last executing test programs: 21.592901323s ago: executing program 1 (id=477): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000001005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 21.103938904s ago: executing program 1 (id=478): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, 0x0, 0xfdfd}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0x22eb}, @void, @eth={@local, @local, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x0, 0x1, 0x1}}, {@x25={0x805, {0x3, 0x8, 0xf1}}}}}, 0x1d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x34d4ddce7c5c73c0}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x54}}, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) syz_usb_connect$uac1(0x0, 0xe5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902d30003010000000904000000010100000a2401ff0300020102132406040006020000000000000001000000000924030000010000000924050100f8431cfd09240300fd0206040006240504"], 0x0) 17.644238645s ago: executing program 1 (id=489): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000054ee7a91087a52708a25f246fb7ae49fbf2d440b44af9f762fb243dc250188cb7e70792a16477cfa0b81841284de7d9011c77e740312cb80460e6c0ed336eaecbfe03798a2f6ba3ccc8a4f6bb7a6b7fc31cf00fd7cc13b66ab53da770fced4ff67712077d60520625cd17d33f1a57d9616d4198e839d759f653d5bb5cd5e36b2bff7f7823140670f513c6dcfd0019303de277f5c6c8d735ec0fbc61b79c98d9d68619334798e3494d8e33c57e51f0c62fe9c1862eb1d1d212f002646eecd98f75b0a541ca1b865d3a9a42027ba51", @ANYRES16, @ANYBLOB="030300001080fddbdf253d000000080001007063690011000200303030303a30303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x20048850) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000", @ANYRES64], 0x24}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) 15.208718744s ago: executing program 1 (id=505): r0 = semget(0x3, 0x3, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x4000010, r3, 0x3000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) semget(0x3, 0x3, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) socket$inet(0x2, 0x3, 0x6) (async) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) dup(r5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x4000010, r3, 0x3000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) (async) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) (async) 14.646631966s ago: executing program 1 (id=506): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x1, 0x6}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) mkdir(&(0x7f0000000840)='./file0\x00', 0x188) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0xfffffffffffffe1e) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_clone(0x80, &(0x7f00000001c0)="56f781b343f4725be69455dcbeeb56a6d203875ac610830caae6284f60309a5c8831cd1e1b569849798bd4b81fefad7fb3a5da85a503b10f843406ddee3c48eb91ea66e1076909efd8ce24b0644bc2e3bdf6c436717d2ac6ce5697187dcd7a6006ee90767b020d6a471b79298c8b9c60ac38b520ec7b26c502847b30b7cabfde4d11f2", 0x83, &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000380)) syz_open_procfs(r3, &(0x7f0000000000)='net/sctp\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='.\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d2a93cf7daaa91040ff600c797dca59e8657369b0bc096fe477cf964c6b5e5eb564bd12769f29fc39634462a3d0295f19f4c6143210efe86f3a05a2e0d9bc960124389e00a88f49ee0b84a7ceeac4abc77400e721e91dcdb20c3b5f9178fda6d25"}], 0x1, 0x0, 0xffffffffffffff40}, 0x4044000) 14.267912248s ago: executing program 1 (id=508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 4.599774301s ago: executing program 0 (id=551): mprotect(&(0x7f00001ad000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xd4822b38e095860a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) inotify_init1(0x80000) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1) 4.423031926s ago: executing program 0 (id=552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9f76f4661480294c", "5fa3c0bf46782bbee21b09b7446edc75", '\n\x00', "f11bb8cba3046ce3"}, 0x28) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000240)) 4.29318757s ago: executing program 0 (id=553): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') lseek(r0, 0x9, 0x0) r1 = open(0x0, 0x14927e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, '\x00', @raw_data=[0x10000, 0x3, 0x8, 0x0, 0x7fe, 0x101, 0xfff, 0x5, 0x8d0e, 0x3, 0xffffff64, 0x5, 0xd568, 0x7fffffff, 0xfd8, 0x2, 0x5, 0xb, 0x7, 0x0, 0x4, 0x4ec, 0xb9c, 0xa, 0x2, 0x5, 0x10001, 0xfff, 0x4, 0x0, 0x7, 0x1]}) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[], 0x0) 3.73881091s ago: executing program 3 (id=556): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x3, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) (async, rerun: 32) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x0, 0x3, 0x40, 0x21, 0x1000008, 0x0, 0x3}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x400, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x10}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3502, 0x0, 0x2}]}]}, 0xfc}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) write$sequencer(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="ff0a1f81fe0808c0"], 0x8) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0xfffffffffffffffc, &(0x7f00000003c0)) r6 = epoll_create(0xff9) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000002280)='THAWED\x00', 0x7) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x9000000c, 0x2000000}) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a0000000210001000000000004000000fc020000000000000000000000000000ffffffff000000000000000000000000000000004e2000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffff000000000f000000000000000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001ac1e00010000000000000000000000003c000000023500000a000200"], 0xa0}, 0x1, 0x0, 0x0, 0xe891}, 0x0) (async) rseq(0x0, 0x1, 0x21, 0x0) io_setup(0x8, &(0x7f0000000000)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x80) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "51c7a115"}]}}, 0x0}, 0x0) (async, rerun: 32) syz_pidfd_open(0x0, 0x0) (rerun: 32) 3.666398974s ago: executing program 3 (id=557): r0 = userfaultfd(0x80001) io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0x0, 0x0, 0x6}]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000ffffffffffffffc900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 3.455683364s ago: executing program 3 (id=558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000050018000000000008001000ffffff7f080009002205000005001900010000000800070000000000080015"], 0x64}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x23, 0xc1, 0x9f, 0x40, 0x5c6, 0x9068, 0x432a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7, 0x0, 0x2, 0xd7, 0xe2, 0xea, 0x0, [], [{}, {{0x9, 0x5, 0x89}}]}}]}}]}}, 0x0) 2.739519911s ago: executing program 4 (id=561): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/19, &(0x7f0000000240)=0x13) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xfffff001}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x6, 0x0, 0x2000000, 0x1, 0x2000000, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x5, 0x0, 0x8001, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0x2, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x3, 0x0, 0xfffffffc, 0x1, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_RATE64={0xc, 0x4, 0xec73e2f8611702aa}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01000000000000f9d0ffff0068000000030000000700000000000012050000000900000000000007000000000a00080000000009000000001e0000000000000300002000020000000300000000080000040000000000001103000000030000000600000000006303040000000000000901000000006100000000000000000069698c7d8dcd2aa985eea0af7f88db5c0f61b9bb0037884a7dac8652a351217200000000000000000000ec678b4f7f0d013f68fea5f86c2b565f6d8848ea120162aff419"], &(0x7f00000004c0)=""/3, 0x83, 0x3, 0x1, 0xffff, 0x10000}, 0x28) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0xfffffffd, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x22, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000540)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[r9], &(0x7f0000000600)=[{0xb9e8, 0x3, 0x4, 0x2}, {0x1, 0x1, 0x3, 0xc}, {0x1, 0x1, 0x3, 0x3}, {0x1, 0x3, 0xe, 0xb}, {0x2, 0x2, 0x10, 0x4}, {0x4, 0x3, 0xa}, {0x2, 0x1, 0xe, 0x1}, {0x4, 0x4, 0xb, 0x3}, {0x4, 0x3, 0x5, 0x6}]}, 0x94) 2.714451425s ago: executing program 4 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000001200000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a3200000000090001"], 0xc4}}, 0x0) 2.640853643s ago: executing program 4 (id=563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket(0x11, 0x2, 0x0) (async) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000640)={0x6, 0x16, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x1, [0x39df, 0x3, 0x7, 0x5, 0x9]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x7, 0xe6, [0x100000001, 0x1, 0x2, 0x6]}}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0x25, "a83a0e0ab79801e22edb7b32fc6a3dc63ae67c6c0d527025b0f9e978bfb35ce0649e6f6f79"}, @hao={0xc9, 0x10, @empty}]}, 0xc0) close(r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffb, 0x10, 0xd}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x1070bd28, 0xfffff003, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x200cc000) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r13, 0x1, 0x70bd2b, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0000}, 0x14) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r13, 0x1, 0x70bd2b, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0000}, 0x14) sendmsg$DEVLINK_CMD_PORT_SET(r11, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b26c54010000", @ANYRES16=r13, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x48881}, 0x24040884) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x2}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x7, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x2}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x7, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r14 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r14, 0x8912, &(0x7f0000000380)=@req={0x28, &(0x7f00000002c0)={'bridge0\x00', @ifru_flags=0x400}}) (async) ioctl$sock_SIOCGIFCONF(r14, 0x8912, &(0x7f0000000380)=@req={0x28, &(0x7f00000002c0)={'bridge0\x00', @ifru_flags=0x400}}) 2.483868586s ago: executing program 4 (id=564): syz_usb_connect(0x2, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8db3008720541005470012207010902740001000040000904"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r1 = gettid() setpgid(r1, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x16, 0x0, @tid=r1}, &(0x7f0000000180)) capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0xfffffffc, 0x7, 0x2, 0x2, 0x1, 0xfff}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') 2.105463433s ago: executing program 3 (id=565): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) 2.054230821s ago: executing program 3 (id=566): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}, {0x3, 0x5, 0x8, 0xffffffff}, {0x2, 0xd, 0x9, 0x8000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = gettid() r4 = getegid() sendmmsg$unix(r2, &(0x7f0000000400)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01, r4}}}], 0x20, 0x4008840}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002350f32", 0xfe60) (async) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002350f32", 0xfe60) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000001f40)={0xf9a0000, 0x545e, 0xfff, 0xffffffffffffffff, 0x0, 0x0}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000001f40)={0xf9a0000, 0x545e, 0xfff, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140008001000010000000000000000000000000a64000000060a0b04000000000000000002000000380004803400018009000100686173680000000024000280080002400000000c08000640000006dd080004400000040008000740002dee9ac21f6949d4c2ed0000010900010073797a30000000000900020073797a320000000014000000110001000000"], 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.867730527s ago: executing program 2 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x44100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2e9}]}}}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x1, 0x0) (async) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x44100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2e9}]}}}]}, 0x4c}}, 0x0) (async) 1.77465534s ago: executing program 2 (id=569): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x20010, r2, 0xaef26000) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r2, r2, 0x0, 0x210001) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ftruncate(r2, 0x80079a0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x20010, r2, 0xaef26000) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) sendfile(r2, r2, 0x0, 0x210001) (async) 1.501041163s ago: executing program 2 (id=570): r0 = userfaultfd(0x80001) io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0x0, 0x0, 0x6}]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000055aaffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 1.251913296s ago: executing program 2 (id=571): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xb, 0x3, 0x76, 0x81}, {0xb0, 0xfa, 0x0, 0x9}, {0x7ff, 0x21, 0x5f, 0x6}, {0x77c1, 0x2, 0x3, 0x8}, {0xa09, 0xd, 0x7, 0x6f}, {0x8, 0xa9, 0x6, 0x5}]}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458}) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/80, 0x50}], 0x1) (async) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/80, 0x50}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffb, 0x10100, 0x2, 0x4000004}, &(0x7f00000002c0), &(0x7f00000015c0)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000922000/0x2000)=nil, 0x2000}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 1.215319221s ago: executing program 0 (id=572): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) 1.172297698s ago: executing program 3 (id=573): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff1}, {0x0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x8000) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xc, 0xc8, 0xfa}}}, 0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580), &(0x7f0000001680), &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x40440c0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9c, 0x4) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 1.103560917s ago: executing program 4 (id=574): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0xfffffffe, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x800000000000000, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) 1.080277997s ago: executing program 0 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 1.058945378s ago: executing program 2 (id=576): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f00000002c0)="ab", 0x1, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x7, 0x0, r1, 0x0, 0x0, 0x0, 0x204}]) 615.635902ms ago: executing program 0 (id=577): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = epoll_create1(0x80000) sendmmsg$unix(r5, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x400c880) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000002c0)={0x80000018}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x1e, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_virt_wifi\x00'}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf4}, 0x1c) 587.818225ms ago: executing program 2 (id=578): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x2000) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000e000000a3000000a4cb18988978702f35dcd5fa03db9c03d243d0d1b46368c416bc79d5ddf207d1930901d26d95ef7e2c89ed33ee3332ca19e0ae3d754b8e05be5dc5f53c101f40c05738f6dd2b629039d894ba4f190f765f06a2a4f9e88776e17c28ec90fc283f284da77670b0f20f7b05140b5cfe116327216d961a805152c64a8d28ce582cdf70dd79cb45444b0e47a822cd666db75f5c8882c3dab5eaeef12192fd2eb16ab6ebf6ddab5921e2557d5770"]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e24, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)='!', 0x1}], 0x1}, 0x40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000003c0)=@int=0x9, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4682010503fcffffffff057681e603794e76000000010500000000000040000000000000006401000100000000000000003e003800010007002500010003000000000000000900000000000000ff030000000000000101000000000000b40000000000000009000000000000000100000000000000"], 0x78) close(r6) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semop(r7, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r7, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r7, 0x2, 0xf, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000002) landlock_restrict_self(0xffffffffffffffff, 0x1) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) execveat$binfmt(0xffffffffffffffff, r5, 0x0, 0x0, 0x1000) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}}, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x31, @remote, 0x9}, 0x1c) r8 = socket(0x10, 0x0, 0xde44) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000600)=@ethtool_sfeatures={0x3b, 0x1, [{0x1, 0x9}]}}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0100001900010029bd70000000000000000000000000000000ffffe0000001ff01000000000000000000000000000100000000000080000200000087000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004401050064010101000000000000000000000000000004d63200000002000000000000000000000000000000000000000535000003010900688f4038030000000900000064010100000000000000000000000000000004d26c00000002000000fe8000000000000000000000000000aa0135000003030002000000fe800000000000000000000000000035000004d26c00000002000000e0000002000000000000000000000000000000000103fe0000fcffff5af1000004000000ac1414aa000000000000000000000000000004d56c0000000a000000fe8000000000000000000000000000aa07350000040303004ef4000004000000ffffff7ffc010000000000000000000000000000000004d36c0000000a000000fe8000000000000000000000000000aa0135000007000700070000000004000005000000"], 0x1fc}}, 0x4000) 0s ago: executing program 4 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r8, 0xc054561d, &(0x7f00000003c0)={0x1, "16809f2e04865e4f0eb0f0a01415a98efac4e085ab9eeec24bf1362d808125d2", 0x2, 0x1000, 0xfffffffe, 0x140000, 0x4, 0x3, 0x7fff, 0x5}) kernel console output (not intermixed with test programs): compat=0 ip=0x7fe16498efc9 code=0x7ffc0000 [ 87.206301][ T43] usb 4-1: config 1 has no interface number 0 [ 87.233881][ T43] usb 4-1: config 1 interface 26 has no altsetting 0 [ 87.262690][ T43] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 87.274716][ T30] audit: type=1326 audit(1760884713.041:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16498efc9 code=0x7ffc0000 [ 87.428496][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.464973][ T43] usb 4-1: Product: syz [ 87.475067][ T43] usb 4-1: Manufacturer: syz [ 87.480441][ T30] audit: type=1326 audit(1760884713.041:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16498efc9 code=0x7ffc0000 [ 87.569991][ T43] usb 4-1: SerialNumber: syz [ 87.649892][ T30] audit: type=1326 audit(1760884713.041:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe16498efc9 code=0x7ffc0000 [ 87.673144][ T30] audit: type=1326 audit(1760884713.051:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16498efc9 code=0x7ffc0000 [ 87.699806][ T30] audit: type=1326 audit(1760884713.051:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16498efc9 code=0x7ffc0000 [ 87.755921][ T30] audit: type=1326 audit(1760884713.051:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fe16498efc9 code=0x7ffc0000 [ 87.932678][ T6104] batadv0: entered promiscuous mode [ 87.938366][ T6104] vlan2: entered promiscuous mode [ 87.992315][ T30] audit: type=1326 audit(1760884713.051:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16498efc9 code=0x7ffc0000 [ 88.295308][ T43] usb 4-1: unknown interface protocol 0x7d, assuming v1 [ 88.324546][ T43] usb 4-1: cannot find UAC_HEADER [ 88.372210][ T6132] x_tables: ip_tables: osf match: only valid for protocol 6 [ 88.419805][ T5887] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 88.434368][ T43] snd-usb-audio 4-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 88.485644][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.60'. [ 88.618166][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.634379][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 88.641907][ T43] usb 4-1: USB disconnect, device number 2 [ 88.650635][ T5887] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 88.672742][ T5887] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.683631][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.792724][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.814283][ T5887] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.863496][ T5887] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.929818][ T43] IPVS: starting estimator thread 0... [ 88.981727][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.004897][ T6144] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 89.019952][ T6144] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 89.030225][ T6144] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 89.180113][ T6141] IPVS: using max 38 ests per chain, 91200 per kthread [ 89.333297][ T5887] usb 1-1: usb_control_msg returned -32 [ 89.341122][ T5887] usbtmc 1-1:16.0: can't read capabilities [ 89.409152][ T6150] loop9: detected capacity change from 0 to 7 [ 89.428387][ T6150] Dev loop9: unable to read RDB block 7 [ 89.442226][ T6150] loop9: unable to read partition table [ 89.462693][ T6150] loop9: partition table beyond EOD, truncated [ 89.477782][ T6150] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 90.289932][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 90.306506][ T6159] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 90.313396][ T6161] netlink: 'syz.0.59': attribute type 5 has an invalid length. [ 90.322039][ T6161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.59'. [ 90.362059][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.409387][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.426371][ T6161] geneve2: entered promiscuous mode [ 90.431868][ T6161] geneve2: entered allmulticast mode [ 90.438472][ T6165] fuse: Unknown parameter '0000000000000000000000000000000000000000000010' [ 90.456855][ T61] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 90.466019][ T61] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 90.492291][ T61] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 90.528084][ T61] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 91.429989][ T5942] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.593510][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 91.619011][ T5942] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.648063][ T5942] usb 3-1: config 1 has an invalid interface number: 26 but max is 0 [ 91.662447][ T5942] usb 3-1: config 1 has no interface number 0 [ 91.695027][ T5942] usb 3-1: config 1 interface 26 has no altsetting 0 [ 91.719361][ T5942] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 91.736250][ T6195] fuse: Bad value for 'fd' [ 91.837543][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.860165][ T5942] usb 3-1: Product: syz [ 91.864363][ T5942] usb 3-1: Manufacturer: syz [ 91.869061][ T5942] usb 3-1: SerialNumber: syz [ 92.052519][ T5951] usb 1-1: USB disconnect, device number 9 [ 92.059884][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.188050][ T6179] batadv0: entered promiscuous mode [ 92.201128][ T6179] vlan2: entered promiscuous mode [ 92.220442][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 92.295482][ T43] usb 5-1: config 0 has no interfaces? [ 92.309430][ T43] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.539941][ T5942] usb 3-1: unknown interface protocol 0x7d, assuming v1 [ 92.547905][ T5942] usb 3-1: cannot find UAC_HEADER [ 92.585869][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.674727][ T5942] snd-usb-audio 3-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 92.683536][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.81'. [ 92.710853][ T43] usb 5-1: config 0 descriptor?? [ 92.794608][ T5942] usb 3-1: USB disconnect, device number 4 [ 93.039080][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.932029][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.194679][ T24] usb 3-1: config 0 has no interfaces? [ 94.234629][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 94.263632][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.350042][ T24] usb 3-1: Product: syz [ 94.384929][ T24] usb 3-1: Manufacturer: syz [ 94.426299][ T24] usb 3-1: SerialNumber: syz [ 94.441498][ T24] usb 3-1: config 0 descriptor?? [ 94.721419][ T6211] loop6: detected capacity change from 0 to 524288000 [ 94.755392][ T6223] bond0: (slave bond_slave_1): Releasing backup interface [ 94.919059][ T6226] geneve3: entered promiscuous mode [ 95.057427][ T24] usb 5-1: USB disconnect, device number 4 [ 95.070015][ T6226] geneve3: entered allmulticast mode [ 95.115965][ T6213] support for the xor transformation has been removed. [ 95.173682][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 95.304266][ T6228] netlink: 60 bytes leftover after parsing attributes in process `syz.3.86'. [ 95.580350][ T6231] veth0_to_team: entered promiscuous mode [ 95.659306][ T6236] loop9: detected capacity change from 0 to 7 [ 95.661350][ T6232] bridge0: port 3(macsec0) entered blocking state [ 95.675150][ T6232] bridge0: port 3(macsec0) entered disabled state [ 95.687029][ T6232] macsec0: entered allmulticast mode [ 95.693632][ T6232] veth1_macvtap: entered allmulticast mode [ 95.720195][ T6232] macsec0: entered promiscuous mode [ 95.732618][ T6232] bridge0: port 3(macsec0) entered blocking state [ 95.739669][ T6232] bridge0: port 3(macsec0) entered forwarding state [ 95.994969][ T6236] Dev loop9: unable to read RDB block 7 [ 96.037962][ T6236] loop9: unable to read partition table [ 96.094882][ T6236] loop9: partition table beyond EOD, truncated [ 96.162576][ T6236] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 96.539911][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.699941][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 96.711525][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 96.725173][ T24] usb 5-1: config 1 has an invalid interface number: 26 but max is 0 [ 96.746536][ T6267] geneve2: entered promiscuous mode [ 96.788717][ T6267] geneve2: entered allmulticast mode [ 96.794553][ T24] usb 5-1: config 1 has no interface number 0 [ 96.794591][ T24] usb 5-1: config 1 interface 26 has no altsetting 0 [ 96.797335][ T24] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 96.871487][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.880574][ T24] usb 5-1: Product: syz [ 96.884903][ T24] usb 5-1: Manufacturer: syz [ 96.897522][ T24] usb 5-1: SerialNumber: syz [ 96.948870][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.97'. [ 97.140525][ T5942] usb 3-1: USB disconnect, device number 5 [ 97.220473][ T6243] vlan2: entered promiscuous mode [ 97.359682][ T24] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 97.368178][ T24] usb 5-1: cannot find UAC_HEADER [ 97.369835][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.422584][ T24] snd-usb-audio 5-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 97.497775][ T24] usb 5-1: USB disconnect, device number 5 [ 97.529887][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 97.539080][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.554346][ T9] usb 2-1: config 0 has no interfaces? [ 97.578524][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 97.616695][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.657574][ T6291] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.682529][ T9] usb 2-1: config 0 descriptor?? [ 97.943322][ T6274] bond_slave_0: entered promiscuous mode [ 97.949494][ T6274] bond_slave_1: entered promiscuous mode [ 98.006239][ T6274] vlan3: entered promiscuous mode [ 98.023020][ T6274] bond0: entered promiscuous mode [ 98.132995][ T6301] syz.2.107 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 98.147070][ T6301] random: crng reseeded on system resumption [ 98.316486][ T5958] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.525143][ T5958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.535713][ T5958] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.545850][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.575253][ T5958] usb 5-1: config 0 descriptor?? [ 98.604162][ T5958] pwc: Askey VC010 type 2 USB webcam detected. [ 98.877657][ T6311] x_tables: ip_tables: osf match: only valid for protocol 6 [ 99.015696][ T5958] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.053612][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 99.206699][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.108'. [ 99.355262][ T6318] xt_l2tp: missing protocol rule (udp|l2tpip) [ 99.568630][ T5958] pwc: recv_control_msg error -32 req 02 val 2700 [ 100.103922][ T24] usb 2-1: USB disconnect, device number 3 [ 100.179847][ T5942] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 100.334470][ T5942] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 100.345763][ T5942] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.360270][ T5942] usb 1-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 100.392358][ T6329] loop6: detected capacity change from 0 to 7 [ 100.408802][ T6329] Dev loop6: unable to read RDB block 7 [ 100.446959][ T6329] loop6: AHDI p1 p2 p3 [ 100.458476][ T6329] loop6: partition table partially beyond EOD, truncated [ 100.458662][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.477042][ T6329] loop6: p1 start 4217409618 is beyond EOD, truncated [ 100.484840][ T6329] loop6: p2 size 108 extends beyond EOD, truncated [ 100.499543][ T5942] usb 1-1: config 0 descriptor?? [ 100.509836][ T5951] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 100.520966][ T6323] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 100.693994][ T5951] usb 3-1: device descriptor read/64, error -71 [ 100.718258][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 100.769047][ T6331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.116'. [ 100.946167][ T5951] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 100.970333][ T5942] usbhid 1-1:0.0: can't add hid device: -71 [ 100.976574][ T5942] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.004010][ T5942] usb 1-1: USB disconnect, device number 10 [ 101.116399][ T5951] usb 3-1: device descriptor read/64, error -71 [ 101.230343][ T5951] usb usb3-port1: attempt power cycle [ 101.534268][ T5958] pwc: recv_control_msg error -71 req 04 val 1000 [ 101.541528][ T5958] pwc: recv_control_msg error -71 req 04 val 1300 [ 101.569878][ T5951] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 101.598039][ T5958] pwc: recv_control_msg error -71 req 04 val 1400 [ 101.600637][ T5951] usb 3-1: device descriptor read/8, error -71 [ 101.607586][ T5958] pwc: recv_control_msg error -71 req 02 val 2000 [ 101.903010][ T5958] pwc: recv_control_msg error -71 req 02 val 2100 [ 101.931149][ T5958] pwc: recv_control_msg error -71 req 04 val 1500 [ 102.016529][ T5958] pwc: recv_control_msg error -71 req 02 val 2500 [ 102.157552][ T5951] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 102.216138][ T5951] usb 3-1: device descriptor read/8, error -71 [ 102.260148][ T6348] x_tables: ip_tables: osf match: only valid for protocol 6 [ 102.268075][ T5958] pwc: recv_control_msg error -71 req 02 val 2400 [ 102.330000][ T5958] pwc: recv_control_msg error -71 req 02 val 2600 [ 102.347185][ T5958] pwc: recv_control_msg error -71 req 02 val 2900 [ 102.370963][ T5951] usb usb3-port1: unable to enumerate USB device [ 102.473096][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.119'. [ 102.512564][ T5958] pwc: recv_control_msg error -71 req 02 val 2800 [ 102.519552][ T5958] pwc: recv_control_msg error -71 req 04 val 1100 [ 102.526462][ T5958] pwc: recv_control_msg error -71 req 04 val 1200 [ 102.562424][ T5958] pwc: Registered as video103. [ 102.601808][ T5958] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 102.677960][ T5958] usb 5-1: USB disconnect, device number 6 [ 103.724510][ T5958] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 103.901360][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 103.911150][ T5958] usb 3-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 103.943178][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.965191][ T6379] warning: `syz.4.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.977119][ T5958] usb 3-1: Product: syz [ 103.988128][ T5958] usb 3-1: Manufacturer: syz [ 104.006193][ T5958] usb 3-1: SerialNumber: syz [ 104.025045][ T5958] usb 3-1: config 0 descriptor?? [ 104.190716][ T5951] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.253419][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 104.268954][ T6371] veth0: entered promiscuous mode [ 104.283027][ T6371] veth0: left promiscuous mode [ 104.322387][ T6412] netlink: 48 bytes leftover after parsing attributes in process `syz.1.139'. [ 104.334192][ T6413] netlink: 48 bytes leftover after parsing attributes in process `syz.1.139'. [ 104.351565][ T5951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.363581][ T5951] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.379365][ T9] usb 3-1: USB disconnect, device number 10 [ 104.379464][ T5951] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.402334][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.412081][ T5951] usb 4-1: Product: syz [ 104.416362][ T5951] usb 4-1: Manufacturer: syz [ 104.422010][ T5951] usb 4-1: SerialNumber: syz [ 104.696298][ T6421] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 104.769412][ T6425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.141'. [ 104.957273][ T6428] bond0: (slave bond_slave_1): Releasing backup interface [ 104.969908][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 105.217082][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.271082][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.388331][ T6431] veth0_to_team: entered promiscuous mode [ 105.397338][ T9] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 105.619491][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.638433][ T6431] netlink: 60 bytes leftover after parsing attributes in process `syz.2.143'. [ 105.652891][ T6431] bridge0: port 3(macsec0) entered blocking state [ 105.660425][ T9] usb 5-1: Product: syz [ 105.664618][ T9] usb 5-1: Manufacturer: syz [ 105.672038][ T6431] bridge0: port 3(macsec0) entered disabled state [ 105.673915][ T9] usb 5-1: SerialNumber: syz [ 105.688667][ T9] usb 5-1: config 0 descriptor?? [ 105.694442][ T6431] macsec0: entered allmulticast mode [ 105.709331][ T6431] veth1_macvtap: entered allmulticast mode [ 105.746591][ T6431] macsec0: entered promiscuous mode [ 105.753881][ T6431] bridge0: port 3(macsec0) entered blocking state [ 105.760517][ T6431] bridge0: port 3(macsec0) entered forwarding state [ 105.811265][ T5951] cdc_ncm 4-1:1.0: bind() failure [ 105.825046][ T5951] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 106.009809][ T5951] cdc_ncm 4-1:1.1: bind() failure [ 106.031486][ T5951] usb 4-1: USB disconnect, device number 3 [ 106.160226][ T6436] loop6: detected capacity change from 0 to 524288000 [ 106.732140][ T9] usb 5-1: USB disconnect, device number 7 [ 106.985030][ T6450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.147'. [ 107.000196][ T6451] x_tables: ip_tables: osf match: only valid for protocol 6 [ 107.034958][ T6453] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 107.290297][ T6457] Cannot find del_set index 0 as target [ 107.647243][ T6478] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 107.770446][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 107.852731][ T5942] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.951906][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 107.959642][ T24] usb 1-1: config 2 has an invalid interface number: 241 but max is 0 [ 107.978289][ T24] usb 1-1: config 2 has no interface number 0 [ 108.001941][ T24] usb 1-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.029841][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 108.035201][ T24] usb 1-1: config 2 interface 241 has no altsetting 0 [ 108.043966][ T5942] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.065424][ T5942] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.074303][ T24] usb 1-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 108.091907][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.100128][ T5942] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 108.119807][ T24] usb 1-1: Product: syz [ 108.129795][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.138020][ T24] usb 1-1: Manufacturer: syz [ 108.149763][ T24] usb 1-1: SerialNumber: syz [ 108.169251][ T5942] usb 4-1: config 0 descriptor?? [ 108.195514][ T24] ti_usb_3410_5052 1-1:2.241: TI USB 3410 1 port adapter converter detected [ 108.225371][ T24] ti_usb_3410_5052 1-1:2.241: missing endpoints [ 108.574286][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 108.584874][ T9] usb 1-1: USB disconnect, device number 11 [ 108.591062][ T5942] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 108.695724][ T5942] usb 4-1: USB disconnect, device number 4 [ 108.888386][ T6487] fido_id[6487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 109.289851][ T5887] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 109.333787][ T6498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.161'. [ 109.442394][ T5887] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 109.469020][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.509548][ T5887] usb 3-1: config 0 descriptor?? [ 109.545666][ T5887] cp210x 3-1:0.0: cp210x converter detected [ 109.671406][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 109.841426][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 109.869860][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 109.885529][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.910914][ T9] usb 5-1: config 1 has an invalid interface number: 26 but max is 0 [ 109.919045][ T9] usb 5-1: config 1 has no interface number 0 [ 109.942769][ T5887] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 109.963832][ T5887] usb 3-1: cp210x converter now attached to ttyUSB0 [ 109.995116][ T9] usb 5-1: config 1 interface 26 has no altsetting 0 [ 110.276551][ T5887] usb 3-1: USB disconnect, device number 11 [ 110.282548][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 110.339992][ T5887] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 110.341320][ T9] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 110.519113][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.542047][ T24] usb 1-1: config 2 has an invalid interface number: 45 but max is 0 [ 110.560256][ T24] usb 1-1: config 2 has no interface number 0 [ 110.566417][ T24] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 110.623159][ T9] usb 5-1: Product: syz [ 110.627375][ T9] usb 5-1: Manufacturer: syz [ 110.652965][ T5887] cp210x 3-1:0.0: device disconnected [ 110.662373][ T9] usb 5-1: SerialNumber: syz [ 110.705594][ T24] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.746723][ T24] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 110.756643][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.767747][ T24] usb 1-1: Product: syz [ 110.777115][ T24] usb 1-1: Manufacturer: syz [ 110.794759][ T24] usb 1-1: SerialNumber: syz [ 110.823030][ T24] kobil_sct 1-1:2.45: KOBIL USB smart card terminal converter detected [ 110.974305][ T6496] vlan2: entered promiscuous mode [ 111.034040][ T24] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 111.216829][ T6526] loop6: detected capacity change from 0 to 7 [ 111.272187][ T6526] Dev loop6: unable to read RDB block 7 [ 111.284481][ T6526] loop6: AHDI p1 p2 p3 [ 111.298291][ T6526] loop6: partition table partially beyond EOD, truncated [ 111.313925][ T6526] loop6: p1 start 4217409618 is beyond EOD, truncated [ 111.386714][ T9] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 111.416020][ T9] usb 5-1: cannot find UAC_HEADER [ 111.438089][ T9] snd-usb-audio 5-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 111.441083][ T9] usb 5-1: USB disconnect, device number 8 [ 111.446445][ T6526] loop6: p2 size 108 extends beyond EOD, truncated [ 111.491225][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.809238][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 111.809431][ T30] audit: type=1326 audit(1760884738.041:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x0 [ 112.026755][ T6538] loop6: detected capacity change from 0 to 7 [ 112.040848][ T6538] Dev loop6: unable to read RDB block 7 [ 112.051876][ T6538] loop6: AHDI p3 [ 112.058639][ T6538] loop6: partition table partially beyond EOD, truncated [ 112.140939][ T6543] program syz.2.174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.262115][ T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 112.461126][ T6543] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 112.550366][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 112.557813][ T6545] geneve2: entered promiscuous mode [ 112.583712][ T6545] geneve2: entered allmulticast mode [ 112.638195][ T5942] usb 1-1: USB disconnect, device number 12 [ 112.666560][ T5942] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 112.712419][ T5942] kobil_sct 1-1:2.45: device disconnected [ 112.720962][ T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 112.766388][ T6547] vlan2: entered allmulticast mode [ 112.772296][ T6547] bridge0: port 3(vlan2) entered blocking state [ 112.778841][ T6547] bridge0: port 3(vlan2) entered disabled state [ 112.800799][ T6547] vlan2: entered promiscuous mode [ 112.969831][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 112.982695][ T9] usb usb2-port1: attempt power cycle [ 113.081930][ T6550] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 113.096352][ T6550] Zero length message leads to an empty skb [ 113.256546][ T6562] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 113.266290][ T6562] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 113.274853][ T6562] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 113.314646][ T30] audit: type=1326 audit(1760884739.471:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 113.382787][ T9] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 113.392720][ T30] audit: type=1326 audit(1760884739.481:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 113.461270][ T30] audit: type=1326 audit(1760884739.481:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 113.559917][ T1213] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.581285][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 113.641274][ T30] audit: type=1326 audit(1760884739.481:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 113.665136][ T30] audit: type=1326 audit(1760884739.481:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 113.688312][ T30] audit: type=1326 audit(1760884739.481:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 113.722094][ T1213] usb 4-1: device descriptor read/64, error -71 [ 113.728497][ T9] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 113.733708][ T6568] loop6: detected capacity change from 0 to 7 [ 113.764304][ T6568] Dev loop6: unable to read RDB block 7 [ 113.779879][ T6568] loop6: AHDI p1 p2 p3 [ 113.785686][ T6568] loop6: partition table partially beyond EOD, truncated [ 113.785725][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 113.801332][ T30] audit: type=1326 audit(1760884739.481:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 113.803427][ T9] usb usb2-port1: unable to enumerate USB device [ 113.844285][ T6568] loop6: p1 start 4217409618 is beyond EOD, truncated [ 113.852831][ T6568] loop6: p2 size 108 extends beyond EOD, truncated [ 113.915908][ T30] audit: type=1326 audit(1760884739.481:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 114.009095][ T1213] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.043078][ T30] audit: type=1326 audit(1760884739.481:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 114.099589][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 114.160648][ T1213] usb 4-1: device descriptor read/64, error -71 [ 114.280123][ T1213] usb usb4-port1: attempt power cycle [ 114.819651][ T1213] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.870087][ T1213] usb 4-1: device descriptor read/8, error -71 [ 115.003982][ T6583] binder: BINDER_SET_CONTEXT_MGR already set [ 115.012331][ T6583] binder: 6579:6583 ioctl 4018620d 200000004a80 returned -16 [ 115.107554][ T6590] x_tables: ip_tables: osf match: only valid for protocol 6 [ 115.109850][ T1213] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 115.147251][ T6589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.187'. [ 115.200822][ T1213] usb 4-1: device descriptor read/8, error -71 [ 115.310979][ T1213] usb usb4-port1: unable to enumerate USB device [ 115.621903][ T6602] loop6: detected capacity change from 0 to 7 [ 115.630683][ T6602] Dev loop6: unable to read RDB block 7 [ 115.636457][ T6602] loop6: AHDI p1 p2 p3 [ 115.641578][ T6602] loop6: partition table partially beyond EOD, truncated [ 115.648786][ T6602] loop6: p1 start 4217409618 is beyond EOD, truncated [ 115.655674][ T6602] loop6: p2 size 108 extends beyond EOD, truncated [ 115.669834][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 115.701137][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 115.832112][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 115.843839][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.856818][ T9] usb 5-1: config 1 has an invalid interface number: 125 but max is 0 [ 115.867163][ T9] usb 5-1: config 1 has no interface number 0 [ 115.873622][ T9] usb 5-1: config 1 interface 125 has no altsetting 0 [ 115.884284][ T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=3c.51 [ 115.997829][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.007630][ T9] usb 5-1: Product: syz [ 116.028829][ T9] usb 5-1: Manufacturer: syz [ 116.034478][ T9] usb 5-1: SerialNumber: syz [ 116.108620][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 116.359327][ T1213] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 116.409316][ T9] qmi_wwan 5-1:1.125: probe with driver qmi_wwan failed with error -22 [ 116.423841][ T9] usb 5-1: USB disconnect, device number 9 [ 116.678246][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 116.727983][ T1213] usb 3-1: config 9 has an invalid interface number: 32 but max is 0 [ 116.738028][ T1213] usb 3-1: config 9 has no interface number 0 [ 116.745450][ T1213] usb 3-1: config 9 interface 32 has no altsetting 0 [ 116.767993][ T1213] usb 3-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 116.777386][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.785778][ T1213] usb 3-1: Product: syz [ 116.790518][ T1213] usb 3-1: Manufacturer: syz [ 116.795205][ T1213] usb 3-1: SerialNumber: syz [ 118.277576][ T6633] loop6: detected capacity change from 0 to 7 [ 118.290184][ T6633] Dev loop6: unable to read RDB block 7 [ 118.302216][ T6633] loop6: AHDI p1 p2 p3 [ 118.310119][ T6633] loop6: partition table partially beyond EOD, truncated [ 118.390102][ T6633] loop6: p1 start 4217409618 is beyond EOD, truncated [ 118.397706][ T6633] loop6: p2 size 108 extends beyond EOD, truncated [ 118.842467][ T1213] usbhid 3-1:9.32: couldn't find an input interrupt endpoint [ 118.966153][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 118.979831][ T1213] usb 3-1: USB disconnect, device number 12 [ 119.293888][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 119.322833][ T6651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.205'. [ 119.344273][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 119.450573][ T6654] loop6: detected capacity change from 0 to 7 [ 119.473450][ T6654] loop6: [POWERTEC] p1 p2 [ 119.497840][ T6654] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 119.529811][ T5887] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.548187][ T6654] loop6: p2 start 1680801792 is beyond EOD, truncated [ 119.621672][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 119.660072][ T5887] usb 2-1: device descriptor read/64, error -71 [ 119.914804][ T6665] loop2: detected capacity change from 0 to 7 [ 119.930219][ T6665] Dev loop2: unable to read RDB block 7 [ 119.935841][ T6665] loop2: unable to read partition table [ 119.942328][ T5887] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 120.000074][ T6669] geneve2: entered promiscuous mode [ 120.006112][ T6669] geneve2: entered allmulticast mode [ 120.050539][ T6665] loop2: partition table beyond EOD, truncated [ 120.070700][ T6665] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.082716][ T6671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.212'. [ 120.116680][ T5887] usb 2-1: device descriptor read/64, error -71 [ 120.116834][ T6672] netlink: 36 bytes leftover after parsing attributes in process `syz.4.212'. [ 120.240116][ T5887] usb usb2-port1: attempt power cycle [ 120.608108][ T6681] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.618019][ T5887] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 120.659556][ T5887] usb 2-1: device descriptor read/8, error -71 [ 120.903007][ T5887] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 120.933293][ T5887] usb 2-1: device descriptor read/8, error -71 [ 120.979316][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 120.988458][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.217'. [ 121.060423][ T5887] usb usb2-port1: unable to enumerate USB device [ 121.198238][ T6694] loop6: detected capacity change from 0 to 7 [ 121.207125][ T6694] Dev loop6: unable to read RDB block 7 [ 121.213642][ T6694] loop6: AHDI p1 p2 p3 [ 121.217816][ T6694] loop6: partition table partially beyond EOD, truncated [ 121.252937][ T6694] loop6: p1 start 4217409618 is beyond EOD, truncated [ 121.296802][ T6694] loop6: p2 size 108 extends beyond EOD, truncated [ 121.364977][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 121.816436][ T6705] geneve2: entered promiscuous mode [ 121.824631][ T6705] geneve2: entered allmulticast mode [ 122.041025][ T5887] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.209881][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 122.217876][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.227988][ T5887] usb 4-1: config 1 has an invalid interface number: 26 but max is 0 [ 122.237123][ T5887] usb 4-1: config 1 has no interface number 0 [ 122.243485][ T5887] usb 4-1: config 1 interface 26 has no altsetting 0 [ 122.255047][ T5887] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 122.264543][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.273332][ T5887] usb 4-1: Product: syz [ 122.277789][ T5887] usb 4-1: Manufacturer: syz [ 122.282565][ T5887] usb 4-1: SerialNumber: syz [ 122.439793][ T5958] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 122.618849][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 122.628328][ T5958] usb 3-1: config 0 has no interfaces? [ 122.632039][ T5958] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 122.649846][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.654342][ T6701] vlan2: entered promiscuous mode [ 122.669166][ T5958] usb 3-1: Product: syz [ 122.679830][ T5958] usb 3-1: Manufacturer: syz [ 122.691228][ T5958] usb 3-1: SerialNumber: syz [ 122.712682][ T5958] usb 3-1: config 0 descriptor?? [ 122.771200][ T5887] usb 4-1: unknown interface protocol 0x7d, assuming v1 [ 122.786743][ T5887] usb 4-1: cannot find UAC_HEADER [ 122.838904][ T5887] snd-usb-audio 4-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 122.882469][ T5887] usb 4-1: USB disconnect, device number 9 [ 122.903793][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.999831][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 123.022074][ T6712] loop6: detected capacity change from 0 to 524288000 [ 123.091401][ T6712] support for the xor transformation has been removed. [ 123.119935][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 123.162407][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16152, setting to 64 [ 123.203762][ T43] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 123.214372][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.234077][ T43] usb 2-1: Product: syz [ 123.239325][ T43] usb 2-1: Manufacturer: syz [ 123.245877][ T43] usb 2-1: SerialNumber: syz [ 123.249077][ T6732] vlan2: entered allmulticast mode [ 123.256653][ T6732] bridge0: port 3(vlan2) entered blocking state [ 123.263215][ T6732] bridge0: port 3(vlan2) entered disabled state [ 123.279803][ T43] usb 2-1: config 0 descriptor?? [ 123.285007][ T6732] vlan2: entered promiscuous mode [ 123.288582][ T43] uvcvideo 2-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 123.306295][ T43] uvcvideo 2-1:0.0: No valid video chain found. [ 124.379874][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 124.567656][ T43] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 124.577111][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.588693][ T43] usb 4-1: Product: syz [ 124.604277][ T43] usb 4-1: Manufacturer: syz [ 124.615728][ T43] usb 4-1: SerialNumber: syz [ 124.636940][ T43] usb 4-1: config 0 descriptor?? [ 124.662745][ T43] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 124.822519][ T6758] netlink: 76 bytes leftover after parsing attributes in process `syz.4.237'. [ 125.236920][ T5887] usb 3-1: USB disconnect, device number 13 [ 125.486161][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 125.544181][ T5887] usb 2-1: USB disconnect, device number 12 [ 125.879924][ T6775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 126.051131][ T5887] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 126.220074][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 126.276404][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.293024][ T5887] usb 2-1: config 1 has an invalid interface number: 26 but max is 0 [ 126.313753][ T5887] usb 2-1: config 1 has no interface number 0 [ 126.368167][ T5887] usb 2-1: config 1 interface 26 has no altsetting 0 [ 126.422971][ T43] gspca_sunplus: reg_r err -110 [ 126.467704][ T43] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 126.550463][ T5887] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 126.969958][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.979825][ T5887] usb 2-1: Product: syz [ 126.993269][ T5887] usb 2-1: Manufacturer: syz [ 127.031589][ T5887] usb 2-1: SerialNumber: syz [ 127.072919][ T6802] SET target dimension over the limit! [ 127.110847][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 127.269075][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 127.283838][ T6774] vlan3: entered promiscuous mode [ 127.290363][ T6774] batadv0: entered promiscuous mode [ 127.299785][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 127.315115][ T24] usb 3-1: config 0 has no interfaces? [ 127.324057][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 127.333258][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 127.342289][ T24] usb 3-1: Manufacturer: syz [ 127.349375][ T24] usb 3-1: config 0 descriptor?? [ 127.534925][ T5887] usb 2-1: unknown interface protocol 0x7d, assuming v1 [ 127.542014][ T5887] usb 2-1: cannot find UAC_HEADER [ 127.699784][ T5958] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 127.821342][ T5887] snd-usb-audio 2-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 127.905202][ T5887] usb 2-1: USB disconnect, device number 13 [ 127.922333][ T5894] usb 4-1: USB disconnect, device number 10 [ 127.973851][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.993485][ T5958] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 128.010031][ T5958] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 128.043154][ T5958] usb 1-1: config 8 has no interface number 0 [ 128.059603][ T5958] usb 1-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.087058][ T5958] usb 1-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 128.137320][ T5958] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 128.199034][ T5958] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 128.246455][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.305884][ T5958] usb 1-1: NFC: intf ffff8880333a6000 id ffffffff8eb1c8c0 [ 128.532263][ T5887] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 128.537138][ T5894] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 128.686131][ T5958] usb 1-1: USB disconnect, device number 13 [ 128.709942][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 128.717667][ T5894] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 128.727232][ T5894] usb 2-1: config 0 has no interface number 0 [ 128.729858][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 128.797047][ T5894] usb 2-1: config 0 interface 12 has no altsetting 0 [ 128.808914][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.898127][ T5894] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 128.938793][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.959174][ T5887] usb 4-1: config 1 has an invalid interface number: 26 but max is 0 [ 128.960775][ T5894] usb 2-1: Product: syz [ 128.988949][ T5894] usb 2-1: Manufacturer: syz [ 128.997023][ T5894] usb 2-1: SerialNumber: syz [ 129.033753][ T5887] usb 4-1: config 1 has no interface number 0 [ 129.084014][ T5887] usb 4-1: config 1 interface 26 has no altsetting 0 [ 129.092995][ T5894] usb 2-1: config 0 descriptor?? [ 129.124074][ T5887] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 129.272976][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.281721][ T5958] usb 3-1: USB disconnect, device number 14 [ 129.305343][ T5887] usb 4-1: Product: syz [ 129.309543][ T5887] usb 4-1: Manufacturer: syz [ 129.323964][ T5887] usb 4-1: SerialNumber: syz [ 129.602447][ T5887] usb 4-1: unknown interface protocol 0x7d, assuming v1 [ 129.612152][ T5887] usb 4-1: cannot find UAC_HEADER [ 129.612817][ T6844] fuse: Bad value for 'fd' [ 129.671675][ T5887] snd-usb-audio 4-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 129.702522][ T5887] usb 4-1: USB disconnect, device number 11 [ 129.721558][ T5958] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 129.756432][ T6275] udevd[6275]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.867895][ T6854] Cannot find del_set index 0 as target [ 129.883284][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 129.895338][ T5958] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.905246][ T5958] usb 3-1: config 8 has an invalid interface number: 190 but max is 0 [ 129.919419][ T5958] usb 3-1: config 8 has no interface number 0 [ 129.925984][ T5958] usb 3-1: config 8 interface 190 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 129.946470][ T5958] usb 3-1: config 8 interface 190 has no altsetting 0 [ 129.958102][ T5958] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 129.967744][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.978862][ T5958] usb 3-1: Product: syz [ 129.985557][ T5958] usb 3-1: Manufacturer: syz [ 129.990586][ T5958] usb 3-1: SerialNumber: syz [ 130.133580][ T6864] loop9: detected capacity change from 0 to 7 [ 130.144286][ T6865] netlink: 'syz.4.262': attribute type 3 has an invalid length. [ 130.151889][ T6864] Dev loop9: unable to read RDB block 7 [ 130.158396][ T6864] loop9: unable to read partition table [ 130.159841][ T6865] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.262'. [ 130.164573][ T6864] loop9: partition table beyond EOD, truncated [ 130.181078][ T6864] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 130.220599][ T5958] usb 3-1: selecting invalid altsetting 1 [ 130.258656][ T5958] catc 3-1:8.190: Can't set altsetting 1. [ 130.279500][ T5958] catc 3-1:8.190: probe with driver catc failed with error -5 [ 130.326250][ T5894] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 130.341658][ T5894] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 130.355313][ T5958] usb 3-1: USB disconnect, device number 15 [ 130.372988][ T5894] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 130.398786][ T5894] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 130.432848][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 130.444445][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 130.486313][ T5894] usb 2-1: USB disconnect, device number 14 [ 130.861956][ T6879] fuse: Unknown parameter '0x0000000000000003' [ 130.960328][ T5894] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.993794][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 131.025267][ T6885] bridge0: entered promiscuous mode [ 131.033250][ T6885] bridge0: port 4(macvlan2) entered blocking state [ 131.040981][ T6885] bridge0: port 4(macvlan2) entered disabled state [ 131.048659][ T6885] macvlan2: entered allmulticast mode [ 131.056037][ T6885] bridge0: entered allmulticast mode [ 131.066584][ T6885] macvlan2: left allmulticast mode [ 131.075469][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 131.084805][ T6885] bridge0: left allmulticast mode [ 131.092337][ T6885] bridge0: left promiscuous mode [ 131.120858][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 131.129671][ T5894] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 131.142726][ T5894] usb 2-1: config 0 has no interface number 0 [ 131.159790][ T5894] usb 2-1: config 0 interface 12 has no altsetting 0 [ 131.189001][ T6889] bridge0: entered promiscuous mode [ 131.197381][ T5894] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 131.197829][ T6889] bridge0: port 4(macvlan2) entered blocking state [ 131.215629][ T6889] bridge0: port 4(macvlan2) entered disabled state [ 131.223854][ T6889] macvlan2: entered allmulticast mode [ 131.229418][ T6889] bridge0: entered allmulticast mode [ 131.232694][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.269769][ T5894] usb 2-1: Product: syz [ 131.278736][ T5894] usb 2-1: Manufacturer: syz [ 131.282623][ T6889] macvlan2: left allmulticast mode [ 131.288781][ T5894] usb 2-1: SerialNumber: syz [ 131.299883][ T6889] bridge0: left allmulticast mode [ 131.306283][ T5894] usb 2-1: config 0 descriptor?? [ 131.316337][ T6889] bridge0: left promiscuous mode [ 131.952175][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 131.952193][ T30] audit: type=1326 audit(1760884758.031:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.3.275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x0 [ 132.615223][ T6920] bond0: (slave bond_slave_1): Releasing backup interface [ 132.839409][ T6923] veth0_to_team: entered promiscuous mode [ 132.863779][ T6923] netlink: 60 bytes leftover after parsing attributes in process `syz.4.278'. [ 132.880542][ T6923] bridge0: port 4(macsec0) entered blocking state [ 132.888306][ T6923] bridge0: port 4(macsec0) entered disabled state [ 132.896088][ T6923] macsec0: entered allmulticast mode [ 132.902318][ T6923] veth1_macvtap: entered allmulticast mode [ 132.917155][ T6923] macsec0: entered promiscuous mode [ 132.926062][ T6923] bridge0: port 4(macsec0) entered blocking state [ 132.932645][ T6923] bridge0: port 4(macsec0) entered forwarding state [ 132.980486][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987629][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.619558][ T6928] fuse: Unknown parameter '0x0000000000000003' [ 133.852012][ T5894] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 133.864026][ T5894] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 134.003627][ T6939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.279'. [ 134.012652][ T5894] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 134.037259][ T5894] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 134.087459][ T5894] usb 2-1: USB disconnect, device number 15 [ 134.628841][ T6945] netlink: 56 bytes leftover after parsing attributes in process `syz.1.284'. [ 134.946599][ T6949] Cannot find del_set index 0 as target [ 135.711416][ T6968] loop9: detected capacity change from 0 to 7 [ 135.745341][ T5952] Dev loop9: unable to read RDB block 7 [ 135.753391][ T5952] loop9: unable to read partition table [ 135.766148][ T5952] loop9: partition table beyond EOD, truncated [ 135.809941][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 135.838005][ T6968] Dev loop9: unable to read RDB block 7 [ 135.853832][ T6968] loop9: unable to read partition table [ 135.869398][ T6970] bridge1: entered allmulticast mode [ 135.876862][ T6968] loop9: partition table beyond EOD, truncated [ 135.893741][ T6968] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 135.920125][ T6970] team0: Port device bridge1 added [ 135.984358][ T6974] bridge2: entered allmulticast mode [ 136.005889][ T43] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 136.014435][ T6974] team0: Port device bridge2 added [ 136.069797][ T43] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 136.140458][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.149537][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.566058][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.592270][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.734136][ T6990] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 138.170300][ T5894] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 138.187455][ T7015] Cannot find del_set index 0 as target [ 138.200546][ T7014] bond0: (slave bond_slave_1): Releasing backup interface [ 138.220437][ T7014] bond_slave_1: left promiscuous mode [ 138.362897][ T5894] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.384503][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.467183][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.510393][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.523382][ T7020] veth0_to_team: entered promiscuous mode [ 138.559268][ T5894] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.669450][ T24] usb 1-1: USB disconnect, device number 14 [ 138.706129][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.746917][ T5894] usb 4-1: Product: syz [ 138.761339][ T5894] usb 4-1: Manufacturer: syz [ 138.791270][ T7020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.300'. [ 138.844720][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 138.881083][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 138.921149][ T5894] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 138.946812][ T5894] cdc_wdm 4-1:1.0: Unknown control protocol [ 140.001708][ T7036] FAULT_INJECTION: forcing a failure. [ 140.001708][ T7036] name fail_futex, interval 1, probability 0, space 0, times 1 [ 140.014762][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.4.304 Not tainted syzkaller #0 PREEMPT(full) [ 140.014785][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.014798][ T7036] Call Trace: [ 140.014806][ T7036] [ 140.014814][ T7036] dump_stack_lvl+0x189/0x250 [ 140.014847][ T7036] ? __pfx____ratelimit+0x10/0x10 [ 140.014874][ T7036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.014891][ T7036] ? __pfx__printk+0x10/0x10 [ 140.014921][ T7036] ? __pfx___schedule+0x10/0x10 [ 140.014942][ T7036] should_fail_ex+0x414/0x560 [ 140.014974][ T7036] get_futex_key+0x900/0x1660 [ 140.014993][ T7036] ? rcu_is_watching+0x15/0xb0 [ 140.015020][ T7036] ? preempt_schedule_irq+0xde/0x150 [ 140.015039][ T7036] ? __pfx_get_futex_key+0x10/0x10 [ 140.015061][ T7036] ? __lock_acquire+0xab9/0xd20 [ 140.015088][ T7036] futex_wait_setup+0x4f/0x590 [ 140.015115][ T7036] ? __futex_wait+0xb3/0x3d0 [ 140.015141][ T7036] __futex_wait+0x148/0x3d0 [ 140.015171][ T7036] ? __pfx___futex_wait+0x10/0x10 [ 140.015197][ T7036] ? __pfx_futex_wake_mark+0x10/0x10 [ 140.015225][ T7036] ? __hrtimer_setup+0x187/0x210 [ 140.015262][ T7036] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 140.015288][ T7036] ? ktime_add_safe+0x38/0x70 [ 140.015314][ T7036] futex_wait+0x104/0x360 [ 140.015338][ T7036] ? __pfx_futex_wait+0x10/0x10 [ 140.015363][ T7036] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 140.015391][ T7036] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 140.015409][ T7036] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.015431][ T7036] do_futex+0x333/0x420 [ 140.015455][ T7036] ? __pfx_do_futex+0x10/0x10 [ 140.015477][ T7036] ? read_tsc+0x9/0x20 [ 140.015499][ T7036] __se_sys_futex+0x36f/0x400 [ 140.015525][ T7036] ? __pfx___se_sys_futex+0x10/0x10 [ 140.015551][ T7036] ? __x64_sys_futex+0x21/0xf0 [ 140.015573][ T7036] do_syscall_64+0xfa/0xfa0 [ 140.015592][ T7036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.015608][ T7036] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 140.015624][ T7036] ? clear_bhb_loop+0x60/0xb0 [ 140.015650][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.015666][ T7036] RIP: 0033:0x7f8a8db8efc9 [ 140.015691][ T7036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.015704][ T7036] RSP: 002b:00007f8a8bdd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.015722][ T7036] RAX: ffffffffffffffda RBX: 00007f8a8dde6090 RCX: 00007f8a8db8efc9 [ 140.015735][ T7036] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 000020000000cffc [ 140.015745][ T7036] RBP: 00007f8a8bdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 140.015756][ T7036] R10: 000020000000b000 R11: 0000000000000246 R12: 0000000000000001 [ 140.015766][ T7036] R13: 00007f8a8dde6128 R14: 00007f8a8dde6090 R15: 00007f8a8df0fa28 [ 140.015795][ T7036] [ 140.480080][ T5958] usb 4-1: USB disconnect, device number 12 [ 141.229788][ T5958] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 141.413192][ T5958] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 141.450933][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.453687][ T7059] x_tables: ip_tables: osf match: only valid for protocol 6 [ 141.501865][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.513456][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 141.547933][ T5958] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 141.560516][ T5958] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 141.582715][ T5958] usb 3-1: Manufacturer: syz [ 141.642041][ T5958] usb 3-1: config 0 descriptor?? [ 142.092299][ T5958] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 142.116227][ T7079] netlink: 'syz.4.316': attribute type 10 has an invalid length. [ 142.153909][ T5958] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 142.256360][ T7079] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 142.331342][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.361793][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.369882][ T5887] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 142.491437][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'. [ 142.518374][ T5887] usb 4-1: device descriptor read/64, error -71 [ 142.702351][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 142.739816][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 142.809875][ T5887] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 142.893401][ T24] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 142.912866][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 142.926248][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.959630][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.967964][ T5887] usb 4-1: device descriptor read/64, error -71 [ 142.986797][ T24] usb 1-1: config 0 descriptor?? [ 142.992027][ T43] usb 5-1: config 1 has an invalid interface number: 26 but max is 0 [ 143.000915][ T43] usb 5-1: config 1 has no interface number 0 [ 143.007590][ T43] usb 5-1: config 1 interface 26 has no altsetting 0 [ 143.053087][ T43] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 143.073894][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.090367][ T5887] usb usb4-port1: attempt power cycle [ 143.095996][ T43] usb 5-1: Product: syz [ 143.110377][ T43] usb 5-1: Manufacturer: syz [ 143.133067][ T43] usb 5-1: SerialNumber: syz [ 143.420408][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.319'. [ 143.430802][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.315'. [ 143.449831][ T5887] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 143.512741][ T5887] usb 4-1: device descriptor read/8, error -71 [ 143.568140][ T7088] vlan3: entered promiscuous mode [ 143.680475][ T43] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 143.692057][ T43] usb 5-1: cannot find UAC_HEADER [ 143.781841][ T43] snd-usb-audio 5-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 143.820762][ T5887] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 143.879083][ T43] usb 5-1: USB disconnect, device number 10 [ 143.911509][ T5887] usb 4-1: device descriptor read/8, error -71 [ 143.959026][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.020232][ T5887] usb usb4-port1: unable to enumerate USB device [ 144.045652][ T7097] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 144.045652][ T7097] The task syz.2.321 (7097) triggered the difference, watch for misbehavior. [ 144.045745][ T9] usb 3-1: USB disconnect, device number 16 [ 144.133683][ T7097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.503663][ T7101] loop2: detected capacity change from 0 to 7 [ 144.542985][ T7101] Dev loop2: unable to read RDB block 7 [ 144.548929][ T7101] loop2: unable to read partition table [ 144.560854][ T7101] loop2: partition table beyond EOD, truncated [ 144.567889][ T7101] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 144.829873][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.006294][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 145.015819][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.034613][ T43] usb 5-1: Product: syz [ 145.039201][ T43] usb 5-1: Manufacturer: syz [ 145.045498][ T43] usb 5-1: SerialNumber: syz [ 145.182943][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 145.202640][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 145.233438][ T24] usb 1-1: USB disconnect, device number 15 [ 145.445607][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 145.649941][ T5916] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 146.026204][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.034723][ T5916] usb 3-1: not running at top speed; connect to a high speed hub [ 146.049726][ T5916] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 146.081198][ T5916] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.172758][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.199758][ T5916] usb 3-1: Product: syz [ 146.211925][ T5916] usb 3-1: Manufacturer: syz [ 146.223484][ T7140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.276279][ T5916] usb 3-1: SerialNumber: syz [ 146.671559][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 146.695761][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 146.766947][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 146.930815][ T43] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 147.063029][ T5916] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 147.135864][ T5916] usb 3-1: unit 2 not found! [ 147.318146][ T5916] usb 3-1: USB disconnect, device number 17 [ 147.362406][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.379588][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.527338][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.793151][ T1213] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 147.963105][ T7164] process 'syz.1.340' launched './file0' with NULL argv: empty string added [ 147.981549][ T1213] usb 4-1: Using ep0 maxpacket: 8 [ 148.079289][ T1213] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 148.138683][ T1213] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.238935][ T1213] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.266139][ T1213] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.707873][ T1213] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.732109][ T9] usb 5-1: USB disconnect, device number 11 [ 148.818500][ T1213] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.866780][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.924516][ T30] audit: type=1326 audit(1760884775.161:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 149.251737][ T1213] usb 4-1: usb_control_msg returned -32 [ 149.257397][ T1213] usbtmc 4-1:16.0: can't read capabilities [ 149.268421][ T30] audit: type=1326 audit(1760884775.161:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 149.380573][ T30] audit: type=1326 audit(1760884775.191:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 149.473465][ T30] audit: type=1326 audit(1760884775.191:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 149.529873][ T30] audit: type=1326 audit(1760884775.191:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 149.562865][ T30] audit: type=1326 audit(1760884775.191:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 149.794721][ T30] audit: type=1326 audit(1760884775.191:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 149.912225][ T7194] netdevsim netdevsim0: Direct firmware load for . [ 149.912225][ T7194] failed with error -2 [ 149.924232][ T7194] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 149.924232][ T7194] [ 150.038246][ T30] audit: type=1326 audit(1760884775.191:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 150.084152][ T30] audit: type=1326 audit(1760884775.191:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 150.147035][ T30] audit: type=1326 audit(1760884775.191:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 150.221840][ T7157] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 150.222169][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 150.237040][ T7156] netlink: 'syz.3.338': attribute type 5 has an invalid length. [ 150.249865][ T7156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.338'. [ 150.286443][ T7155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.295840][ T7155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.396292][ T7156] geneve2: entered promiscuous mode [ 150.604260][ T7156] geneve2: entered allmulticast mode [ 150.666091][ T3453] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 150.695553][ T3453] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 150.719859][ T3453] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 151.013852][ T3453] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 151.748496][ T7206] loop6: detected capacity change from 0 to 7 [ 151.775067][ T7206] Dev loop6: unable to read RDB block 7 [ 151.800437][ T7206] loop6: AHDI p1 p2 p3 [ 151.849845][ T7206] loop6: partition table partially beyond EOD, truncated [ 151.880131][ T7206] loop6: p1 start 4217409618 is beyond EOD, truncated [ 151.887543][ T7206] loop6: p2 size 108 extends beyond EOD, truncated [ 152.051613][ T5887] usb 4-1: USB disconnect, device number 17 [ 152.172460][ T7212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.354'. [ 152.264110][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 152.394542][ T7217] FAULT_INJECTION: forcing a failure. [ 152.394542][ T7217] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 152.491551][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: syz.0.356 Not tainted syzkaller #0 PREEMPT(full) [ 152.491576][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.491586][ T7217] Call Trace: [ 152.491593][ T7217] [ 152.491601][ T7217] dump_stack_lvl+0x189/0x250 [ 152.491624][ T7217] ? __pfx____ratelimit+0x10/0x10 [ 152.491649][ T7217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.491667][ T7217] ? __pfx__printk+0x10/0x10 [ 152.491685][ T7217] ? __might_fault+0xb0/0x130 [ 152.491714][ T7217] should_fail_ex+0x414/0x560 [ 152.491743][ T7217] _copy_from_user+0x2d/0xb0 [ 152.491766][ T7217] ___sys_recvmsg+0x12e/0x510 [ 152.491789][ T7217] ? __pfx____sys_recvmsg+0x10/0x10 [ 152.491829][ T7217] ? __fget_files+0x3a0/0x420 [ 152.491861][ T7217] __x64_sys_recvmsg+0x198/0x260 [ 152.491881][ T7217] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 152.491914][ T7217] ? __pfx_ksys_write+0x10/0x10 [ 152.491940][ T7217] ? do_syscall_64+0xbe/0xfa0 [ 152.491962][ T7217] do_syscall_64+0xfa/0xfa0 [ 152.491978][ T7217] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.491995][ T7217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.492013][ T7217] ? clear_bhb_loop+0x60/0xb0 [ 152.492033][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.492050][ T7217] RIP: 0033:0x7fc7cf18efc9 [ 152.492065][ T7217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.492079][ T7217] RSP: 002b:00007fc7cfff8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 152.492097][ T7217] RAX: ffffffffffffffda RBX: 00007fc7cf3e5fa0 RCX: 00007fc7cf18efc9 [ 152.492110][ T7217] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 152.492121][ T7217] RBP: 00007fc7cfff8090 R08: 0000000000000000 R09: 0000000000000000 [ 152.492131][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.492141][ T7217] R13: 00007fc7cf3e6038 R14: 00007fc7cf3e5fa0 R15: 00007fc7cf50fa28 [ 152.492180][ T7217] [ 152.694373][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.637129][ T7250] loop6: detected capacity change from 0 to 7 [ 153.674308][ T7250] Dev loop6: unable to read RDB block 7 [ 153.696342][ T7250] loop6: AHDI p1 p2 p3 [ 153.709856][ T7250] loop6: partition table partially beyond EOD, truncated [ 153.736038][ T7250] loop6: p1 start 4217409618 is beyond EOD, truncated [ 153.767151][ T7253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.788652][ T7250] loop6: p2 size 108 extends beyond EOD, truncated [ 154.049886][ T5887] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 154.082504][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 154.330455][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 154.370201][ T5887] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 154.382542][ T5887] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.414095][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.476885][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.584854][ T5887] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.644331][ T5887] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.686784][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.701049][ T1213] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 154.782375][ T7276] netlink: 'syz.0.372': attribute type 10 has an invalid length. [ 154.800238][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.808648][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.845685][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.852897][ T7276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.861264][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.868429][ T7276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.902150][ T1213] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.915756][ T1213] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.926437][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 154.967818][ T1213] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 154.979038][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.992227][ T1213] usb 3-1: SerialNumber: syz [ 154.997018][ T5887] usb 2-1: usb_control_msg returned -32 [ 155.012899][ T5887] usbtmc 2-1:16.0: can't read capabilities [ 155.018483][ T7276] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 155.030925][ T1213] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 155.039622][ T1213] usb-storage 3-1:1.0: USB Mass Storage device detected [ 155.051152][ T7278] vlan2: left promiscuous mode [ 155.065962][ T7278] bridge0: port 3(vlan2) entered disabled state [ 155.079141][ T1213] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 155.096823][ T1213] scsi host1: usb-storage 3-1:1.0 [ 155.113845][ T7278] bridge_slave_1: left allmulticast mode [ 155.149868][ T7278] bridge_slave_1: left promiscuous mode [ 155.155977][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.171207][ T7278] bridge_slave_0: left promiscuous mode [ 155.177160][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.197678][ T7278] bond0: (slave bridge0): Releasing backup interface [ 155.271252][ T7280] vlan2: entered allmulticast mode [ 155.276779][ T7280] bridge0: port 4(vlan2) entered blocking state [ 155.285715][ T7280] bridge0: port 4(vlan2) entered disabled state [ 155.294088][ T7280] vlan2: entered promiscuous mode [ 155.497845][ T7293] geneve0: entered promiscuous mode [ 155.559247][ T24] IPVS: starting estimator thread 0... [ 155.565726][ T7293] geneve0: entered allmulticast mode [ 155.649810][ T7299] IPVS: using max 35 ests per chain, 84000 per kthread [ 155.666108][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 155.666124][ T30] audit: type=1326 audit(1760884781.901:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 155.712100][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 155.728476][ T30] audit: type=1326 audit(1760884781.901:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 155.914449][ T30] audit: type=1326 audit(1760884781.901:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 155.970377][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 155.995453][ T7301] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 156.004169][ T7301] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 156.014224][ T7301] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 156.065706][ T7306] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 156.087407][ T1213] usb 3-1: USB disconnect, device number 18 [ 156.093991][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 156.102932][ T7251] netlink: 'syz.1.361': attribute type 5 has an invalid length. [ 156.121348][ T7251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.361'. [ 156.133969][ T30] audit: type=1326 audit(1760884781.901:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 156.226809][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 156.229002][ T7240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.232408][ T30] audit: type=1326 audit(1760884781.901:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 156.292790][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.391929][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 156.408327][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.414202][ T7251] geneve2: entered promiscuous mode [ 156.416966][ T30] audit: type=1326 audit(1760884781.901:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 156.462841][ T30] audit: type=1326 audit(1760884781.931:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 156.486255][ T9] usb 5-1: config 0 descriptor?? [ 156.493834][ T30] audit: type=1326 audit(1760884782.201:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 156.526114][ T7311] loop2: detected capacity change from 0 to 7 [ 156.534338][ T7251] geneve2: entered allmulticast mode [ 156.541580][ T7311] Dev loop2: unable to read RDB block 7 [ 156.553280][ T7311] loop2: unable to read partition table [ 156.560770][ T7240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.562586][ T6993] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 156.576919][ T7311] loop2: partition table beyond EOD, truncated [ 156.586311][ T7311] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ?) failed (rc=-5) [ 156.616405][ T6993] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 156.646877][ T6993] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 156.668746][ T30] audit: type=1326 audit(1760884782.201:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 156.706046][ T30] audit: type=1326 audit(1760884782.221:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 156.735904][ T6993] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 156.857543][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 156.933166][ T7305] netlink: 48 bytes leftover after parsing attributes in process `syz.4.382'. [ 157.183298][ T9] kye 0003:0458:5013.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 157.197917][ T9] kye 0003:0458:5013.0004: item fetching failed at offset 0/2 [ 157.226633][ T9] kye 0003:0458:5013.0004: parse failed [ 157.249601][ T9] kye 0003:0458:5013.0004: probe with driver kye failed with error -22 [ 157.387216][ T24] usb 5-1: USB disconnect, device number 12 [ 157.993753][ T24] usb 2-1: USB disconnect, device number 16 [ 158.178294][ T7331] random: crng reseeded on system resumption [ 158.247242][ T7345] usb usb8: usbfs: process 7345 (syz.4.394) did not claim interface 0 before use [ 158.460092][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 158.659866][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 158.676356][ T24] usb 2-1: config 0 has no interfaces? [ 158.682587][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 158.715005][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.811243][ T24] usb 2-1: config 0 descriptor?? [ 159.060716][ T7370] x_tables: ip_tables: osf match: only valid for protocol 6 [ 159.067887][ T7343] vlan3: entered promiscuous mode [ 159.634653][ T7375] loop6: detected capacity change from 0 to 7 [ 159.642079][ T7375] Dev loop6: unable to read RDB block 7 [ 159.647781][ T7375] loop6: AHDI p1 p2 p3 [ 159.653235][ T7375] loop6: partition table partially beyond EOD, truncated [ 159.660614][ T7375] loop6: p1 start 4217409618 is beyond EOD, truncated [ 159.668225][ T7375] loop6: p2 size 108 extends beyond EOD, truncated [ 159.764847][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 160.149791][ T1213] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 160.441153][ T1213] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.458564][ T1213] usb 1-1: config 0 interface 0 has no altsetting 0 [ 160.469955][ T1213] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 160.479053][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.512411][ T1213] usb 1-1: config 0 descriptor?? [ 160.909617][ T7391] bridge0: port 3(macsec0) entered disabled state [ 160.916328][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.924038][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.936374][ T1213] corsair-psu 0003:1B1C:1C03.0005: unknown main item tag 0x0 [ 160.945653][ T1213] corsair-psu 0003:1B1C:1C03.0005: unknown main item tag 0x0 [ 160.953435][ T1213] corsair-psu 0003:1B1C:1C03.0005: unknown main item tag 0x0 [ 160.970373][ T1213] corsair-psu 0003:1B1C:1C03.0005: unknown main item tag 0x0 [ 160.977905][ T1213] corsair-psu 0003:1B1C:1C03.0005: unknown main item tag 0x0 [ 160.993702][ T1213] corsair-psu 0003:1B1C:1C03.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:1c03] on usb-dummy_hcd.0-1/input0 [ 161.050166][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.063195][ T1213] corsair-psu 0003:1B1C:1C03.0005: unable to initialize device (-38) [ 161.068868][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.091640][ T1213] corsair-psu 0003:1B1C:1C03.0005: probe with driver corsair-psu failed with error -38 [ 161.160407][ T5894] usb 2-1: USB disconnect, device number 17 [ 161.168319][ T1213] usb 1-1: USB disconnect, device number 16 [ 161.184238][ T7391] veth1_macvtap: left allmulticast mode [ 161.210156][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 161.252736][ T61] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.310157][ T61] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 161.348511][ T61] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.374828][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 161.377488][ T61] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 161.394934][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.410563][ T61] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.430693][ T61] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 161.439543][ T61] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.449265][ T24] usb 3-1: config 0 descriptor?? [ 161.490022][ T61] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 161.673134][ T24] ath6kl: Failed to submit usb control message: -71 [ 161.707938][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 161.738056][ T24] ath6kl: Unable to send get target info: -71 [ 161.751943][ T24] ath6kl: Failed to init ath6kl core: -71 [ 161.760724][ T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 161.780138][ T24] usb 3-1: USB disconnect, device number 19 [ 161.820008][ T1213] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 162.438158][ T1213] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 162.447388][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.455667][ T1213] usb 2-1: Product: syz [ 162.463695][ T1213] usb 2-1: Manufacturer: syz [ 162.468324][ T1213] usb 2-1: SerialNumber: syz [ 162.481826][ T1213] usb 2-1: config 0 descriptor?? [ 162.574607][ T7430] FAULT_INJECTION: forcing a failure. [ 162.574607][ T7430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.588767][ T7430] CPU: 0 UID: 0 PID: 7430 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(full) [ 162.588790][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.588800][ T7430] Call Trace: [ 162.588807][ T7430] [ 162.588815][ T7430] dump_stack_lvl+0x189/0x250 [ 162.588842][ T7430] ? __pfx____ratelimit+0x10/0x10 [ 162.588867][ T7430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.588885][ T7430] ? __pfx__printk+0x10/0x10 [ 162.588903][ T7430] ? __might_fault+0xb0/0x130 [ 162.588930][ T7430] should_fail_ex+0x414/0x560 [ 162.588958][ T7430] _copy_from_user+0x2d/0xb0 [ 162.588982][ T7430] kstrtouint_from_user+0xc4/0x170 [ 162.589004][ T7430] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 162.589036][ T7430] proc_fail_nth_write+0x88/0x200 [ 162.589053][ T7430] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 162.589084][ T7430] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 162.589109][ T7430] vfs_write+0x27e/0xb30 [ 162.589138][ T7430] ? __pfx_vfs_write+0x10/0x10 [ 162.589158][ T7430] ? __fget_files+0x2a/0x420 [ 162.589181][ T7430] ? __fget_files+0x3a0/0x420 [ 162.589199][ T7430] ? __fget_files+0x2a/0x420 [ 162.589235][ T7430] ksys_write+0x145/0x250 [ 162.589254][ T7430] ? __pfx_ksys_write+0x10/0x10 [ 162.589275][ T7430] ? do_syscall_64+0xbe/0xfa0 [ 162.589295][ T7430] do_syscall_64+0xfa/0xfa0 [ 162.589313][ T7430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.589329][ T7430] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.589346][ T7430] ? clear_bhb_loop+0x60/0xb0 [ 162.589365][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.589381][ T7430] RIP: 0033:0x7f339018da7f [ 162.589399][ T7430] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 162.589413][ T7430] RSP: 002b:00007f3391036030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 162.589431][ T7430] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f339018da7f [ 162.589442][ T7430] RDX: 0000000000000001 RSI: 00007f33910360a0 RDI: 0000000000000004 [ 162.589452][ T7430] RBP: 00007f3391036090 R08: 0000000000000000 R09: 0000000000000000 [ 162.589461][ T7430] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 162.589471][ T7430] R13: 00007f33903e6038 R14: 00007f33903e5fa0 R15: 00007f339050fa28 [ 162.589499][ T7430] [ 162.814232][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.875002][ T5839] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 162.875056][ T5839] Bluetooth: hci4: Dropping invalid advertising data [ 162.889447][ T5839] Bluetooth: hci4: Malformed LE Event: 0x02 [ 162.949969][ T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 163.109852][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 163.120850][ T43] usb 1-1: config 0 has no interfaces? [ 163.136343][ T43] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 163.156114][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.174855][ T43] usb 1-1: Product: syz [ 163.182928][ T43] usb 1-1: Manufacturer: syz [ 163.192905][ T43] usb 1-1: SerialNumber: syz [ 163.221305][ T43] usb 1-1: config 0 descriptor?? [ 163.776542][ T5887] usb 1-1: USB disconnect, device number 17 [ 164.791678][ T7461] @: renamed from vlan0 (while UP) [ 164.820247][ T7461] x_tables: duplicate underflow at hook 1 [ 164.826448][ T7461] netlink: 68 bytes leftover after parsing attributes in process `syz.4.430'. [ 164.836366][ T7461] x_tables: duplicate underflow at hook 3 [ 164.978909][ T7465] netlink: 512 bytes leftover after parsing attributes in process `syz.4.431'. [ 165.005829][ T7465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.366234][ T5958] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 165.509860][ T5958] usb 1-1: device descriptor read/64, error -71 [ 165.789833][ T5958] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 165.919839][ T5958] usb 1-1: device descriptor read/64, error -71 [ 166.061016][ T5958] usb usb1-port1: attempt power cycle [ 166.399928][ T5958] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 166.460595][ T5958] usb 1-1: device descriptor read/8, error -71 [ 166.469802][ T7484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.437'. [ 166.593581][ T7487] fuse: Unknown parameter 'grow[ÃsV¯K­ï æ´ó©]Uup_id-00000000000000000000' [ 166.720082][ T5958] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 166.760400][ T5958] usb 1-1: device descriptor read/8, error -71 [ 166.823143][ T7496] fuse: Unknown parameter 'grow[ÃsV¯K­ï æ´ó©]Uup_id-00000000000000000000' [ 166.830883][ T1213] usb-storage 2-1:0.0: USB Mass Storage device detected [ 166.871267][ T5958] usb usb1-port1: unable to enumerate USB device [ 166.932081][ T1213] usb 2-1: USB disconnect, device number 18 [ 167.070514][ T7509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.447'. [ 167.153363][ T7514] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 167.161811][ T7514] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 167.170399][ T7514] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 167.208794][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 167.208814][ T30] audit: type=1326 audit(1760884793.371:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 167.426345][ T30] audit: type=1326 audit(1760884793.371:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 167.500091][ T30] audit: type=1326 audit(1760884793.371:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 167.527284][ T30] audit: type=1326 audit(1760884793.371:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 167.602446][ T30] audit: type=1326 audit(1760884793.371:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 167.769791][ T30] audit: type=1326 audit(1760884793.371:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 167.838489][ T30] audit: type=1326 audit(1760884793.371:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 167.863577][ T30] audit: type=1326 audit(1760884793.371:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 168.139074][ T7529] libceph: resolve '40' (ret=-3): failed [ 168.177205][ T30] audit: type=1326 audit(1760884793.371:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339018efc9 code=0x7ffc0000 [ 168.223392][ T30] audit: type=1326 audit(1760884793.381:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f339018d810 code=0x7ffc0000 [ 168.559893][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 169.055772][ T7538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.453'. [ 169.181582][ T7540] loop6: detected capacity change from 0 to 7 [ 169.189561][ T7540] Dev loop6: unable to read RDB block 7 [ 169.195511][ T7540] loop6: AHDI p1 p2 p3 [ 169.210171][ T7540] loop6: partition table partially beyond EOD, truncated [ 169.219852][ T5887] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 169.238111][ T7540] loop6: p1 start 4217409618 is beyond EOD, truncated [ 169.245339][ T7540] loop6: p2 size 108 extends beyond EOD, truncated [ 169.312458][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 169.360210][ T5887] usb 1-1: device descriptor read/64, error -71 [ 169.414728][ T7545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'. [ 169.425771][ T7545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'. [ 169.640192][ T5887] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 169.749839][ T43] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 169.938410][ T5887] usb 1-1: device descriptor read/64, error -71 [ 169.968865][ T7558] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 169.977406][ T7558] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 169.991023][ T7558] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 170.094111][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.106486][ T43] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 170.116182][ T5887] usb usb1-port1: attempt power cycle [ 170.121727][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 170.134082][ T43] usb 5-1: Product: syz [ 170.138634][ T43] usb 5-1: Manufacturer: syz [ 170.143890][ T43] usb 5-1: SerialNumber: syz [ 170.163363][ T43] usb 5-1: config 0 descriptor?? [ 170.176943][ T43] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 170.193128][ T43] pctv452e: pctv452e_power_ctrl: 1 [ 170.193128][ T43] [ 170.203934][ T43] usb 5-1: selecting invalid altsetting 3 [ 170.211331][ T43] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 170.211331][ T43] [ 170.258351][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 170.308670][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 170.635920][ T5887] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 170.660871][ T43] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 170.702340][ T5887] usb 1-1: device descriptor read/8, error -71 [ 170.949858][ T5887] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 170.976130][ T5887] usb 1-1: device descriptor read/8, error -71 [ 171.090511][ T5887] usb usb1-port1: unable to enumerate USB device [ 171.288598][ T5887] usb 5-1: USB disconnect, device number 13 [ 171.462153][ T7581] loop9: detected capacity change from 0 to 7 [ 171.469607][ T7581] Dev loop9: unable to read RDB block 7 [ 171.475827][ T7581] loop9: unable to read partition table [ 171.488429][ T7581] loop9: partition table beyond EOD, truncated [ 171.533945][ T7581] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.980447][ T7587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.470'. [ 172.668315][ T5958] IPVS: starting estimator thread 0... [ 172.770077][ T7603] IPVS: using max 30 ests per chain, 72000 per kthread [ 172.810484][ T7605] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 172.818958][ T7605] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 172.827551][ T7605] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 172.984506][ T7608] geneve3: entered promiscuous mode [ 173.003747][ T7608] geneve3: entered allmulticast mode [ 173.710514][ T5887] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 173.889943][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 173.899010][ T5887] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.916642][ T7626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.482'. [ 173.927074][ T5887] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.948942][ T5887] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.980098][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.012749][ T5887] usb 2-1: Product: syz [ 174.026876][ T5887] usb 2-1: Manufacturer: syz [ 174.046233][ T5887] usb 2-1: SerialNumber: syz [ 174.269351][ T7639] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3693406402 (118189004864 ns) > initial count (17453120 ns). Using initial count to start timer. [ 174.314649][ T5887] usb 2-1: 0:2 : does not exist [ 174.556324][ T5887] usb 2-1: USB disconnect, device number 19 [ 174.687600][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.723443][ T7652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.484'. [ 174.871548][ T5958] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 175.133605][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 175.155675][ T5958] usb 3-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 175.164898][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.181009][ T5958] usb 3-1: Product: syz [ 175.198317][ T5958] usb 3-1: Manufacturer: syz [ 175.223137][ T5958] usb 3-1: SerialNumber: syz [ 175.252156][ T5958] usb 3-1: config 0 descriptor?? [ 175.490896][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 175.939923][ T5958] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 176.110678][ T5958] usb 1-1: Using ep0 maxpacket: 16 [ 176.119193][ T5958] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.132078][ T5958] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.142234][ T5958] usb 1-1: config 0 interface 0 has no altsetting 0 [ 176.148952][ T5958] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 176.160180][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.175072][ T5958] usb 1-1: config 0 descriptor?? [ 176.562500][ T7641] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 176.573086][ T7641] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 176.639435][ T5958] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 176.660408][ T7646] veth0: entered promiscuous mode [ 176.706191][ T7646] veth0: left promiscuous mode [ 176.787997][ T7666] fuse: Bad value for 'fd' [ 176.797265][ T24] usb 1-1: USB disconnect, device number 26 [ 176.884053][ T5958] usb 3-1: USB disconnect, device number 20 [ 176.959230][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 176.959247][ T30] audit: type=1326 audit(1760884803.191:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 177.004907][ T7669] bridge1: entered promiscuous mode [ 177.011167][ T30] audit: type=1326 audit(1760884803.231:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 177.052438][ T30] audit: type=1326 audit(1760884803.231:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 177.096583][ T30] audit: type=1326 audit(1760884803.231:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 177.149498][ T30] audit: type=1326 audit(1760884803.231:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 177.180224][ T30] audit: type=1326 audit(1760884803.231:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 177.202523][ T30] audit: type=1326 audit(1760884803.271:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 177.225083][ T30] audit: type=1326 audit(1760884803.281:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 177.248022][ T30] audit: type=1326 audit(1760884803.281:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 177.270544][ T30] audit: type=1326 audit(1760884803.281:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8db8efc9 code=0x7ffc0000 [ 177.397515][ T7678] loop9: detected capacity change from 0 to 7 [ 177.509997][ T7678] Dev loop9: unable to read RDB block 7 [ 177.515751][ T7678] loop9: unable to read partition table [ 177.530222][ T7678] loop9: partition table beyond EOD, truncated [ 177.639901][ T7678] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.735497][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.502'. [ 179.027784][ T7712] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 180.828958][ T7735] FAULT_INJECTION: forcing a failure. [ 180.828958][ T7735] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 180.910201][ T7735] CPU: 1 UID: 0 PID: 7735 Comm: syz.4.509 Not tainted syzkaller #0 PREEMPT(full) [ 180.910227][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.910237][ T7735] Call Trace: [ 180.910245][ T7735] [ 180.910252][ T7735] dump_stack_lvl+0x189/0x250 [ 180.910276][ T7735] ? __pfx____ratelimit+0x10/0x10 [ 180.910303][ T7735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.910321][ T7735] ? __pfx__printk+0x10/0x10 [ 180.910339][ T7735] ? fs_reclaim_acquire+0x7d/0x100 [ 180.910368][ T7735] should_fail_ex+0x414/0x560 [ 180.910399][ T7735] prepare_alloc_pages+0x213/0x610 [ 180.910426][ T7735] __alloc_frozen_pages_noprof+0x123/0x370 [ 180.910461][ T7735] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 180.910493][ T7735] ? policy_nodemask+0x27c/0x720 [ 180.910519][ T7735] alloc_pages_mpol+0x232/0x4a0 [ 180.910547][ T7735] vma_alloc_folio_noprof+0xe4/0x200 [ 180.910570][ T7735] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 180.910603][ T7735] folio_prealloc+0x30/0x180 [ 180.910626][ T7735] do_wp_page+0x1231/0x5800 [ 180.910665][ T7735] ? __pfx_do_wp_page+0x10/0x10 [ 180.910680][ T7735] ? do_raw_spin_lock+0x121/0x290 [ 180.910702][ T7735] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 180.910731][ T7735] __handle_mm_fault+0x1033/0x5400 [ 180.910765][ T7735] ? __pfx___handle_mm_fault+0x10/0x10 [ 180.910808][ T7735] ? find_vma+0xe7/0x160 [ 180.910824][ T7735] ? __pfx_find_vma+0x10/0x10 [ 180.910844][ T7735] handle_mm_fault+0x40a/0x8e0 [ 180.910873][ T7735] do_user_addr_fault+0x764/0x1380 [ 180.910912][ T7735] exc_page_fault+0x82/0x100 [ 180.910933][ T7735] asm_exc_page_fault+0x26/0x30 [ 180.910950][ T7735] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 180.910972][ T7735] Code: 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 35 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 180.910986][ T7735] RSP: 0018:ffffc9000480f678 EFLAGS: 00050206 [ 180.911002][ T7735] RAX: ffffffff848eac01 RBX: ffff88804a5e00e8 RCX: 000000000000b5d0 [ 180.911015][ T7735] RDX: 0000000000000000 RSI: ffff88804a5e4ce8 RDI: 0000200000005000 [ 180.911028][ T7735] RBP: ffffc9000480f800 R08: ffff88804a5f02b7 R09: 1ffff110094be056 [ 180.911040][ T7735] R10: dffffc0000000000 R11: ffffed10094be057 R12: 1ffff92000901fbf [ 180.911053][ T7735] R13: 0000200000000400 R14: ffffc9000480fe08 R15: 00000000000101d0 [ 180.911074][ T7735] ? _copy_to_iter+0x131/0x1790 [ 180.911102][ T7735] _copy_to_iter+0x24f/0x1790 [ 180.911123][ T7735] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 180.911148][ T7735] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.911164][ T7735] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 180.911194][ T7735] ? __pfx__copy_to_iter+0x10/0x10 [ 180.911210][ T7735] ? remove_wait_queue+0x33/0x120 [ 180.911233][ T7735] ? tipc_wait_for_rcvmsg+0x4ea/0x630 [ 180.911265][ T7735] __skb_datagram_iter+0xf8/0x990 [ 180.911283][ T7735] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 180.911302][ T7735] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 180.911321][ T7735] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 180.911338][ T7735] ? __local_bh_enable_ip+0x12d/0x1c0 [ 180.911367][ T7735] skb_copy_datagram_iter+0xc5/0x230 [ 180.911391][ T7735] tipc_recvstream+0x72d/0xe70 [ 180.911427][ T7735] ? __pfx_tipc_recvstream+0x10/0x10 [ 180.911445][ T7735] sock_recvmsg+0x22c/0x270 [ 180.911477][ T7735] ____sys_recvmsg+0x1c9/0x460 [ 180.911505][ T7735] ? __pfx_____sys_recvmsg+0x10/0x10 [ 180.911540][ T7735] ? import_iovec+0x74/0xa0 [ 180.911566][ T7735] ___sys_recvmsg+0x1b5/0x510 [ 180.911591][ T7735] ? __pfx____sys_recvmsg+0x10/0x10 [ 180.911635][ T7735] ? __fget_files+0x3a0/0x420 [ 180.911667][ T7735] __x64_sys_recvmsg+0x198/0x260 [ 180.911689][ T7735] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 180.911716][ T7735] ? __pfx_ksys_write+0x10/0x10 [ 180.911739][ T7735] ? do_syscall_64+0xbe/0xfa0 [ 180.911761][ T7735] do_syscall_64+0xfa/0xfa0 [ 180.911777][ T7735] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.911794][ T7735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.911811][ T7735] ? clear_bhb_loop+0x60/0xb0 [ 180.911833][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.911849][ T7735] RIP: 0033:0x7f8a8db8efc9 [ 180.911880][ T7735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.911895][ T7735] RSP: 002b:00007f8a8bdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 180.911912][ T7735] RAX: ffffffffffffffda RBX: 00007f8a8dde5fa0 RCX: 00007f8a8db8efc9 [ 180.911925][ T7735] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 180.911936][ T7735] RBP: 00007f8a8bdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 180.911947][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.911957][ T7735] R13: 00007f8a8dde6038 R14: 00007f8a8dde5fa0 R15: 00007f8a8df0fa28 [ 180.911988][ T7735] [ 182.033849][ T7738] only policy match revision 0 supported [ 182.033863][ T7738] unable to load match [ 182.102884][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.513'. [ 182.139605][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.513'. [ 182.287979][ T7754] fuse: Unknown parameter 'grow[ÃsV¯K­ï æ´ó©]Uup_id-00000000000000000000' [ 182.470270][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 182.679809][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 182.687358][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.701953][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.713853][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.747712][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.757227][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.771335][ T24] usb 4-1: Product: syz [ 182.797155][ T24] usb 4-1: Manufacturer: syz [ 182.806351][ T24] usb 4-1: SerialNumber: syz [ 183.120999][ T7752] openvswitch: netlink: Message has 1 unknown bytes. [ 183.132077][ T7752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.370038][ T24] usb 4-1: USB disconnect, device number 19 [ 184.125512][ T6275] udevd[6275]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.473754][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 184.473774][ T30] audit: type=1326 audit(1760884810.661:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cf18efc9 code=0x7ffc0000 [ 184.532967][ T30] audit: type=1326 audit(1760884810.661:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc7cf18efc9 code=0x7ffc0000 [ 184.637801][ T30] audit: type=1326 audit(1760884810.661:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cf18efc9 code=0x7ffc0000 [ 184.673237][ T30] audit: type=1326 audit(1760884810.661:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc7cf18efc9 code=0x7ffc0000 [ 184.715078][ T7784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.523'. [ 184.727484][ T7780] fuse: Bad value for 'fd' [ 184.792801][ T7786] x_tables: ip_tables: osf match: only valid for protocol 6 [ 184.841994][ T30] audit: type=1326 audit(1760884810.671:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cf18efc9 code=0x7ffc0000 [ 184.908426][ T30] audit: type=1326 audit(1760884810.691:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc7cf18efc9 code=0x7ffc0000 [ 185.016052][ T30] audit: type=1326 audit(1760884810.751:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cf18efc9 code=0x7ffc0000 [ 185.106121][ T30] audit: type=1326 audit(1760884810.751:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cf18efc9 code=0x7ffc0000 [ 185.179180][ T30] audit: type=1326 audit(1760884810.771:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc7cf18efc9 code=0x7ffc0000 [ 185.259898][ T30] audit: type=1326 audit(1760884810.771:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cf18efc9 code=0x7ffc0000 [ 185.323675][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.527'. [ 185.339838][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 185.490366][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 185.534176][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.550362][ T24] usb 4-1: config 1 has an invalid interface number: 26 but max is 0 [ 185.579605][ T24] usb 4-1: config 1 has no interface number 0 [ 185.587769][ T24] usb 4-1: config 1 interface 26 has no altsetting 0 [ 185.622001][ T24] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 185.667272][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.686887][ T24] usb 4-1: Product: syz [ 185.697039][ T24] usb 4-1: Manufacturer: syz [ 185.708298][ T24] usb 4-1: SerialNumber: syz [ 185.851038][ T7804] netlink: 'syz.4.530': attribute type 9 has an invalid length. [ 185.865730][ T7804] netlink: 184 bytes leftover after parsing attributes in process `syz.4.530'. [ 185.954124][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 185.973301][ T7790] vlan3: entered promiscuous mode [ 186.047410][ T24] usb 4-1: unknown interface protocol 0x7d, assuming v1 [ 186.058055][ T24] usb 4-1: cannot find UAC_HEADER [ 186.095783][ T24] snd-usb-audio 4-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 186.114382][ T24] usb 4-1: USB disconnect, device number 20 [ 186.150404][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.626877][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 186.646151][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 186.782296][ T7820] x_tables: ip_tables: osf match: only valid for protocol 6 [ 186.796876][ T7821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.536'. [ 186.882766][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 187.022558][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'. [ 187.540423][ T7838] binder: BINDER_SET_CONTEXT_MGR already set [ 187.546903][ T7836] binder_alloc: binder_alloc_mmap_handler: 7834 200000ffd000-200001000000 already mapped failed -16 [ 187.580266][ T7838] binder: 7834:7838 ioctl 4018620d 200000004a80 returned -16 [ 187.588367][ T7838] binder: BINDER_SET_CONTEXT_MGR already set [ 187.588491][ T7836] binder_alloc: binder_alloc_mmap_handler: 7834 200000ffd000-200001000000 already mapped failed -16 [ 187.742877][ T7836] binder_alloc: binder_alloc_mmap_handler: 7834 200000ffd000-200001000000 already mapped failed -16 [ 187.774337][ T7838] binder: 7834:7838 ioctl 4018620d 200000004a80 returned -16 [ 188.232814][ T7850] loop2: detected capacity change from 0 to 7 [ 188.270436][ T7850] loop2: [ 188.273441][ T7850] loop2: partition table partially beyond EOD, truncated [ 188.283397][ T7852] loop9: detected capacity change from 0 to 7 [ 188.349891][ T6275] Dev loop9: unable to read RDB block 7 [ 188.355553][ T6275] loop9: unable to read partition table [ 188.402416][ T6275] loop9: partition table beyond EOD, truncated [ 188.422055][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 188.453264][ T7852] Dev loop9: unable to read RDB block 7 [ 188.461015][ T7852] loop9: unable to read partition table [ 188.489547][ T7852] loop9: partition table beyond EOD, truncated [ 188.516413][ T7852] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.645480][ T5201] loop2: [ 188.651143][ T5201] loop2: partition table partially beyond EOD, truncated [ 188.929887][ T5833] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 189.106113][ T5833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 189.143166][ T5833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.151053][ T5833] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 189.160476][ T1213] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 189.169137][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.188398][ T5833] usb 5-1: config 0 descriptor?? [ 189.197874][ T7856] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.319936][ T1213] usb 4-1: Using ep0 maxpacket: 16 [ 189.327703][ T1213] usb 4-1: unable to get BOS descriptor or descriptor too short [ 189.338748][ T1213] usb 4-1: config 1 has an invalid interface number: 26 but max is 0 [ 189.352341][ T1213] usb 4-1: config 1 has no interface number 0 [ 189.358673][ T1213] usb 4-1: config 1 interface 26 has no altsetting 0 [ 189.368995][ T1213] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 189.378578][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.404298][ T1213] usb 4-1: Product: syz [ 189.419028][ T1213] usb 4-1: Manufacturer: syz [ 189.445401][ T1213] usb 4-1: SerialNumber: syz [ 189.653643][ T5201] loop2: [ 189.673615][ T5201] loop2: partition table partially beyond EOD, truncated [ 189.695120][ T7863] vlan3: entered promiscuous mode [ 189.859206][ T1213] usb 4-1: unknown interface protocol 0x7d, assuming v1 [ 189.866551][ T1213] usb 4-1: cannot find UAC_HEADER [ 189.902317][ T1213] snd-usb-audio 4-1:1.26: probe with driver snd-usb-audio failed with error -22 [ 189.916444][ T1213] usb 4-1: USB disconnect, device number 21 [ 189.984342][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.117301][ T5201] loop2: [ 190.121325][ T5201] loop2: partition table partially beyond EOD, truncated [ 190.329801][ T5951] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 190.451783][ T7880] loop6: detected capacity change from 0 to 7 [ 190.472254][ T5951] usb 1-1: device descriptor read/64, error -71 [ 190.480096][ T7880] Dev loop6: unable to read RDB block 7 [ 190.486262][ T7880] loop6: AHDI p1 p2 p3 [ 190.491187][ T7880] loop6: partition table partially beyond EOD, truncated [ 190.498678][ T7880] loop6: p1 start 4217409618 is beyond EOD, truncated [ 190.506664][ T7880] loop6: p2 size 108 extends beyond EOD, truncated [ 190.607861][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 190.713647][ T5951] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 190.723489][ T7887] loop9: detected capacity change from 0 to 7 [ 190.731972][ T7887] Dev loop9: unable to read RDB block 7 [ 190.737896][ T7887] loop9: unable to read partition table [ 190.745089][ T7887] loop9: partition table beyond EOD, truncated [ 190.756865][ T7887] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.859831][ T5951] usb 1-1: device descriptor read/64, error -71 [ 190.980013][ T5951] usb usb1-port1: attempt power cycle [ 191.090362][ T5887] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 191.101641][ T5201] loop2: [ 191.107211][ T5201] loop2: partition table partially beyond EOD, truncated [ 191.172316][ T7891] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 191.189086][ T5833] usbhid 5-1:0.0: can't add hid device: -71 [ 191.212717][ T5833] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 191.243102][ T5833] usb 5-1: USB disconnect, device number 14 [ 191.252515][ T5887] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 191.276766][ T5887] usb 4-1: config 0 has no interface number 0 [ 191.300385][ T5887] usb 4-1: config 0 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.327654][ T5887] usb 4-1: config 0 interface 7 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 191.337720][ T5951] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 191.357956][ T5887] usb 4-1: New USB device found, idVendor=05c6, idProduct=9068, bcdDevice=43.2a [ 191.392084][ T5951] usb 1-1: device descriptor read/8, error -71 [ 191.398341][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.437333][ T5887] usb 4-1: config 0 descriptor?? [ 191.559195][ T7898] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 191.641610][ T5951] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 191.654730][ T5887] usb 4-1: USB disconnect, device number 22 [ 191.683639][ T5951] usb 1-1: device descriptor read/8, error -71 [ 191.737888][ T7903] __nla_validate_parse: 1 callbacks suppressed [ 191.737904][ T7903] netlink: 32 bytes leftover after parsing attributes in process `syz.4.563'. [ 191.754798][ T7904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.563'. [ 191.813005][ T5951] usb usb1-port1: unable to enumerate USB device [ 192.060149][ T1213] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 192.237952][ T1213] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.292897][ T1213] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 192.314769][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 192.336623][ T1213] usb 5-1: Product: syz [ 192.348003][ T1213] usb 5-1: Manufacturer: syz [ 192.357088][ T1213] usb 5-1: SerialNumber: syz [ 192.369310][ T1213] usb 5-1: config 0 descriptor?? [ 192.388517][ T1213] gspca_main: conex-2.14.0 probing 0572:0041 [ 192.486591][ T7916] bridge4: entered promiscuous mode [ 192.506136][ T7916] bridge5: entered promiscuous mode [ 192.704263][ T1213] usb 5-1: USB disconnect, device number 15 [ 192.904527][ T7925] loop9: detected capacity change from 0 to 7 [ 192.929045][ T7925] Dev loop9: unable to read RDB block 7 [ 192.935769][ T7925] loop9: unable to read partition table [ 192.942991][ T7925] loop9: partition table beyond EOD, truncated [ 192.949900][ T7925] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.235152][ T7949] sctp: [Deprecated]: syz.2.578 (pid 7949) Use of int in max_burst socket option deprecated. [ 194.235152][ T7949] Use struct sctp_assoc_value instead [ 194.396157][ T5832] ------------[ cut here ]------------ [ 194.402245][ T5832] WARNING: CPU: 0 PID: 5832 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0xff/0x290 [ 194.412107][ T5832] Modules linked in: [ 194.416562][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 194.426216][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.436408][ T5832] Workqueue: hci3 hci_conn_timeout [ 194.442490][ T5832] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 194.448070][ T5832] Code: 48 89 df e8 53 1d 09 00 eb 07 e8 7c 15 76 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 e7 c4 fe ff e8 62 15 76 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 194.468310][ T5832] RSP: 0018:ffffc9000415fa30 EFLAGS: 00010293 [ 194.472777][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.474614][ T5832] RAX: ffffffff8a4a2e8e RBX: ffff8880321e0000 RCX: ffff888027403c80 [ 194.485058][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.488656][ T5832] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 194.488672][ T5832] RBP: 00000000ffffffff R08: ffff8880321e0013 R09: 1ffff1100643c002 [ 194.488685][ T5832] R10: dffffc0000000000 R11: ffffed100643c003 R12: dffffc0000000000 [ 194.519047][ T5832] R13: ffff8880206e7218 R14: ffff8880321e0948 R15: ffff8880321e0010 [ 194.527274][ T5832] FS: 0000000000000000(0000) GS:ffff888125d0d000(0000) knlGS:0000000000000000 [ 194.536350][ T5832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.543568][ T5832] CR2: 0000001b31313ff8 CR3: 000000007738c000 CR4: 00000000003526f0 [ 194.551954][ T5832] Call Trace: [ 194.555229][ T5832] [ 194.558143][ T5832] ? process_scheduled_works+0x9ef/0x17b0 [ 194.563879][ T5832] process_scheduled_works+0xae1/0x17b0 [ 194.569428][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 194.575433][ T5832] worker_thread+0x8a0/0xda0 [ 194.580035][ T5832] ? __kthread_parkme+0x7b/0x200 [ 194.584966][ T5832] kthread+0x711/0x8a0 [ 194.589019][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 194.594140][ T5832] ? __pfx_kthread+0x10/0x10 [ 194.598722][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.603957][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.609139][ T5832] ? __pfx_kthread+0x10/0x10 [ 194.613736][ T5832] ret_from_fork+0x4bc/0x870 [ 194.618320][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 194.623623][ T5832] ? __switch_to_asm+0x39/0x70 [ 194.628378][ T5832] ? __switch_to_asm+0x33/0x70 [ 194.633171][ T5832] ? __pfx_kthread+0x10/0x10 [ 194.637780][ T5832] ret_from_fork_asm+0x1a/0x30 [ 194.642591][ T5832] [ 194.646036][ T5832] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 194.653335][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 194.662769][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.672809][ T5832] Workqueue: hci3 hci_conn_timeout [ 194.677911][ T5832] Call Trace: [ 194.681173][ T5832] [ 194.684093][ T5832] dump_stack_lvl+0x99/0x250 [ 194.688665][ T5832] ? __asan_memcpy+0x40/0x70 [ 194.693237][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.698420][ T5832] ? __pfx__printk+0x10/0x10 [ 194.702996][ T5832] vpanic+0x237/0x6d0 [ 194.706960][ T5832] ? __pfx_vpanic+0x10/0x10 [ 194.711450][ T5832] panic+0xb9/0xc0 [ 194.715160][ T5832] ? __pfx_panic+0x10/0x10 [ 194.719561][ T5832] __warn+0x31b/0x4b0 [ 194.723525][ T5832] ? hci_conn_timeout+0xff/0x290 [ 194.728445][ T5832] ? hci_conn_timeout+0xff/0x290 [ 194.733364][ T5832] report_bug+0x2be/0x4f0 [ 194.737674][ T5832] ? hci_conn_timeout+0xff/0x290 [ 194.742592][ T5832] ? hci_conn_timeout+0xff/0x290 [ 194.747522][ T5832] ? hci_conn_timeout+0x101/0x290 [ 194.752545][ T5832] handle_bug+0x84/0x160 [ 194.756786][ T5832] exc_invalid_op+0x1a/0x50 [ 194.761282][ T5832] asm_exc_invalid_op+0x1a/0x20 [ 194.766111][ T5832] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 194.771643][ T5832] Code: 48 89 df e8 53 1d 09 00 eb 07 e8 7c 15 76 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 e7 c4 fe ff e8 62 15 76 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 194.791231][ T5832] RSP: 0018:ffffc9000415fa30 EFLAGS: 00010293 [ 194.797281][ T5832] RAX: ffffffff8a4a2e8e RBX: ffff8880321e0000 RCX: ffff888027403c80 [ 194.805277][ T5832] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 194.813228][ T5832] RBP: 00000000ffffffff R08: ffff8880321e0013 R09: 1ffff1100643c002 [ 194.821180][ T5832] R10: dffffc0000000000 R11: ffffed100643c003 R12: dffffc0000000000 [ 194.829135][ T5832] R13: ffff8880206e7218 R14: ffff8880321e0948 R15: ffff8880321e0010 [ 194.837104][ T5832] ? hci_conn_timeout+0xfe/0x290 [ 194.842036][ T5832] ? process_scheduled_works+0x9ef/0x17b0 [ 194.847747][ T5832] process_scheduled_works+0xae1/0x17b0 [ 194.853303][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 194.859281][ T5832] worker_thread+0x8a0/0xda0 [ 194.863891][ T5832] ? __kthread_parkme+0x7b/0x200 [ 194.868819][ T5832] kthread+0x711/0x8a0 [ 194.872871][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 194.877968][ T5832] ? __pfx_kthread+0x10/0x10 [ 194.882541][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.887724][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.892902][ T5832] ? __pfx_kthread+0x10/0x10 [ 194.897473][ T5832] ret_from_fork+0x4bc/0x870 [ 194.902045][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 194.907141][ T5832] ? __switch_to_asm+0x39/0x70 [ 194.911885][ T5832] ? __switch_to_asm+0x33/0x70 [ 194.916631][ T5832] ? __pfx_kthread+0x10/0x10 [ 194.921200][ T5832] ret_from_fork_asm+0x1a/0x30 [ 194.925951][ T5832] [ 194.929227][ T5832] Kernel Offset: disabled [ 194.933540][ T5832] Rebooting in 86400 seconds..