][ T1209] usb 5-1: USB disconnect, device number 57 [ 391.926628][ T5888] usb 3-1: config 0 descriptor?? [ 391.948563][ T30] audit: type=1326 audit(1748855053.906:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 391.985052][ T30] audit: type=1326 audit(1748855053.906:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 391.988921][ T5888] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 392.015013][ T30] audit: type=1326 audit(1748855053.906:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 392.048245][ T30] audit: type=1326 audit(1748855053.906:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 392.070726][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 392.081754][ T30] audit: type=1326 audit(1748855053.906:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 392.118317][ T30] audit: type=1326 audit(1748855053.906:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 392.141174][ T30] audit: type=1326 audit(1748855053.906:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 392.253361][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 392.267450][ T10] usb 4-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 392.282337][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 392.302269][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 392.318561][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.344173][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.353845][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.361874][ T10] usb 4-1: Product: syz [ 392.390354][ T5888] gp8psk: usb out operation failed. [ 392.396598][ T5888] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 392.413279][ T5888] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 392.413544][ T10] usb 4-1: Manufacturer: syz [ 392.457921][ T5888] usb 3-1: USB disconnect, device number 66 [ 392.480109][ T10] usb 4-1: SerialNumber: syz [ 392.710491][ T10] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 392.721125][ T10] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 392.730532][ T10] usb 4-1: 2:1 : invalid channels 0 [ 392.862725][ T10] usb 4-1: USB disconnect, device number 69 [ 392.904235][ T6138] udevd[6138]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.945057][ T1209] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 393.063143][ T5887] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 393.123168][ T1209] usb 1-1: Using ep0 maxpacket: 8 [ 393.127726][ T9743] vlan2: entered promiscuous mode [ 393.138510][ T1209] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 393.157090][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.165346][ T1209] usb 1-1: Product: syz [ 393.169540][ T1209] usb 1-1: Manufacturer: syz [ 393.180502][ T1209] usb 1-1: SerialNumber: syz [ 393.199965][ T1209] usb 1-1: config 0 descriptor?? [ 393.227825][ T1209] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 393.236021][ T5887] usb 5-1: config 0 has no interfaces? [ 393.272097][ T5887] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 393.423378][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.448702][ T5887] usb 5-1: Product: syz [ 393.464940][ T5887] usb 5-1: Manufacturer: syz [ 393.469692][ T5887] usb 5-1: SerialNumber: syz [ 393.504930][ T5887] usb 5-1: config 0 descriptor?? [ 393.793860][ T5888] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 393.993218][ T5891] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 394.130244][ T5888] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 394.157993][ T5888] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.180803][ T5888] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.236544][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 394.282667][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.423250][ T5891] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 394.441387][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.596765][ T9751] delete_channel: no stack [ 394.619822][ T5891] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.633937][ T5888] usb 3-1: invalid MIDI out EP 0 [ 394.718527][ T5891] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.779773][ T5891] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 394.932340][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.311165][ T9750] delete_channel: no stack [ 395.337448][ T5888] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 395.351024][ T5891] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 395.406744][ T5891] usb 4-1: invalid MIDI out EP 0 [ 395.463837][ T5888] usb 3-1: USB disconnect, device number 67 [ 395.544133][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.567637][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.816383][ T1209] gspca_sonixj: reg_w1 err -71 [ 395.853557][ T1209] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 395.895795][ T1209] usb 1-1: USB disconnect, device number 61 [ 395.912147][ T5891] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 395.951164][ T5887] usb 5-1: USB disconnect, device number 58 [ 395.968696][ T5891] usb 4-1: USB disconnect, device number 70 [ 396.903157][ T1209] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 397.067259][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.082750][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.122777][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.146769][ T1209] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.165863][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.197484][ T1209] usb 5-1: config 0 descriptor?? [ 397.503197][ T5891] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 397.691703][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 397.710096][ T5891] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 397.719556][ T1209] plantronics 0003:047F:FFFF.000A: item fetching failed at offset 11/15 [ 397.738464][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.750619][ T1209] plantronics 0003:047F:FFFF.000A: parse failed [ 397.786945][ T1209] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22 [ 397.816248][ T5891] usb 3-1: config 0 descriptor?? [ 397.852373][ T5891] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 397.914491][ T24] usb 5-1: USB disconnect, device number 59 [ 398.007671][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 398.021757][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 398.197877][ T9790] loop8: detected capacity change from 0 to 8 [ 398.255246][ T9790] Dev loop8: unable to read RDB block 8 [ 398.323450][ T9790] loop8: unable to read partition table [ 398.329684][ T9790] loop8: partition table beyond EOD, truncated [ 398.390250][ T9790] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 399.264153][ T5891] gspca_nw80x: reg_w err -71 [ 399.268925][ T5891] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 399.283376][ T5891] usb 3-1: USB disconnect, device number 68 [ 399.623210][ T5888] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 399.698449][ T30] kauditd_printk_skb: 357 callbacks suppressed [ 399.698469][ T30] audit: type=1326 audit(1748855061.976:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 399.977200][ T5888] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 400.076118][ T5888] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 400.093523][ T30] audit: type=1326 audit(1748855062.006:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 400.131842][ T30] audit: type=1326 audit(1748855062.006:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fbad8e969 code=0x7ffc0000 [ 400.165663][ T30] audit: type=1326 audit(1748855062.006:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fbad8e969 code=0x7ffc0000 [ 400.183121][ T5888] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.245621][ T30] audit: type=1326 audit(1748855062.006:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fbad8e969 code=0x7ffc0000 [ 400.323555][ T5888] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 400.358739][ T30] audit: type=1326 audit(1748855062.006:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fbad8e969 code=0x7ffc0000 [ 400.432097][ T30] audit: type=1326 audit(1748855062.006:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fbad8e969 code=0x7ffc0000 [ 400.463233][ T30] audit: type=1326 audit(1748855062.006:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fbad8e969 code=0x7ffc0000 [ 400.485616][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.494126][ T30] audit: type=1326 audit(1748855062.016:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fbad2ab39 code=0x7ffc0000 [ 400.568433][ T5888] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 400.576569][ T5888] usb 5-1: invalid MIDI out EP 0 [ 400.593217][ T30] audit: type=1326 audit(1748855062.016:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.0.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fbad8e969 code=0x7ffc0000 [ 400.636609][ T9812] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1204'. [ 400.674280][ T9812] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1204'. [ 400.738586][ T9801] delete_channel: no stack [ 401.092039][ T5888] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 401.197769][ T5888] usb 5-1: USB disconnect, device number 60 [ 401.999752][ T9835] FAULT_INJECTION: forcing a failure. [ 401.999752][ T9835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.054814][ T9835] CPU: 1 UID: 0 PID: 9835 Comm: syz.2.1210 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 402.054842][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.054854][ T9835] Call Trace: [ 402.054861][ T9835] [ 402.054869][ T9835] dump_stack_lvl+0x189/0x250 [ 402.054903][ T9835] ? __pfx____ratelimit+0x10/0x10 [ 402.054924][ T9835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.054951][ T9835] ? __pfx__printk+0x10/0x10 [ 402.054972][ T9835] ? __might_fault+0xb0/0x130 [ 402.055006][ T9835] should_fail_ex+0x414/0x560 [ 402.055035][ T9835] _copy_from_user+0x2d/0xb0 [ 402.055056][ T9835] ____sys_sendmsg+0x2fe/0x830 [ 402.055081][ T9835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.055109][ T9835] ? import_iovec+0x74/0xa0 [ 402.055132][ T9835] ___sys_sendmsg+0x21f/0x2a0 [ 402.055153][ T9835] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.055206][ T9835] ? __fget_files+0x2a/0x420 [ 402.055222][ T9835] ? __fget_files+0x3a0/0x420 [ 402.055250][ T9835] __x64_sys_sendmsg+0x19b/0x260 [ 402.055271][ T9835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.055306][ T9835] ? __pfx_ksys_write+0x10/0x10 [ 402.055347][ T9835] ? rcu_is_watching+0x15/0xb0 [ 402.055378][ T9835] ? do_syscall_64+0xbe/0x3b0 [ 402.055407][ T9835] do_syscall_64+0xfa/0x3b0 [ 402.055430][ T9835] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.055453][ T9835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.055472][ T9835] ? clear_bhb_loop+0x60/0xb0 [ 402.055492][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.055509][ T9835] RIP: 0033:0x7fde6758e969 [ 402.055525][ T9835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.055541][ T9835] RSP: 002b:00007fde68406038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.055563][ T9835] RAX: ffffffffffffffda RBX: 00007fde677b5fa0 RCX: 00007fde6758e969 [ 402.055577][ T9835] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 402.055591][ T9835] RBP: 00007fde68406090 R08: 0000000000000000 R09: 0000000000000000 [ 402.055604][ T9835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.055615][ T9835] R13: 0000000000000000 R14: 00007fde677b5fa0 R15: 00007fde678dfa28 [ 402.055642][ T9835] [ 402.438054][ T9837] vlan2: entered promiscuous mode [ 402.900894][ T9843] bridge2: entered allmulticast mode [ 403.523539][ T9852] IPv6: Can't replace route, no match found [ 404.093589][ T9866] loop8: detected capacity change from 0 to 8 [ 404.111043][ T9864] netlink: 'syz.2.1220': attribute type 27 has an invalid length. [ 404.267551][ T9866] Dev loop8: unable to read RDB block 8 [ 404.313220][ T9866] loop8: unable to read partition table [ 404.323999][ T9866] loop8: partition table beyond EOD, truncated [ 404.338439][ T9864] bridge0: port 3(gretap0) entered disabled state [ 404.353326][ T9866] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 404.537397][ T5891] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 404.554942][ T9864] batman_adv: batadv0: Interface deactivated: dummy0 [ 404.743346][ T5891] usb 1-1: device descriptor read/64, error -71 [ 405.013397][ T5891] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 405.041124][ T9869] bridge0: port 3(gretap0) entered blocking state [ 405.047799][ T9869] bridge0: port 3(gretap0) entered forwarding state [ 405.068636][ T9869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.146454][ T1209] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 405.173539][ T5891] usb 1-1: device descriptor read/64, error -71 [ 405.191854][ T9880] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 405.298627][ T5891] usb usb1-port1: attempt power cycle [ 405.311649][ T9869] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.360180][ T1209] usb 5-1: config 169 has an invalid interface number: 210 but max is 2 [ 405.368996][ T1209] usb 5-1: config 169 has an invalid interface number: 246 but max is 2 [ 405.399994][ T1209] usb 5-1: config 169 has an invalid interface number: 189 but max is 2 [ 405.416461][ T9869] batman_adv: batadv0: Interface activated: dummy0 [ 405.425277][ T1209] usb 5-1: config 169 contains an unexpected descriptor of type 0x2, skipping [ 405.439456][ T1209] usb 5-1: config 169 has no interface number 0 [ 405.447800][ T1209] usb 5-1: config 169 has no interface number 1 [ 405.457184][ T1209] usb 5-1: config 169 has no interface number 2 [ 405.465378][ T9869] batadv0: mtu less than device minimum [ 405.471221][ T1209] usb 5-1: config 169 interface 210 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 405.491568][ T1209] usb 5-1: config 169 interface 210 altsetting 3 endpoint 0xB has an invalid bInterval 129, changing to 11 [ 405.492659][ T9869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.508606][ T1209] usb 5-1: config 169 interface 246 altsetting 50 has a duplicate endpoint with address 0x4, skipping [ 405.515235][ T9869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.535991][ T9869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.548046][ T9869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.559461][ T9869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.570913][ T9869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.582300][ T9869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.593869][ T9869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.605236][ T9869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.632529][ T1209] usb 5-1: config 169 interface 246 altsetting 50 has a duplicate endpoint with address 0x2, skipping [ 405.646821][ T1209] usb 5-1: config 169 interface 246 altsetting 50 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 405.763833][ T1209] usb 5-1: config 169 interface 246 altsetting 50 has a duplicate endpoint with address 0x4, skipping [ 405.798002][ T1209] usb 5-1: config 169 interface 246 altsetting 50 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 405.803208][ T5891] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 405.864846][ T1209] usb 5-1: config 169 interface 189 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 405.896752][ T1209] usb 5-1: config 169 interface 189 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 405.900334][ T5891] usb 1-1: device descriptor read/8, error -71 [ 405.923438][ T1209] usb 5-1: config 169 interface 189 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 405.968329][ T1209] usb 5-1: config 169 interface 189 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 406.043328][ T1209] usb 5-1: config 169 interface 189 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 406.073293][ T1209] usb 5-1: config 169 interface 189 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 406.117060][ T1209] usb 5-1: config 169 interface 189 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 406.147480][ T1209] usb 5-1: config 169 interface 189 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 406.188900][ T1209] usb 5-1: config 169 interface 189 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 406.203211][ T5891] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 406.243089][ T1209] usb 5-1: config 169 interface 189 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 406.263795][ T5891] usb 1-1: device descriptor read/8, error -71 [ 406.300541][ T1209] usb 5-1: config 169 interface 189 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 406.351441][ T1209] usb 5-1: config 169 interface 210 has no altsetting 0 [ 406.381156][ T1209] usb 5-1: config 169 interface 246 has no altsetting 0 [ 406.412406][ T1209] usb 5-1: config 169 interface 189 has no altsetting 0 [ 406.413559][ T5891] usb usb1-port1: unable to enumerate USB device [ 406.466046][ T1209] usb 5-1: Dual-Role OTG device on HNP port [ 406.472388][ T1209] usb 5-1: New USB device found, idVendor=093a, idProduct=2471, bcdDevice=a1.4e [ 406.507277][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.568237][ T1209] usb 5-1: Product: syz [ 406.572924][ T1209] usb 5-1: Manufacturer: 㰁 [ 406.593148][ T1209] usb 5-1: SerialNumber: syz [ 406.671994][ T9871] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 406.924726][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.988303][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.179942][ T1209] usb 5-1: USB disconnect, device number 61 [ 407.863214][ T5887] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 407.914429][ T9905] netlink: 'syz.4.1234': attribute type 23 has an invalid length. [ 408.033257][ T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 408.056779][ T5887] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 408.088125][ T5887] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 408.190871][ T5887] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.223134][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 408.236915][ T24] usb 3-1: config 0 has no interfaces? [ 408.245408][ T24] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 408.258662][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.265190][ T5887] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.321872][ T24] usb 3-1: Product: syz [ 408.331670][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.353282][ T24] usb 3-1: Manufacturer: syz [ 408.357995][ T24] usb 3-1: SerialNumber: syz [ 408.384131][ T24] usb 3-1: config 0 descriptor?? [ 408.426041][ T5887] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.462390][ T5887] usb 4-1: invalid MIDI out EP 0 [ 408.578437][ T5887] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 408.594976][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.667218][ T9901] delete_channel: no stack [ 408.687223][ T1209] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 408.700077][ T5887] usb 4-1: USB disconnect, device number 71 [ 408.845214][ T1209] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.853698][ T1209] usb 5-1: config 0 has no interface number 0 [ 408.867890][ T1209] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 408.887427][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.927117][ T5887] usb 3-1: USB disconnect, device number 69 [ 408.947735][ T1209] usb 5-1: config 0 descriptor?? [ 408.972963][ T1209] usb 5-1: selecting invalid altsetting 1 [ 408.980059][ T1209] dvb_ttusb_budget: ttusb_init_controller: error [ 408.987925][ T1209] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 409.195324][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 409.211784][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 409.537237][ T1209] DVB: Unable to find symbol cx22700_attach() [ 409.701570][ T1209] DVB: Unable to find symbol tda10046_attach() [ 409.728203][ T1209] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 409.809706][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'. [ 409.819072][ T9919] netlink: 'syz.1.1236': attribute type 5 has an invalid length. [ 409.827326][ T9919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1236'. [ 409.879314][ T9919] geneve3: entered promiscuous mode [ 409.885514][ T9919] geneve3: entered allmulticast mode [ 409.938277][ T1209] usb 5-1: USB disconnect, device number 62 [ 410.318674][ T9863] syz.0.1221 (9863): drop_caches: 1 [ 410.562587][ T9932] bridge3: entered allmulticast mode [ 410.593696][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 410.755765][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 410.776594][ T24] usb 5-1: config 2 has an invalid interface number: 45 but max is 0 [ 410.803143][ T24] usb 5-1: config 2 has no interface number 0 [ 410.813167][ T24] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 410.863359][ T24] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 410.955125][ T24] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 410.968440][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.989558][ T24] usb 5-1: Product: syz [ 411.013162][ T24] usb 5-1: Manufacturer: syz [ 411.028166][ T24] usb 5-1: SerialNumber: syz [ 411.088986][ T24] kobil_sct 5-1:2.45: KOBIL USB smart card terminal converter detected [ 411.162376][ T24] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 411.233679][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 411.233699][ T30] audit: type=1326 audit(1748855073.516:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9942 comm="syz.0.1245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fbad8e969 code=0x0 [ 411.290308][ T9924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.334443][ T9924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.406665][ T1209] usb 5-1: USB disconnect, device number 63 [ 411.433896][ T1209] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 411.452598][ T1209] kobil_sct 5-1:2.45: device disconnected [ 411.477779][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'. [ 412.519028][ T9967] FAULT_INJECTION: forcing a failure. [ 412.519028][ T9967] name failslab, interval 1, probability 0, space 0, times 0 [ 412.562582][ T9967] CPU: 1 UID: 0 PID: 9967 Comm: syz.4.1252 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 412.562612][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.562624][ T9967] Call Trace: [ 412.562632][ T9967] [ 412.562640][ T9967] dump_stack_lvl+0x189/0x250 [ 412.562677][ T9967] ? __pfx____ratelimit+0x10/0x10 [ 412.562702][ T9967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.562732][ T9967] ? __pfx__printk+0x10/0x10 [ 412.562758][ T9967] ? __pfx___might_resched+0x10/0x10 [ 412.562784][ T9967] ? fs_reclaim_acquire+0x7d/0x100 [ 412.562810][ T9967] should_fail_ex+0x414/0x560 [ 412.562843][ T9967] should_failslab+0xa8/0x100 [ 412.562875][ T9967] __kmalloc_cache_noprof+0x70/0x3d0 [ 412.562904][ T9967] ? rtm_new_nexthop+0x2704/0x7eb0 [ 412.562933][ T9967] rtm_new_nexthop+0x2704/0x7eb0 [ 412.562957][ T9967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.562996][ T9967] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 412.563037][ T9967] ? kasan_quarantine_put+0xdd/0x220 [ 412.563063][ T9967] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.563093][ T9967] ? nlmon_xmit+0xb0/0x100 [ 412.563121][ T9967] ? kmem_cache_free+0x18f/0x400 [ 412.563157][ T9967] ? __local_bh_enable_ip+0x12d/0x1c0 [ 412.563183][ T9967] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.563208][ T9967] ? __local_bh_enable_ip+0x12d/0x1c0 [ 412.563233][ T9967] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 412.563279][ T9967] ? __lock_acquire+0xab9/0xd20 [ 412.563331][ T9967] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 412.563353][ T9967] rtnetlink_rcv_msg+0x7cf/0xb70 [ 412.563388][ T9967] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 412.563415][ T9967] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.563442][ T9967] ? ref_tracker_free+0x63a/0x7d0 [ 412.563468][ T9967] ? __copy_skb_header+0xa7/0x550 [ 412.563492][ T9967] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.563520][ T9967] ? __skb_clone+0x63/0x7a0 [ 412.563558][ T9967] netlink_rcv_skb+0x205/0x470 [ 412.563592][ T9967] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.563623][ T9967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.563668][ T9967] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.563698][ T9967] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.563735][ T9967] netlink_unicast+0x758/0x8d0 [ 412.563776][ T9967] netlink_sendmsg+0x805/0xb30 [ 412.563806][ T9967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.563830][ T9967] ? aa_sock_msg_perm+0x94/0x160 [ 412.563859][ T9967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.563881][ T9967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.563901][ T9967] __sock_sendmsg+0x219/0x270 [ 412.563931][ T9967] ____sys_sendmsg+0x505/0x830 [ 412.563959][ T9967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.563990][ T9967] ? import_iovec+0x74/0xa0 [ 412.564016][ T9967] ___sys_sendmsg+0x21f/0x2a0 [ 412.564040][ T9967] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.564102][ T9967] ? __fget_files+0x2a/0x420 [ 412.564120][ T9967] ? __fget_files+0x3a0/0x420 [ 412.564151][ T9967] __x64_sys_sendmsg+0x19b/0x260 [ 412.564175][ T9967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.564207][ T9967] ? __pfx_ksys_write+0x10/0x10 [ 412.564231][ T9967] ? rcu_is_watching+0x15/0xb0 [ 412.564263][ T9967] ? do_syscall_64+0xbe/0x3b0 [ 412.564293][ T9967] do_syscall_64+0xfa/0x3b0 [ 412.564317][ T9967] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.564339][ T9967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.564359][ T9967] ? clear_bhb_loop+0x60/0xb0 [ 412.564384][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.564402][ T9967] RIP: 0033:0x7fde6f38e969 [ 412.564420][ T9967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.564437][ T9967] RSP: 002b:00007fde702ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.564458][ T9967] RAX: ffffffffffffffda RBX: 00007fde6f5b5fa0 RCX: 00007fde6f38e969 [ 412.564472][ T9967] RDX: 00000000040040d0 RSI: 0000200000000100 RDI: 0000000000000003 [ 412.564485][ T9967] RBP: 00007fde702ac090 R08: 0000000000000000 R09: 0000000000000000 [ 412.564498][ T9967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.564509][ T9967] R13: 0000000000000000 R14: 00007fde6f5b5fa0 R15: 00007fde6f6dfa28 [ 412.564539][ T9967] [ 412.965927][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.082705][ T9974] netlink: 'syz.1.1253': attribute type 8 has an invalid length. [ 413.113286][ T1209] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 413.275969][ T1209] usb 4-1: Using ep0 maxpacket: 32 [ 413.318048][ T1209] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 413.386696][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.464952][ T1209] usb 4-1: config 0 descriptor?? [ 413.510873][ T1209] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 413.554307][ T9995] sit0: entered promiscuous mode [ 413.584233][ T9995] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 413.599522][ T9995] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1258'. [ 414.392477][T10008] Cannot find del_set index 0 as target [ 414.433241][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.444012][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.668158][T10012] loop8: detected capacity change from 0 to 7 [ 414.706302][T10012] Dev loop8: unable to read RDB block 7 [ 414.712059][T10012] loop8: unable to read partition table [ 414.718194][T10012] loop8: partition table beyond EOD, truncated [ 414.726622][T10012] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 414.910009][ T5888] usb 4-1: USB disconnect, device number 72 [ 414.972637][T10019] FAULT_INJECTION: forcing a failure. [ 414.972637][T10019] name failslab, interval 1, probability 0, space 0, times 0 [ 414.988099][T10019] CPU: 1 UID: 0 PID: 10019 Comm: syz.2.1267 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 414.988129][T10019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.988142][T10019] Call Trace: [ 414.988150][T10019] [ 414.988158][T10019] dump_stack_lvl+0x189/0x250 [ 414.988205][T10019] ? __pfx____ratelimit+0x10/0x10 [ 414.988230][T10019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.988269][T10019] ? __pfx__printk+0x10/0x10 [ 414.988294][T10019] ? __pfx___might_resched+0x10/0x10 [ 414.988321][T10019] ? fs_reclaim_acquire+0x7d/0x100 [ 414.988347][T10019] should_fail_ex+0x414/0x560 [ 414.988378][T10019] should_failslab+0xa8/0x100 [ 414.988409][T10019] __kmalloc_cache_noprof+0x70/0x3d0 [ 414.988439][T10019] ? alloc_pipe_info+0xe9/0x4d0 [ 414.988473][T10019] alloc_pipe_info+0xe9/0x4d0 [ 414.988506][T10019] splice_direct_to_actor+0xa5d/0xcc0 [ 414.988545][T10019] ? aa_file_perm+0x11f/0xed0 [ 414.988574][T10019] ? aa_file_perm+0x3e7/0xed0 [ 414.988613][T10019] ? __lock_acquire+0xab9/0xd20 [ 414.988636][T10019] ? __pfx_direct_splice_actor+0x10/0x10 [ 414.988666][T10019] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 414.988695][T10019] ? __pfx_aa_file_perm+0x10/0x10 [ 414.988731][T10019] do_splice_direct+0x181/0x270 [ 414.988765][T10019] ? __pfx_do_splice_direct+0x10/0x10 [ 414.988795][T10019] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 414.988817][T10019] ? bpf_lsm_file_permission+0x9/0x20 [ 414.988843][T10019] ? security_file_permission+0x75/0x290 [ 414.988867][T10019] ? rw_verify_area+0x258/0x650 [ 414.988899][T10019] do_sendfile+0x4da/0x7e0 [ 414.988920][T10019] ? __pfx_vfs_write+0x10/0x10 [ 414.988954][T10019] ? __pfx_do_sendfile+0x10/0x10 [ 414.988975][T10019] ? __fget_files+0x3a0/0x420 [ 414.989005][T10019] __se_sys_sendfile64+0x13e/0x190 [ 414.989029][T10019] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 414.989048][T10019] ? rcu_is_watching+0x15/0xb0 [ 414.989080][T10019] ? do_syscall_64+0xbe/0x3b0 [ 414.989111][T10019] do_syscall_64+0xfa/0x3b0 [ 414.989138][T10019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.989157][T10019] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.989178][T10019] ? clear_bhb_loop+0x60/0xb0 [ 414.989202][T10019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.989221][T10019] RIP: 0033:0x7fde6758e969 [ 414.989239][T10019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.989270][T10019] RSP: 002b:00007fde68406038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 414.989291][T10019] RAX: ffffffffffffffda RBX: 00007fde677b5fa0 RCX: 00007fde6758e969 [ 414.989305][T10019] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 414.989317][T10019] RBP: 00007fde68406090 R08: 0000000000000000 R09: 0000000000000000 [ 414.989329][T10019] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001 [ 414.989342][T10019] R13: 0000000000000000 R14: 00007fde677b5fa0 R15: 00007fde678dfa28 [ 414.989372][T10019] [ 415.284659][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.718449][T10031] fuse: Bad value for 'fd' [ 415.817881][ T30] audit: type=1800 audit(1748855078.066:577): pid=10031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1270" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 415.943251][ T1209] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 416.105232][ T1209] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.125405][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 416.140007][ T1209] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 416.159273][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.179638][ T1209] usb 5-1: config 0 descriptor?? [ 416.769703][ T1209] magicmouse 0003:05AC:0269.000B: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 416.845210][ T5887] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 416.912905][ T10] usb 5-1: USB disconnect, device number 64 [ 416.982548][T10048] fido_id[10048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 417.013450][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 417.021543][ T5887] usb 1-1: config 0 has no interfaces? [ 417.031797][ T5887] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.aa [ 417.041442][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 417.051699][ T5887] usb 1-1: SerialNumber: syz [ 417.070272][ T5887] usb 1-1: config 0 descriptor?? [ 417.105271][ T1209] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 417.273762][ T1209] usb 4-1: device descriptor read/64, error -71 [ 417.316485][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.326940][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.513231][ T1209] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 417.644251][ T1209] usb 4-1: device descriptor read/64, error -71 [ 417.758233][ T1209] usb usb4-port1: attempt power cycle [ 418.103139][ T1209] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 418.129482][ T1209] usb 4-1: device descriptor read/8, error -71 [ 418.233543][T10064] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 418.245722][T10064] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 418.393154][ T1209] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 418.413983][ T1209] usb 4-1: device descriptor read/8, error -71 [ 418.523514][ T1209] usb usb4-port1: unable to enumerate USB device [ 419.154316][T10067] loop2: detected capacity change from 0 to 7 [ 419.168134][ T6138] Dev loop2: unable to read RDB block 7 [ 419.174211][ T6138] loop2: unable to read partition table [ 419.180186][ T6138] loop2: partition table beyond EOD, truncated [ 419.193524][T10067] Dev loop2: unable to read RDB block 7 [ 419.199499][T10067] loop2: unable to read partition table [ 419.205644][T10067] loop2: partition table beyond EOD, truncated [ 419.212082][T10067] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 419.455724][T10069] input: syz1 as /devices/virtual/input/input21 [ 419.628993][ T24] usb 1-1: USB disconnect, device number 67 [ 419.836888][T10078] vlan2: entered promiscuous mode [ 420.425356][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 420.831737][ T1209] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 420.955907][T10106] dlm: non-version read from control device 36 [ 420.976750][ T5891] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 420.987271][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1296'. [ 421.007301][ T1209] usb 3-1: Using ep0 maxpacket: 32 [ 421.021714][ T1209] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.c0 [ 421.039298][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.066400][ T1209] usb 3-1: config 0 descriptor?? [ 421.129444][T10111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 421.173264][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 421.199715][ T5891] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 421.214983][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.253126][ T5891] usb 5-1: config 0 descriptor?? [ 421.261064][T10102] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 421.284556][ T1209] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 421.342443][ T1209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 421.497159][ T1209] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 421.565578][ T1209] usb 3-1: media controller created [ 421.646583][T10123] dlm: non-version read from control device 36 [ 421.694637][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 421.722093][ T30] audit: type=1800 audit(1748855083.996:578): pid=10119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1298" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 421.943228][ T5887] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 421.987464][ T1209] az6027: usb out operation failed. (-71) [ 422.013548][ T1209] az6027: usb out operation failed. (-71) [ 422.053299][ T1209] stb0899_attach: Driver disabled by Kconfig [ 422.070691][ T1209] az6027: no front-end attached [ 422.070691][ T1209] [ 422.094038][ T1209] az6027: usb out operation failed. (-71) [ 422.100789][ T1209] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 422.143343][ T1209] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 422.195541][ T1209] dvb-usb: schedule remote query interval to 400 msecs. [ 422.202647][ T1209] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 422.210465][T10127] loop8: detected capacity change from 0 to 1 [ 422.217178][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 422.221782][ T5887] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 422.261873][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.281561][T10127] Dev loop8: unable to read RDB block 1 [ 422.299309][ T5887] usb 1-1: Product: syz [ 422.302065][T10127] loop8: unable to read partition table [ 422.309961][ T1209] usb 3-1: USB disconnect, device number 70 [ 422.317403][ T5887] usb 1-1: Manufacturer: syz [ 422.330126][T10127] loop8: partition table beyond EOD, truncated [ 422.342882][ T5887] usb 1-1: SerialNumber: syz [ 422.370787][T10127] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 422.421468][ T5887] usb 1-1: config 0 descriptor?? [ 422.448454][ T5887] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 422.564812][ T1209] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 423.493920][ T30] audit: type=1800 audit(1748855085.776:579): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1302" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 423.903432][ T24] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 424.056452][ T24] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 424.056483][ T24] usb 4-1: config 0 has no interface number 0 [ 424.061062][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 424.136644][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.136685][ T24] usb 4-1: Product: syz [ 424.136707][ T24] usb 4-1: Manufacturer: syz [ 424.136734][ T24] usb 4-1: SerialNumber: syz [ 424.157988][ T24] usb 4-1: config 0 descriptor?? [ 424.160926][ T24] ftdi_sio 4-1:0.23: FTDI USB Serial Device converter detected [ 424.161981][ T24] usb 4-1: Detected SIO [ 424.163725][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 424.812025][T10123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.812370][T10123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.813678][ T5887] gspca_sonixj: reg_w1 err -71 [ 424.873276][ T5887] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 424.883622][ T5887] usb 1-1: USB disconnect, device number 68 [ 425.156843][T10152] FAULT_INJECTION: forcing a failure. [ 425.156843][T10152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.157043][T10152] CPU: 1 UID: 0 PID: 10152 Comm: syz.1.1307 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 425.157069][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.157083][T10152] Call Trace: [ 425.157090][T10152] [ 425.157098][T10152] dump_stack_lvl+0x189/0x250 [ 425.157135][T10152] ? __pfx____ratelimit+0x10/0x10 [ 425.157160][T10152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.157191][T10152] ? __pfx__printk+0x10/0x10 [ 425.157215][T10152] ? __might_fault+0xb0/0x130 [ 425.157257][T10152] should_fail_ex+0x414/0x560 [ 425.157290][T10152] _copy_from_user+0x2d/0xb0 [ 425.157314][T10152] kstrtouint_from_user+0xc4/0x170 [ 425.157347][T10152] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 425.157395][T10152] proc_fail_nth_write+0x88/0x240 [ 425.157418][T10152] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 425.157448][T10152] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 425.157472][T10152] vfs_write+0x27e/0xa90 [ 425.157519][T10152] ? __pfx_vfs_write+0x10/0x10 [ 425.157549][T10152] ? __fget_files+0x2a/0x420 [ 425.157574][T10152] ? __fget_files+0x3a0/0x420 [ 425.157592][T10152] ? __fget_files+0x2a/0x420 [ 425.157621][T10152] ksys_write+0x145/0x250 [ 425.157653][T10152] ? __pfx_ksys_write+0x10/0x10 [ 425.157678][T10152] ? rcu_is_watching+0x15/0xb0 [ 425.157711][T10152] ? do_syscall_64+0xbe/0x3b0 [ 425.157743][T10152] do_syscall_64+0xfa/0x3b0 [ 425.157767][T10152] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.157792][T10152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.157813][T10152] ? clear_bhb_loop+0x60/0xb0 [ 425.157837][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.157857][T10152] RIP: 0033:0x7fbd26d8d41f [ 425.157875][T10152] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 425.157893][T10152] RSP: 002b:00007fbd27bdb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 425.157914][T10152] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd26d8d41f [ 425.157929][T10152] RDX: 0000000000000001 RSI: 00007fbd27bdb0a0 RDI: 0000000000000004 [ 425.157941][T10152] RBP: 00007fbd27bdb090 R08: 0000000000000000 R09: 0000000000000000 [ 425.157955][T10152] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 425.157967][T10152] R13: 0000000000000000 R14: 00007fbd26fb5fa0 R15: 00007fbd270dfa28 [ 425.158004][T10152] [ 426.327950][T10166] vlan2: entered promiscuous mode [ 426.328004][T10166] veth0: entered promiscuous mode [ 426.796356][T10162] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1310'. [ 427.477482][ T5887] usb 4-1: USB disconnect, device number 77 [ 427.503425][ T5887] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 427.565093][ T5887] ftdi_sio 4-1:0.23: device disconnected [ 427.891389][T10192] net_ratelimit: 11 callbacks suppressed [ 427.891417][T10192] openvswitch: netlink: IP tunnel dst address not specified [ 427.946917][T10191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1319'. [ 429.884971][ T30] audit: type=1800 audit(1748855092.156:580): pid=10202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1321" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 430.873170][ T5887] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 430.915433][T10217] FAULT_INJECTION: forcing a failure. [ 430.915433][T10217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.953172][T10217] CPU: 1 UID: 0 PID: 10217 Comm: syz.2.1327 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 430.953204][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.953221][T10217] Call Trace: [ 430.953229][T10217] [ 430.953237][T10217] dump_stack_lvl+0x189/0x250 [ 430.953275][T10217] ? __pfx____ratelimit+0x10/0x10 [ 430.953300][T10217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.953331][T10217] ? __pfx__printk+0x10/0x10 [ 430.953352][T10217] ? __might_fault+0xb0/0x130 [ 430.953405][T10217] should_fail_ex+0x414/0x560 [ 430.953438][T10217] _copy_from_user+0x2d/0xb0 [ 430.953460][T10217] do_sock_getsockopt+0x1cd/0x650 [ 430.953485][T10217] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 430.953504][T10217] ? __pfx_do_syscall_64+0x10/0x10 [ 430.953529][T10217] ? __fget_files+0x3a0/0x420 [ 430.953547][T10217] ? __fget_files+0x2a/0x420 [ 430.953573][T10217] __x64_sys_getsockopt+0x1a5/0x250 [ 430.953592][T10217] ? __pfx_do_syscall_64+0x10/0x10 [ 430.953620][T10217] ? __pfx_do_syscall_64+0x10/0x10 [ 430.953650][T10217] do_syscall_64+0xfa/0x3b0 [ 430.953674][T10217] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.953698][T10217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.953717][T10217] ? clear_bhb_loop+0x60/0xb0 [ 430.953742][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.953765][T10217] RIP: 0033:0x7fde6758e969 [ 430.953783][T10217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.953801][T10217] RSP: 002b:00007fde68406038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 430.953822][T10217] RAX: ffffffffffffffda RBX: 00007fde677b5fa0 RCX: 00007fde6758e969 [ 430.953837][T10217] RDX: 0000000000000071 RSI: 0000000000000084 RDI: 0000000000000003 [ 430.953850][T10217] RBP: 00007fde68406090 R08: 0000200000000140 R09: 0000000000000000 [ 430.953863][T10217] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 430.953876][T10217] R13: 0000000000000000 R14: 00007fde677b5fa0 R15: 00007fde678dfa28 [ 430.953907][T10217] [ 431.243251][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 431.250351][ T5887] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 431.353222][ T5887] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 431.419832][ T5887] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 431.433174][ T24] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 431.496375][ T5887] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 431.558596][ T5887] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.570109][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.588791][ T5887] usb 1-1: Product: キ䨈춈灸㹼웕뿨∊э饫ﮭ쳓≩㿔᷼㔛ﰈ謹練꥙홂좆諉 [ 431.623118][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 431.630688][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.641872][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.661919][ T5887] usb 1-1: SerialNumber: 硒禺竨Ṹゴ໭擕䐂௲덇㰸㋵ↂ紘奕蹐襣執棻䖔藋↰᜶䧚䠃ܵỆᇫ륭邥纸Ĵ淝﷥⽃熀嵄痥帾寙梡沛迃탶◃辰〈떌䶤멩뵛䳊忒Ꮊ墦㑚䉷궧幢菼ᥝ긬牃鞲坩鹯뛦倫⤛䩬쒇튩㦧⣷ƃ㟦ᵎቇ븞뢒텁ൢ쾜悝愐ɴ緍䀗累쭁源᥹챰웬婺萼膿ﲞ팛 [ 431.779405][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 431.813093][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.864269][ T24] usb 4-1: config 0 descriptor?? [ 432.290462][ T24] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 432.463462][ T5891] ath6kl: Failed to submit usb control message: -71 [ 432.479207][ T30] audit: type=1800 audit(1748855094.756:581): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1331" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 432.479258][ T5891] ath6kl: unable to send the bmi data to the device: -71 [ 432.539482][ T5887] cdc_ncm 1-1:1.0: bind() failure [ 432.546509][ T24] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 432.587933][ T5887] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 432.616117][ T5887] cdc_ncm 1-1:1.1: bind() failure [ 432.634692][ T5891] ath6kl: Unable to send get target info: -71 [ 432.642084][ T5891] ath6kl: Failed to init ath6kl core: -71 [ 432.664596][ T5887] usb 1-1: USB disconnect, device number 69 [ 432.674381][ T5891] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 432.709722][ T5891] usb 5-1: USB disconnect, device number 65 [ 432.739003][ T24] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 432.939781][ T24] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 433.174146][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 433.233799][T10236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.242695][T10236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.564222][ T5891] usb 4-1: reset high-speed USB device number 78 using dummy_hcd [ 434.273173][ T5887] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 434.511610][ T5887] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 434.525154][ T5887] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 434.651886][ T5887] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.692004][ T5887] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 434.729916][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.781190][ T5887] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.814845][ T5887] usb 1-1: invalid MIDI out EP 0 [ 434.966104][ T5890] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 435.030485][T10242] delete_channel: no stack [ 435.084921][ T5887] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 435.104154][ T5890] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 435.132244][ T5887] usb 1-1: USB disconnect, device number 70 [ 435.163866][ T5890] usb 2-1: USB disconnect, device number 57 [ 436.820942][T10263] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 437.152369][T10268] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1341'. [ 437.443351][ T5890] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 437.579740][T10274] netlink: 'syz.0.1342': attribute type 27 has an invalid length. [ 437.614346][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 437.620747][ T5890] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 437.631327][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 437.639468][ T5890] usb 5-1: can't read configurations, error -61 [ 437.689716][T10274] sit0: left promiscuous mode [ 437.722681][T10274] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.730253][T10274] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.773618][ T5890] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 437.928898][T10274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.947664][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 437.960066][ T5890] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 437.976060][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 437.987882][ T5890] usb 5-1: can't read configurations, error -61 [ 437.995289][ T5890] usb usb5-port1: attempt power cycle [ 438.002526][T10274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.139692][T10274] ------------[ cut here ]------------ [ 438.145443][T10274] WARNING: CPU: 0 PID: 10274 at kernel/kcov.c:872 kcov_remote_start+0x55a/0x7f0 [ 438.154493][T10274] Modules linked in: [ 438.158544][T10274] CPU: 0 UID: 0 PID: 10274 Comm: syz.0.1342 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 438.170274][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.180347][T10274] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 438.186093][T10274] Code: ff 4c 89 ff be 03 00 00 00 e8 32 a2 ff 02 e9 eb fa ff ff e8 d8 3f a4 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 8e 58 a4 09 89 c0 48 c7 c7 68 97 9c 92 48 03 3c c5 60 [ 438.205713][T10274] RSP: 0018:ffffc9000b386430 EFLAGS: 00010002 [ 438.211798][T10274] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 438.219778][T10274] RDX: 0000000000030000 RSI: ffffffff8db5d737 RDI: ffffffff8be26f40 [ 438.227765][T10274] RBP: ffffc9000b386690 R08: ffffc9000b3861b0 R09: 0000000000000020 [ 438.235758][T10274] R10: dffffc0000000000 R11: ffffffff819e82d0 R12: ffff8880b8628768 [ 438.243747][T10274] R13: ffffffff81c04487 R14: ffff88802f6c8000 R15: 0000000000000000 [ 438.251755][T10274] FS: 00007f4fbbb656c0(0000) GS:ffff888125c5f000(0000) knlGS:0000000000000000 [ 438.260725][T10274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.267319][T10274] CR2: 00002000001a8030 CR3: 00000000341ce000 CR4: 00000000003526f0 [ 438.275325][T10274] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 438.283415][T10274] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 438.291397][T10274] Call Trace: [ 438.294705][T10274] [ 438.297651][T10274] ieee80211_rx_list+0x53a/0x2d80 [ 438.302698][T10274] ? __d_instantiate+0x197/0x740 [ 438.307650][T10274] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 438.313127][T10274] ? __lock_acquire+0xab9/0xd20 [ 438.317995][T10274] ? ieee80211_rx_napi+0xca/0x3d0 [ 438.323046][T10274] ? ieee80211_rx_napi+0xca/0x3d0 [ 438.328124][T10274] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 438.334064][T10274] ? ieee80211_rx_napi+0xca/0x3d0 [ 438.339099][T10274] ieee80211_rx_napi+0x1a8/0x3d0 [ 438.344059][T10274] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 438.349534][T10274] ? skb_dequeue+0x10e/0x150 [ 438.354148][T10274] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 438.360141][T10274] ? ieee80211_stop_device+0x29/0xf0 [ 438.365521][T10274] ieee80211_stop_device+0x3e/0xf0 [ 438.370647][T10274] ieee80211_do_stop+0x17dd/0x1fa0 [ 438.375773][T10274] ? __lock_acquire+0xab9/0xd20 [ 438.380657][T10274] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 438.386054][T10274] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 438.391538][T10274] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 438.397443][T10274] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.402657][T10274] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.409004][T10274] ? wiphy_work_cancel+0x1eb/0x3c0 [ 438.414147][T10274] ieee80211_stop+0x1b1/0x220 [ 438.418842][T10274] ? __pfx_ieee80211_stop+0x10/0x10 [ 438.424079][T10274] __dev_close_many+0x361/0x6f0 [ 438.428957][T10274] ? __pfx___dev_close_many+0x10/0x10 [ 438.434358][T10274] __dev_change_flags+0x2c7/0x6d0 [ 438.439402][T10274] ? __pfx___dev_change_flags+0x10/0x10 [ 438.444964][T10274] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 438.451055][T10274] ? __pfx_netif_state_change+0x10/0x10 [ 438.456674][T10274] netif_change_flags+0x88/0x1a0 [ 438.461629][T10274] do_setlink+0xc55/0x41c0 [ 438.466066][T10274] ? __schedule+0x1713/0x4d00 [ 438.470763][T10274] ? __pfx_do_setlink+0x10/0x10 [ 438.475636][T10274] ? preempt_schedule_irq+0xb5/0x150 [ 438.480960][T10274] ? __lock_acquire+0xab9/0xd20 [ 438.485838][T10274] ? __mutex_trylock_common+0x153/0x260 [ 438.491401][T10274] ? __pfx___mutex_trylock_common+0x10/0x10 [ 438.497311][T10274] ? rcu_is_watching+0x15/0xb0 [ 438.502090][T10274] ? trace_contention_end+0x39/0x120 [ 438.507400][T10274] ? __mutex_lock+0x330/0xe80 [ 438.512090][T10274] ? irqentry_exit+0x74/0x90 [ 438.516690][T10274] ? __pfx_aa_get_newest_label+0x10/0x10 [ 438.522348][T10274] ? irqentry_exit+0x74/0x90 [ 438.526952][T10274] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.532189][T10274] rtnl_newlink+0x149f/0x1c70 [ 438.536886][T10274] ? netlink_sendmsg+0x805/0xb30 [ 438.541842][T10274] ? __pfx_rtnl_newlink+0x10/0x10 [ 438.546897][T10274] ? __pfx___schedule+0x10/0x10 [ 438.551781][T10274] ? irqentry_exit+0x74/0x90 [ 438.556393][T10274] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.561616][T10274] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 438.567821][T10274] ? preempt_schedule+0xae/0xc0 [ 438.572678][T10274] ? __dev_queue_xmit+0x27e/0x3a70 [ 438.577802][T10274] ? preempt_schedule_common+0x83/0xd0 [ 438.583269][T10274] ? preempt_schedule+0xae/0xc0 [ 438.588143][T10274] ? __pfx_preempt_schedule+0x10/0x10 [ 438.593530][T10274] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 438.599615][T10274] ? preempt_schedule_thunk+0x16/0x30 [ 438.605007][T10274] ? __local_bh_enable_ip+0x13e/0x1c0 [ 438.610407][T10274] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 438.616145][T10274] ? __dev_queue_xmit+0x27e/0x3a70 [ 438.621290][T10274] ? __lock_acquire+0xab9/0xd20 [ 438.626354][T10274] ? __pfx_rtnl_newlink+0x10/0x10 [ 438.631415][T10274] rtnetlink_rcv_msg+0x7cf/0xb70 [ 438.636376][T10274] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 438.641503][T10274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 438.646985][T10274] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 438.653948][T10274] netlink_rcv_skb+0x205/0x470 [ 438.658729][T10274] ? rcu_is_watching+0x15/0xb0 [ 438.663509][T10274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 438.669010][T10274] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.674334][T10274] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.679560][T10274] netlink_unicast+0x758/0x8d0 [ 438.684353][T10274] netlink_sendmsg+0x805/0xb30 [ 438.689134][T10274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.694429][T10274] ? aa_sock_msg_perm+0x94/0x160 [ 438.699396][T10274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.704706][T10274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.710000][T10274] __sock_sendmsg+0x219/0x270 [ 438.714696][T10274] ____sys_sendmsg+0x505/0x830 [ 438.719472][T10274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.724782][T10274] ? import_iovec+0x74/0xa0 [ 438.729303][T10274] ___sys_sendmsg+0x21f/0x2a0 [ 438.734001][T10274] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.739350][T10274] ? __fget_files+0x2a/0x420 [ 438.743960][T10274] ? __fget_files+0x3a0/0x420 [ 438.748685][T10274] __x64_sys_sendmsg+0x19b/0x260 [ 438.753639][T10274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.759150][T10274] ? rcu_is_watching+0x15/0xb0 [ 438.763938][T10274] ? do_syscall_64+0xbe/0x3b0 [ 438.768651][T10274] do_syscall_64+0xfa/0x3b0 [ 438.773169][T10274] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.778381][T10274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.784457][T10274] ? clear_bhb_loop+0x60/0xb0 [ 438.789146][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.795325][T10274] RIP: 0033:0x7f4fbad8e969 [ 438.799754][T10274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.819379][T10274] RSP: 002b:00007f4fbbb65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.827892][T10274] RAX: ffffffffffffffda RBX: 00007f4fbafb6240 RCX: 00007f4fbad8e969 [ 438.835873][T10274] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 438.843857][T10274] RBP: 00007f4fbae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 438.851834][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.859811][T10274] R13: 0000000000000000 R14: 00007f4fbafb6240 R15: 00007f4fbb0dfa28 [ 438.867809][T10274] [ 438.870847][T10274] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 438.878139][T10274] CPU: 0 UID: 0 PID: 10274 Comm: syz.0.1342 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 438.889863][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.899927][T10274] Call Trace: [ 438.903219][T10274] [ 438.906157][T10274] dump_stack_lvl+0x99/0x250 [ 438.910770][T10274] ? __asan_memcpy+0x40/0x70 [ 438.915371][T10274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.920586][T10274] ? __pfx__printk+0x10/0x10 [ 438.925198][T10274] panic+0x2db/0x790 [ 438.929123][T10274] ? __pfx_panic+0x10/0x10 [ 438.933583][T10274] __warn+0x31b/0x4b0 [ 438.937582][T10274] ? kcov_remote_start+0x55a/0x7f0 [ 438.942708][T10274] ? kcov_remote_start+0x55a/0x7f0 [ 438.947835][T10274] report_bug+0x2be/0x4f0 [ 438.952176][T10274] ? kcov_remote_start+0x55a/0x7f0 [ 438.957312][T10274] ? kcov_remote_start+0x55a/0x7f0 [ 438.962432][T10274] ? kcov_remote_start+0x55c/0x7f0 [ 438.967553][T10274] handle_bug+0x84/0x160 [ 438.971824][T10274] exc_invalid_op+0x1a/0x50 [ 438.976349][T10274] asm_exc_invalid_op+0x1a/0x20 [ 438.981206][T10274] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 438.986940][T10274] Code: ff 4c 89 ff be 03 00 00 00 e8 32 a2 ff 02 e9 eb fa ff ff e8 d8 3f a4 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 8e 58 a4 09 89 c0 48 c7 c7 68 97 9c 92 48 03 3c c5 60 [ 439.006588][T10274] RSP: 0018:ffffc9000b386430 EFLAGS: 00010002 [ 439.012677][T10274] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 439.020656][T10274] RDX: 0000000000030000 RSI: ffffffff8db5d737 RDI: ffffffff8be26f40 [ 439.028637][T10274] RBP: ffffc9000b386690 R08: ffffc9000b3861b0 R09: 0000000000000020 [ 439.036615][T10274] R10: dffffc0000000000 R11: ffffffff819e82d0 R12: ffff8880b8628768 [ 439.044598][T10274] R13: ffffffff81c04487 R14: ffff88802f6c8000 R15: 0000000000000000 [ 439.052580][T10274] ? kcov_remote_start+0x97/0x7f0 [ 439.057621][T10274] ? __pfx_hlock_conflict+0x10/0x10 [ 439.062859][T10274] ieee80211_rx_list+0x53a/0x2d80 [ 439.068040][T10274] ? __d_instantiate+0x197/0x740 [ 439.073025][T10274] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 439.078616][T10274] ? __lock_acquire+0xab9/0xd20 [ 439.083512][T10274] ? ieee80211_rx_napi+0xca/0x3d0 [ 439.088569][T10274] ? ieee80211_rx_napi+0xca/0x3d0 [ 439.093630][T10274] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 439.099547][T10274] ? ieee80211_rx_napi+0xca/0x3d0 [ 439.104589][T10274] ieee80211_rx_napi+0x1a8/0x3d0 [ 439.109550][T10274] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 439.115027][T10274] ? skb_dequeue+0x10e/0x150 [ 439.119628][T10274] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 439.125625][T10274] ? ieee80211_stop_device+0x29/0xf0 [ 439.130920][T10274] ieee80211_stop_device+0x3e/0xf0 [ 439.136052][T10274] ieee80211_do_stop+0x17dd/0x1fa0 [ 439.141199][T10274] ? __lock_acquire+0xab9/0xd20 [ 439.146093][T10274] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 439.151506][T10274] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 439.156996][T10274] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 439.162912][T10274] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.168131][T10274] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 439.174485][T10274] ? wiphy_work_cancel+0x1eb/0x3c0 [ 439.179628][T10274] ieee80211_stop+0x1b1/0x220 [ 439.184336][T10274] ? __pfx_ieee80211_stop+0x10/0x10 [ 439.189555][T10274] __dev_close_many+0x361/0x6f0 [ 439.194428][T10274] ? __pfx___dev_close_many+0x10/0x10 [ 439.199835][T10274] __dev_change_flags+0x2c7/0x6d0 [ 439.204889][T10274] ? __pfx___dev_change_flags+0x10/0x10 [ 439.210482][T10274] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 439.216489][T10274] ? __pfx_netif_state_change+0x10/0x10 [ 439.222057][T10274] netif_change_flags+0x88/0x1a0 [ 439.227015][T10274] do_setlink+0xc55/0x41c0 [ 439.231447][T10274] ? __schedule+0x1713/0x4d00 [ 439.236142][T10274] ? __pfx_do_setlink+0x10/0x10 [ 439.241002][T10274] ? preempt_schedule_irq+0xb5/0x150 [ 439.246309][T10274] ? __lock_acquire+0xab9/0xd20 [ 439.251187][T10274] ? __mutex_trylock_common+0x153/0x260 [ 439.256753][T10274] ? __pfx___mutex_trylock_common+0x10/0x10 [ 439.262671][T10274] ? rcu_is_watching+0x15/0xb0 [ 439.267456][T10274] ? trace_contention_end+0x39/0x120 [ 439.272795][T10274] ? __mutex_lock+0x330/0xe80 [ 439.277507][T10274] ? irqentry_exit+0x74/0x90 [ 439.282119][T10274] ? __pfx_aa_get_newest_label+0x10/0x10 [ 439.287785][T10274] ? irqentry_exit+0x74/0x90 [ 439.292393][T10274] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.297625][T10274] rtnl_newlink+0x149f/0x1c70 [ 439.302318][T10274] ? netlink_sendmsg+0x805/0xb30 [ 439.307276][T10274] ? __pfx_rtnl_newlink+0x10/0x10 [ 439.312319][T10274] ? __pfx___schedule+0x10/0x10 [ 439.317180][T10274] ? irqentry_exit+0x74/0x90 [ 439.321789][T10274] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.327010][T10274] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 439.333181][T10274] ? preempt_schedule+0xae/0xc0 [ 439.338043][T10274] ? __dev_queue_xmit+0x27e/0x3a70 [ 439.343198][T10274] ? preempt_schedule_common+0x83/0xd0 [ 439.348666][T10274] ? preempt_schedule+0xae/0xc0 [ 439.353531][T10274] ? __pfx_preempt_schedule+0x10/0x10 [ 439.358917][T10274] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 439.365000][T10274] ? preempt_schedule_thunk+0x16/0x30 [ 439.370387][T10274] ? __local_bh_enable_ip+0x13e/0x1c0 [ 439.375777][T10274] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 439.381520][T10274] ? __dev_queue_xmit+0x27e/0x3a70 [ 439.386652][T10274] ? __lock_acquire+0xab9/0xd20 [ 439.391541][T10274] ? __pfx_rtnl_newlink+0x10/0x10 [ 439.396584][T10274] rtnetlink_rcv_msg+0x7cf/0xb70 [ 439.401544][T10274] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 439.406673][T10274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 439.412156][T10274] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 439.419110][T10274] netlink_rcv_skb+0x205/0x470 [ 439.423897][T10274] ? rcu_is_watching+0x15/0xb0 [ 439.428683][T10274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 439.434161][T10274] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.439483][T10274] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.444710][T10274] netlink_unicast+0x758/0x8d0 [ 439.449509][T10274] netlink_sendmsg+0x805/0xb30 [ 439.454294][T10274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.459605][T10274] ? aa_sock_msg_perm+0x94/0x160 [ 439.464563][T10274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 439.469870][T10274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.475162][T10274] __sock_sendmsg+0x219/0x270 [ 439.479861][T10274] ____sys_sendmsg+0x505/0x830 [ 439.484638][T10274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.489945][T10274] ? import_iovec+0x74/0xa0 [ 439.494497][T10274] ___sys_sendmsg+0x21f/0x2a0 [ 439.499183][T10274] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.504428][T10274] ? __fget_files+0x2a/0x420 [ 439.509035][T10274] ? __fget_files+0x3a0/0x420 [ 439.513733][T10274] __x64_sys_sendmsg+0x19b/0x260 [ 439.518685][T10274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.524164][T10274] ? rcu_is_watching+0x15/0xb0 [ 439.528946][T10274] ? do_syscall_64+0xbe/0x3b0 [ 439.533644][T10274] do_syscall_64+0xfa/0x3b0 [ 439.538169][T10274] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.543381][T10274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.549455][T10274] ? clear_bhb_loop+0x60/0xb0 [ 439.554160][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.560066][T10274] RIP: 0033:0x7f4fbad8e969 [ 439.564504][T10274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.584120][T10274] RSP: 002b:00007f4fbbb65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.592543][T10274] RAX: ffffffffffffffda RBX: 00007f4fbafb6240 RCX: 00007f4fbad8e969 [ 439.600526][T10274] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 439.608513][T10274] RBP: 00007f4fbae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 439.616497][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.624489][T10274] R13: 0000000000000000 R14: 00007f4fbafb6240 R15: 00007f4fbb0dfa28 [ 439.632574][T10274] [ 439.635792][T10274] Kernel Offset: disabled [ 439.640129][T10274] Rebooting in 86400 seconds..