last executing test programs: 10.065742692s ago: executing program 3 (id=354): mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getresgid(0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x6000000, 0x0, 0x4008000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000cc0)='timerslack_ns\x00') mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) setpriority(0xb2e638027a5efcc3, 0x0, 0x7) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 8.922537994s ago: executing program 0 (id=363): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) socket$inet6(0xa, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, 0x0, 0x0) (async) connect$pptp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000200)={r7, 0x8000000, 0x0, 0x4, 0x0, [], [], [0x3]}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x7, 'nicvf0\x00', {0x6}, 0xcb}) read$alg(0xffffffffffffffff, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740), 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 8.482445877s ago: executing program 0 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0x0, &(0x7f0000001300)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000040000b0000000c000580080001"], 0x20}, 0x1, 0x0, 0x0, 0x24004011}, 0x4006800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x7}, @global=@item_4={0x3, 0x1, 0x1, "1c32bc5d"}]}}, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x0, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20040881) 8.223230982s ago: executing program 4 (id=365): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x0, 0x4, 0xe}) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) syz_usb_connect(0x4, 0x5e, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)={0x0, 0x5, 0xae}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) 7.829755471s ago: executing program 1 (id=367): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3ff, @local, 0x5}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000680)=[{0x7, 0xec7b, 0x1000}, {0x4, 0x5, 0xc00}, {0x4, 0xfff8}], 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) 6.958497487s ago: executing program 4 (id=368): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd, 0x73b, 0x0, 0x0, 0x0, 0x1}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000140)={'sha512-avx\x00'}, 0x0, 0x34}) 6.66867301s ago: executing program 4 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="25030e0000000000000016000000140001"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x21d, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x1, 0x6, "e859be", 0x1e7, 0x21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, {[@routing={0x1, 0xa, 0x0, 0x10, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x38}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}, @routing={0x29, 0x4, 0x2, 0x7, 0x0, [@empty, @loopback]}, @srh={0x84, 0x10, 0x4, 0x8, 0x5, 0x30, 0x6, [@private2, @private0={0xfc, 0x0, '\x00', 0x3}, @private1, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast1]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0xe, 0x0, 0x0, 0x7, 0x1, "63bead", 0xb, "9dae21"}, "5946825f2f0a1184ec7f4c491b0738ae999ec1f3b049b96f6a746ec08826540440ae3d1589b09d984b832fb9fec97fa54c9ab6b7666c59319df11cd209de6f1a0ca3df094acdcc65a7ab6ef24d79fb3bb1cc8a43c5871b1af1b6cf10d41bf4b2317433ef9accf5841599afbe0e4db7dcc0db4a2aaba847ee220475645b0a07295064eaf1df3398f98976517c1220c96b64e2fbed0190eb6171704f7fa1d556fbee98d32924c4a0892319057e9b37a67c4cff92aa41a46f2a45a6771169109b79a3b180fd5f2ee9db531142714663be"}}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x18, &(0x7f00000003c0)={@remote, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@generic={0x88f5, "ec3725b121e1"}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x80, 0x2d, 0xf4, 0x40, 0x403, 0x6010, 0xa5ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb1, 0xb3}}]}}]}}, 0x0) 6.512242649s ago: executing program 0 (id=370): r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt(r0, 0xfffffff8, 0x1, &(0x7f00000026c0)=""/4096, &(0x7f0000000300)=0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x5c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x2287, &(0x7f0000000000)) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000140)=""/90, 0x5a}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) 6.233952956s ago: executing program 0 (id=372): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000040)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9b5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000001c0)={0x40, 0x9, 0x5, 'N\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.212633212s ago: executing program 3 (id=373): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) unshare(0x20040600) (async) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) prctl$PR_SET_KEEPCAPS(0x8, 0x1) fcntl$getflags(r0, 0x401) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff030000000905820300ab"], 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000180)) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) (async) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000340)) (async, rerun: 32) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="200a000000ffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c9"], 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000000c060103000000000000368e25e26ffbeefe0100070000000900020073797a300000"], 0x28}, 0x1, 0x0, 0x0, 0x24004055}, 0x2004c010) r6 = syz_clone3(&(0x7f0000000480)={0x40000000, 0x0, 0x0, 0x0, {0x31}, &(0x7f0000000200)=""/54, 0x36, &(0x7f0000000300)=""/193, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x4, r6, 0x2, 0x0) (async) syz_io_uring_setup(0xce4, &(0x7f0000000140)={0x0, 0xaee2, 0x8, 0x2, 0xbfdffff8}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) 5.982371325s ago: executing program 1 (id=375): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_debug_messages', 0x101a02, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) write$UHID_CREATE2(r4, 0x0, 0x138) tkill(r1, 0x13) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xa0}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r5, 0x47f6, 0xeffd, 0x5, 0x0, 0x0) (fail_nth: 73) 5.374212869s ago: executing program 1 (id=378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000002c0)=0x44) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x62000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000007236b0e03d3fc89900003ddbf3e0c03000", @ANYBLOB="06000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) unshare(0x400) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) socket$inet_mptcp(0x2, 0x1, 0x106) pipe2$watch_queue(0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x281, 0x3) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x191c) 4.272226165s ago: executing program 3 (id=381): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x8000000000000000, 0x12) (async) r3 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x20, 0x12}, 0x0, 0x0}) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffffff, 0x0, 0xd400, 0x1) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c000180080001400000000205000d"], 0xa0}}, 0x0) (async) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffe, 0x6, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000080)="2a4d38df4d42", 0x0, 0x4b, 0x10000, 0x1, 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 3.884391781s ago: executing program 1 (id=382): r0 = gettid() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) (async) fcntl$setsig(r1, 0xa, 0x12) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) poll(&(0x7f0000000080)=[{r4, 0x5062}, {r3, 0x8000}], 0x2, 0x837a) (async) dup2(r1, r2) (async) fcntl$setown(r2, 0x8, r0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr(r6, &(0x7f0000000100)=@known='security.selinux\x00', 0x0, 0x0, 0x2) (async) tkill(r0, 0x13) 3.774562389s ago: executing program 1 (id=383): mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getresgid(0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x41000000, 0x0, 0x4008000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000cc0)='timerslack_ns\x00') mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) setpriority(0xb2e638027a5efcc3, 0x0, 0x7) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 3.774339495s ago: executing program 0 (id=384): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r0) 3.340858899s ago: executing program 4 (id=385): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3ff, @local, 0x5}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000680)=[{0x7, 0xec7b, 0x1000}, {0x4, 0x5, 0xc00}, {0x4, 0xfff8}], 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) 3.145750131s ago: executing program 3 (id=386): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x48, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x1, 0x28, 0x3a, 0x67, 0x0, 0xa2, 0x6, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x3, 0x91}]}}, @payload_direct={{{{0x22, 0x0, 0x1, 0x0, 0x0, 0x8, 0x3, 0x2, 0xdf, 0x0, 0x2, 0x3, 0x5, 0x3, 0x86d0, 0xd3a, 0x4, 0x4e23, 0x4e20}, 0x4}}, [0x0, 0x0]}}}}}, 0x0) 2.842446622s ago: executing program 0 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40000003, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40000003, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0xfffffffffffffffe, 0x0, 0xffdfffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0xfffffffffffffffe, 0x0, 0xffdfffff}, 0x0) r3 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000200)="e84acff97e", 0x5}], 0x2) syz_open_dev$cec(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) (async) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x64223aac04483d3e, 0x0, 0x333}, &(0x7f0000000000), &(0x7f00000001c0)) (async) r8 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x64223aac04483d3e, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f0000000300)=""/52, 0x34}], 0x4}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x0, 0x0, 0x0, 0x7597b69a, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r12, 0x3, &(0x7f0000000000)='source', &(0x7f00000001c0)='[\x8b\xa4[\x13\x9b\x04\x00#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x95\xba\x9d\x01O\xc8\t\xd2\xceZ\x8a\x7f\xbc\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3b2m\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r13, @ANYBLOB="0100250000000000000004000000bc0001800d0001007564703a73797a300000000038000400200001000a004e2100000005fe800000000000000000000000000043070000001400020002004e20000000000000000000000000380004001400010002004e23ac1414aa000000000000ff00200002000a004e22000000ff0000000000000000000000000000000100000000380004001400010002004e23ac1414bb0000000000000000200002000a004e240000000600000000000000000000ffffac14143908000000"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYBLOB="5992000000000000140003006d6163766c616e30000000000000000004002b800500270004000000d4daeb07cf07cc46e8b78c16509de02a5caf1e3e3c839cd3abad160998e05bffc0fae0ea1b3793fa44250d85894182767244a5af486e9ea2a215c67b35ab82e15bb62149bea334f1aa155d5c978b41e52ab9d6d0a73127faa38176daa55044a59ea7a3debeb5647d2f0e57464737531465a15a9b2045e65a9f4fb6449fbb4d973aeb2bc1387f87bbd05fc5b31ef433a48279a84fe6104ede49370420081463987e14ff9b79285ca1fb3b5e090b4c05d898d06a34b954db7f2a28d4f48e4f5a5a58d2337d41247b77d12f81de149a513d", @ANYRES16=0x0, @ANYRES64=r10, @ANYRES64, @ANYRESHEX=r3, @ANYRES16=r11, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8044) 2.842202737s ago: executing program 3 (id=388): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_debug_messages', 0x101a02, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) write$UHID_CREATE2(r4, 0x0, 0x138) tkill(r1, 0x13) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xa0}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r5, 0x47f6, 0xeffd, 0x5, 0x0, 0x0) (fail_nth: 74) 2.322331299s ago: executing program 3 (id=391): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r4, 0x0, 0x80, 0x6) r5 = eventfd(0x7) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x5, 0x8000000, 0x2, r5, 0x2}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x69) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYRESHEX=r1, @ANYRES32=r0], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f0000000100)) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000480001002bbd7000ffdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="8cb60000140001"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@acquire={0x128, 0x17, 0x1, 0x80000000, 0x0, {{@in6=@private0, 0x0, 0x6c}, @in6=@remote, {@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in6=@private2={0xfc, 0x2, '\x00', 0xfd}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, {}, 0xfffffffd}, 0x80}}, 0x128}}, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) 1.89586117s ago: executing program 2 (id=392): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{0x0}], 0x1}}], 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000c40), 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) (async) socket(0x10, 0x803, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) (async) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{0x0}], 0x1}}], 0x1, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f0000000c40), 0x0, 0x0, 0x0) (async) 1.701301893s ago: executing program 2 (id=393): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x2, 0x4) (async) r1 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='utf8', &(0x7f00000000c0)='/dev/vcsu\x00', 0x0) 1.484213658s ago: executing program 2 (id=394): prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x88882, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000640)=0x3) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0x8, 0x7}) sendmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0xc1}], 0x62, &(0x7f0000000040)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x9840) mmap(&(0x7f00002af000/0x3000)=nil, 0x3000, 0x300000f, 0x12, r0, 0x9c6ca000) 1.12637358s ago: executing program 2 (id=395): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x80000001, 0x7d75, 0x2, 0x3, 0x1ff, 0x1, 0x7}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4, 0x3}}, './file0\x00'}) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f00000000c0)={@rand_addr=0x64010102, @private=0xa010100, 0x1, "2b07243f061ddda7b12f31b8959a83c9720f2731c86de5cf8f57c7421879823c", 0x4e5a, 0x3, 0xfffffffa, 0x2}, 0x3c) alarm(0x1) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000100)={0x4}) syz_open_dev$sndmidi(&(0x7f0000000140), 0xa, 0x10800) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000500)=""/246, 0xf6}], &(0x7f0000000680)=[0x3, 0xb54, 0x8001, 0x1]}, 0x20) r4 = syz_clone(0x1000, &(0x7f0000000700)='B', 0x1, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="cf3abd0a54a488513d03a26f4a1951a1475943338f01d0ebf08853672249abf0add4b4df9a39940c46d5f6931b28a6f0b4e7c559e5044ceab02c27cce85816478ca1efbfc90cc9d50a23bba599f4574b5cd8c0b983578d046af3a5c986f5fe1614aba7c51bb259745811cda7e78c5b737c95bb8484ba58d36751ddc3584c445ac7bc7efd547772d7afb2a6017e2d870b225b19b4d00a9c9df4ff47f06665b77c49edd40c711db3a2e684cbc5d966a0be1e3cdf6821b3d594410ce6005a6684c4a5265b91e0a92cee9a012d51b2a63716ad4a26788fbd63d4ed1bbf6e8d6294ac71497e686139926267f428acfd2fada201c436cb95e86e38251336d1012d33cc427f4b2523eb72398ee307ea93b9726f7d941ce50ede234db4c0997cad602eb41572400901d210dd952eb97a253f1009e3f3b5de909e38af7ab1d28dc63be68d3344f15cd2b62eb3df47e6eeb20a9a42cbd5c785d7a5b77ccc3c75c152ee5c5827cef72999c7373cdc26313057d85331e34d7af78f57a271619b2614371233d21f448ca4fcb8c34acac9ce7c741d3e8002ee4e7fb45fe72882777018d6cc588f306162369178bccbcfac94e27430d7c6a37ab642f141ad0a69289d44471661e1e81291e5a0c25a1130c0fb1e1f4911b16a5fd311e184697aff3d327e77087944a34b707d53566e12c8a00a2a2ace031b9d223d33c41edeec17113ca7e48f4aaafaed9e52cf328ad688fb4e2845bae50a5e9ef2c0654e9581c686aec60bd5ae89fa0e700feba60ff948ec066b82a39018c105e8ae986459ac181061e2ee80caa50f91b570ec1163e7949c38500114ba92e767186f1f8659447e26e8e8318d9b6a7d89df1b2960f6f47f6eacc0dba38fa3b26a01872a69b227c42f8d547a02c80005982c14312464e847582f423ddd03e7b9e49d72a849a37376f296b7d58a65ca21f1ae188c7e34f14c3d1d0a0c2d18b568f11be58e1f7c26bf74761bd77246ec724b40d1f44bb5061b37d085d1a289dd77a49616a0f995c2630e83536b63a3d96de85c2889545c192ca63fb0abfe149ca0bcff4088eff462110f907090e24a4d08722eaf5177c0c470e3d6160d844e69e6d956bf06a5c6cbe26efba88eca7f8b30b930d36a913d3083f3d8616d42ec5bd32187ffcd4e7bfd15075a94ce16500162406d4ae82ac7c1a040bd5e119c22cb6a465c4b585a4a89faca6e397d34e1fd11328c3c5b91bfe82886117ca1a3fc18fe996fedfa4dadaab419eb59200958a516f37303593a4648557ea9b3938a0cacf4bb76bdb369d3df9a19e6f57d236b362bab416f28d7fd82bb5de048c16fcd319fe87786bd43fa002ec2ff6ff868863f835f1ab4acc55b594df0a5cdf32aa42a39ed42d02896bc16a1424b07970475a922034892ce6343608b328bf771a9e3a6c7bc681187707cde909dbe157d048d44fe02f391b844bac30fa6f104a068a9eec8beb420f0fe812aec0d281e2c6e65377b78bff78160b7f78cde8d1bf1a07ce9ea04cb1158d30b3d6eb5724f69e6878fa6439eda563b61439d1f328563d231ed239f743169c617dfd2dde8a1ee5b471cb808992c7de331d38449f3b4f4623f3f9c04f3f18af013856ed64c1c514f2cf6276ea95a930a47f597bb856dfdb12219abffa10c68b3e75e59b66098335d301c3ea92b62cf1751687bd36ae80a38b6529e441a61f6821b7ba9a34511d55dda4abb7e04a1e6b3377a6fda82da12870c38aa85e6451e5fec2088da441fd0bc2baac2660173f48c7f046fd18588e59beb2e8ebf75f1db72d7ba5222e96082d773049876d4f48fbc61c91cada7cb4295baf53519e781b0356b7a3885c1c977e7541b390890a86ba5059d61bc92f9c1b64cdddb118e60f017231a060f31f87e9579e9d1472c5465b4ed38e3ad661e4e7e83274ca68427ca4b9e72532d90c267ad203960524ec5a92a8a88c2a9f3f5253dc42df60fc89fd144ae134280f2817e73ed70f9ccd75d83c72196794638ba5f3dab0017af6e76a90e085dfcf15054834db3845a19498a372f74889f1615723555299a639bf584bd19a04c33e90ce71deb36c7852a8175f3b56a4301ba1fe7b5d275d8e42a6cffef945eec945a34a2e46b2d222b1e88408065a8419e328ed8aadd681f653824b5ddc86b1a1e55c702ac50d217dacf2f9dc8d8f59217326aabd04f0812ec0ffc92378abc8f8b1b1d9f33c8d53e5550cd94460c8eb86add53b5f31b118e097bd9b83f28bca7dfacc42afe365f6ee023a45dc43377ae4d9107a3a1613b41a63a58b3c5e2927ed5a2c2e423dcc2812a40383d6b850fae194532312a109be8f814723fc42a547796ebc71f648b7440a6b5064900893b3af2cf9be421fa5cd874c5de2f318e048f4bec96a2a1e6cd5144b68ac5b20a52a57c2e77b327b43bd624ce4ab3504f0e466588b804ce7c72e1a3fcc77267eeed2495269e01495c2bd2cb781c0b66063bd81a4ed67037e2c89d478d84000a368af5a819c731530685d922cd2bf0f367c401f8ffcbc236dbf9a7c9919bf3cc2f30e7ed883ed23b62a3705cf530251fe4549e365d444009aa9ac391f1b0e3466f042c6a0df63027400180c33c95ebf3322d1793affd24711fc5d3f50aefce45bf2c2c786435a9c5e965ed2d55147fcf9bedc9d037f2897a1466d4b77b2ee86f26acaf2c7c6d057addd1f89a12c1e973d7ff4734da0ea9187f2cd5f188bddee5c9c8b53329e489d5b06950513416f66123a4414a24c71a799be42e1fa11a44e31ec6e83db20ae420240e19f8c9dd5410517da5d30df1df6047ee9b297293f3dddbd7d1f0597dde4193aa68f16b9c99b615022fa588a71c7437cd259ea3d69fd3889cb41f530936ade2e3e04cb5042e0f129387e7f86e4b7f068adff26b57622067ef63180e7200185f765c42be15590d6c7b63d1fa6f5bbd7129299bdd6b24db8a2856585545f9137e827eeefdf09f78a45c98869eb0da9b54632d9e4c7c15519b74cc492288a801da3e2b0c1abfcd96b1d94a824067e1fa97013fbd5df3dd58c52e05fc3be2c2d9832753e4b40e66722cb638ca491ba1ce4f1c274968a608f601906925878f02c5290e3551ca41fd07a170a762f753e2bf351e4974f591da29d8d2f1d351c7687bb5dc8b687855df27769c9c8a00962dc0e3a63959310749d91fff96ea053e1ceffc30e6b09cb2581e32526ebcb878e16ab6d3501ef7b59c22f250f4fe406cc917d10f42ea7dd2072ed818e8a1b5f5aa1c7a342897d77bb63861b810b65eab95ffbaddaead3c1fa8b22eae55ecd012407c8a41195909317c47fa9011896ffbb8b8e943f5a2b7e9d12a166243a52fc67cdbdc1cca0b73fdfbd6029a05b24ecf04e0202e85fac93d707d159d6ccb14e4be83fb8108bca80d8cfcc699c7d2c012a2449e075d34ee8213c2ad636463407ceb6d7347b844949754d677592045c17942e1cfcfdf63df549a3a2318241922ac01218bfc0440409887bc33cee90c97a119cc24224b9e8975617517a2a328c5da417de18a93069760c406d425c918f705100b92dc414b1b1a7a21d9673371f8af569c1cd2216f6e7a9721e6e78697a1414e91d306248534ed16c0c6349b18c55be565fcff2ee405c1b626f5c0559aab9916ce2b942cf1742b8b07b5068b1da73e0cddee5607214130fc8489009fae69ae54d326f23284f5a3e8924a293699318c70ef850ee2987857bc5ac6cb8196ae66735ebfbc697f10a10c0d6a8a82fd21994e0b6bff20f1522c5dd86c78b57b3d15fd1df958c3c7d2011bf8782a6ac1421bd0146ec7a33b9f125d9dea04bcb9a83a8f6af0f135b635340ff93310e0bef69b149745fd6e2be0f5a535afef6246a1cbaddb5fb7081e000e2f39967e502974799cb1cd64e0a99266ce26a31c9edf0b88b3c4a4346e4814fed2f1bd0cf0123398d45f27b925a9f223107bb1438cbb00fa757faa5223ecb06b8139928e497eeb840084af1c7b1a160e17ef92b708ece02ed69b418768a639e4e92cc2914b5530d959f97464ee5ef8be05ab074cf1915bc42e090dd407a3d3994f2ed6f7bc57274b180aa677112a3991c5dae33e287706fba341fec8f95f6b7f859572af6c378c5882ee92e75340fac6da6ec57b40e1a9b79909e919ad5d10fade8c87c265858d7d91875e13b1cdf84e4815898ab4dabdfad3b95763695a24713c74ff2ea9ec7f24166b87bafda8b3300b129338c22e8efa7c34c5caf737695172bad21cbb772b5f4ea95d6874b12b8c0af6d25e51103b16bd3ab92b99ce2ba5287c8a077fdf5bf7f5270b5d7902df69d44a4ade52b18c767aa42f071d04fe8c5e3494d65caf68021c017cae9264843728b5077b9ae120045025a7fbbb049078832f9136e0cdc721abb825d58d0007feebbd528ca9425b40e5ecd5b5b0097872dfdf123bbde941b2604adb2f44751e6bbb36165d8f5e9876dcec11cbfc451750528c0e7e57edd2eb609f412dacfe2121a57b56c74918d0a227ae83bfd8c86c86ce90755199e81fb6948760f03aee8e0d7e688c2670ce34e151b87a9197a670e0e0933fbf23e6662dea59c83afce2b2e1cc033f81c55752f382d528f0390d49c03e759c1636e4c8dd06e734e6bc4a63c729df338797f88c287d4801202f46b2468483203c20932b0b2b2b025c6739e08942138047c12819eb62e5184113ae37ef62085a2a9c484da00ec0a19d33fdf9a4c20e23f71dfe7a15dd7cb885cd9372b371bf3457a40e5bbcb61e8a87a44d6a5f9f274b3015eb567be650ed931da2fedaefa8c9439edddb30a00ca5fb5fa22d89ee91229ff6bee4b6310a9dff1bf4e09fa44dc460dc7ae299fa8c088ce613532f3fe444176a371ca887a227aad4e5e20a4e680ca11d79f12a9b9b13711dd1867232d5dc66e2f5ac4dc0a25c67930e88dd3c555f497d98194decf7308bbbd13836bac4d267362ae10a6fe922c199676138773eb2acb851b0d5e214bc7b3134d4232f03f1ddf7df9b61e7ef00e143cd444153b0a1980d25761eb0dc5cb2ee2794fb5c0e0dd516dd8effc5838f6bb78caa1dfd41422933414c2f56e99f16e9c7df4202f6401d592b43cad5d48a99d49c4e6c5f942ade6f485ec9be3ae42c36f9207daa431e8567e02518f66f4a2355d0f393db2a2fcb1071e24ba2f2ad6696fd0bd3243a861bf52a5456d4d014c2ff5e2f8cbd83677f4f5ec000b8adb930639f2c0955abc85f42fc7f32bfa188c490778cd75ed11b24e43259c861ad77b4aadbe3cec8a0f4b5e479bad6167151c37b964465514410994f24a70d989cd1a0dcb179431353b3efa7160ef639fec22cd1d3218ac3c9422955081642aab116cebfbb8807b3cd06fcc489f3d78365d495449dbba2b4a4558ac616962fe947df3bd0d1dbc3a9e0d612674206c7d72b6df3585f08758e9bcd31bb7d0b78598dbd8b4d696d76213dc307818634ce047fd9d92333881db89f0c7701210949b10aba47e33863784b931cc1d7fb71db12bf5b1372e840a400ca803e1893ec5144f9cbb15c365935a75c71f0f3295c4431ba33c115ceed6edb7e65236442cb6216756d47c0f902f19ae17a847dca749e7c703387c3d6539dc989036d6e9db8355149292d11fbd62bfeaa0130103bad40184e409557a9b6d37691e39393c0a95be3bc6cb166a81f32f773e4075834dbd918359bec95bd511e91d7b48f6989af0983428aa9402403606f08e1ad6171b19de4d15bebb4a2c6d670c06f2476b5b38f7396d7f167ca0fed78900a387f736356d145ae734a58ae1818092a54aa818ff3bf08b729c5") r5 = syz_open_procfs(r4, &(0x7f00000017c0)='net/rt_acct\x00') read$FUSE(r3, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000003880)={0x3, &(0x7f0000003840)=[{0x401, 0x7, 0xaa}, {0xfffd, 0x97, 0x3, 0x3e}, {0x184, 0x0, 0x7, 0xffff5a33}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000038c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) read(r7, &(0x7f0000003900)=""/4096, 0x1000) alarm(0x9) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000004900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000004940)={0x1, 0x2, {0x0, 0x0, 0x13, 0x2, 0x8}, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000049c0)) alarm(0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000004a40)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000004b40)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004b00)={&(0x7f0000004a80)=@getchain={0x54, 0x66, 0x0, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xffe0, 0xa}, {0x7, 0xd}, {0x1, 0xfff0}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0xb14}, {0x8, 0xb, 0xf3f}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3610}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000004b80)={0x10003, 0x6, 0x8000000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) alarm(0x100000001) r10 = dup2(r1, r2) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000004c00), r10) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000004d80)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004c40)={0xf8, r11, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1000}, 0x44000) epoll_create(0x7) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000007100)={0xaf400000, 0x0, &(0x7f0000007040)=[{&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/154, 0x9a}, {&(0x7f0000005e80)=""/135, 0x87}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/15, 0xf}, {&(0x7f0000006f80)=""/134, 0x86}], &(0x7f00000070c0)=[0x200], 0x6}, 0x20) 1.010365712s ago: executing program 2 (id=396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) close(r2) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) accept(r3, &(0x7f0000000780)=@rc={0x1f, @none}, &(0x7f0000000800)=0x80) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000183000000bf09000000000000550901000000000095000000000000061801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000851000000000"], &(0x7f0000000d40)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) 857.229812ms ago: executing program 4 (id=397): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x66) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e0000001400028006000200300000000800040091"], 0x48}}, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 578.455141ms ago: executing program 1 (id=398): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8880) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000a80)={{r3}, "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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="60f7753641c59c06f1d0320b7c2b7cbb3df53bf9e7775ea2c986c75e80743eee9e877b995f69b21e8b430700ce06889703cf88d94adae663383eb2e61d4cfe940579690aaf1ddcc60876908a2d4d5ffde9ea79277c53168bc61aa731d09bd1d31785c663", 0x64) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000240)=0x40) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="000f060000000605979e1dd3"], 0x0}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000001540)='uid_map\x00') read$ptp(r10, &(0x7f0000000040)=""/148, 0x94) 575.348785ms ago: executing program 4 (id=399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000140), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000040000b0000000c000580080001"], 0x20}, 0x1, 0x0, 0x0, 0x24004011}, 0x4006800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x7}, @global=@item_4={0x3, 0x1, 0x1, "1c32bc5d"}]}}, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x0, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20040881) 0s ago: executing program 2 (id=400): unshare(0x22020400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) kernel console output (not intermixed with test programs): 273][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.940504][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.981682][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.993642][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.000901][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.025565][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.061028][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.084517][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.132100][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.139278][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.152034][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.159383][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.281848][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.292433][ T5844] veth0_vlan: entered promiscuous mode [ 95.330051][ T5843] veth0_vlan: entered promiscuous mode [ 95.339623][ T5844] veth1_vlan: entered promiscuous mode [ 95.401840][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.414225][ T5843] veth1_vlan: entered promiscuous mode [ 95.497348][ T5844] veth0_macvtap: entered promiscuous mode [ 95.511786][ T5844] veth1_macvtap: entered promiscuous mode [ 95.552539][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.565988][ T5843] veth0_macvtap: entered promiscuous mode [ 95.583036][ T5843] veth1_macvtap: entered promiscuous mode [ 95.594614][ T5842] veth0_vlan: entered promiscuous mode [ 95.643174][ T5848] veth0_vlan: entered promiscuous mode [ 95.663540][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.673224][ T5842] veth1_vlan: entered promiscuous mode [ 95.688234][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.705577][ T5848] veth1_vlan: entered promiscuous mode [ 95.738550][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.750318][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.761714][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.771774][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.781476][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.791179][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.826300][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.835488][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.844765][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.853937][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.871781][ T5847] veth0_vlan: entered promiscuous mode [ 95.934412][ T5848] veth0_macvtap: entered promiscuous mode [ 95.954426][ T5847] veth1_vlan: entered promiscuous mode [ 95.992496][ T5848] veth1_macvtap: entered promiscuous mode [ 96.011531][ T5842] veth0_macvtap: entered promiscuous mode [ 96.042474][ T5842] veth1_macvtap: entered promiscuous mode [ 96.098225][ T5838] Bluetooth: hci1: command tx timeout [ 96.103755][ T5834] Bluetooth: hci0: command tx timeout [ 96.103942][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.146904][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.154598][ T5847] veth0_macvtap: entered promiscuous mode [ 96.154884][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.171822][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.177202][ T5834] Bluetooth: hci2: command tx timeout [ 96.207987][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.237942][ T5847] veth1_macvtap: entered promiscuous mode [ 96.250899][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.256937][ T5834] Bluetooth: hci3: command tx timeout [ 96.268326][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.277143][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.285831][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.306848][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.317266][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.325487][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.336596][ T5834] Bluetooth: hci4: command tx timeout [ 96.362001][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.370906][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.380344][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.389186][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.433013][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.437094][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.448717][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.457839][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.564285][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.589819][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.615653][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.627666][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.655637][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.667020][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.675756][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.684661][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.693786][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.830910][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.857514][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.870344][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.893707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.033219][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.069162][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.137930][ T5886] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.204619][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.243077][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.253288][ T5901] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.324992][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 97.346462][ T5886] usb 3-1: can't read configurations, error -61 [ 97.369552][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.388452][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.537904][ T5886] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.563464][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.699711][ T5908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.937762][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.978696][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 98.006659][ T5886] usb 3-1: can't read configurations, error -61 [ 98.014210][ T5886] usb usb3-port1: attempt power cycle [ 98.137005][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 98.160023][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.170454][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.182430][ T5834] Bluetooth: hci0: command tx timeout [ 98.188056][ T5834] Bluetooth: hci1: command tx timeout [ 98.208592][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.226560][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.245288][ T9] usb 4-1: Product: syz [ 98.250803][ T5888] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.258905][ T5834] Bluetooth: hci2: command tx timeout [ 98.266432][ T9] usb 4-1: Manufacturer: syz [ 98.271080][ T9] usb 4-1: SerialNumber: syz [ 98.337320][ T5834] Bluetooth: hci3: command tx timeout [ 98.387516][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.416849][ T5834] Bluetooth: hci4: command tx timeout [ 98.435081][ T5922] xt_hashlimit: size too large, truncated to 1048576 [ 98.435584][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 98.449909][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 98.455526][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.465907][ T5886] usb 3-1: can't read configurations, error -61 [ 98.475481][ T5888] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 98.487867][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.495946][ T5888] usb 5-1: Product: syz [ 98.506074][ T5923] xt_hashlimit: size too large, truncated to 1048576 [ 98.507549][ T5888] usb 5-1: Manufacturer: syz [ 98.517697][ T5888] usb 5-1: SerialNumber: syz [ 98.543828][ T5888] usb 5-1: config 0 descriptor?? [ 98.582909][ T5924] : renamed from bond0 (while UP) [ 98.607337][ T5886] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.620451][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 98.641307][ T5882] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 98.654979][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 98.666469][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.697162][ T5882] usb 1-1: config 0 descriptor?? [ 98.704668][ T9] usb 4-1: 0:2 : does not exist [ 98.709957][ T5886] usb 3-1: can't read configurations, error -61 [ 98.726190][ T5882] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 98.735671][ T5886] usb usb3-port1: unable to enumerate USB device [ 98.775873][ T5911] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 98.840954][ T5888] usb read operation failed. (-32) [ 98.936952][ T5882] usb 1-1: Detected FT232B [ 99.110803][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 99.130677][ T5882] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 99.149287][ T5882] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 99.170983][ T5882] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 99.223483][ T5882] usb 1-1: USB disconnect, device number 2 [ 99.232099][ T9] usb 4-1: USB disconnect, device number 2 [ 99.260857][ T5882] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 99.270702][ T5888] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 99.303001][ T5888] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 99.318131][ T5882] ftdi_sio 1-1:0.0: device disconnected [ 99.348173][ T5888] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 99.364401][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.574190][ T5936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12'. [ 99.591347][ T5936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.736875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.745686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.754604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.764470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.810405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.819816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.960311][ T5938] usb usb8: usbfs: process 5938 (syz.3.13) did not claim interface 0 before use [ 100.117231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.176957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.517392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.564984][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 100.637296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.854896][ T5956] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 100.964437][ T5956] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.326631][ T5882] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.500108][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 101.527857][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.576473][ T5882] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 101.620867][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.661891][ T5882] usb 1-1: config 0 descriptor?? [ 102.145087][ T5882] aquacomputer_d5next 0003:0C70:F00E.0001: unknown main item tag 0x0 [ 102.197037][ T5882] aquacomputer_d5next 0003:0C70:F00E.0001: unknown main item tag 0x0 [ 102.254000][ T5882] aquacomputer_d5next 0003:0C70:F00E.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0 [ 102.415194][ T30] audit: type=1326 audit(1748419681.819:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.1.22" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92f018e969 code=0x0 [ 102.476583][ T5882] usb 1-1: USB disconnect, device number 3 [ 102.601857][ T5967] fido_id[5967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 103.316970][ T5897] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.424136][ T5982] ip6t_srh: unknown srh match flags B153 [ 103.541741][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.563321][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 103.581172][ T5983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 103.596567][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.654207][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.766543][ T5897] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.783718][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.800499][ T5897] usb 3-1: config 0 descriptor?? [ 104.708216][ T5991] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 104.735092][ T5991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.29'. [ 105.124485][ T5977] "syz.2.25" (5977) uses obsolete ecb(arc4) skcipher [ 105.195251][ T5995] x_tables: duplicate underflow at hook 3 [ 106.494551][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 106.524770][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 106.564153][ T5897] usb 3-1: USB disconnect, device number 6 [ 107.099783][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 107.131810][ T6035] [U]  [ 107.481037][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 107.498941][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 107.516978][ T6046] netlink: 'syz.0.44': attribute type 18 has an invalid length. [ 107.546275][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 107.906583][ T5887] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 108.058154][ T5887] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 108.081084][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 108.180770][ T5887] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 108.215143][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.335874][ T5887] usb 2-1: Product: syz [ 108.379416][ T5887] usb 2-1: Manufacturer: syz [ 108.389087][ T5887] usb 2-1: SerialNumber: syz [ 108.484957][ T5887] usb 2-1: config 0 descriptor?? [ 108.528169][ T5887] hub 2-1:0.0: bad descriptor, ignoring hub [ 108.562898][ T5887] hub 2-1:0.0: probe with driver hub failed with error -5 [ 108.597854][ T5887] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 108.688140][ T5887] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 108.800529][ T5887] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 108.827093][ T5882] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.838399][ T5887] usb 2-1: USB disconnect, device number 2 [ 108.998655][ T5882] usb 3-1: config 0 has no interfaces? [ 109.022953][ T5882] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 109.064444][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.136222][ T5882] usb 3-1: Product: syz [ 109.166328][ T5882] usb 3-1: Manufacturer: syz [ 109.187148][ T5882] usb 3-1: SerialNumber: syz [ 109.364417][ T5882] usb 3-1: config 0 descriptor?? [ 109.755637][ T6072] trusted_key: encrypted_key: keylen parameter is missing [ 109.887580][ T6075] netlink: 'syz.0.54': attribute type 12 has an invalid length. [ 110.532976][ T6075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54'. [ 111.370290][ T6080] fuse: Unknown parameter 'grF' [ 111.695316][ T6087] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 111.994528][ T2150] usb 3-1: USB disconnect, device number 7 [ 112.221607][ T6098] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001 [ 112.240990][ T6094] syz.1.58 uses obsolete (PF_INET,SOCK_PACKET) [ 112.430298][ T6102] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.439811][ T6104] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 112.578636][ T6102] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 112.674933][ T6117] pim6reg: entered allmulticast mode [ 112.777984][ T6117] pim6reg: left allmulticast mode [ 112.820681][ T5882] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 112.888880][ T5886] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 112.993951][ T5882] usb 1-1: config 0 has no interfaces? [ 113.007885][ T5882] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 113.023910][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.033070][ T5882] usb 1-1: Product: syz [ 113.042960][ T5882] usb 1-1: Manufacturer: syz [ 113.056588][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 113.068521][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.083749][ T5882] usb 1-1: SerialNumber: syz [ 113.092236][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.138531][ T5886] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 113.149030][ T5882] usb 1-1: config 0 descriptor?? [ 113.160629][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.198183][ T5886] usb 3-1: config 0 descriptor?? [ 113.627356][ T5886] hid (null): usage index exceeded [ 113.749585][ T5886] hid (null): unknown global tag 0xc [ 113.772242][ T5886] hid (null): unknown global tag 0xdf [ 113.878121][ T6112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.912192][ T6112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.934592][ T5886] usb 3-1: string descriptor 0 read error: -71 [ 113.973889][ T5886] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 113.982473][ T5886] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -32 [ 114.007123][ T5886] usb 3-1: USB disconnect, device number 8 [ 114.943950][ T6136] Zero length message leads to an empty skb [ 115.404192][ T5886] usb 1-1: USB disconnect, device number 4 [ 115.556754][ T6144] FAULT_INJECTION: forcing a failure. [ 115.556754][ T6144] name failslab, interval 1, probability 0, space 0, times 0 [ 115.607418][ T6144] CPU: 1 UID: 0 PID: 6144 Comm: syz.3.70 Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 115.607454][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.607471][ T6144] Call Trace: [ 115.607483][ T6144] [ 115.607493][ T6144] dump_stack_lvl+0x189/0x250 [ 115.607534][ T6144] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.607560][ T6144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.607605][ T6144] should_fail_ex+0x414/0x560 [ 115.607636][ T6144] should_failslab+0xa8/0x100 [ 115.607663][ T6144] __kmalloc_cache_noprof+0x70/0x3d0 [ 115.607687][ T6144] ? mpi_alloc+0x52/0x140 [ 115.607718][ T6144] mpi_alloc+0x52/0x140 [ 115.607746][ T6144] mpi_read_raw_data+0x139/0x970 [ 115.607779][ T6144] dh_set_secret+0x186/0x310 [ 115.607805][ T6144] ? crypto_create_tfm_node+0x83/0x3f0 [ 115.607831][ T6144] ? __pfx_dh_set_secret+0x10/0x10 [ 115.607863][ T6144] ? crypto_alloc_tfm_node+0x3c1/0x3f0 [ 115.607894][ T6144] __keyctl_dh_compute+0x507/0xca0 [ 115.607942][ T6144] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 115.607973][ T6144] ? __lock_acquire+0xab9/0xd20 [ 115.608008][ T6144] ? __might_fault+0xb0/0x130 [ 115.608054][ T6144] keyctl_dh_compute+0x109/0x160 [ 115.608086][ T6144] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 115.608133][ T6144] __se_sys_keyctl+0x423/0x910 [ 115.608160][ T6144] ? __pfx___se_sys_keyctl+0x10/0x10 [ 115.608189][ T6144] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.608218][ T6144] ? __fget_files+0x3a0/0x420 [ 115.608251][ T6144] ? fput+0xa0/0xd0 [ 115.608279][ T6144] ? ksys_write+0x22a/0x250 [ 115.608301][ T6144] ? __pfx_ksys_write+0x10/0x10 [ 115.608319][ T6144] ? rcu_is_watching+0x15/0xb0 [ 115.608352][ T6144] ? do_syscall_64+0xbe/0x3b0 [ 115.608377][ T6144] ? __x64_sys_keyctl+0x20/0xc0 [ 115.608402][ T6144] do_syscall_64+0xfa/0x3b0 [ 115.608433][ T6144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.608452][ T6144] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.608473][ T6144] ? clear_bhb_loop+0x60/0xb0 [ 115.608496][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.608514][ T6144] RIP: 0033:0x7f87d998e969 [ 115.608539][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.608551][ T6144] RSP: 002b:00007f87da745038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 115.608567][ T6144] RAX: ffffffffffffffda RBX: 00007f87d9bb5fa0 RCX: 00007f87d998e969 [ 115.608577][ T6144] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000017 [ 115.608586][ T6144] RBP: 00007f87da745090 R08: 0000200000002140 R09: 0000000000000000 [ 115.608595][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.608603][ T6144] R13: 0000000000000000 R14: 00007f87d9bb5fa0 R15: 00007f87d9cdfa28 [ 115.608625][ T6144] [ 115.614720][ T6146] xt_CONNSECMARK: invalid mode: 0 [ 116.722363][ T6160] bridge_slave_0: left allmulticast mode [ 116.739707][ T6160] bridge_slave_0: left promiscuous mode [ 116.746637][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.817972][ T6160] bridge_slave_1: left allmulticast mode [ 116.837171][ T6160] bridge_slave_1: left promiscuous mode [ 116.843575][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.875546][ T6160] : (slave bond_slave_0): Releasing backup interface [ 116.966579][ T2150] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.048961][ T6160] : (slave bond_slave_1): Releasing backup interface [ 117.110261][ T6160] team0: Port device team_slave_0 removed [ 117.237917][ T6160] team0: Port device team_slave_1 removed [ 117.239515][ T2150] usb 1-1: config 0 has no interfaces? [ 117.257840][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.278100][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.312820][ T2150] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 117.322979][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.335473][ T2150] usb 1-1: Product: syz [ 117.340310][ T2150] usb 1-1: Manufacturer: syz [ 117.346315][ T2150] usb 1-1: SerialNumber: syz [ 117.374175][ T2150] usb 1-1: config 0 descriptor?? [ 117.403368][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.441123][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.764518][ T6170] netlink: 27 bytes leftover after parsing attributes in process `syz.1.76'. [ 117.795924][ T6170] netlink: 27 bytes leftover after parsing attributes in process `syz.1.76'. [ 118.116770][ T5886] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.286482][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 118.299661][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.320312][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.359101][ T5886] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 118.372349][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.391469][ T5886] usb 4-1: config 0 descriptor?? [ 118.576481][ T5887] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.740568][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 118.748791][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.761550][ T5887] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.782171][ T5887] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 118.853050][ T5887] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.861594][ T5886] viewsonic 0003:0543:E621.0003: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.3-1/input0 [ 118.895960][ T5887] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.934571][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.967777][ T5887] usb 2-1: Product: syz [ 118.985579][ T5887] usb 2-1: Manufacturer: syz [ 119.013886][ T5887] usb 2-1: SerialNumber: syz [ 119.049367][ T5889] usb 4-1: USB disconnect, device number 3 [ 119.104404][ T6184] fido_id[6184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 119.343797][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.396994][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.538052][ T6189] netlink: 'syz.4.82': attribute type 4 has an invalid length. [ 119.585784][ T5887] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 119.620123][ T5887] cdc_ncm 2-1:1.0: bind() failure [ 119.667092][ T5887] usb 2-1: USB disconnect, device number 3 [ 120.338596][ T6204] loop6: detected capacity change from 0 to 7 [ 120.363121][ T6204] Dev loop6: unable to read RDB block 7 [ 120.397823][ T6204] loop6: unable to read partition table [ 120.403812][ T6204] loop6: partition table beyond EOD, truncated [ 120.415962][ T6204] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 120.611820][ T9] usb 1-1: USB disconnect, device number 5 [ 120.984408][ T6213] x_tables: duplicate underflow at hook 3 [ 121.572068][ T6209] : renamed from bridge_slave_0 (while UP) [ 121.736507][ T5887] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.896728][ T2150] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.916483][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 122.068462][ T2150] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 122.086590][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.188006][ T2150] usb 2-1: Product: syz [ 122.223200][ T2150] usb 2-1: Manufacturer: syz [ 122.267302][ T2150] usb 2-1: SerialNumber: syz [ 122.394304][ T2150] usb 2-1: config 0 descriptor?? [ 122.885408][ T2150] usb 2-1: USB disconnect, device number 4 [ 123.144283][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.116525][ T2150] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.325489][ T2150] usb 2-1: Using ep0 maxpacket: 32 [ 124.343921][ T2150] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 124.402093][ T2150] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 124.455078][ T2150] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 124.546836][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.579432][ T5887] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 124.602513][ T5887] usb 1-1: can't read configurations, error -71 [ 124.615179][ T2150] usb 2-1: config 0 has no interface number 0 [ 124.621428][ T2150] usb 2-1: config 0 has no interface number 1 [ 124.650439][ T2150] usb 2-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 124.667575][ T5886] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.696738][ T6252] loop6: detected capacity change from 0 to 7 [ 124.718090][ T2150] usb 2-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.743143][ T6252] Dev loop6: unable to read RDB block 7 [ 124.760334][ T6252] loop6: unable to read partition table [ 124.774525][ T6252] loop6: partition table beyond EOD, truncated [ 124.783951][ T6252] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 124.800122][ T2150] usb 2-1: too many endpoints for config 0 interface 12 altsetting 197: 114, using maximum allowed: 30 [ 124.870381][ T2150] usb 2-1: config 0 interface 12 altsetting 197 has 1 endpoint descriptor, different from the interface descriptor's value: 114 [ 124.880825][ T5886] usb 4-1: device descriptor read/64, error -71 [ 125.003802][ T2150] usb 2-1: config 0 interface 12 has no altsetting 0 [ 125.105849][ T2150] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 125.115150][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.125366][ T2150] usb 2-1: Product: syz [ 125.129915][ T2150] usb 2-1: Manufacturer: syz [ 125.134834][ T2150] usb 2-1: SerialNumber: syz [ 125.167338][ T2150] usb 2-1: config 0 descriptor?? [ 125.186684][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.336496][ T5886] usb 4-1: device descriptor read/64, error -71 [ 125.389224][ T2150] kaweth 2-1:0.235: Firmware present in device. [ 125.467464][ T5886] usb usb4-port1: attempt power cycle [ 125.581358][ T6242] netlink: 'syz.1.97': attribute type 4 has an invalid length. [ 125.593835][ T6260] Cannot find del_set index 4 as target [ 125.601284][ T6242] Cannot find del_set index 4 as target [ 125.618516][ T2150] kaweth 2-1:0.235: Error reading configuration (-71), no net device created [ 125.645381][ T2150] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 125.705866][ T2150] kaweth 2-1:0.12: Firmware present in device. [ 125.735302][ T2150] kaweth 2-1:0.12: Error reading configuration (-71), no net device created [ 125.827533][ T5886] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.848029][ T2150] kaweth 2-1:0.12: probe with driver kaweth failed with error -5 [ 125.913129][ T2150] usb 2-1: USB disconnect, device number 5 [ 126.031417][ T5886] usb 4-1: device descriptor read/8, error -71 [ 126.584605][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.103'. [ 126.858036][ T6271] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 126.878326][ T6271] syzkaller1: Refused to change device type [ 127.003386][ T6274] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 127.042780][ T6274] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.402791][ T6287] fuse: Bad value for 'user_id' [ 127.407906][ T6287] fuse: Bad value for 'user_id' [ 127.489407][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.523817][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.552088][ T6288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.108'. [ 127.716484][ T2150] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.619300][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 128.674950][ T6300] bridge_slave_1: left allmulticast mode [ 128.687457][ T6300] bridge_slave_1: left promiscuous mode [ 128.693369][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.864201][ T6300] bridge_slave_0: left allmulticast mode [ 128.872635][ T6300] bridge_slave_0: left promiscuous mode [ 128.880990][ T6303] FAULT_INJECTION: forcing a failure. [ 128.880990][ T6303] name failslab, interval 1, probability 0, space 0, times 0 [ 128.899266][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.545965][ T6303] CPU: 1 UID: 0 PID: 6303 Comm: syz.1.111 Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 129.545997][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.546009][ T6303] Call Trace: [ 129.546017][ T6303] [ 129.546026][ T6303] dump_stack_lvl+0x189/0x250 [ 129.546062][ T6303] ? __pfx____ratelimit+0x10/0x10 [ 129.546088][ T6303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.546118][ T6303] ? __pfx__printk+0x10/0x10 [ 129.546144][ T6303] ? __pfx___might_resched+0x10/0x10 [ 129.546178][ T6303] should_fail_ex+0x414/0x560 [ 129.546209][ T6303] should_failslab+0xa8/0x100 [ 129.546237][ T6303] __kmalloc_cache_noprof+0x70/0x3d0 [ 129.546261][ T6303] ? mpi_alloc+0x52/0x140 [ 129.546292][ T6303] mpi_alloc+0x52/0x140 [ 129.546320][ T6303] mpi_read_raw_data+0x139/0x970 [ 129.546356][ T6303] dh_set_secret+0x1f3/0x310 [ 129.546382][ T6303] ? crypto_create_tfm_node+0x83/0x3f0 [ 129.546407][ T6303] ? __pfx_dh_set_secret+0x10/0x10 [ 129.546439][ T6303] ? crypto_alloc_tfm_node+0x3c1/0x3f0 [ 129.546470][ T6303] __keyctl_dh_compute+0x507/0xca0 [ 129.546511][ T6303] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 129.546542][ T6303] ? __lock_acquire+0xab9/0xd20 [ 129.546578][ T6303] ? __might_fault+0xb0/0x130 [ 129.546625][ T6303] keyctl_dh_compute+0x109/0x160 [ 129.546658][ T6303] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 129.546706][ T6303] __se_sys_keyctl+0x423/0x910 [ 129.546733][ T6303] ? __pfx___se_sys_keyctl+0x10/0x10 [ 129.546761][ T6303] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.546799][ T6303] ? __fget_files+0x3a0/0x420 [ 129.546832][ T6303] ? fput+0xa0/0xd0 [ 129.546860][ T6303] ? ksys_write+0x22a/0x250 [ 129.546883][ T6303] ? __pfx_ksys_write+0x10/0x10 [ 129.546902][ T6303] ? rcu_is_watching+0x15/0xb0 [ 129.546934][ T6303] ? do_syscall_64+0xbe/0x3b0 [ 129.546958][ T6303] ? __x64_sys_keyctl+0x20/0xc0 [ 129.546983][ T6303] do_syscall_64+0xfa/0x3b0 [ 129.547007][ T6303] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.547030][ T6303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.547050][ T6303] ? clear_bhb_loop+0x60/0xb0 [ 129.547074][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.547094][ T6303] RIP: 0033:0x7f92f018e969 [ 129.547112][ T6303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.547129][ T6303] RSP: 002b:00007f92f0fb8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 129.547151][ T6303] RAX: ffffffffffffffda RBX: 00007f92f03b5fa0 RCX: 00007f92f018e969 [ 129.547165][ T6303] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000017 [ 129.547178][ T6303] RBP: 00007f92f0fb8090 R08: 0000200000002140 R09: 0000000000000000 [ 129.547191][ T6303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.547202][ T6303] R13: 0000000000000000 R14: 00007f92f03b5fa0 R15: 00007f92f04dfa28 [ 129.547233][ T6303] [ 130.639799][ T6309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.441124][ T6318] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 131.463162][ T6318] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.846553][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.016589][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 132.024400][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 132.035638][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.045457][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.055381][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 132.082872][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 132.109998][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 132.136995][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.221489][ T9] usb 2-1: config 0 descriptor?? [ 132.237585][ T6321] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 132.423881][ T6329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.578692][ T5838] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 132.586974][ T5838] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 132.593918][ T5838] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 132.603228][ T5838] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 132.610341][ T5838] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 132.806560][ T5889] usb 2-1: USB disconnect, device number 7 [ 132.824720][ T5834] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 132.832154][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850428][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.927357][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 133.201101][ T9] usb 3-1: config 0 has no interfaces? [ 133.220994][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.254196][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.277999][ T9] usb 3-1: Product: syz [ 133.282197][ T9] usb 3-1: Manufacturer: syz [ 133.415252][ T9] usb 3-1: SerialNumber: syz [ 133.447635][ T9] usb 3-1: config 0 descriptor?? [ 134.007392][ T5832] IPVS: starting estimator thread 0... [ 134.146956][ T6351] IPVS: using max 36 ests per chain, 86400 per kthread [ 135.898121][ T5832] usb 3-1: USB disconnect, device number 9 [ 136.024334][ T30] audit: type=1326 audit(1748419715.429:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 136.046390][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.079847][ T6363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.105715][ T30] audit: type=1326 audit(1748419715.469:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 136.127692][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.231223][ T30] audit: type=1326 audit(1748419715.469:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 136.396692][ T30] audit: type=1326 audit(1748419715.469:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 136.420351][ T30] audit: type=1326 audit(1748419715.469:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 136.442864][ T30] audit: type=1326 audit(1748419715.469:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 136.464766][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.476511][ T30] audit: type=1326 audit(1748419715.549:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 136.498517][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.508631][ T30] audit: type=1326 audit(1748419715.549:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 137.296515][ T5832] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.458062][ T5832] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.486418][ T5832] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 137.530041][ T5832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.556046][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 137.567407][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 137.584217][ T5832] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.601617][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.611734][ T5832] usb 2-1: Product: syz [ 137.616033][ T5832] usb 2-1: Manufacturer: syz [ 137.634116][ T5832] cdc_wdm 2-1:1.0: skipping garbage [ 137.639658][ T5832] cdc_wdm 2-1:1.0: skipping garbage [ 137.651941][ T5832] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 137.657982][ T5832] cdc_wdm 2-1:1.0: Unknown control protocol [ 137.766621][ T5837] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.929536][ T5837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.953751][ T5837] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.965524][ T5837] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.975499][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.984320][ T5837] usb 1-1: SerialNumber: syz [ 138.135975][ T6393] loop6: detected capacity change from 0 to 7 [ 138.145991][ T6393] Dev loop6: unable to read RDB block 7 [ 138.155830][ T6393] loop6: unable to read partition table [ 138.166813][ T6393] loop6: partition table beyond EOD, truncated [ 138.173122][ T6393] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 138.207091][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.232223][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.281558][ T5837] usb 1-1: 0:2 : does not exist [ 138.308941][ T5837] usb 1-1: unit 5 not found! [ 138.377662][ T5837] usb 1-1: USB disconnect, device number 8 [ 138.453199][ T6394] dummy0: entered promiscuous mode [ 138.475128][ T6394] macsec1: entered promiscuous mode [ 138.485440][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.498286][ T6394] macsec1: entered allmulticast mode [ 138.511852][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.538419][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.546257][ T6394] dummy0: entered allmulticast mode [ 138.591641][ T6394] dummy0: left allmulticast mode [ 138.646740][ T6394] dummy0: left promiscuous mode [ 138.752719][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 138.975148][ T5882] usb 2-1: USB disconnect, device number 8 [ 138.984308][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'. [ 139.037854][ T6406] FAULT_INJECTION: forcing a failure. [ 139.037854][ T6406] name failslab, interval 1, probability 0, space 0, times 0 [ 139.051243][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.3.138 Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 139.051275][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.051287][ T6406] Call Trace: [ 139.051294][ T6406] [ 139.051302][ T6406] dump_stack_lvl+0x189/0x250 [ 139.051337][ T6406] ? __pfx____ratelimit+0x10/0x10 [ 139.051361][ T6406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.051389][ T6406] ? __pfx__printk+0x10/0x10 [ 139.051415][ T6406] ? __pfx___might_resched+0x10/0x10 [ 139.051442][ T6406] ? fs_reclaim_acquire+0x7d/0x100 [ 139.051476][ T6406] should_fail_ex+0x414/0x560 [ 139.051508][ T6406] should_failslab+0xa8/0x100 [ 139.051534][ T6406] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 139.051559][ T6406] ? __alloc_skb+0x112/0x2d0 [ 139.051596][ T6406] __alloc_skb+0x112/0x2d0 [ 139.051624][ T6406] netlink_ack+0x146/0xa50 [ 139.051644][ T6406] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.051671][ T6406] ? ref_tracker_free+0x63a/0x7d0 [ 139.051697][ T6406] ? __copy_skb_header+0xa7/0x550 [ 139.051733][ T6406] netlink_rcv_skb+0x2a0/0x490 [ 139.051758][ T6406] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.051783][ T6406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.051832][ T6406] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.051855][ T6406] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.051884][ T6406] netlink_unicast+0x758/0x8d0 [ 139.051916][ T6406] netlink_sendmsg+0x805/0xb30 [ 139.051949][ T6406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.051984][ T6406] ? aa_sock_msg_perm+0x94/0x160 [ 139.052013][ T6406] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.052033][ T6406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.052057][ T6406] __sock_sendmsg+0x219/0x270 [ 139.052086][ T6406] ____sys_sendmsg+0x505/0x830 [ 139.052120][ T6406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.052158][ T6406] ? import_iovec+0x74/0xa0 [ 139.052183][ T6406] ___sys_sendmsg+0x21f/0x2a0 [ 139.052212][ T6406] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.052274][ T6406] ? __fget_files+0x2a/0x420 [ 139.052298][ T6406] ? __fget_files+0x3a0/0x420 [ 139.052334][ T6406] __x64_sys_sendmsg+0x19b/0x260 [ 139.052365][ T6406] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.052402][ T6406] ? __pfx_ksys_write+0x10/0x10 [ 139.052420][ T6406] ? rcu_is_watching+0x15/0xb0 [ 139.052453][ T6406] ? do_syscall_64+0xbe/0x3b0 [ 139.052482][ T6406] do_syscall_64+0xfa/0x3b0 [ 139.052506][ T6406] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.052529][ T6406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.052549][ T6406] ? clear_bhb_loop+0x60/0xb0 [ 139.052574][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.052593][ T6406] RIP: 0033:0x7f87d998e969 [ 139.052611][ T6406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.052628][ T6406] RSP: 002b:00007f87da745038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.052649][ T6406] RAX: ffffffffffffffda RBX: 00007f87d9bb5fa0 RCX: 00007f87d998e969 [ 139.052663][ T6406] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 139.052676][ T6406] RBP: 00007f87da745090 R08: 0000000000000000 R09: 0000000000000000 [ 139.052688][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.052699][ T6406] R13: 0000000000000000 R14: 00007f87d9bb5fa0 R15: 00007f87d9cdfa28 [ 139.052731][ T6406] [ 139.378990][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.395292][ T5889] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 139.680420][ T5889] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 431, setting to 64 [ 139.695708][ T5889] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.711649][ T5889] usb 3-1: config 1 interface 0 has no altsetting 0 [ 139.761853][ T5889] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 139.772477][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.788880][ T5889] usb 3-1: Product: 킝㞪肬偀赡瞻쐜䞔씴ꯞ큓斡쫱追ፐ驣﷭ꪜ輲쪛⬨ꨍ᜴遲橗䬨㖮仌䏅ﵤ僲嫦卸賩渉氎왽ꤎ詷뇇箧칦䯒唝풢儆뤜ꙙ펅㸊믌Ꙉ︀ڌ욷쵔⦚됝钖▦ᶙၐ̂圳禫퐋夯섦 [ 139.814537][ T5889] usb 3-1: Manufacturer: 鼱꺚Ḩ樟«덅蘗∖⡯怞톌䬂㊥Ѿᠶᆖ᫆ﮙࢦ봌瞮ꈪ㨊湟谋Ο萗Ả䡊᥀鐜⢣銃働誒䩳ࢳ紕弍㖄ி腳镃㕣≐ﴨ忺钹䨙ꬍﮚ磞钔ܺ鲦峱烛뮥✟ꦪ뒐㐔㹞倱隠䷦孊맱池ꆦ瀺ꗽὍ辧깮到ꇹ揮曆澽ኻ菞㔺᱾䈣窄遽씴ⲗ唠Ⲕ洰䜧㈙ᡏ [ 139.866528][ T5889] usb 3-1: SerialNumber: ᶺࣁ髗芐᫔쟲 [ 139.895934][ T6404] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 139.923906][ T6404] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 140.246509][ T5882] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.396458][ T5882] usb 4-1: device descriptor read/64, error -71 [ 140.646618][ T5882] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.786544][ T5882] usb 4-1: device descriptor read/64, error -71 [ 140.897146][ T5882] usb usb4-port1: attempt power cycle [ 140.929281][ T6441] netlink: 48 bytes leftover after parsing attributes in process `syz.1.145'. [ 141.236583][ T5882] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.257611][ T5882] usb 4-1: device descriptor read/8, error -71 [ 141.425087][ T5889] usb 3-1: USB disconnect, device number 10 [ 141.496584][ T5882] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.517457][ T5882] usb 4-1: device descriptor read/8, error -71 [ 141.552979][ T6444] loop6: detected capacity change from 0 to 7 [ 141.584443][ T6444] Dev loop6: unable to read RDB block 7 [ 141.597916][ T6444] loop6: unable to read partition table [ 141.603807][ T6444] loop6: partition table beyond EOD, truncated [ 141.611399][ T6444] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 141.647564][ T5882] usb usb4-port1: unable to enumerate USB device [ 143.936522][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.954095][ T6449] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 144.722210][ T6449] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.735949][ T6449] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.818738][ T6449] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.825279][ T6449] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.839835][ T6449] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.851531][ T6449] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.862113][ T6449] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.876257][ T6449] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.891037][ T6449] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.898750][ T6449] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.907208][ T6449] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.923028][ T6449] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.930212][ T6449] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 144.941798][ T6449] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 145.216714][ T5882] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.376446][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 145.398072][ T5882] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 145.429853][ T5882] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 145.449392][ T5882] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 145.461625][ T5882] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 145.474597][ T5882] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 145.486835][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.506475][ T5837] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.536627][ T2150] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 145.666596][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 145.702059][ T2150] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 145.718139][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.738185][ T2150] usb 1-1: Product: syz [ 145.749427][ T2150] usb 1-1: Manufacturer: syz [ 145.765756][ T2150] usb 1-1: SerialNumber: syz [ 145.816817][ T2150] usb 1-1: config 0 descriptor?? [ 145.849300][ T2150] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 145.953722][ T6457] team0: Device gtp0 is of different type [ 145.999194][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.017694][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.054629][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.075666][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.100736][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.125128][ T2150] gspca_sn9c2028: read1 error -71 [ 146.142626][ T2150] gspca_sn9c2028: read1 error -71 [ 146.163214][ T2150] gspca_sn9c2028: read1 error -71 [ 146.179962][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.186903][ T2150] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 146.196095][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.231761][ T2150] usb 1-1: USB disconnect, device number 9 [ 146.816738][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.896621][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.896646][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.976726][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 148.096698][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.296829][ T5837] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.340021][ T5837] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 148.352660][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.364170][ T5837] usb 3-1: can't read configurations, error -71 [ 148.437332][ T2150] usb 4-1: USB disconnect, device number 12 [ 148.913975][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.976569][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.976592][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.066420][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.661889][ T6525] mmap: syz.1.165 (6525) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.852631][ T6524] pim6reg: entered allmulticast mode [ 149.875426][ T6556] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 149.926993][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 149.934638][ T6524] pim6reg: left allmulticast mode [ 150.146368][ T9] usb 3-1: config 0 has no interfaces? [ 150.166773][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 150.191760][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.216385][ T9] usb 3-1: Product: syz [ 150.226110][ T9] usb 3-1: Manufacturer: syz [ 150.301673][ T9] usb 3-1: SerialNumber: syz [ 150.358890][ T9] usb 3-1: config 0 descriptor?? [ 150.711328][ T6550] netlink: 'syz.2.170': attribute type 2 has an invalid length. [ 150.896801][ T5832] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 151.002973][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.060008][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.066237][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.136752][ T5832] usb 2-1: device descriptor read/64, error -71 [ 151.138340][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.246510][ T2150] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 151.426524][ T5832] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.477496][ T2150] usb 4-1: Using ep0 maxpacket: 8 [ 151.525770][ T2150] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 151.566835][ T5832] usb 2-1: device descriptor read/64, error -71 [ 151.604082][ T2150] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 151.674183][ T2150] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.720512][ T2150] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.777380][ T5832] usb usb2-port1: attempt power cycle [ 151.783901][ T2150] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.807906][ T2150] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 151.823150][ T2150] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 151.899647][ T2150] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.949955][ T2150] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.974789][ T2150] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.991430][ T2150] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 152.000365][ T2150] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 152.012818][ T2150] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.036590][ T2150] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.052101][ T2150] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.070497][ T2150] usb 4-1: string descriptor 0 read error: -22 [ 152.079871][ T2150] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 152.095621][ T2150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.126633][ T5832] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.147754][ T5832] usb 2-1: device descriptor read/8, error -71 [ 152.156168][ T2150] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 152.446471][ T5832] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 152.469406][ T5832] usb 2-1: device descriptor read/8, error -71 [ 152.668651][ T5832] usb usb2-port1: unable to enumerate USB device [ 152.714982][ T9] usb 3-1: USB disconnect, device number 13 [ 153.058177][ T5832] usb 4-1: USB disconnect, device number 14 [ 153.304403][ T6619] loop6: detected capacity change from 0 to 7 [ 153.331107][ T6619] Dev loop6: unable to read RDB block 7 [ 153.353709][ T6619] loop6: unable to read partition table [ 153.375917][ T6619] loop6: partition table beyond EOD, truncated [ 153.402614][ T6619] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 153.793871][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 154.107924][ T2150] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 154.147614][ T5832] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 154.288170][ T2150] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 154.308835][ T2150] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.326496][ T5832] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 154.340197][ T5832] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 154.351632][ T2150] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.419513][ T5832] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 154.436279][ T2150] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.463905][ T5832] usb 2-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.486746][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.496404][ T5832] usb 2-1: config 16 interface 0 has no altsetting 0 [ 154.504888][ T5832] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 154.517382][ T2150] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.526584][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.636134][ T2150] usb 3-1: invalid MIDI out EP 0 [ 154.836428][ T5889] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 154.877177][ T30] audit: type=1326 audit(1748419734.279:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f018e969 code=0x7ffc0000 [ 154.928820][ T5832] usb 2-1: string descriptor 0 read error: -71 [ 154.963591][ T5832] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 154.995058][ T5832] imon 2-1:16.0: unable to initialize intf0, err -19 [ 155.017700][ T30] audit: type=1326 audit(1748419734.309:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f92f018e969 code=0x7ffc0000 [ 155.048606][ T5889] usb 4-1: config 0 has no interfaces? [ 155.057656][ T5832] imon:imon_probe: failed to initialize context! [ 155.064057][ T5832] imon 2-1:16.0: unable to register, err -19 [ 155.094592][ T5889] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.130885][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.192079][ T2150] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 155.201938][ T5832] usb 2-1: USB disconnect, device number 13 [ 155.213225][ T30] audit: type=1326 audit(1748419734.309:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f018e969 code=0x7ffc0000 [ 155.241456][ T5889] usb 4-1: Product: syz [ 155.257783][ T5889] usb 4-1: Manufacturer: syz [ 155.288242][ T5889] usb 4-1: SerialNumber: syz [ 155.341977][ T5889] usb 4-1: config 0 descriptor?? [ 155.354697][ T30] audit: type=1326 audit(1748419734.309:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f92f018e969 code=0x7ffc0000 [ 155.380463][ T30] audit: type=1326 audit(1748419734.309:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f018e969 code=0x7ffc0000 [ 155.408116][ T30] audit: type=1326 audit(1748419734.309:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f92f018e969 code=0x7ffc0000 [ 155.486100][ T30] audit: type=1326 audit(1748419734.309:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f018e969 code=0x7ffc0000 [ 155.554848][ T30] audit: type=1326 audit(1748419734.329:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f018e969 code=0x7ffc0000 [ 155.577005][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.740604][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 156.544135][ T6667] ip6t_srh: unknown srh match flags B153 [ 156.657260][ T9] usb 3-1: USB disconnect, device number 14 [ 157.909802][ T5882] usb 4-1: USB disconnect, device number 15 [ 158.036431][ T5897] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 158.186581][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 158.194092][ T5897] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 158.226948][ T5897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.244294][ T6687] loop6: detected capacity change from 0 to 7 [ 158.260986][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.274754][ T6687] Dev loop6: unable to read RDB block 7 [ 158.284524][ T6687] loop6: unable to read partition table [ 158.292818][ T6687] loop6: partition table beyond EOD, truncated [ 158.308720][ T5897] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.326493][ T6687] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 158.349855][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.358817][ T5897] usb 1-1: Product: syz [ 158.396519][ T5897] usb 1-1: Manufacturer: syz [ 158.427143][ T5897] usb 1-1: SerialNumber: syz [ 158.588809][ T6674] netlink: 'syz.2.191': attribute type 27 has an invalid length. [ 158.640357][ T6674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.191'. [ 158.765313][ T5897] usb 1-1: 0:2 : does not exist [ 158.858482][ T5897] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 158.973794][ T5897] usb 1-1: USB disconnect, device number 10 [ 159.058592][ T5882] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 159.087879][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.440758][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 159.529224][ T5882] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 159.548660][ T5882] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.589425][ T5882] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.726413][ T5897] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 159.788798][ T6713] fuse: root generation should be zero [ 159.808121][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 159.912166][ T5882] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.921737][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.932354][ T5882] usb 2-1: Product: syz [ 159.938742][ T5882] usb 2-1: Manufacturer: syz [ 159.948616][ T5882] usb 2-1: SerialNumber: syz [ 159.998877][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.184754][ T5897] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.236803][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.257769][ T5897] usb 1-1: config 0 descriptor?? [ 160.376831][ T5882] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 160.725965][ T6704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.738733][ T6704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.869293][ T5897] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 160.911679][ T5897] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input7 [ 160.960523][ T6732] netlink: 68 bytes leftover after parsing attributes in process `syz.4.203'. [ 161.233807][ T5882] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 161.325803][ T5897] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 161.537773][ T5882] usb 2-1: USB disconnect, device number 14 [ 161.556592][ T6735] loop6: detected capacity change from 0 to 7 [ 161.599495][ T6735] Dev loop6: unable to read RDB block 7 [ 161.661871][ T6735] loop6: unable to read partition table [ 161.679252][ T6735] loop6: partition table beyond EOD, truncated [ 161.696828][ T6735] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 161.947888][ T6395] udevd[6395]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.390011][ T6745] ip6t_srh: unknown srh match flags B153 [ 162.636572][ T5897] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.817000][ T2150] usb 1-1: USB disconnect, device number 11 [ 163.035160][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 163.111660][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.316459][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.388417][ T5897] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 163.545811][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.562681][ T5897] usb 3-1: config 0 descriptor?? [ 163.574451][ T5888] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 164.096523][ T5888] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 164.235829][ T5897] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 164.388347][ T5888] usb 5-1: USB disconnect, device number 2 [ 165.198857][ T30] audit: type=1326 audit(1748419744.589:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.4.216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23b458e969 code=0x0 [ 165.637002][ T2150] usb 3-1: reset high-speed USB device number 15 using dummy_hcd [ 165.806508][ T5897] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 166.091664][ T5897] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 166.100321][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.233709][ T5897] usb 5-1: config 0 has no interface number 0 [ 166.260006][ T5897] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 85, changing to 10 [ 166.288814][ T5897] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid maxpacket 24884, setting to 1024 [ 166.328046][ T5897] usb 5-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 166.390522][ T5897] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 166.446406][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.476767][ T5897] usb 5-1: config 0 descriptor?? [ 166.504827][ T5897] HFC-S_USB 5-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 166.606507][ T5889] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 166.769071][ T5889] usb 4-1: device descriptor read/64, error -71 [ 166.858422][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.900524][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.041062][ T5889] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 167.268578][ T6812] ip6t_srh: unknown srh match flags B153 [ 167.422719][ T5832] usb 3-1: USB disconnect, device number 15 [ 167.428802][ T5889] usb 4-1: device descriptor read/64, error -71 [ 167.537235][ T5889] usb usb4-port1: attempt power cycle [ 167.966482][ T5889] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 168.048737][ T5889] usb 4-1: device descriptor read/8, error -71 [ 168.192583][ T10] usb 5-1: USB disconnect, device number 3 [ 168.336653][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 168.435903][ T5889] usb 4-1: device descriptor read/8, error -71 [ 168.597071][ T5889] usb usb4-port1: unable to enumerate USB device [ 169.349523][ T5832] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 169.557913][ T5832] usb 3-1: config 0 has no interfaces? [ 169.667645][ T5832] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 169.676830][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.699221][ T5832] usb 3-1: Product: syz [ 169.703466][ T5832] usb 3-1: Manufacturer: syz [ 169.743447][ T5832] usb 3-1: SerialNumber: syz [ 169.759796][ T5832] usb 3-1: config 0 descriptor?? [ 169.795719][ T6835] netlink: 'syz.3.231': attribute type 26 has an invalid length. [ 169.967426][ T30] audit: type=1326 audit(1748419749.379:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 169.996742][ T5889] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 170.052550][ T30] audit: type=1326 audit(1748419749.409:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.081259][ T30] audit: type=1326 audit(1748419749.409:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.128800][ T30] audit: type=1326 audit(1748419749.409:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.200300][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 170.213574][ T5889] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.226569][ T30] audit: type=1326 audit(1748419749.409:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.226622][ T30] audit: type=1326 audit(1748419749.409:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.226667][ T30] audit: type=1326 audit(1748419749.409:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.226711][ T30] audit: type=1326 audit(1748419749.409:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.226755][ T30] audit: type=1326 audit(1748419749.409:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.226800][ T30] audit: type=1326 audit(1748419749.409:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.226844][ T30] audit: type=1326 audit(1748419749.409:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.226888][ T30] audit: type=1326 audit(1748419749.409:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.226931][ T30] audit: type=1326 audit(1748419749.409:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.289883][ T5889] usb 2-1: config 1 interface 0 has no altsetting 0 [ 170.438497][ T30] audit: type=1326 audit(1748419749.449:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87d998e969 code=0x7ffc0000 [ 170.465444][ T5889] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 170.475005][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.483260][ T5889] usb 2-1: Product: syz [ 170.487873][ T5889] usb 2-1: Manufacturer: syz [ 170.492515][ T5889] usb 2-1: SerialNumber: syz [ 170.497397][ T5897] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 170.661982][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.673224][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.682326][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 170.683557][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 170.703097][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.703649][ T6838] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 170.713311][ T5897] usb 4-1: New USB device found, idVendor=10b7, idProduct=8acf, bcdDevice= 0.00 [ 170.742598][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.759439][ T5889] usbhid 2-1:1.0: can't add hid device: -71 [ 170.764014][ T6838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.765561][ T5889] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 170.798674][ T5897] usb 4-1: config 0 descriptor?? [ 170.833593][ T5889] usb 2-1: USB disconnect, device number 15 [ 171.476526][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.668124][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 171.686509][ T5889] usb 5-1: config 7 has an invalid interface number: 140 but max is 0 [ 171.702639][ T5889] usb 5-1: config 7 has no interface number 0 [ 171.730568][ T5889] usb 5-1: config 7 interface 140 altsetting 6 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 171.761347][ T5889] usb 5-1: config 7 interface 140 has no altsetting 0 [ 171.784594][ T5889] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0620, bcdDevice=cc.f4 [ 171.801221][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.813448][ T6865] program syz.1.240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.823113][ T5889] usb 5-1: Product: 貼ে䖾넔﯈櫉 [ 171.829388][ T5889] usb 5-1: Manufacturer: ᱾ [ 171.836109][ T6865] program syz.1.240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.846037][ T5889] usb 5-1: SerialNumber: syz [ 172.037155][ T10] usb 3-1: USB disconnect, device number 16 [ 172.083087][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.103069][ T6869] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 172.120826][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.155785][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.200969][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.233589][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.280296][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.413577][ T6874] ip6t_srh: unknown srh match flags B153 [ 172.671413][ T5889] option 5-1:7.140: GSM modem (1-port) converter detected [ 172.746053][ T5889] usb 5-1: USB disconnect, device number 4 [ 172.813546][ T5889] option 5-1:7.140: device disconnected [ 173.405931][ T5897] usbhid 4-1:0.0: can't add hid device: -71 [ 173.423062][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 173.440635][ T5897] usb 4-1: USB disconnect, device number 20 [ 173.559832][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.249'. [ 173.785694][ T6896] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 173.813991][ T6896] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 174.568440][ T5882] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.619078][ T5889] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 174.802374][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 174.807671][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 174.821286][ T5882] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 174.832352][ T5882] usb 5-1: config 0 has no interface number 0 [ 174.849805][ T5882] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.871678][ T5889] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.907305][ T5889] usb 2-1: config 0 has no interface number 0 [ 174.924805][ T5889] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.924820][ T5882] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 174.924848][ T5882] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.015695][ T5882] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.046594][ T5889] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.051687][ T5882] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 175.082514][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.090710][ T5889] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 175.101596][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.117667][ T5889] usb 2-1: config 0 descriptor?? [ 175.263987][ T5882] usb 5-1: config 0 descriptor?? [ 175.300635][ T5882] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 175.423426][ T5889] uclogic 0003:28BD:0071.0006: pen parameters not found [ 175.432476][ T5889] uclogic 0003:28BD:0071.0006: interface is invalid, ignoring [ 175.495748][ T5882] usb 5-1: USB disconnect, device number 5 [ 175.512345][ T5882] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 175.657065][ T10] usb 2-1: USB disconnect, device number 16 [ 175.783857][ T6926] bridge1: entered promiscuous mode [ 176.516453][ T2150] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 176.788679][ T2150] usb 5-1: Using ep0 maxpacket: 8 [ 176.838070][ T2150] usb 5-1: config 7 has an invalid interface number: 140 but max is 0 [ 176.846570][ T2150] usb 5-1: config 7 has no interface number 0 [ 176.863186][ T2150] usb 5-1: config 7 interface 140 altsetting 6 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 176.879932][ T2150] usb 5-1: config 7 interface 140 has no altsetting 0 [ 177.020703][ T2150] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0620, bcdDevice=cc.f4 [ 177.034733][ T2150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.117871][ T2150] usb 5-1: Product: 貼ে䖾넔﯈櫉 [ 177.129064][ T2150] usb 5-1: Manufacturer: ᱾ [ 177.146799][ T2150] usb 5-1: SerialNumber: syz [ 177.409944][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.437383][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.456233][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.535137][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.655215][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.742455][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.817479][ T6951] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20004 [ 178.229494][ T6958] ip6t_srh: unknown srh match flags B153 [ 178.393899][ T6960] fuse: Unknown parameter 'group)Ndw]'scg' [ 178.496204][ T6960] tipc: Started in network mode [ 178.503202][ T6960] tipc: Node identity 7f000001, cluster identity 4711 [ 178.517099][ T6960] tipc: New replicast peer: 0.0.0.0 [ 178.529278][ T6960] tipc: Enabled bearer , priority 10 [ 178.554295][ T6960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.267'. [ 178.569423][ T6960] netlink: 27 bytes leftover after parsing attributes in process `syz.0.267'. [ 179.306820][ T2150] option 5-1:7.140: GSM modem (1-port) converter detected [ 179.415621][ T2150] usb 5-1: USB disconnect, device number 6 [ 179.437574][ T2150] option 5-1:7.140: device disconnected [ 179.526628][ T5889] tipc: Node number set to 2130706433 [ 180.437119][ T5888] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 180.638887][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 180.647831][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 180.658458][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.672428][ T5888] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 180.680995][ T5888] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 180.694776][ T5888] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 181.090845][ T5888] usb 1-1: config 7 has no interface number 0 [ 181.110196][ T5888] usb 1-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 181.346672][ T5888] usb 1-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 181.386393][ T5888] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 181.411549][ T5888] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 181.445097][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 181.456084][ T5888] usb 1-1: config 7 interface 128 has no altsetting 0 [ 181.500744][ T5888] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 181.510541][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.527185][ T5888] usb 1-1: Product: syz [ 181.547243][ T5888] usb 1-1: Manufacturer: syz [ 181.556630][ T6989] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 181.589843][ T6989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.606520][ T5888] usb 1-1: SerialNumber: syz [ 181.643010][ T6973] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.944649][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.953678][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.987847][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.046791][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.182904][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 183.150207][ T5889] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 183.324631][ T5888] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.353615][ T5888] usb 1-1: MIDIStreaming interface descriptor not found [ 183.372824][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 183.439820][ T5889] usb 3-1: config index 0 descriptor too short (expected 292, got 36) [ 183.450325][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 183.450342][ T30] audit: type=1326 audit(1748419762.839:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 183.480116][ T5889] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 183.504348][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.535071][ T5889] usb 3-1: config 0 has no interface number 0 [ 183.566440][ T5897] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 183.567565][ T5888] usb 1-1: USB disconnect, device number 12 [ 183.575619][ T30] audit: type=1326 audit(1748419762.839:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 183.616207][ T5889] usb 3-1: config 0 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.650837][ T5889] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 183.674081][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.682272][ T30] audit: type=1326 audit(1748419762.839:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 183.748451][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.767639][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.793230][ T30] audit: type=1326 audit(1748419762.839:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 183.815495][ T5897] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 183.874723][ T5889] usb 3-1: config 0 descriptor?? [ 183.928890][ T5889] usbhid 3-1:0.3: couldn't find an input interrupt endpoint [ 183.944317][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.004596][ T30] audit: type=1326 audit(1748419762.839:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 184.067392][ T5897] usb 2-1: config 0 descriptor?? [ 184.136614][ T5888] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 184.186274][ T30] audit: type=1326 audit(1748419762.849:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 184.309339][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 184.391615][ T5888] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 184.401305][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.416246][ T5888] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 184.431735][ T5888] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 184.454500][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.494702][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.495281][ T5888] usb 1-1: config 0 descriptor?? [ 184.565343][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.642069][ T5897] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 184.727773][ T5897] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 184.848310][ T5897] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 184.861038][ T7022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.286'. [ 184.870279][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'. [ 185.049949][ T5897] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 185.125168][ T5897] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 185.150573][ T5897] usb 2-1: USB disconnect, device number 17 [ 185.822619][ T7039] ip6t_srh: unknown srh match flags B153 [ 186.388460][ T7023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.397376][ T7023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.403773][ T7023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.410479][ T7023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.419014][ T7023] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 186.717989][ T5832] usb 3-1: USB disconnect, device number 17 [ 186.850205][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.288'. [ 186.896469][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.115817][ T5832] usb 1-1: USB disconnect, device number 13 [ 188.417412][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 188.424168][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.497616][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 188.503931][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.473539][ T30] audit: type=1326 audit(1748419768.879:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 189.473597][ T30] audit: type=1326 audit(1748419768.879:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 189.473639][ T30] audit: type=1326 audit(1748419768.879:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 189.473682][ T30] audit: type=1326 audit(1748419768.879:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 189.473724][ T30] audit: type=1326 audit(1748419768.879:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 189.474798][ T30] audit: type=1326 audit(1748419768.879:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 189.474849][ T30] audit: type=1326 audit(1748419768.879:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 189.474893][ T30] audit: type=1326 audit(1748419768.879:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 189.477130][ T30] audit: type=1326 audit(1748419768.889:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 189.477702][ T30] audit: type=1326 audit(1748419768.889:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baa78e969 code=0x7ffc0000 [ 189.570867][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.651761][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.753028][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.786784][ T5888] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 189.996423][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 189.999650][ T5888] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 189.999675][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.999695][ T5888] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.999733][ T5888] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 189.999757][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.002767][ T5888] usb 1-1: config 0 descriptor?? [ 190.166440][ T5832] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 190.316586][ T5832] usb 2-1: device descriptor read/64, error -71 [ 190.328962][ T7081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.299'. [ 190.346849][ T7081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 190.394658][ T5888] usb 1-1: USB disconnect, device number 14 [ 190.495739][ T7094] ip6t_srh: unknown srh match flags B153 [ 190.567483][ T5832] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 190.893501][ T5832] usb 2-1: device descriptor read/64, error -71 [ 191.066945][ T5832] usb usb2-port1: attempt power cycle [ 191.419423][ T5832] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 191.529647][ T5832] usb 2-1: device descriptor read/8, error -71 [ 191.787058][ T5832] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 191.823687][ T5832] usb 2-1: device descriptor read/8, error -71 [ 191.941694][ T5832] usb usb2-port1: unable to enumerate USB device [ 192.509950][ T5832] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 192.680780][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 192.692150][ T5832] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 192.704278][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.713089][ T5832] usb 4-1: Product: syz [ 192.721391][ T5832] usb 4-1: Manufacturer: syz [ 192.726109][ T5832] usb 4-1: SerialNumber: syz [ 192.742505][ T5832] usb 4-1: config 0 descriptor?? [ 193.016412][ T5887] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 193.066230][ T5832] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 193.236441][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 193.248657][ T5887] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 193.258381][ T5887] usb 1-1: config 0 has no interface number 0 [ 193.264777][ T5887] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 193.358131][ T5887] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 193.416878][ T5887] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 193.490448][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.519298][ T5887] usb 1-1: Product: syz [ 193.523511][ T5887] usb 1-1: Manufacturer: syz [ 193.549834][ T5887] usb 1-1: SerialNumber: syz [ 193.568663][ T5887] usb 1-1: config 0 descriptor?? [ 193.592035][ T7135] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.645154][ T7135] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.878043][ T7135] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.888029][ T7135] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.939398][ T5888] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 194.099081][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 194.108036][ T7148] random: crng reseeded on system resumption [ 194.118262][ T5888] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 194.128294][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.139143][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.148609][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 194.156557][ T5888] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 194.169476][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.181600][ T5888] usb 3-1: config 0 descriptor?? [ 194.263219][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276456][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.317438][ T5887] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 194.328622][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.336791][ T5887] asix 1-1:0.251: probe with driver asix failed with error -524 [ 194.352577][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 194.386446][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.415222][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 194.426634][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 194.436738][ T10] usb 5-1: Product: syz [ 194.440935][ T10] usb 5-1: Manufacturer: syz [ 194.456933][ T10] usb 5-1: SerialNumber: syz [ 194.487156][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 194.487188][ T30] audit: type=1326 audit(1748419773.899:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 194.539837][ T7129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.549856][ T7152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.314'. [ 194.559011][ T30] audit: type=1326 audit(1748419773.959:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 194.587209][ T7129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.595253][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.314'. [ 194.636270][ T30] audit: type=1326 audit(1748419773.959:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 194.667353][ T5832] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 194.690486][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 194.821504][ T30] audit: type=1326 audit(1748419774.039:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 194.854303][ T10] usb 3-1: USB disconnect, device number 18 [ 194.896724][ T7144] batman_adv: batadv0: Adding interface: dummy0 [ 194.903038][ T7144] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.929364][ T9] usb 1-1: USB disconnect, device number 15 [ 194.936602][ T7144] batman_adv: batadv0: Interface activated: dummy0 [ 194.939425][ T30] audit: type=1326 audit(1748419774.039:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f82e938e9a3 code=0x7ffc0000 [ 194.986179][ T5888] usb 5-1: USB disconnect, device number 8 [ 195.003464][ T5888] usblp0: removed [ 195.049245][ T30] audit: type=1326 audit(1748419774.039:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 195.079759][ T30] audit: type=1326 audit(1748419774.039:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 195.102607][ T30] audit: type=1326 audit(1748419774.039:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 195.125436][ T30] audit: type=1326 audit(1748419774.039:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 195.148128][ T30] audit: type=1326 audit(1748419774.259:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e938e969 code=0x7ffc0000 [ 195.428224][ T5888] usb 4-1: USB disconnect, device number 21 [ 195.669733][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'. [ 195.775454][ T7172] netlink: 'syz.0.320': attribute type 10 has an invalid length. [ 195.886122][ T7172] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 195.947244][ T5832] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 195.962105][ T7172] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 196.120654][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 196.129633][ T5832] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 196.141129][ T5832] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 196.146425][ T10] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 196.172714][ T5832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 196.190290][ T5832] usb 4-1: config 1 has no interface number 0 [ 196.197336][ T5832] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 196.216174][ T5832] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 25191, setting to 1024 [ 196.227771][ T5832] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 196.260942][ T5832] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 196.270506][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.302160][ T5832] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 196.359261][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.369353][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 196.386553][ T10] usb 1-1: config 1 has no interface number 1 [ 196.393430][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 196.442199][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 196.459336][ T10] usb 1-1: string descriptor 0 read error: -22 [ 196.466633][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.492708][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.502389][ T5832] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 196.523546][ T10] usb 1-1: low speed audio streaming not supported [ 196.676438][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 196.738144][ T10] usb 1-1: USB disconnect, device number 16 [ 196.865402][ T9] usb 4-1: USB disconnect, device number 22 [ 196.875094][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 196.885367][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 196.917482][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.956411][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.987989][ T5888] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 197.054571][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.082343][ T5888] usb 5-1: config 0 descriptor?? [ 197.103108][ T5888] hub 5-1:0.0: USB hub found [ 197.300547][ T5888] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 197.321670][ T7192] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 197.336518][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 197.357467][ T7192] bond0: (slave netdevsim0): Releasing backup interface [ 197.368782][ T7192] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 197.561232][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 197.568184][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.579606][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 197.593891][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.686623][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 197.698255][ T5888] usbhid 5-1:0.0: can't add hid device: -71 [ 197.716540][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 197.732926][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.769068][ T5888] usb 5-1: USB disconnect, device number 9 [ 197.776252][ T9] usb 4-1: config 0 descriptor?? [ 198.077550][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 198.248257][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 198.281304][ T10] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 198.311915][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.354706][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.365280][ T10] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 198.445334][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.487799][ T10] usb 3-1: config 0 descriptor?? [ 198.519282][ T7215] process 'syz.4.331' launched './file0' with NULL argv: empty string added [ 198.568810][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 198.585846][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 198.618786][ T9] usb 4-1: USB disconnect, device number 23 [ 198.817337][ T7204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.328'. [ 198.856805][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.328'. [ 198.936630][ T9] usb 3-1: USB disconnect, device number 19 [ 198.952469][ T7225] netlink: 'syz.4.332': attribute type 27 has an invalid length. [ 199.317999][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.325701][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.622497][ T7225] batman_adv: batadv0: Interface deactivated: dummy0 [ 199.723656][ T7243] loop2: detected capacity change from 0 to 7 [ 199.732373][ T7243] loop2: [POWERTEC] p1 p2 p3 [ 199.737725][ T7243] loop2: p1 start 1600481121 is beyond EOD, truncated [ 199.748297][ T7243] loop2: p2 start 536870912 is beyond EOD, truncated [ 199.776150][ T7243] loop2: p3 size 536870912 extends beyond EOD, truncated [ 199.889428][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 200.267335][ T7225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.487664][ T7225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.734170][ T7225] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.751010][ T7225] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.779470][ T7225] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.816547][ T7225] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.871197][ T7225] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 201.965282][ T7238] bridge0: entered promiscuous mode [ 202.246759][ T7255] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002 [ 202.726681][ T7261] syzkaller1: entered promiscuous mode [ 202.732212][ T7261] syzkaller1: entered allmulticast mode [ 203.728661][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 203.850454][ T7281] ip6gre1: entered allmulticast mode [ 204.086424][ T5889] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 204.236542][ T5889] usb 2-1: device descriptor read/64, error -71 [ 204.556413][ T5889] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 204.726565][ T5889] usb 2-1: device descriptor read/64, error -71 [ 204.888077][ T5889] usb usb2-port1: attempt power cycle [ 205.377425][ T5889] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 205.405160][ T7288] FAULT_INJECTION: forcing a failure. [ 205.405160][ T7288] name failslab, interval 1, probability 0, space 0, times 0 [ 205.558809][ T5889] usb 2-1: device descriptor read/8, error -71 [ 205.575189][ T7288] CPU: 1 UID: 0 PID: 7288 Comm: syz.3.345 Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 205.575211][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.575221][ T7288] Call Trace: [ 205.575228][ T7288] [ 205.575234][ T7288] dump_stack_lvl+0x189/0x250 [ 205.575270][ T7288] ? __pfx____ratelimit+0x10/0x10 [ 205.575288][ T7288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.575309][ T7288] ? __pfx__printk+0x10/0x10 [ 205.575327][ T7288] ? __pfx___might_resched+0x10/0x10 [ 205.575346][ T7288] ? fs_reclaim_acquire+0x7d/0x100 [ 205.575370][ T7288] should_fail_ex+0x414/0x560 [ 205.575392][ T7288] should_failslab+0xa8/0x100 [ 205.575412][ T7288] __kmalloc_node_noprof+0xd1/0x4e0 [ 205.575429][ T7288] ? crypto_create_tfm_node+0x83/0x3f0 [ 205.575448][ T7288] crypto_create_tfm_node+0x83/0x3f0 [ 205.575467][ T7288] crypto_alloc_tfm_node+0x172/0x3f0 [ 205.575489][ T7288] kdf_alloc+0x21/0x100 [ 205.575522][ T7288] __keyctl_dh_compute+0x455/0xca0 [ 205.575550][ T7288] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 205.575571][ T7288] ? __lock_acquire+0xab9/0xd20 [ 205.575596][ T7288] ? __might_fault+0xb0/0x130 [ 205.575629][ T7288] keyctl_dh_compute+0x109/0x160 [ 205.575653][ T7288] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 205.575686][ T7288] __se_sys_keyctl+0x423/0x910 [ 205.575706][ T7288] ? __pfx___se_sys_keyctl+0x10/0x10 [ 205.575725][ T7288] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 205.575747][ T7288] ? __fget_files+0x3a0/0x420 [ 205.575772][ T7288] ? fput+0xa0/0xd0 [ 205.575793][ T7288] ? ksys_write+0x22a/0x250 [ 205.575809][ T7288] ? __pfx_ksys_write+0x10/0x10 [ 205.575822][ T7288] ? rcu_is_watching+0x15/0xb0 [ 205.575846][ T7288] ? do_syscall_64+0xbe/0x3b0 [ 205.575863][ T7288] ? __x64_sys_keyctl+0x20/0xc0 [ 205.575881][ T7288] do_syscall_64+0xfa/0x3b0 [ 205.575898][ T7288] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.575915][ T7288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.575929][ T7288] ? clear_bhb_loop+0x60/0xb0 [ 205.575950][ T7288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.575964][ T7288] RIP: 0033:0x7f87d998e969 [ 205.575980][ T7288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.575993][ T7288] RSP: 002b:00007f87da745038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 205.576009][ T7288] RAX: ffffffffffffffda RBX: 00007f87d9bb5fa0 RCX: 00007f87d998e969 [ 205.576020][ T7288] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000017 [ 205.576029][ T7288] RBP: 00007f87da745090 R08: 0000200000002140 R09: 0000000000000000 [ 205.576038][ T7288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.576047][ T7288] R13: 0000000000000000 R14: 00007f87d9bb5fa0 R15: 00007f87d9cdfa28 [ 205.576069][ T7288] [ 205.576135][ T7288] could not allocate digest TFM handle sha512-avx [ 206.136448][ T5889] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 208.189593][ T5889] usb 2-1: device descriptor read/8, error -71 [ 208.296722][ T5889] usb usb2-port1: unable to enumerate USB device [ 208.732599][ T7325] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.355'. [ 208.765178][ T7325] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `] Iq!>s*!)\+` [ 209.096652][ T7332] bridge1: entered promiscuous mode [ 209.256574][ T5888] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 209.363262][ T7340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.359'. [ 209.404561][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 209.421216][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.437463][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.438387][ T7344] C: renamed from team_slave_0 (while UP) [ 209.452504][ T5888] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 209.463422][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.493685][ T5888] usb 2-1: config 0 descriptor?? [ 209.519608][ T7344] netlink: 'syz.0.360': attribute type 8 has an invalid length. [ 209.537083][ T7344] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 209.594064][ T7346] netlink: 'syz.4.359': attribute type 10 has an invalid length. [ 210.150024][ T5888] usbhid 2-1:0.0: can't add hid device: -71 [ 210.156086][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 210.178461][ T5888] usb 2-1: USB disconnect, device number 26 [ 210.595099][ T7364] program syz.4.365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.946486][ T5889] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 211.181867][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.200269][ T5889] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 211.214704][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 211.234660][ T5889] usb 3-1: Product: syz [ 211.244247][ T5889] usb 3-1: Manufacturer: syz [ 211.252836][ T5889] usb 3-1: SerialNumber: syz [ 211.272156][ T5889] usb 3-1: config 0 descriptor?? [ 211.301145][ T5889] gspca_main: conex-2.14.0 probing 0572:0041 [ 211.664488][ T5889] usb 3-1: USB disconnect, device number 20 [ 212.135135][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.369'. [ 212.227723][ T7379] binder: 7378:7379 ioctl c0306201 0 returned -14 [ 212.526433][ T5889] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 212.635297][ T7391] fuse: Bad value for 'fd' [ 212.740967][ T5889] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=a5.ed [ 212.750517][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.758941][ T5889] usb 5-1: Product: syz [ 212.763347][ T5889] usb 5-1: Manufacturer: syz [ 212.766768][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 212.768479][ T5889] usb 5-1: SerialNumber: syz [ 212.784642][ T5889] usb 5-1: config 0 descriptor?? [ 212.806423][ T5888] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 212.819999][ T5889] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 212.838129][ T5889] ftdi_sio ttyUSB0: unknown device type: 0xa5ed [ 212.933331][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 212.954821][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.986865][ T5888] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 212.995035][ T5888] usb 4-1: config 0 has no interface number 0 [ 213.012130][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.026676][ T5888] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 213.036160][ T7398] input: syz0 as /devices/virtual/input/input9 [ 213.052892][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 213.066718][ T5888] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 213.081970][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.107974][ T5888] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 213.120353][ T9] usb 1-1: config 0 descriptor?? [ 213.152002][ T5888] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 213.166369][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.185211][ T5888] usb 4-1: Product: syz [ 213.195353][ T5888] usb 4-1: Manufacturer: syz [ 213.214926][ T5888] usb 4-1: SerialNumber: syz [ 213.237841][ T5888] usb 4-1: config 0 descriptor?? [ 213.244058][ T7388] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 213.252515][ T7388] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 213.262624][ T5888] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 213.280022][ T5888] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1 [ 213.514446][ T7404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.535135][ T7404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.587059][ T7386] capability: warning: `syz.0.372' uses deprecated v2 capabilities in a way that may be insecure [ 213.599575][ T5897] usb 4-1: USB disconnect, device number 24 [ 213.644222][ T7403] netlink: 'syz.1.378': attribute type 6 has an invalid length. [ 213.652582][ T7403] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.378'. [ 213.664598][ T5897] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1 [ 213.882099][ T5897] cyberjack 4-1:0.69: device disconnected [ 213.943587][ T9] corsair 0003:1B1C:1B02.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 214.301268][ T5897] usb 1-1: USB disconnect, device number 17 [ 214.768841][ T5897] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 214.928701][ T5897] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 214.937332][ T5897] usb 4-1: config 0 has no interface number 0 [ 214.943619][ T5897] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 214.958781][ T5897] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 214.972789][ T5897] usb 4-1: config 0 interface 230 has no altsetting 0 [ 214.983895][ T5897] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 214.993543][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.002030][ T5897] usb 4-1: Product: syz [ 215.006733][ T5897] usb 4-1: Manufacturer: syz [ 215.011886][ T5897] usb 4-1: SerialNumber: syz [ 215.043895][ T7431] bridge1: entered promiscuous mode [ 215.064891][ T5897] usb 4-1: config 0 descriptor?? [ 215.225100][ T7418] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 215.232890][ T7418] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 215.235588][ T5889] usb 5-1: USB disconnect, device number 10 [ 215.251599][ T5897] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 215.259766][ T5889] ftdi_sio 5-1:0.0: device disconnected [ 215.294378][ T5897] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 216.146418][ T5889] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 216.336076][ T7454] loop6: detected capacity change from 0 to 7 [ 216.383450][ T7454] Dev loop6: unable to read RDB block 7 [ 216.409735][ T7454] loop6: unable to read partition table [ 216.438064][ T5889] usb 1-1: device descriptor read/64, error -71 [ 216.466758][ T7454] loop6: partition table beyond EOD, truncated [ 216.473075][ T7454] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 216.686408][ T5889] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 216.838942][ T5889] usb 1-1: device descriptor read/64, error -71 [ 216.974421][ T5889] usb usb1-port1: attempt power cycle [ 217.346601][ T5889] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 217.377403][ T5889] usb 1-1: device descriptor read/8, error -71 [ 217.518633][ T5897] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 217.636582][ T5889] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 217.742439][ T5897] usb 4-1: USB disconnect, device number 25 [ 217.772323][ T5889] usb 1-1: device descriptor read/8, error -71 [ 217.897093][ T5889] usb usb1-port1: unable to enumerate USB device [ 218.578935][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 218.666188][ T7487] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 218.678230][ T7487] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 218.686837][ T7487] CPU: 0 UID: 0 PID: 7487 Comm: syz.2.400 Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 218.698405][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.708486][ T7487] RIP: 0010:do_move_mount+0x27d/0xb10 [ 218.713893][ T7487] Code: e8 18 07 82 ff 41 be ea ff ff ff 49 bd 00 00 00 00 00 fc ff df 48 8b 6c 24 18 4c 8b 7c 24 08 48 8d 5d 48 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 64 e7 e4 ff 48 8b 1b 31 ff 48 89 [ 218.733613][ T7487] RSP: 0018:ffffc90004957d30 EFLAGS: 00010206 [ 218.739705][ T7487] RAX: 0000000000000006 RBX: 0000000000000032 RCX: ffff88802ab13c00 [ 218.747697][ T7487] RDX: 0000000000000000 RSI: ffffffff8db468e1 RDI: ffff88801e2b6478 [ 218.755684][ T7487] RBP: ffffffffffffffea R08: 0000000000000000 R09: ffffffff823c59e9 [ 218.763679][ T7487] R10: dffffc0000000000 R11: ffffed100b7ad0d4 R12: ffff88801dabf288 [ 218.771686][ T7487] R13: dffffc0000000000 R14: 00000000ffffffea R15: ffff888031e2b500 [ 218.779686][ T7487] FS: 00007f82ea2216c0(0000) GS:ffff888125c91000(0000) knlGS:0000000000000000 [ 218.788647][ T7487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.795255][ T7487] CR2: 000020000057eff8 CR3: 000000007f6f2000 CR4: 00000000003526f0 [ 218.803255][ T7487] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 218.811277][ T7487] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 218.819274][ T7487] Call Trace: [ 218.822576][ T7487] [ 218.825532][ T7487] __se_sys_move_mount+0x413/0x590 [ 218.830678][ T7487] ? __pfx___se_sys_move_mount+0x10/0x10 [ 218.836347][ T7487] ? rcu_is_watching+0x15/0xb0 [ 218.841154][ T7487] ? do_syscall_64+0xbe/0x3b0 [ 218.845866][ T7487] ? __x64_sys_move_mount+0x20/0xc0 [ 218.851104][ T7487] do_syscall_64+0xfa/0x3b0 [ 218.855674][ T7487] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.860901][ T7487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.866995][ T7487] ? clear_bhb_loop+0x60/0xb0 [ 218.871700][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.877616][ T7487] RIP: 0033:0x7f82e938e969 [ 218.882055][ T7487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.901685][ T7487] RSP: 002b:00007f82ea221038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 218.910103][ T7487] RAX: ffffffffffffffda RBX: 00007f82e95b5fa0 RCX: 00007f82e938e969 [ 218.918071][ T7487] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: 0000000000000003 [ 218.926038][ T7487] RBP: 00007f82e9410ab1 R08: 0000000000000204 R09: 0000000000000000 [ 218.934001][ T7487] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 218.941974][ T7487] R13: 0000000000000000 R14: 00007f82e95b5fa0 R15: 00007f82e96dfa28 [ 218.949952][ T7487] [ 218.952972][ T7487] Modules linked in: [ 218.957285][ T7487] ---[ end trace 0000000000000000 ]--- [ 218.980930][ T7487] RIP: 0010:do_move_mount+0x27d/0xb10 [ 218.987950][ T7487] Code: e8 18 07 82 ff 41 be ea ff ff ff 49 bd 00 00 00 00 00 fc ff df 48 8b 6c 24 18 4c 8b 7c 24 08 48 8d 5d 48 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 64 e7 e4 ff 48 8b 1b 31 ff 48 89 [ 219.008907][ T7487] RSP: 0018:ffffc90004957d30 EFLAGS: 00010206 [ 219.009323][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 219.015080][ T7487] RAX: 0000000000000006 RBX: 0000000000000032 RCX: ffff88802ab13c00 [ 219.025835][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.032812][ T7487] RDX: 0000000000000000 RSI: ffffffff8db468e1 RDI: ffff88801e2b6478 [ 219.051030][ T7487] RBP: ffffffffffffffea R08: 0000000000000000 R09: ffffffff823c59e9 [ 219.055813][ T9] usb 2-1: config 0 descriptor?? [ 219.059507][ T7487] R10: dffffc0000000000 R11: ffffed100b7ad0d4 R12: ffff88801dabf288 [ 219.072034][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 219.072790][ T7487] R13: dffffc0000000000 R14: 00000000ffffffea R15: ffff888031e2b500 [ 219.088543][ T7487] FS: 00007f82ea2216c0(0000) GS:ffff888125d91000(0000) knlGS:0000000000000000 [ 219.097704][ T7487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.104425][ T7487] CR2: 0000200000404030 CR3: 000000007f6f2000 CR4: 00000000003526f0 [ 219.112831][ T7487] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.121465][ T7487] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.129567][ T7487] Kernel panic - not syncing: Fatal exception [ 219.135817][ T7487] Kernel Offset: disabled [ 219.140152][ T7487] Rebooting in 86400 seconds..