last executing test programs: 21.725594584s ago: executing program 0 (id=906): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) 18.58599891s ago: executing program 0 (id=911): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000096000040"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') read$eventfd(r10, &(0x7f0000000080), 0x8) ioctl$TIOCGISO7816(r9, 0x80285442, &(0x7f0000000140)) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r11, 0x0, 0x0, &(0x7f0000000500), 0x4) 16.162710056s ago: executing program 4 (id=916): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="130f000000000000f6ff06"], 0x18}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec20000000000010902"], 0x0) write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2) 13.167101001s ago: executing program 3 (id=921): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xffff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000de000000000000000000000063012300000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r1, &(0x7f0000000000)='.\x00', 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x1d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) keyctl$setperm(0x5, 0x0, 0x30925) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00'}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=""/5, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfffffffffffffff1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 13.16263471s ago: executing program 1 (id=922): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905", @ANYRES64], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0xf, 0x1, 0xd1) r5 = syz_open_dev$evdev(&(0x7f0000000380), 0x1, 0x2000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x37, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x2}]}, 0x1c}}, 0x4010) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0xe0002009}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0x5}, {0x4317706cd147e538, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x2c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xbb9, 0xc22, 0x3, 0xc, 0xb, 0xa, 0x7}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x9, 0x1, 0x15, 0xe, 0x0, 0x8}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) socket$inet6(0xa, 0x805, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0x11}, {0x6, 0xfff2}, {0xf, 0xe}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000084"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10}, 0x4) 11.402649819s ago: executing program 3 (id=923): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x1, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x8, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0x5}, &(0x7f0000000100)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=@migrate={0xa0, 0x21, 0x1, 0x1, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x0, 0x4e21, 0x8, 0x96f52372f02b8655, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x6e6bbc, 0x1}, [@migrate={0x50, 0x11, [{@in6=@private0, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast2, 0x32, 0x1, 0x0, 0x3507, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xd1}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) 11.375547918s ago: executing program 2 (id=924): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) 11.283648425s ago: executing program 0 (id=925): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x20c83) setreuid(0x0, 0xee00) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000005000000ba"]) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb100000000102000905", @ANYRESDEC], 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYBLOB="94"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100026758692008160d0207e701020301090224000120f40005090415e90207ddcd0909050c0420000001fc090506024000ff0605116f55bc7233"], &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0}) 10.151576286s ago: executing program 3 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x1, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x8, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r6, 0x5}, &(0x7f0000000100)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=@migrate={0xa0, 0x21, 0x1, 0x1, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x0, 0x4e21, 0x8, 0x96f52372f02b8655, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x6e6bbc, 0x1}, [@migrate={0x50, 0x11, [{@in6=@private0, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast2, 0x32, 0x1, 0x0, 0x3507, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0xd1}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) 9.962447489s ago: executing program 2 (id=927): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000000000000020"], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRESDEC=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) fsmount(0xffffffffffffffff, 0x1, 0x75) 9.14751375s ago: executing program 4 (id=928): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x500, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 9.086408781s ago: executing program 2 (id=929): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x24, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r2 = memfd_secret(0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = gettid() ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', r0, 0x0, 0x5, 0x16, 0xc, 0x0, @mcast1, @private0, 0x88, 0x40, 0x4, 0x800}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x2004c000) sched_setscheduler(r5, 0x5, &(0x7f0000000100)=0x9) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r4, 0x1) write(0xffffffffffffffff, &(0x7f0000000080)="2f00000014000f3f03000000120f0af710004003009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) 8.941805476s ago: executing program 1 (id=930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000005c80)=""/4100, 0x1004}, {&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000000640)=""/134, 0x86}, {&(0x7f0000000800)=""/230, 0xe6}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000900)=""/244, 0xf4}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000006cc0)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008042, 0x0) 8.925606195s ago: executing program 3 (id=931): socket$unix(0x1, 0x2, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x4f4e, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 8.87469133s ago: executing program 4 (id=932): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e60000000a0005010000000000000000020000000000000000000006"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x1000}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000}, 0xc841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007000000400000000071a825eeb6e0040e46010a12dfb5cd46cbd39251ed73b5a97096a2dbfddb638ab271c88b1b05c28c752e81e8b1895ce59884f3b24615e8bb5300000000000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r6, &(0x7f0000000780), &(0x7f0000000600)=""/91}, 0x20) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c280dd7bb386c9fcdcee5bd6062813a4c4d8e450a16107bce4e74a48a2f076aa489e5f0e", 0x3a) accept4(r5, 0x0, 0x0, 0x800) 7.451348673s ago: executing program 3 (id=933): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000943480f00000000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) ioctl$TCGETS2(r0, 0x5434, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000280)=0x200000) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x2}, 0x52, 0x0) 7.102918108s ago: executing program 0 (id=934): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$I2C(0x0, 0xfffffffffffffffa, 0x8000) r1 = openat$audio1(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000004780), 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000004840)={0x4, 0x800, 0x0, 0xffffffffffffffff, 0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r5]) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000200), &(0x7f00000003c0)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 7.046444771s ago: executing program 1 (id=935): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xffff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000de000000000000000000000063012300000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r1, &(0x7f0000000000)='.\x00', 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x1d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) keyctl$setperm(0x5, 0x0, 0x30925) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00'}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=""/5, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfffffffffffffff1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.954645806s ago: executing program 2 (id=936): ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00222b00fc020000000000000000000000000008fe8000000000000000000000000000aa00000200000a1c3099000000"], 0x0) recvmsg(r1, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x12a) fanotify_mark(0xffffffffffffffff, 0x61, 0x40001002, 0xffffffffffffffff, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x5000003a, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a7260180", @ANYRESHEX=r4], 0x26c0}}, 0x4010) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4, 0x4000}, 0xc) 5.099623337s ago: executing program 4 (id=937): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000300)={0x1, 0x5}, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8979) r2 = syz_io_uring_setup(0x116, &(0x7f00000003c0)={0x0, 0x66ef, 0x800, 0x0, 0x19c}, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r2, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRESDEC=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) splice(r9, 0x0, r7, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) fanotify_init(0x79, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 4.002312309s ago: executing program 1 (id=938): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x2}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r4 = openat$smackfs_relabel_self(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_labels_list(r4, &(0x7f0000000440)=ANY=[@ANYBLOB='@.-&#^\')%+ )'], 0x15) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') writev(r5, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r6 = semget$private(0x0, 0x5, 0x8) semtimedop(r6, &(0x7f0000000100)=[{0x1, 0x1, 0x1800}, {0x1, 0xe200}], 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES16=r6, @ANYRES32=r6, @ANYRES32=r6], 0x44}}, 0x0) semget$private(0x0, 0x3, 0x0) r8 = semget$private(0x0, 0x4000000009, 0x42a) semctl$GETPID(r8, 0x2, 0xb, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110a9010000d534511c000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x6bb4, 0x0, 0x0, 0x0, 0x62efaf8a77bb973, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x401, @value=r11}, 0x94) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0xf9, 0xfa, "8bb932d6154fd9419937a6b9580e16e51b93acdf9e13a8d70a09137aec6e36fb2962dfa9f61bf6c9d5f2c99605f59b162c098e101e2f5d6ebb1a094468f0cc", 0x1e}, 0x60) openat$tun(0xffffffffffffff9c, 0x0, 0xca515729a7b896a6, 0x0) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, 0x0) 3.60575326s ago: executing program 0 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdir(0x0, 0x1a0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) capset(0x0, &(0x7f0000002080)={0x1, 0xffff, 0x0, 0x3, 0xb, 0x6}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x5) syz_pidfd_open(0x0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x40000) syz_pidfd_open(0x0, 0x0) inotify_init() 3.040074712s ago: executing program 3 (id=940): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) connect$unix(r3, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x6) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%.,:', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2.947089699s ago: executing program 4 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x8800}}], 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r2, @ANYRES64=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x48041) 2.269817104s ago: executing program 1 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x1, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x8, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r6, 0x5}, &(0x7f0000000100)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=@migrate={0xa0, 0x21, 0x1, 0x1, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x0, 0x4e21, 0x8, 0x96f52372f02b8655, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x6e6bbc, 0x1}, [@migrate={0x50, 0x11, [{@in6=@private0, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast2, 0x32, 0x1, 0x0, 0x3507, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0xd1}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) 1.591763364s ago: executing program 2 (id=943): socket$unix(0x1, 0x2, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x4f4e, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 306.907433ms ago: executing program 4 (id=944): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000000)='GPL\x00', 0x3, 0xe5, &(0x7f0000000340)=""/229, 0x0, 0x17, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.648166ms ago: executing program 2 (id=945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000005c80)=""/4100, 0x1004}, {&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000000640)=""/134, 0x86}, {&(0x7f0000000800)=""/230, 0xe6}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000900)=""/244, 0xf4}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000006cc0)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008042, 0x0) 776.411µs ago: executing program 0 (id=946): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x24, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r2 = memfd_secret(0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = gettid() ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', r0, 0x0, 0x5, 0x16, 0xc, 0x0, @mcast1, @private0, 0x88, 0x40, 0x4, 0x800}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x2004c000) sched_setscheduler(r5, 0x5, &(0x7f0000000100)=0x9) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r4, 0x1) write(0xffffffffffffffff, &(0x7f0000000080)="2f00000014000f3f03000000120f0af710004003009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) 0s ago: executing program 1 (id=947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x54, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) timer_create(0x9, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 891 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 189.454043][ T30] audit: type=1326 audit(1746133336.802:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 189.481762][ T30] audit: type=1326 audit(1746133336.812:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 189.526175][ T5819] usb 4-1: USB disconnect, device number 11 [ 189.570709][ T30] audit: type=1326 audit(1746133336.852:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 189.580377][ T6924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.654147][ T6936] binder_alloc: 6935: binder_alloc_buf size 16408 failed, no address space [ 189.665456][ T6936] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 189.698251][ T6929] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 191.474563][ T6955] process 'syz.4.261' launched '/dev/fd/3' with NULL argv: empty string added [ 191.562492][ T6958] netlink: 'syz.4.261': attribute type 10 has an invalid length. [ 191.604540][ T6958] netlink: 40 bytes leftover after parsing attributes in process `syz.4.261'. [ 191.710905][ T6958] batman_adv: batadv0: Adding interface: vlan1 [ 191.752306][ T6958] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.851169][ T6958] batman_adv: batadv0: Interface activated: vlan1 [ 192.939421][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 195.292485][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.292601][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.196030][ T7004] netlink: 'syz.2.272': attribute type 4 has an invalid length. [ 196.245120][ T7004] netlink: 'syz.2.272': attribute type 4 has an invalid length. [ 197.440839][ T7004] syz.2.272 (7004) used greatest stack depth: 19960 bytes left [ 197.465117][ T976] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 197.635290][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 197.657370][ T976] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 197.693562][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.712453][ T976] usb 4-1: Product: syz [ 197.727906][ T976] usb 4-1: Manufacturer: syz [ 197.747389][ T976] usb 4-1: SerialNumber: syz [ 197.782064][ T976] usb 4-1: config 0 descriptor?? [ 199.000200][ T7022] netlink: 76 bytes leftover after parsing attributes in process `syz.2.278'. [ 200.096199][ T10] usb 4-1: USB disconnect, device number 12 [ 200.552396][ T7032] fuse: Unknown parameter '00000000000000000000' [ 202.495483][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 204.055201][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.207682][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 204.239364][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 204.267483][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.363245][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 204.498995][ T9] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 204.555782][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.593514][ T9] usb 5-1: Product: syz [ 204.611372][ T9] usb 5-1: Manufacturer: syz [ 204.635202][ T9] usb 5-1: SerialNumber: syz [ 204.701106][ T9] usb 5-1: config 0 descriptor?? [ 204.753315][ T9] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 204.786770][ T9] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card [ 204.826653][ T9] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 204.883638][ T7065] netlink: 72 bytes leftover after parsing attributes in process `syz.2.290'. [ 205.902688][ T9] usb 5-1: USB disconnect, device number 9 [ 206.136846][ T5283] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 206.385068][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 207.163189][ T5283] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 207.230214][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.261099][ T5283] usb 4-1: Product: syz [ 207.278290][ T5283] usb 4-1: Manufacturer: syz [ 207.291326][ T5283] usb 4-1: SerialNumber: syz [ 207.311279][ T5283] usb 4-1: config 0 descriptor?? [ 207.666240][ T5867] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 208.245347][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 208.260419][ T5867] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 208.269732][ T5867] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 208.292633][ T5867] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.354843][ T5867] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 208.389864][ T5867] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 208.567088][ T5867] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 208.574650][ T5867] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 208.697926][ T5867] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.711635][ T5867] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 208.748968][ T5819] usb 4-1: USB disconnect, device number 13 [ 208.818705][ T5867] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 208.881068][ T5867] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 208.889942][ T5867] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 208.964513][ T5867] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.996292][ T5867] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 209.026565][ T5867] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 210.302356][ T7099] Cannot find add_set index 0 as target [ 210.432568][ T5867] usb 5-1: string descriptor 0 read error: -71 [ 210.491521][ T5867] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 210.562255][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.740331][ T5867] usb 5-1: can't set config #168, error -71 [ 210.766093][ T5867] usb 5-1: USB disconnect, device number 10 [ 212.175737][ T5867] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 212.220159][ T30] audit: type=1400 audit(1746133359.622:7): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=7114 comm="syz.4.303" path="socket:[12279]" dev="sockfs" ino=12279 [ 212.735585][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 212.744081][ T7120] Cannot find add_set index 0 as target [ 212.807155][ T30] audit: type=1400 audit(1746133360.202:8): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=7114 comm="syz.4.303" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 212.916599][ T5833] block nbd0: Receive control failed (result -32) [ 214.552513][ T7129] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd2": -EINTR [ 216.275299][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 216.495195][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 216.691140][ T9] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 216.713939][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.733171][ T9] usb 3-1: Product: syz [ 216.754960][ T9] usb 3-1: Manufacturer: syz [ 216.765727][ T7156] Cannot find add_set index 0 as target [ 216.785701][ T9] usb 3-1: SerialNumber: syz [ 216.841673][ T9] usb 3-1: config 0 descriptor?? [ 217.845188][ T5129] Bluetooth: hci3: command 0x0406 tx timeout [ 217.851323][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 217.925471][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 218.085324][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 218.132151][ T7163] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 218.142186][ T7163] overlayfs: conflicting options: metacopy=off,verity=on [ 218.251798][ T10] usb 2-1: device descriptor read/64, error -71 [ 218.825610][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 218.927479][ T9] usb 3-1: USB disconnect, device number 7 [ 218.975044][ T10] usb 2-1: device descriptor read/64, error -71 [ 219.086014][ T10] usb usb2-port1: attempt power cycle [ 219.883848][ T7176] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.277492][ T7177] mmap: syz.2.318 (7177) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 221.891357][ T7179] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 223.105419][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 225.156865][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 225.417775][ T7203] Cannot find add_set index 0 as target [ 228.309405][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 229.576575][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 229.585224][ T10] usb 3-1: device descriptor read/64, error -71 [ 229.631645][ T7232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.916162][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 230.355066][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 230.403805][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.445057][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.504163][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 230.565010][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.596213][ T10] usb 3-1: config 0 descriptor?? [ 230.964614][ T7247] tipc: Enabling of bearer rejected, failed to enable media [ 232.185514][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 232.191631][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 232.335427][ T7251] overlayfs: missing 'workdir' [ 232.734299][ T10] usb 3-1: USB disconnect, device number 9 [ 233.207684][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 234.061977][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 234.600644][ T5819] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 236.219957][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 236.312729][ T5819] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 236.324530][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.345611][ T5819] usb 2-1: Product: syz [ 236.350072][ T5819] usb 2-1: Manufacturer: syz [ 236.360077][ T5819] usb 2-1: SerialNumber: syz [ 236.407411][ T5819] usb 2-1: config 0 descriptor?? [ 237.002588][ T5821] Bluetooth: hci1: adv larger than maximum supported [ 237.004590][ T5898] usb 2-1: USB disconnect, device number 10 [ 238.045111][ T5870] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 238.315258][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 238.385182][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.425672][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.534791][ T30] audit: type=1326 audit(1746133385.932:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f2f8e969 code=0x7ffc0000 [ 238.577524][ T30] audit: type=1326 audit(1746133385.942:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f18f2f8e969 code=0x7ffc0000 [ 238.658119][ T30] audit: type=1326 audit(1746133385.942:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f2f8e969 code=0x7ffc0000 [ 238.680892][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 238.699363][ T30] audit: type=1326 audit(1746133385.952:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18f2f8e969 code=0x7ffc0000 [ 238.721822][ T5870] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 238.730551][ T5870] usb 5-1: can't read configurations, error -71 [ 238.743211][ T30] audit: type=1326 audit(1746133385.952:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f2f8e969 code=0x7ffc0000 [ 238.835525][ T30] audit: type=1326 audit(1746133385.952:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f2f8e969 code=0x7ffc0000 [ 238.914927][ T30] audit: type=1326 audit(1746133385.952:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18f2f90887 code=0x7ffc0000 [ 239.207743][ T30] audit: type=1326 audit(1746133385.952:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f18f2f907fc code=0x7ffc0000 [ 239.229845][ T30] audit: type=1326 audit(1746133385.952:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f18f2f90734 code=0x7ffc0000 [ 240.009609][ T30] audit: type=1326 audit(1746133385.952:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f18f2f90734 code=0x7ffc0000 [ 240.855699][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 240.941054][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 241.014088][ T7323] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 241.045422][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 241.057730][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.080502][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 241.113455][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.129422][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.157481][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.167963][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.195690][ T24] usb 2-1: config 0 descriptor?? [ 241.212794][ T7316] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.215100][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 241.235368][ T5819] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 241.247915][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.270376][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.305434][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 241.334324][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.353207][ T10] usb 4-1: config 0 descriptor?? [ 241.635181][ T5819] usb 1-1: Using ep0 maxpacket: 8 [ 241.658427][ T5819] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 241.668778][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.116556][ T24] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 242.139624][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 242.158737][ T24] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 242.169985][ T5819] usb 1-1: config 0 descriptor?? [ 242.264561][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 242.396814][ T7322] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20000 [ 242.478307][ T5819] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 243.457913][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 243.486250][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 243.594384][ T5870] usb 2-1: USB disconnect, device number 11 [ 243.635429][ T10] usb 4-1: USB disconnect, device number 15 [ 243.760682][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 243.760701][ T30] audit: type=1326 audit(1746133391.162:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 243.811960][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 243.826247][ T30] audit: type=1326 audit(1746133391.162:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 244.107412][ T30] audit: type=1326 audit(1746133391.162:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 244.138767][ T30] audit: type=1326 audit(1746133391.162:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 244.237418][ T5819] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 244.249781][ T30] audit: type=1326 audit(1746133391.162:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 244.621673][ T30] audit: type=1326 audit(1746133391.162:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 244.755766][ T5819] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 244.787535][ T5819] asix 1-1:0.0: probe with driver asix failed with error -71 [ 244.843396][ T30] audit: type=1326 audit(1746133391.162:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cbf590887 code=0x7ffc0000 [ 244.888728][ T7356] qnx4: no qnx4 filesystem (no root dir). [ 244.919705][ T5819] usb 1-1: USB disconnect, device number 12 [ 244.935741][ T30] audit: type=1326 audit(1746133391.162:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9cbf5907fc code=0x7ffc0000 [ 244.975147][ T30] audit: type=1326 audit(1746133391.162:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9cbf590734 code=0x7ffc0000 [ 245.037851][ T30] audit: type=1326 audit(1746133391.162:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9cbf590734 code=0x7ffc0000 [ 246.174251][ T7368] netlink: 'syz.0.372': attribute type 2 has an invalid length. [ 246.195675][ T7367] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 246.373814][ T7370] netlink: 'syz.2.373': attribute type 2 has an invalid length. [ 249.300353][ T7367] ======================================================= [ 249.300353][ T7367] WARNING: The mand mount option has been deprecated and [ 249.300353][ T7367] and is ignored by this kernel. Remove the mand [ 249.300353][ T7367] option from the mount to silence this warning. [ 249.300353][ T7367] ======================================================= [ 249.939670][ T5821] Bluetooth: hci4: link tx timeout [ 249.945522][ T5821] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 250.155175][ T5819] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 250.255793][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 250.255811][ T30] audit: type=1326 audit(1746133397.452:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9098e969 code=0x7ffc0000 [ 250.284493][ T30] audit: type=1326 audit(1746133397.452:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9098e969 code=0x7ffc0000 [ 250.308467][ T30] audit: type=1326 audit(1746133397.452:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fbc9098e969 code=0x7ffc0000 [ 250.673181][ T30] audit: type=1326 audit(1746133397.452:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9098e969 code=0x7ffc0000 [ 250.697738][ T5819] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 250.705075][ T976] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 250.715891][ T5819] usb 5-1: config 0 has no interface number 0 [ 250.723459][ T30] audit: type=1326 audit(1746133397.452:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc9098e969 code=0x7ffc0000 [ 250.730363][ T5819] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 250.757337][ T5819] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 250.759304][ T30] audit: type=1326 audit(1746133397.462:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9098e969 code=0x7ffc0000 [ 250.772392][ T5819] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 250.813156][ T30] audit: type=1326 audit(1746133397.462:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc90990887 code=0x7ffc0000 [ 250.831711][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 250.839614][ T30] audit: type=1326 audit(1746133397.462:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbc909907fc code=0x7ffc0000 [ 250.856217][ T5819] usb 5-1: Product: syz [ 250.869063][ T30] audit: type=1326 audit(1746133397.462:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbc90990734 code=0x7ffc0000 [ 250.891976][ T5819] usb 5-1: SerialNumber: syz [ 250.909159][ T5819] usb 5-1: config 0 descriptor?? [ 251.019003][ T976] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.033999][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 251.045896][ T30] audit: type=1326 audit(1746133397.462:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbc90990734 code=0x7ffc0000 [ 251.068567][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 251.078534][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.090261][ T976] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.104622][ T976] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.135646][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.168048][ T976] usb 4-1: config 0 descriptor?? [ 251.177135][ T5819] usb 5-1: can't set config #0, error -71 [ 251.209704][ T7377] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 251.234605][ T5819] usb 5-1: USB disconnect, device number 14 [ 251.244460][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 251.286131][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.294274][ T9] usb 3-1: Product: syz [ 251.325159][ T9] usb 3-1: Manufacturer: syz [ 251.329894][ T9] usb 3-1: SerialNumber: syz [ 251.360881][ T9] usb 3-1: config 0 descriptor?? [ 251.436608][ T7395] vxcan1: tx drop: invalid da for name 0x0020000000000000 [ 251.505465][ T5870] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 251.678831][ T5870] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 251.700021][ T5870] usb 1-1: config 0 has no interface number 0 [ 251.715347][ T5870] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 251.746417][ T5870] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 251.762272][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.780532][ T5870] usb 1-1: Product: syz [ 251.786948][ T5870] usb 1-1: Manufacturer: syz [ 251.799217][ T5870] usb 1-1: SerialNumber: syz [ 251.900759][ T5870] usb 1-1: config 0 descriptor?? [ 251.900820][ T976] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 251.924138][ T976] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 251.928824][ T7391] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.994512][ T976] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 252.005759][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 252.087949][ T5870] usb-storage 1-1:0.20: USB Mass Storage device detected [ 252.115274][ T976] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 252.128724][ T5870] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 252.306574][ T7391] team0: Port device bond0 removed [ 252.335364][ T5819] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 252.498087][ T7412] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 252.562188][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 252.593619][ T5819] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 252.608774][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 252.654153][ T9] usb 3-1: Please update to version 0.2 or newer [ 252.670017][ T7409] team0: Unable to change to the same mode the team is in [ 252.681802][ T5819] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 252.724361][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 252.785948][ T7412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.799551][ T5819] usb 2-1: Product: syz [ 252.820690][ T5819] usb 2-1: Manufacturer: syz [ 252.872141][ T5819] usb 2-1: SerialNumber: syz [ 252.889784][ T7412] team0: Port device bond0 added [ 252.955277][ T5819] usb 2-1: config 0 descriptor?? [ 253.002288][ T7402] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 253.068094][ T9] usb 3-1: USB disconnect, device number 10 [ 253.195361][ T5870] scsi host1: usb-storage 1-1:0.20 [ 253.279688][ T5870] usb 1-1: USB disconnect, device number 13 [ 253.352849][ T7402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.385824][ T10] usb 4-1: USB disconnect, device number 16 [ 253.395311][ T7402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.455037][ T976] usb 2-1: USB disconnect, device number 12 [ 254.305154][ T976] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 254.909767][ T976] usb 4-1: descriptor type invalid, skip [ 255.029522][ T976] usb 4-1: descriptor type invalid, skip [ 255.047387][ T976] usb 4-1: descriptor type invalid, skip [ 255.075270][ T976] usb 4-1: not running at top speed; connect to a high speed hub [ 255.119316][ T976] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 255.210405][ T976] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.257471][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.287286][ T976] usb 4-1: Product: syz [ 255.318597][ T976] usb 4-1: Manufacturer: ⨧淘뮵쏶賋䈖꫃갞㐤䨑벢ȗ᡹☥럆ὸﬨ缊᭣覸ⴙ巇㦲۞鍬شꕫꂐꄮዲ짥鵈䄼菵☜谿ᩜ昷屧䌑⢍燫닏錁യ쌼෨퀒栽襻Ὥ姜흻㗖䶉甈긷ꎣ䍧᥷⃓凟룸珈髺䥑ﱈ㝯駤밾冡㤯躃泔螀蒒⟱㰱팒⤙볼㘂ᕪة졵柏ႋ㢉䡆攉獁㜦광뎄쇯⥼綑鑯ࡥ鬍 [ 255.361752][ T976] usb 4-1: SerialNumber: syz [ 255.555555][ T5870] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 255.586184][ T7430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.595822][ T7430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.656625][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 255.656643][ T30] audit: type=1326 audit(1746133403.062:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 255.695974][ T5870] usb 3-1: device descriptor read/64, error -71 [ 255.745514][ T30] audit: type=1326 audit(1746133403.082:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 255.812065][ T30] audit: type=1326 audit(1746133403.092:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 255.853439][ T30] audit: type=1326 audit(1746133403.092:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 256.097256][ T30] audit: type=1326 audit(1746133403.092:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 256.118808][ T30] audit: type=1326 audit(1746133403.092:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbf58e969 code=0x7ffc0000 [ 256.142554][ T30] audit: type=1326 audit(1746133403.092:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cbf590887 code=0x7ffc0000 [ 256.589957][ T30] audit: type=1326 audit(1746133403.092:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9cbf5907fc code=0x7ffc0000 [ 256.659880][ T5870] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 256.810183][ T976] cdc_ncm 4-1:1.0: bind() failure [ 256.814434][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.828182][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.838656][ T5870] usb 3-1: device descriptor read/64, error -71 [ 256.927914][ T976] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 256.934796][ T976] cdc_ncm 4-1:1.1: bind() failure [ 256.943624][ T30] audit: type=1326 audit(1746133403.092:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9cbf590734 code=0x7ffc0000 [ 256.981463][ T976] usb 4-1: USB disconnect, device number 17 [ 257.004318][ T30] audit: type=1326 audit(1746133403.092:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9cbf590734 code=0x7ffc0000 [ 257.385001][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 257.435104][ T976] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 257.624959][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 257.683072][ T976] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 257.709556][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 257.737888][ T976] usb 4-1: config 0 has no interface number 0 [ 257.754528][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16384, setting to 1024 [ 257.816973][ T5870] usb usb3-port1: attempt power cycle [ 257.833210][ T976] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 257.892494][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.929436][ T976] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 257.961954][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.983893][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 258.011528][ T976] usb 4-1: Product: syz [ 258.029023][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.038594][ T976] usb 4-1: Manufacturer: syz [ 258.048238][ T976] usb 4-1: SerialNumber: syz [ 258.085981][ T976] usb 4-1: config 0 descriptor?? [ 258.092610][ T9] usb 5-1: config 0 descriptor?? [ 258.100433][ T7468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 258.132471][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 258.213109][ T976] usb-storage 4-1:0.20: USB Mass Storage device detected [ 258.225620][ T5870] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 258.365270][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 258.410454][ T976] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 258.522769][ T7468] bridge_slave_0: left allmulticast mode [ 258.557939][ T7468] bridge_slave_0: left promiscuous mode [ 258.563897][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.609707][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.661119][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 258.673641][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 258.686213][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.703653][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.727798][ T7468] bridge_slave_1: left allmulticast mode [ 258.733491][ T7468] bridge_slave_1: left promiscuous mode [ 258.742747][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.841214][ T10] usb 2-1: config 0 descriptor?? [ 258.853751][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.880771][ T7478] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 258.979105][ T7492] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 259.069748][ T5819] usb 5-1: USB disconnect, device number 15 [ 259.114241][ T7468] bond0: (slave bond_slave_0): Releasing backup interface [ 259.214287][ T7468] bond0: (slave bond_slave_1): Releasing backup interface [ 259.351098][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.377543][ T10] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 259.423855][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 259.469716][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.471123][ T10] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 259.524318][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 259.568876][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.715431][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.253132][ T7508] overlayfs: missing 'workdir' [ 262.253271][ T5898] usb 2-1: USB disconnect, device number 13 [ 262.498148][ T976] scsi host1: usb-storage 4-1:0.20 [ 263.077862][ T976] usb 4-1: USB disconnect, device number 18 [ 263.429640][ T5870] usb 3-1: device descriptor read/8, error -110 [ 263.655662][ T7513] netlink: 'syz.1.399': attribute type 2 has an invalid length. [ 263.670956][ T7513] : entered promiscuous mode [ 263.835393][ T5870] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 265.507873][ T5870] usb 3-1: device descriptor read/8, error -32 [ 265.653325][ T5870] usb usb3-port1: unable to enumerate USB device [ 265.843816][ T7535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.405'. [ 265.877617][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 266.087385][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 266.142767][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 266.168613][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 266.197228][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 266.233295][ T10] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 266.252896][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.297729][ T10] usb 1-1: Product: syz [ 266.312718][ T10] usb 1-1: Manufacturer: syz [ 266.340104][ T10] usb 1-1: SerialNumber: syz [ 266.362543][ T10] usb 1-1: config 0 descriptor?? [ 266.518610][ T976] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 266.725126][ T5870] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 267.258233][ T10] usb 1-1: NFC: Unable to get FW version [ 267.292919][ T10] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 267.345468][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.377820][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 267.402051][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 267.416807][ T976] usb 4-1: device descriptor read/64, error -71 [ 267.418449][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.440998][ T5870] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.458914][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.482381][ T5870] usb 2-1: config 0 descriptor?? [ 267.494196][ T7552] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 267.515147][ T5283] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 268.957265][ T5870] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 269.001448][ T5870] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 269.119731][ T5870] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 269.568000][ T976] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 272.002161][ T5867] usb 1-1: USB disconnect, device number 14 [ 272.217194][ T5870] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 272.413330][ T7572] FAULT_INJECTION: forcing a failure. [ 272.413330][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 272.566916][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.0.412 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 272.566950][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.566963][ T7572] Call Trace: [ 272.566972][ T7572] [ 272.566983][ T7572] dump_stack_lvl+0x189/0x250 [ 272.567035][ T7572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.567064][ T7572] ? __pfx__printk+0x10/0x10 [ 272.567102][ T7572] ? __pfx___might_resched+0x10/0x10 [ 272.567139][ T7572] should_fail_ex+0x414/0x560 [ 272.567179][ T7572] should_failslab+0xa8/0x100 [ 272.567215][ T7572] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 272.567247][ T7572] ? __alloc_skb+0x112/0x2d0 [ 272.567277][ T7572] __alloc_skb+0x112/0x2d0 [ 272.567315][ T7572] netlink_sendmsg+0x5c6/0xb30 [ 272.567350][ T7572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.567372][ T7572] ? rcu_is_watching+0x15/0xb0 [ 272.567407][ T7572] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.567428][ T7572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.567450][ T7572] __sock_sendmsg+0x219/0x270 [ 272.567484][ T7572] ____sys_sendmsg+0x505/0x830 [ 272.567519][ T7572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.567554][ T7572] ? import_iovec+0x74/0xa0 [ 272.567585][ T7572] ___sys_sendmsg+0x21f/0x2a0 [ 272.567612][ T7572] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.567676][ T7572] ? __fget_files+0x2a/0x420 [ 272.567706][ T7572] ? __fget_files+0x3a0/0x420 [ 272.567747][ T7572] __x64_sys_sendmsg+0x19b/0x260 [ 272.567781][ T7572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.567824][ T7572] ? do_syscall_64+0xba/0x210 [ 272.567855][ T7572] do_syscall_64+0xf6/0x210 [ 272.567879][ T7572] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 272.567900][ T7572] ? clear_bhb_loop+0x45/0xa0 [ 272.567924][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.567944][ T7572] RIP: 0033:0x7ff926f8e969 [ 272.567963][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.567980][ T7572] RSP: 002b:00007ff927d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.568008][ T7572] RAX: ffffffffffffffda RBX: 00007ff9271b5fa0 RCX: 00007ff926f8e969 [ 272.568023][ T7572] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 272.568036][ T7572] RBP: 00007ff927d17090 R08: 0000000000000000 R09: 0000000000000000 [ 272.568048][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.568059][ T7572] R13: 0000000000000000 R14: 00007ff9271b5fa0 R15: 00007ffd8b0d95a8 [ 272.568091][ T7572] [ 273.635524][ T5870] usb 2-1: USB disconnect, device number 14 [ 274.800894][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.414'. [ 275.019742][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.417'. [ 275.734996][ T5283] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 275.825979][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 275.905063][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 275.920856][ T5283] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.016993][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 276.029981][ T5283] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.168450][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.275031][ T5283] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.315865][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 276.574094][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.656655][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.682269][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 276.923116][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 276.937590][ T5283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 276.938155][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.944816][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.963697][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 277.011858][ T5283] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 277.022037][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.032168][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 277.061291][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.072440][ T24] usb 2-1: config 0 descriptor?? [ 277.084061][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.101931][ T7617] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 277.117551][ T5283] usb 5-1: config 0 descriptor?? [ 277.350365][ T9] usb 1-1: config 0 descriptor?? [ 277.856066][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 277.856087][ T30] audit: type=1400 audit(1746133425.092:157): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=7624 comm="syz.2.426" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 277.941717][ T24] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 277.987651][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 277.999015][ T24] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 278.028630][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 278.156919][ T7635] netlink: 'syz.3.427': attribute type 2 has an invalid length. [ 278.165234][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 278.192623][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 278.391186][ T9] usb 1-1: USB disconnect, device number 15 [ 279.748098][ T7641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.428'. [ 280.053598][ T5283] usbhid 5-1:0.0: can't add hid device: -71 [ 280.157789][ T5283] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 280.257888][ T5870] usb 2-1: USB disconnect, device number 15 [ 280.267974][ T5283] usb 5-1: USB disconnect, device number 17 [ 283.008457][ T7683] fuse: Unknown parameter '0x0000000000000004' [ 283.284042][ T7694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.442'. [ 283.300282][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.441'. [ 283.325161][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 283.485207][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 283.509518][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.547292][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.588430][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 283.632049][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 283.670464][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.711090][ T24] usb 3-1: config 0 descriptor?? [ 283.886572][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 283.906008][ T7721] binder: 7713:7721 ioctl c0306201 200000000200 returned -14 [ 284.161045][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 284.175066][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 284.216482][ T24] usb 3-1: USB disconnect, device number 15 [ 284.230733][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.278560][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 284.319664][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 284.344984][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.392966][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.428440][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.470153][ T10] usb 2-1: config 0 descriptor?? [ 284.480151][ T7703] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 285.253242][ T10] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 285.345126][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 285.353586][ T10] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 285.410743][ T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 287.413563][ T10] usb 2-1: USB disconnect, device number 16 [ 288.047065][ T7767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.457'. [ 288.293567][ T7774] Cannot find add_set index 0 as target [ 288.778335][ T30] audit: type=1400 audit(1746133435.682:158): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=7764 comm="syz.1.456" path="socket:[14923]" dev="sockfs" ino=14923 [ 288.936057][ T30] audit: type=1400 audit(1746133435.722:159): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=7764 comm="syz.1.456" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 289.067491][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 289.599662][ T5867] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 290.446712][ T5867] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 290.476499][ T5867] usb 5-1: config 0 has no interface number 0 [ 290.489871][ T5867] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 290.655313][ T5867] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 290.664418][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.729967][ T5867] usb 5-1: Product: syz [ 290.753348][ T5867] usb 5-1: Manufacturer: syz [ 290.771963][ T5867] usb 5-1: SerialNumber: syz [ 290.827429][ T5867] usb 5-1: config 0 descriptor?? [ 290.845401][ T7776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 290.883678][ T5867] usb-storage 5-1:0.20: USB Mass Storage device detected [ 290.926489][ T5867] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 290.970786][ T7801] Bluetooth: hci5: Frame reassembly failed (-84) [ 291.035732][ T30] audit: type=1326 audit(1746133438.432:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff926f8e969 code=0x7ffc0000 [ 291.084732][ T30] audit: type=1326 audit(1746133438.472:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7ff926f8e969 code=0x7ffc0000 [ 291.119582][ T5868] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 291.125411][ T30] audit: type=1326 audit(1746133438.472:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff926f8e969 code=0x7ffc0000 [ 291.179055][ T7776] team0: Port device bond0 removed [ 291.193601][ T7776] bridge_slave_0: left allmulticast mode [ 291.217915][ T30] audit: type=1326 audit(1746133438.472:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff926f8e969 code=0x7ffc0000 [ 291.255172][ T7776] bridge_slave_0: left promiscuous mode [ 291.303662][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.333265][ T30] audit: type=1326 audit(1746133438.472:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff926f8e969 code=0x7ffc0000 [ 291.505748][ T30] audit: type=1326 audit(1746133438.472:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff926f8e969 code=0x7ffc0000 [ 291.616506][ T7776] bridge_slave_1: left allmulticast mode [ 291.622226][ T7776] bridge_slave_1: left promiscuous mode [ 291.643429][ T30] audit: type=1326 audit(1746133438.482:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff926f90887 code=0x7ffc0000 [ 291.744892][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.763582][ T30] audit: type=1326 audit(1746133438.482:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff926f907fc code=0x7ffc0000 [ 291.815620][ T7808] netlink: 'syz.4.460': attribute type 10 has an invalid length. [ 291.934608][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.951320][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 291.971498][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 291.984122][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.997710][ T5868] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.396424][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.422247][ T5868] usb 3-1: config 0 descriptor?? [ 292.451050][ T7776] bond0: (slave bond_slave_0): Releasing backup interface [ 292.461738][ T7799] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 292.727117][ T7776] bond0: (slave bond_slave_1): Releasing backup interface [ 292.841920][ T7776] team0: Port device team_slave_0 removed [ 292.867408][ T7776] team0: Port device team_slave_1 removed [ 292.884617][ T7776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.888581][ T5868] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 292.911381][ T7776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.934760][ T5868] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 292.948230][ T7776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.964771][ T5868] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 292.982642][ T7776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.005410][ T5868] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 293.033406][ T7776] batman_adv: batadv0: Interface deactivated: vlan1 [ 293.045748][ T5833] Bluetooth: hci5: command 0xfc11 tx timeout [ 293.048744][ T7776] batman_adv: batadv0: Removing interface: vlan1 [ 293.053331][ T5821] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 293.319863][ T7807] team0: Mode changed to "loadbalance" [ 293.335529][ T7808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.349989][ T7808] team0: Port device bond0 added [ 293.459083][ T7823] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.720643][ T5867] scsi host1: usb-storage 5-1:0.20 [ 293.761335][ T5867] usb 5-1: USB disconnect, device number 18 [ 294.942335][ T5867] usb 3-1: USB disconnect, device number 16 [ 295.045111][ T7833] Bluetooth: MGMT ver 1.23 [ 297.665036][ T976] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 298.794996][ T976] usb 3-1: device descriptor read/64, error -71 [ 299.458558][ T976] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 299.594445][ T7877] netlink: 'syz.3.487': attribute type 2 has an invalid length. [ 299.697600][ T7877] : entered promiscuous mode [ 299.774995][ T976] usb 3-1: device descriptor read/64, error -71 [ 299.885695][ T976] usb usb3-port1: attempt power cycle [ 300.085650][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 300.301280][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.450263][ T976] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 300.665288][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 300.665438][ T976] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 300.708593][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 300.747993][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.766045][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 300.791660][ T976] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 300.792398][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.823070][ T976] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 300.841848][ T976] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 300.860642][ T976] usb 3-1: Product: syz [ 300.879664][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.887243][ T976] usb 3-1: Manufacturer: syz [ 300.906690][ T976] usb 3-1: SerialNumber: syz [ 300.927102][ T24] usb 5-1: config 0 descriptor?? [ 300.941399][ T7876] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 300.942720][ T976] usb 3-1: config 0 descriptor?? [ 300.978907][ T7882] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 301.551539][ T24] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 301.611759][ T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 301.632719][ T24] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 302.141041][ T24] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 302.780608][ T24] usb 3-1: USB disconnect, device number 20 [ 304.816500][ T24] usb 5-1: USB disconnect, device number 19 [ 306.597980][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.502'. [ 307.817406][ T7942] input: syz1 as /devices/virtual/input/input8 [ 309.743156][ T7953] netlink: 'syz.4.509': attribute type 2 has an invalid length. [ 310.215163][ T976] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 310.377172][ T976] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.392273][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 310.442332][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 310.586223][ T976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.621604][ T976] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.634007][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.642604][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 310.661683][ T976] usb 2-1: config 0 descriptor?? [ 310.681168][ T7964] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 310.805528][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 310.832303][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 310.853431][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 310.869740][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 310.880336][ T10] usb 5-1: Product: syz [ 310.884725][ T10] usb 5-1: Manufacturer: syz [ 310.916237][ T10] usb 5-1: SerialNumber: syz [ 310.947585][ T10] usb 5-1: config 0 descriptor?? [ 311.426465][ T976] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 311.443035][ T7966] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 311.452583][ T976] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 311.471072][ T976] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 311.498586][ T976] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 312.644783][ T10] usb 5-1: USB disconnect, device number 20 [ 313.761833][ T10] usb 2-1: USB disconnect, device number 17 [ 314.954491][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 315.105757][ T7990] netlink: 'syz.3.519': attribute type 15 has an invalid length. [ 315.476096][ T8006] netlink: 'syz.3.522': attribute type 2 has an invalid length. [ 316.125521][ T8010] FAULT_INJECTION: forcing a failure. [ 316.125521][ T8010] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 316.139046][ T8010] CPU: 0 UID: 0 PID: 8010 Comm: syz.0.523 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 316.139075][ T8010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 316.139087][ T8010] Call Trace: [ 316.139097][ T8010] [ 316.139103][ T8010] dump_stack_lvl+0x189/0x250 [ 316.139129][ T8010] ? __lock_acquire+0xaac/0xd20 [ 316.139151][ T8010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.139171][ T8010] ? __pfx__printk+0x10/0x10 [ 316.139193][ T8010] ? __might_fault+0xb0/0x130 [ 316.139225][ T8010] should_fail_ex+0x414/0x560 [ 316.139252][ T8010] _copy_from_user+0x2d/0xb0 [ 316.139279][ T8010] ___sys_sendmsg+0x158/0x2a0 [ 316.139308][ T8010] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.139355][ T8010] ? __fget_files+0x2a/0x420 [ 316.139377][ T8010] ? __fget_files+0x3a0/0x420 [ 316.139406][ T8010] __x64_sys_sendmsg+0x19b/0x260 [ 316.139425][ T8010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.139456][ T8010] ? do_syscall_64+0xba/0x210 [ 316.139500][ T8010] do_syscall_64+0xf6/0x210 [ 316.139517][ T8010] ? clear_bhb_loop+0x45/0xa0 [ 316.139537][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.139551][ T8010] RIP: 0033:0x7ff926f8e969 [ 316.139566][ T8010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.139578][ T8010] RSP: 002b:00007ff924df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.139594][ T8010] RAX: ffffffffffffffda RBX: 00007ff9271b6080 RCX: 00007ff926f8e969 [ 316.139605][ T8010] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000004 [ 316.139614][ T8010] RBP: 00007ff924df6090 R08: 0000000000000000 R09: 0000000000000000 [ 316.139623][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.139631][ T8010] R13: 0000000000000000 R14: 00007ff9271b6080 R15: 00007ffd8b0d95a8 [ 316.139654][ T8010] [ 316.801837][ T7988] syz.2.517 (7988): drop_caches: 2 [ 318.175617][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.188106][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.350273][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 321.322592][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 321.406915][ T30] audit: type=1400 audit(1746133468.572:192): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=8039 comm="syz.2.531" path="socket:[16296]" dev="sockfs" ino=16296 [ 321.682732][ T30] audit: type=1400 audit(1746133468.622:193): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=8039 comm="syz.2.531" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 322.112564][ T8059] netlink: 'syz.4.537': attribute type 2 has an invalid length. [ 323.735580][ T8078] netlink: 'syz.3.544': attribute type 2 has an invalid length. [ 323.793317][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 324.710253][ T7979] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 325.178105][ T7979] usb 4-1: device descriptor read/64, error -71 [ 325.446573][ T7979] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 325.605400][ T7979] usb 4-1: device descriptor read/64, error -71 [ 325.835704][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 325.844533][ T7979] usb usb4-port1: attempt power cycle [ 326.615341][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 326.656662][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 326.694131][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 326.714945][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 326.723203][ T24] usb 5-1: Product: syz [ 326.746123][ T24] usb 5-1: Manufacturer: syz [ 326.750808][ T24] usb 5-1: SerialNumber: syz [ 326.768248][ T24] usb 5-1: config 0 descriptor?? [ 326.778919][ T8098] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 326.865049][ T7979] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 326.908557][ T7979] usb 4-1: device descriptor read/8, error -71 [ 327.078592][ T10] usb 5-1: USB disconnect, device number 21 [ 327.168984][ T7979] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 327.405700][ T7979] usb 4-1: device not accepting address 24, error -71 [ 327.452166][ T7979] usb usb4-port1: unable to enumerate USB device [ 328.175644][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 328.315135][ T8127] netlink: 'syz.1.555': attribute type 2 has an invalid length. [ 329.024954][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 329.385004][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.405362][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.488074][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 329.645032][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.683474][ T10] usb 3-1: config 0 descriptor?? [ 330.072224][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 330.815043][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 331.002026][ T10] usb 3-1: USB disconnect, device number 21 [ 331.325943][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 334.215323][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 334.505256][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 334.617365][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.728224][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 334.955052][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.985157][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 335.020241][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 335.030577][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.095046][ T9] usb 4-1: device descriptor read/64, error -71 [ 335.546104][ T10] usb 3-1: config 0 descriptor?? [ 335.587649][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 335.746312][ T9] usb 4-1: device descriptor read/64, error -71 [ 335.809514][ T8196] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 335.905546][ T9] usb usb4-port1: attempt power cycle [ 335.957857][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 335.968577][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 336.004434][ T10] usb 3-1: USB disconnect, device number 22 [ 336.265445][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 336.308533][ T9] usb 4-1: device descriptor read/8, error -71 [ 337.306926][ T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 337.592178][ T9] usb 4-1: device not accepting address 28, error -71 [ 337.608367][ T9] usb usb4-port1: unable to enumerate USB device [ 337.721842][ T8234] netlink: 'syz.3.579': attribute type 3 has an invalid length. [ 337.730462][ T8234] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.579'. [ 338.255881][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 338.801806][ T8243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.375428][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 340.455227][ T8258] binder: BINDER_SET_CONTEXT_MGR already set [ 340.516740][ T8258] binder: 8256:8258 ioctl 4018620d 200000000040 returned -16 [ 343.768598][ T8290] Cannot find add_set index 0 as target [ 343.830307][ T5870] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 343.849350][ T30] audit: type=1400 audit(1746133491.172:194): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=8284 comm="syz.1.590" path="socket:[17832]" dev="sockfs" ino=17832 [ 344.321559][ T30] audit: type=1400 audit(1746133491.212:195): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=8284 comm="syz.1.590" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 344.495501][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 344.501978][ T8295] binder_alloc: binder_alloc_mmap_handler: 8294 2000003d8000-2000003d9000 already mapped failed -16 [ 344.523930][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.541303][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.572438][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 344.628083][ T5870] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 344.683324][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.740479][ T5870] usb 4-1: config 0 descriptor?? [ 345.085518][ T7979] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 345.183606][ T5870] usbhid 4-1:0.0: can't add hid device: -71 [ 345.249611][ T5870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 345.551308][ T5870] usb 4-1: USB disconnect, device number 29 [ 345.595169][ T7979] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 345.625618][ T7979] usb 2-1: config 0 has no interface number 0 [ 345.658263][ T7979] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 345.683904][ T7979] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 345.723654][ T7979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.774333][ T7979] usb 2-1: Product: syz [ 345.805990][ T7979] usb 2-1: Manufacturer: syz [ 345.815026][ T7979] usb 2-1: SerialNumber: syz [ 345.832911][ T7979] usb 2-1: config 0 descriptor?? [ 345.851799][ T8306] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 345.905037][ T7979] usb-storage 2-1:0.20: USB Mass Storage device detected [ 345.932409][ T7979] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 346.634977][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 346.643068][ T8306] team0: Port device bond0 removed [ 346.795995][ T8328] netlink: 'syz.1.595': attribute type 10 has an invalid length. [ 346.855246][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 346.896330][ T8306] bond1: (slave veth0_to_bond): Releasing active interface [ 346.938132][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.978575][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.018546][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 347.055974][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.138225][ T10] usb 1-1: config 0 descriptor?? [ 347.505281][ T8325] team0: Unable to change to the same mode the team is in [ 347.827205][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 347.833279][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 347.865356][ T8328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.873671][ T8328] team0: Port device bond0 added [ 347.926467][ T10] usb 1-1: USB disconnect, device number 16 [ 349.200772][ T7979] scsi host1: usb-storage 2-1:0.20 [ 349.278074][ T8346] netlink: 'syz.4.603': attribute type 2 has an invalid length. [ 349.684250][ T7979] usb 2-1: USB disconnect, device number 18 [ 351.405372][ T5870] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 351.697807][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 351.769731][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.769782][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.769807][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 351.769856][ T5870] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 351.769883][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.800326][ T5870] usb 3-1: config 0 descriptor?? [ 351.832728][ T8371] tty tty27: ldisc open failed (-12), clearing slot 26 [ 352.086767][ T8369] tty tty27: ldisc open failed (-12), clearing slot 26 [ 352.384760][ T5870] usbhid 3-1:0.0: can't add hid device: -71 [ 352.391822][ T5870] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 352.418464][ T5870] usb 3-1: USB disconnect, device number 23 [ 353.992714][ T7979] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 354.208508][ T7979] usb 1-1: device descriptor read/64, error -71 [ 354.810070][ T7979] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 355.029354][ T8407] sctp: [Deprecated]: syz.2.620 (pid 8407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.029354][ T8407] Use struct sctp_sack_info instead [ 355.461052][ T7979] usb 1-1: device descriptor read/64, error -71 [ 355.715309][ T7979] usb usb1-port1: attempt power cycle [ 356.159474][ T5870] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 356.647655][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 356.773033][ T5870] usb 4-1: device descriptor read/all, error -71 [ 356.841879][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.626'. [ 356.905065][ T8422] netlink: 256 bytes leftover after parsing attributes in process `syz.4.626'. [ 356.945594][ T8422] netlink: 72 bytes leftover after parsing attributes in process `syz.4.626'. [ 357.046311][ T7979] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 357.145610][ T7979] usb 1-1: Using ep0 maxpacket: 32 [ 357.160764][ T7979] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 357.218627][ T7979] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 357.270481][ T7979] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 357.290126][ T7979] usb 1-1: Product: syz [ 357.299924][ T7979] usb 1-1: Manufacturer: syz [ 357.326513][ T7979] usb 1-1: SerialNumber: syz [ 357.476617][ T5870] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 357.558509][ T7979] usb 1-1: config 0 descriptor?? [ 357.928444][ T8415] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 358.008106][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 358.265806][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.388673][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.490215][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 358.558344][ T5870] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 358.568688][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.598159][ T5867] usb 1-1: USB disconnect, device number 19 [ 358.624368][ T5870] usb 4-1: config 0 descriptor?? [ 358.684668][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 359.131370][ T8451] Cannot find add_set index 0 as target [ 359.185112][ T30] audit: type=1400 audit(1746133506.522:196): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=8447 comm="syz.1.635" path="socket:[17160]" dev="sockfs" ino=17160 [ 359.488402][ T30] audit: type=1400 audit(1746133506.562:197): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=8447 comm="syz.1.635" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 359.620561][ T5870] usbhid 4-1:0.0: can't add hid device: -71 [ 359.633973][ T5870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 359.658976][ T5870] usb 4-1: USB disconnect, device number 31 [ 360.237235][ T8459] cgroup2: Unknown parameter 'lowerdir' [ 360.283020][ T8459] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 361.705001][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 361.895925][ T30] audit: type=1326 audit(1746133509.302:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8462 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff926f8e969 code=0x7fc00000 [ 361.925964][ T976] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 361.984958][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 362.500650][ T976] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.520953][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.547119][ T976] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.574017][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.588868][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 362.599403][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.609338][ T976] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 362.643361][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 362.664276][ T976] usb 5-1: SerialNumber: syz [ 362.707204][ T10] usb 2-1: config 0 descriptor?? [ 362.732021][ T976] cdc_ether 5-1:1.0: skipping garbage [ 363.202185][ T976] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 363.209690][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 363.224515][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 363.240809][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 363.267454][ T976] usb-storage 5-1:1.0: USB Mass Storage device detected [ 363.282823][ T10] usb 2-1: USB disconnect, device number 19 [ 363.317037][ T976] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 363.376506][ T976] usb 5-1: USB disconnect, device number 22 [ 363.733027][ T8496] /dev/sg0: Can't lookup blockdev [ 364.750135][ T8500] FAULT_INJECTION: forcing a failure. [ 364.750135][ T8500] name failslab, interval 1, probability 0, space 0, times 0 [ 364.774938][ T8500] CPU: 0 UID: 0 PID: 8500 Comm: syz.3.648 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 364.774970][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 364.774983][ T8500] Call Trace: [ 364.774992][ T8500] [ 364.775003][ T8500] dump_stack_lvl+0x189/0x250 [ 364.775047][ T8500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.775075][ T8500] ? __pfx__printk+0x10/0x10 [ 364.775113][ T8500] ? __pfx___might_resched+0x10/0x10 [ 364.775143][ T8500] ? fs_reclaim_acquire+0x7d/0x100 [ 364.775170][ T8500] should_fail_ex+0x414/0x560 [ 364.775208][ T8500] should_failslab+0xa8/0x100 [ 364.775238][ T8500] kmem_cache_alloc_noprof+0x73/0x3c0 [ 364.775263][ T8500] ? __mpol_dup+0x79/0x320 [ 364.775297][ T8500] __mpol_dup+0x79/0x320 [ 364.775325][ T8500] ? __pfx___mpol_dup+0x10/0x10 [ 364.775367][ T8500] __se_sys_set_mempolicy_home_node+0x3b0/0x7e0 [ 364.775407][ T8500] ? __pfx___se_sys_set_mempolicy_home_node+0x10/0x10 [ 364.775452][ T8500] ? do_syscall_64+0xba/0x210 [ 364.775496][ T8500] do_syscall_64+0xf6/0x210 [ 364.775526][ T8500] ? clear_bhb_loop+0x45/0xa0 [ 364.775548][ T8500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.775566][ T8500] RIP: 0033:0x7fa80eb8e969 [ 364.775583][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.775598][ T8500] RSP: 002b:00007fa80fa6b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 364.775617][ T8500] RAX: ffffffffffffffda RBX: 00007fa80edb6160 RCX: 00007fa80eb8e969 [ 364.775630][ T8500] RDX: 0000000000000000 RSI: 000000000000403f RDI: 0000200000ffc000 [ 364.775641][ T8500] RBP: 00007fa80fa6b090 R08: 0000000000000000 R09: 0000000000000000 [ 364.775652][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.775661][ T8500] R13: 0000000000000000 R14: 00007fa80edb6160 R15: 00007ffda4043798 [ 364.775690][ T8500] [ 366.355608][ T8517] trusted_key: encrypted_key: key user:syz not found [ 366.488260][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 369.547195][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'. [ 371.115003][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 371.594932][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 371.634016][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.880967][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.967942][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 372.171805][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.184755][ T10] usb 3-1: config 0 descriptor?? [ 372.270125][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 372.316139][ T8570] FAULT_INJECTION: forcing a failure. [ 372.316139][ T8570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.321820][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 372.394001][ T10] usb 3-1: USB disconnect, device number 24 [ 372.405783][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.3.669 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 372.405812][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 372.405824][ T8570] Call Trace: [ 372.405832][ T8570] [ 372.405841][ T8570] dump_stack_lvl+0x189/0x250 [ 372.405873][ T8570] ? __lock_acquire+0xaac/0xd20 [ 372.405901][ T8570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.405926][ T8570] ? __pfx__printk+0x10/0x10 [ 372.405954][ T8570] ? __might_fault+0xb0/0x130 [ 372.405991][ T8570] should_fail_ex+0x414/0x560 [ 372.406024][ T8570] _copy_from_user+0x2d/0xb0 [ 372.406051][ T8570] do_sock_getsockopt+0x1cd/0x650 [ 372.406082][ T8570] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 372.406105][ T8570] ? do_syscall_64+0x40/0x210 [ 372.406128][ T8570] ? __fget_files+0x2a/0x420 [ 372.406158][ T8570] ? __fget_files+0x3a0/0x420 [ 372.406184][ T8570] ? __fget_files+0x2a/0x420 [ 372.406218][ T8570] __x64_sys_getsockopt+0x1a5/0x250 [ 372.406240][ T8570] ? do_syscall_64+0x40/0x210 [ 372.406262][ T8570] ? do_syscall_64+0x40/0x210 [ 372.406297][ T8570] do_syscall_64+0xf6/0x210 [ 372.406318][ T8570] ? clear_bhb_loop+0x45/0xa0 [ 372.406343][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.406361][ T8570] RIP: 0033:0x7fa80eb8e969 [ 372.406378][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.406393][ T8570] RSP: 002b:00007fa80fa6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 372.406410][ T8570] RAX: ffffffffffffffda RBX: 00007fa80edb6160 RCX: 00007fa80eb8e969 [ 372.406422][ T8570] RDX: 000000000000007f RSI: 000000000000010f RDI: 0000000000000003 [ 372.406432][ T8570] RBP: 00007fa80fa6b090 R08: 00002000000001c0 R09: 0000000000000000 [ 372.406443][ T8570] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 372.406452][ T8570] R13: 0000000000000001 R14: 00007fa80edb6160 R15: 00007ffda4043798 [ 372.406478][ T8570] [ 372.620654][ T8574] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 374.293878][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 374.774930][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 375.766019][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 376.943751][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 376.953060][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 376.961457][ T9] usb 3-1: Product: syz [ 376.994946][ T9] usb 3-1: Manufacturer: syz [ 377.011005][ T9] usb 3-1: SerialNumber: syz [ 377.058161][ T9] usb 3-1: config 0 descriptor?? [ 377.097428][ T9] usb 3-1: can't set config #0, error -71 [ 377.613456][ T9] usb 3-1: USB disconnect, device number 25 [ 377.776024][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 377.844939][ T5283] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 378.116947][ T5283] usb 2-1: Using ep0 maxpacket: 32 [ 378.468133][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.485041][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.499128][ T5283] usb 2-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 378.511304][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.678377][ T5283] usb 2-1: config 0 descriptor?? [ 379.167530][ T5283] usbhid 2-1:0.0: can't add hid device: -71 [ 379.202468][ T5283] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 379.242813][ T5283] usb 2-1: USB disconnect, device number 20 [ 379.588452][ T8637] binder: 8636:8637 ioctl c400941d 200000000180 returned -22 [ 379.599985][ T8637] binder: 8636:8637 ioctl c400941b 200000000580 returned -22 [ 379.615532][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.621952][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.707217][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 380.861869][ T10] usb 4-1: device descriptor read/64, error -71 [ 380.894890][ T5283] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 381.077770][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 381.088070][ T5283] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 381.901180][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 381.942630][ T5283] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 381.966766][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 381.975634][ T5283] usb 3-1: Product: syz [ 381.985352][ T5283] usb 3-1: Manufacturer: syz [ 381.990042][ T5283] usb 3-1: SerialNumber: syz [ 382.006358][ T5283] usb 3-1: config 0 descriptor?? [ 382.016488][ T8644] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 382.054940][ T10] usb 4-1: device descriptor read/64, error -71 [ 382.245610][ T10] usb usb4-port1: attempt power cycle [ 382.574921][ T8660] netlink: 'syz.1.697': attribute type 2 has an invalid length. [ 382.837838][ T5283] usb 3-1: USB disconnect, device number 26 [ 383.295185][ T976] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 383.934970][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 383.946455][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.971338][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.000748][ T976] usb 5-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 384.021436][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.054095][ T976] usb 5-1: config 0 descriptor?? [ 384.426274][ T7979] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 384.558021][ T8687] sctp: [Deprecated]: syz.0.705 (pid 8687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.558021][ T8687] Use struct sctp_sack_info instead [ 385.155212][ T7979] usb 4-1: Using ep0 maxpacket: 32 [ 385.175625][ T976] usbhid 5-1:0.0: can't add hid device: -71 [ 385.181727][ T976] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 385.264234][ T7979] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 385.286069][ T976] usb 5-1: USB disconnect, device number 23 [ 385.511870][ T7979] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 385.523114][ T7979] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 386.132312][ T7979] usb 4-1: Product: syz [ 386.212469][ T7979] usb 4-1: Manufacturer: syz [ 386.219647][ T7979] usb 4-1: SerialNumber: syz [ 386.241604][ T7979] usb 4-1: config 0 descriptor?? [ 386.250766][ T8678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 387.195646][ T976] usb 4-1: USB disconnect, device number 35 [ 388.428002][ T7979] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 388.635189][ T7979] usb 1-1: Using ep0 maxpacket: 32 [ 388.643277][ T7979] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 388.666794][ T7979] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 388.704750][ T7979] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 388.713772][ T7979] usb 1-1: Product: syz [ 388.881864][ T976] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 389.177364][ T7979] usb 1-1: Manufacturer: syz [ 389.182052][ T7979] usb 1-1: SerialNumber: syz [ 389.193410][ T7979] usb 1-1: config 0 descriptor?? [ 389.201098][ T8699] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 389.348629][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.708'. [ 389.375328][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 389.387135][ T976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 389.405760][ T976] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 389.422201][ T976] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 389.489157][ T5283] usb 1-1: USB disconnect, device number 20 [ 389.495840][ T976] usb 2-1: Product: syz [ 389.500056][ T976] usb 2-1: Manufacturer: syz [ 389.504670][ T976] usb 2-1: SerialNumber: syz [ 389.552188][ T976] usb 2-1: config 0 descriptor?? [ 389.660562][ T8715] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 390.119777][ T5867] usb 2-1: USB disconnect, device number 21 [ 394.164528][ T8777] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 396.615610][ T8791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.731'. [ 396.691047][ T8791] vlan2: entered promiscuous mode [ 396.700842][ T8791] bridge0: entered promiscuous mode [ 396.835029][ T976] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 397.267439][ T5868] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 397.475064][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 397.482389][ T976] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 397.499451][ T976] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 397.510620][ T976] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 397.683011][ T976] usb 3-1: Product: syz [ 397.698882][ T5868] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 397.713588][ T8807] syz_tun: entered allmulticast mode [ 397.719876][ T976] usb 3-1: Manufacturer: syz [ 397.733686][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.850690][ T5868] usb 4-1: Product: syz [ 397.947576][ T5868] usb 4-1: Manufacturer: syz [ 398.058542][ T5868] usb 4-1: SerialNumber: syz [ 398.295872][ T976] usb 3-1: SerialNumber: syz [ 398.318507][ T5868] usb 4-1: config 0 descriptor?? [ 398.342011][ T8800] syz_tun: left allmulticast mode [ 398.416396][ T976] usb 3-1: config 0 descriptor?? [ 398.424342][ T8794] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.702003][ T8816] netlink: zone id is out of range [ 398.708030][ T8816] netlink: zone id is out of range [ 398.714453][ T8816] netlink: zone id is out of range [ 398.724874][ T8816] netlink: zone id is out of range [ 398.751435][ T8816] netlink: zone id is out of range [ 398.757187][ T8816] netlink: zone id is out of range [ 398.763638][ T8816] netlink: zone id is out of range [ 398.794424][ T8816] netlink: zone id is out of range [ 398.801979][ T8816] netlink: zone id is out of range [ 399.005867][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 399.030965][ T7979] usb 3-1: USB disconnect, device number 27 [ 399.046173][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 399.288057][ T5868] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 399.364203][ T5868] asix 4-1:0.0: probe with driver asix failed with error -61 [ 399.682241][ T8816] netlink: set zone limit has 4 unknown bytes [ 400.033243][ T8829] netlink: 'syz.1.740': attribute type 10 has an invalid length. [ 400.105491][ T8829] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 400.735389][ T8842] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 400.796188][ T8838] sctp: [Deprecated]: syz.4.741 (pid 8838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.796188][ T8838] Use struct sctp_sack_info instead [ 401.696691][ T10] usb 4-1: USB disconnect, device number 36 [ 403.022554][ T8866] FAULT_INJECTION: forcing a failure. [ 403.022554][ T8866] name failslab, interval 1, probability 0, space 0, times 0 [ 403.035609][ T8866] CPU: 0 UID: 0 PID: 8866 Comm: syz.1.748 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 403.035637][ T8866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 403.035649][ T8866] Call Trace: [ 403.035658][ T8866] [ 403.035666][ T8866] dump_stack_lvl+0x189/0x250 [ 403.035702][ T8866] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.035727][ T8866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.035754][ T8866] ? __pfx__printk+0x10/0x10 [ 403.035816][ T8866] should_fail_ex+0x414/0x560 [ 403.035853][ T8866] should_failslab+0xa8/0x100 [ 403.035887][ T8866] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 403.035918][ T8866] ? __alloc_skb+0x112/0x2d0 [ 403.035946][ T8866] __alloc_skb+0x112/0x2d0 [ 403.035973][ T8866] alloc_skb_with_frags+0xca/0x890 [ 403.036013][ T8866] sock_alloc_send_pskb+0x857/0x990 [ 403.036039][ T8866] ? rcu_is_watching+0x15/0xb0 [ 403.036090][ T8866] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 403.036128][ T8866] ? unix_stream_sendmsg+0x168/0xb60 [ 403.036156][ T8866] unix_stream_sendmsg+0x45d/0xb60 [ 403.036193][ T8866] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 403.036226][ T8866] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.036248][ T8866] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 403.036269][ T8866] __sock_sendmsg+0x219/0x270 [ 403.036303][ T8866] ____sys_sendmsg+0x505/0x830 [ 403.036334][ T8866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.036370][ T8866] ? import_iovec+0x74/0xa0 [ 403.036400][ T8866] ___sys_sendmsg+0x21f/0x2a0 [ 403.036428][ T8866] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.036491][ T8866] ? __fget_files+0x2a/0x420 [ 403.036521][ T8866] ? __fget_files+0x3a0/0x420 [ 403.036571][ T8866] __x64_sys_sendmsg+0x19b/0x260 [ 403.036599][ T8866] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.036642][ T8866] ? do_syscall_64+0xba/0x210 [ 403.036670][ T8866] do_syscall_64+0xf6/0x210 [ 403.036693][ T8866] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 403.036715][ T8866] ? clear_bhb_loop+0x45/0xa0 [ 403.036740][ T8866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.036760][ T8866] RIP: 0033:0x7f18f2f8e969 [ 403.036779][ T8866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.036797][ T8866] RSP: 002b:00007f18f0db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.036819][ T8866] RAX: ffffffffffffffda RBX: 00007f18f31b6160 RCX: 00007f18f2f8e969 [ 403.036851][ T8866] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000007 [ 403.036864][ T8866] RBP: 00007f18f0db4090 R08: 0000000000000000 R09: 0000000000000000 [ 403.036877][ T8866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.036889][ T8866] R13: 0000000000000000 R14: 00007f18f31b6160 R15: 00007fff692d50a8 [ 403.036921][ T8866] [ 403.315044][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.944897][ T30] audit: type=1326 audit(1746133551.312:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.0.749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff926f8e969 code=0x0 [ 404.380995][ T976] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 404.626198][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 404.832285][ T976] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 404.916466][ T976] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 404.944904][ T976] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 404.953146][ T976] usb 4-1: Product: syz [ 404.965280][ T5283] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 405.051760][ T8888] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 405.543539][ T976] usb 4-1: Manufacturer: syz [ 405.548320][ T976] usb 4-1: SerialNumber: syz [ 405.566156][ T976] usb 4-1: config 0 descriptor?? [ 405.575508][ T8877] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 405.665913][ T5283] usb 1-1: device descriptor read/64, error -71 [ 405.838632][ T5870] usb 4-1: USB disconnect, device number 37 [ 406.163607][ T5283] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 406.375168][ T30] audit: type=1400 audit(1746133553.692:200): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=8889 comm="syz.2.757" path="socket:[19861]" dev="sockfs" ino=19861 [ 406.923753][ T30] audit: type=1400 audit(1746133553.712:201): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=8889 comm="syz.2.757" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 407.034905][ T5283] usb 1-1: device descriptor read/64, error -71 [ 407.325909][ T5283] usb usb1-port1: attempt power cycle [ 408.389399][ T5868] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 408.617489][ T5868] usb 4-1: device descriptor read/64, error -71 [ 409.005374][ T8914] FAULT_INJECTION: forcing a failure. [ 409.005374][ T8914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.019620][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.0.764 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 409.019641][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 409.019649][ T8914] Call Trace: [ 409.019655][ T8914] [ 409.019661][ T8914] dump_stack_lvl+0x189/0x250 [ 409.019685][ T8914] ? __lock_acquire+0xaac/0xd20 [ 409.019707][ T8914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.019726][ T8914] ? __pfx__printk+0x10/0x10 [ 409.019748][ T8914] ? __might_fault+0xb0/0x130 [ 409.019779][ T8914] should_fail_ex+0x414/0x560 [ 409.019806][ T8914] _copy_from_user+0x2d/0xb0 [ 409.019826][ T8914] vga_arb_write+0x101/0x1f10 [ 409.019849][ T8914] ? __pfx_vga_arb_write+0x10/0x10 [ 409.019873][ T8914] ? bpf_lsm_file_permission+0x9/0x20 [ 409.019890][ T8914] ? security_file_permission+0x75/0x290 [ 409.019914][ T8914] ? rw_verify_area+0x258/0x650 [ 409.019933][ T8914] ? __pfx_vga_arb_write+0x10/0x10 [ 409.019960][ T8914] vfs_write+0x27b/0xa90 [ 409.019988][ T8914] ? __pfx_vfs_write+0x10/0x10 [ 409.020021][ T8914] ? __fget_files+0x2a/0x420 [ 409.020044][ T8914] ? __fget_files+0x2a/0x420 [ 409.020064][ T8914] ? __fget_files+0x3a0/0x420 [ 409.020084][ T8914] ? __fget_files+0x2a/0x420 [ 409.020110][ T8914] ksys_write+0x145/0x250 [ 409.020127][ T8914] ? rcu_is_watching+0x15/0xb0 [ 409.020148][ T8914] ? __pfx_ksys_write+0x10/0x10 [ 409.020169][ T8914] ? do_syscall_64+0xba/0x210 [ 409.020189][ T8914] do_syscall_64+0xf6/0x210 [ 409.020204][ T8914] ? clear_bhb_loop+0x45/0xa0 [ 409.020222][ T8914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.020235][ T8914] RIP: 0033:0x7ff926f8e969 [ 409.020249][ T8914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.020261][ T8914] RSP: 002b:00007ff927d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 409.020275][ T8914] RAX: ffffffffffffffda RBX: 00007ff9271b5fa0 RCX: 00007ff926f8e969 [ 409.020286][ T8914] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000003 [ 409.020294][ T8914] RBP: 00007ff927d17090 R08: 0000000000000000 R09: 0000000000000000 [ 409.020303][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.020311][ T8914] R13: 0000000000000000 R14: 00007ff9271b5fa0 R15: 00007ffd8b0d95a8 [ 409.020332][ T8914] [ 409.075341][ T5868] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 409.394983][ T5868] usb 4-1: device descriptor read/64, error -71 [ 409.911029][ T5868] usb usb4-port1: attempt power cycle [ 410.355240][ T5868] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 410.378034][ T5868] usb 4-1: device descriptor read/8, error -71 [ 410.676261][ T5868] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 411.066052][ T7979] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 411.425238][ T5868] usb 4-1: device descriptor read/8, error -71 [ 411.550122][ T5868] usb usb4-port1: unable to enumerate USB device [ 411.840651][ T7979] usb 5-1: Using ep0 maxpacket: 32 [ 411.848162][ T7979] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 411.861676][ T7979] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 411.871528][ T7979] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 411.880343][ T7979] usb 5-1: Product: syz [ 411.886937][ T7979] usb 5-1: Manufacturer: syz [ 411.891586][ T7979] usb 5-1: SerialNumber: syz [ 411.899909][ T7979] usb 5-1: config 0 descriptor?? [ 411.912289][ T8928] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 412.720034][ T10] usb 5-1: USB disconnect, device number 24 [ 413.094897][ T5283] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 413.246809][ T5283] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 413.260038][ T5283] usb 3-1: config 0 has no interface number 0 [ 413.280100][ T5283] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 413.308743][ T5283] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 413.330211][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.365084][ T5283] usb 3-1: Product: syz [ 413.376746][ T5283] usb 3-1: Manufacturer: syz [ 413.391365][ T5283] usb 3-1: SerialNumber: syz [ 413.417561][ T8873] syz.1.751 (8873): drop_caches: 1 [ 413.437163][ T5283] usb 3-1: config 0 descriptor?? [ 413.481106][ T8945] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 413.518382][ T5283] usb-storage 3-1:0.20: USB Mass Storage device detected [ 413.591837][ T5283] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 414.500845][ T8945] team0: Port device bond0 removed [ 414.623603][ T8945] bridge_slave_0: left allmulticast mode [ 414.663428][ T8945] bridge_slave_0: left promiscuous mode [ 414.684062][ T8964] netlink: 'syz.2.773': attribute type 10 has an invalid length. [ 414.705765][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.727713][ T8945] bridge_slave_1: left allmulticast mode [ 414.743275][ T8945] bridge_slave_1: left promiscuous mode [ 415.308220][ T8969] sctp: [Deprecated]: syz.1.780 (pid 8969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.308220][ T8969] Use struct sctp_sack_info instead [ 415.391068][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.508453][ T8945] bond0: (slave bond_slave_0): Releasing backup interface [ 415.615392][ T8945] bond0: (slave bond_slave_1): Releasing backup interface [ 415.738218][ T8945] team0: Port device team_slave_0 removed [ 415.835545][ T8945] team0: Port device team_slave_1 removed [ 415.871444][ T8945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.885798][ T8945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.904759][ T8945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.922806][ T8945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.018978][ T8961] team0: Mode changed to "loadbalance" [ 416.035713][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.119969][ T8964] team0: Port device bond0 added [ 416.351130][ T5283] scsi host1: usb-storage 3-1:0.20 [ 416.855125][ T8992] overlayfs: missing 'workdir' [ 416.899246][ T5283] usb 3-1: USB disconnect, device number 28 [ 417.296135][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 417.349485][ T8996] binder: BINDER_SET_CONTEXT_MGR already set [ 417.380520][ T8996] binder: 8994:8996 ioctl 4018620d 200000000040 returned -16 [ 420.295158][ T9030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.795'. [ 421.414748][ T9037] overlayfs: missing 'workdir' [ 421.479720][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 421.544660][ T9042] binder: BINDER_SET_CONTEXT_MGR already set [ 421.581665][ T9042] binder: 9040:9042 ioctl 4018620d 200000000040 returned -16 [ 421.985816][ T9050] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 422.291007][ T9056] overlayfs: missing 'lowerdir' [ 425.260262][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 425.896545][ T9080] binder: BINDER_SET_CONTEXT_MGR already set [ 425.907377][ T9080] binder: 9078:9080 ioctl 4018620d 200000000040 returned -16 [ 427.217484][ T9097] overlayfs: missing 'lowerdir' [ 428.277107][ T49] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 428.396926][ T9106] netlink: zone id is out of range [ 428.402224][ T9106] netlink: zone id is out of range [ 428.408478][ T9106] netlink: zone id is out of range [ 428.417285][ T9106] netlink: zone id is out of range [ 428.448477][ T9106] netlink: zone id is out of range [ 428.453772][ T9106] netlink: zone id is out of range [ 428.460774][ T9106] netlink: zone id is out of range [ 428.487753][ T9106] netlink: zone id is out of range [ 428.495643][ T9106] netlink: zone id is out of range [ 428.760673][ T49] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 428.917766][ T49] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 428.930435][ T49] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 428.940292][ T49] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 428.955389][ T49] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 429.579572][ T49] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 429.589690][ T49] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 429.600733][ T49] usb 1-1: Product: syz [ 429.605307][ T49] usb 1-1: Manufacturer: syz [ 429.695148][ T9106] netlink: set zone limit has 4 unknown bytes [ 429.718977][ T49] cdc_wdm 1-1:1.0: skipping garbage [ 429.724261][ T49] cdc_wdm 1-1:1.0: skipping garbage [ 429.797265][ T49] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 429.988784][ T49] cdc_wdm 1-1:1.0: Unknown control protocol [ 431.927034][ T9122] sp0: Synchronizing with TNC [ 433.258716][ T976] usb 1-1: USB disconnect, device number 24 [ 433.655698][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 438.086325][ T9157] overlayfs: missing 'workdir' [ 439.696962][ T9174] netlink: zone id is out of range [ 439.702234][ T9174] netlink: zone id is out of range [ 439.708008][ T9174] netlink: zone id is out of range [ 439.715144][ T9174] netlink: zone id is out of range [ 439.733918][ T9174] netlink: zone id is out of range [ 439.744640][ T9174] netlink: zone id is out of range [ 439.751249][ T9174] netlink: zone id is out of range [ 439.763128][ T9174] netlink: zone id is out of range [ 439.770680][ T9174] netlink: zone id is out of range [ 440.059879][ T9174] netlink: set zone limit has 4 unknown bytes [ 441.058655][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.071555][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.393644][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 443.134096][ T9193] 9pnet_fd: Insufficient options for proto=fd [ 444.586315][ T976] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 444.877266][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 444.884057][ T976] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 444.897655][ T976] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 444.907578][ T976] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 444.927086][ T976] usb 3-1: Product: syz [ 444.958514][ T976] usb 3-1: Manufacturer: syz [ 445.007275][ T9213] netlink: 48 bytes leftover after parsing attributes in process `syz.1.853'. [ 445.016543][ T976] usb 3-1: SerialNumber: syz [ 445.082051][ T976] usb 3-1: config 0 descriptor?? [ 445.097004][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 445.116766][ T9203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 445.175022][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'. [ 445.220294][ T9215] vlan0: entered promiscuous mode [ 445.235442][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'. [ 445.405939][ T49] usb 3-1: USB disconnect, device number 29 [ 445.433047][ T9218] binder: BINDER_SET_CONTEXT_MGR already set [ 445.447713][ T9218] binder: 9216:9218 ioctl 4018620d 200000000040 returned -16 [ 445.529847][ T30] audit: type=1326 audit(1746133592.922:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 445.754584][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.855'. [ 445.776996][ T30] audit: type=1326 audit(1746133592.922:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 445.962856][ T30] audit: type=1326 audit(1746133592.932:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 445.985945][ T30] audit: type=1326 audit(1746133592.932:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 446.007715][ T30] audit: type=1326 audit(1746133592.932:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 446.030936][ T30] audit: type=1326 audit(1746133592.962:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 446.054498][ T30] audit: type=1326 audit(1746133592.962:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 446.077246][ T30] audit: type=1326 audit(1746133592.982:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 446.100065][ T30] audit: type=1326 audit(1746133592.982:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 446.601243][ T30] audit: type=1326 audit(1746133592.982:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80eb8e969 code=0x7ffc0000 [ 451.039663][ T9259] overlayfs: missing 'workdir' [ 451.554961][ T976] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 451.744582][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.791396][ T976] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 451.826372][ T976] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 451.836373][ T976] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 451.844509][ T976] usb 1-1: Manufacturer: syz [ 451.855921][ T976] usb 1-1: config 0 descriptor?? [ 452.622659][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.869'. [ 452.666580][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 453.027949][ T976] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 453.264894][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 453.274125][ T976] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 453.298416][ T976] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 453.310796][ T976] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 453.321201][ T976] usb 3-1: Product: syz [ 453.329655][ T976] usb 3-1: Manufacturer: syz [ 453.335158][ T976] usb 3-1: SerialNumber: syz [ 453.347444][ T976] usb 3-1: config 0 descriptor?? [ 453.370564][ T9274] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 453.414944][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 453.574892][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 453.629557][ T9] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 453.682486][ T5870] usb 3-1: USB disconnect, device number 30 [ 454.357453][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.371513][ T9] usb 2-1: Product: syz [ 454.383447][ T9] usb 2-1: Manufacturer: syz [ 454.391080][ T9] usb 2-1: SerialNumber: syz [ 454.411656][ T9] usb 2-1: config 0 descriptor?? [ 454.436513][ T9] usb 1-1: USB disconnect, device number 25 [ 457.508973][ T976] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 457.611295][ T9314] Cannot find add_set index 0 as target [ 457.704998][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 457.705044][ T30] audit: type=1400 audit(1746133605.002:271): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=9309 comm="syz.4.880" path="socket:[21589]" dev="sockfs" ino=21589 [ 458.244909][ T30] audit: type=1400 audit(1746133605.042:272): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=9309 comm="syz.4.880" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 458.320183][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 458.396236][ T976] usb 4-1: device descriptor read/all, error -71 [ 461.884259][ T9340] netlink: 'syz.3.885': attribute type 2 has an invalid length. [ 462.164277][ T9337] overlayfs: missing 'workdir' [ 462.570904][ T9343] net_ratelimit: 1 callbacks suppressed [ 462.570964][ T9343] netlink: zone id is out of range [ 462.587664][ T9343] netlink: zone id is out of range [ 462.593551][ T9343] netlink: zone id is out of range [ 462.604857][ T9343] netlink: zone id is out of range [ 462.624381][ T9343] netlink: zone id is out of range [ 462.629842][ T9343] netlink: zone id is out of range [ 462.635227][ T9343] netlink: zone id is out of range [ 462.726780][ T9343] netlink: zone id is out of range [ 462.828289][ T9343] netlink: zone id is out of range [ 464.404211][ T9343] netlink: set zone limit has 4 unknown bytes [ 464.859414][ T5868] usb 2-1: USB disconnect, device number 22 [ 464.937057][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.893'. [ 464.987220][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 465.205014][ T5283] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 465.995516][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 466.477579][ T5283] usb 3-1: config 2 has an invalid interface number: 179 but max is 0 [ 466.512850][ T5283] usb 3-1: config 2 has no interface number 0 [ 466.521313][ T5283] usb 3-1: config 2 interface 179 altsetting 184 has an invalid descriptor for endpoint zero, skipping [ 466.542680][ T5283] usb 3-1: config 2 interface 179 altsetting 184 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 467.647051][ T5283] usb 3-1: config 2 interface 179 has no altsetting 0 [ 467.805704][ T5283] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=4a.8b [ 467.868624][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.953309][ T5283] usb 3-1: can't set config #2, error -71 [ 467.995527][ T5283] usb 3-1: USB disconnect, device number 31 [ 468.856491][ T9400] sctp: [Deprecated]: syz.4.902 (pid 9400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.856491][ T9400] Use struct sctp_sack_info instead [ 473.965695][ T49] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 474.704580][ T9439] sctp: [Deprecated]: syz.4.914 (pid 9439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.704580][ T9439] Use struct sctp_sack_info instead [ 475.717372][ T49] usb 2-1: device descriptor read/64, error -71 [ 475.875251][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 476.025347][ T49] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 476.431348][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 477.179468][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 477.204907][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.375146][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 477.385407][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 477.425586][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.457356][ T5870] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 477.494416][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.510621][ T49] usb 2-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 477.703323][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.715839][ T49] usb 2-1: config 0 descriptor?? [ 477.775295][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 478.306128][ T5870] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 478.324183][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.336153][ T49] usb 2-1: can't set config #0, error -71 [ 478.458552][ T49] usb 2-1: USB disconnect, device number 24 [ 478.465019][ T5870] usb 5-1: config 0 has no interfaces? [ 478.470558][ T5870] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 478.540839][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.411697][ T5870] usb 5-1: config 0 descriptor?? [ 479.881201][ T10] usb 1-1: USB disconnect, device number 26 [ 480.428532][ T7979] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 480.493560][ T9476] sctp: [Deprecated]: syz.3.923 (pid 9476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.493560][ T9476] Use struct sctp_sack_info instead [ 481.145143][ T9481] program syz.0.925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.657417][ T7979] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.676658][ T7979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 481.705291][ T7979] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.726685][ T7979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 481.765365][ T7979] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 481.794447][ T7979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.804896][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 481.872618][ T5870] usb 5-1: can't set config #0, error -71 [ 481.946918][ T9491] sctp: [Deprecated]: syz.3.926 (pid 9491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.946918][ T9491] Use struct sctp_sack_info instead [ 482.117300][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 482.365256][ T10] usb 1-1: config 32 has an invalid interface number: 21 but max is 0 [ 482.368849][ T9470] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 482.379692][ T10] usb 1-1: config 32 has no interface number 0 [ 482.388067][ T10] usb 1-1: config 32 interface 21 has no altsetting 0 [ 482.397635][ T7979] hub 2-1:1.0: bad descriptor, ignoring hub [ 482.404390][ T5870] usb 5-1: USB disconnect, device number 25 [ 482.428413][ T7979] hub 2-1:1.0: probe with driver hub failed with error -5 [ 482.441418][ T7979] cdc_wdm 2-1:1.0: skipping garbage [ 482.446397][ T10] usb 1-1: New USB device found, idVendor=1608, idProduct=020d, bcdDevice=e7.07 [ 482.447981][ T7979] cdc_wdm 2-1:1.0: skipping garbage [ 482.473049][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.486816][ T7979] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 482.490262][ T10] usb 1-1: Product: syz [ 482.497694][ T10] usb 1-1: Manufacturer: syz [ 482.502556][ T10] usb 1-1: SerialNumber: syz [ 482.516853][ T7979] cdc_wdm 2-1:1.0: Unknown control protocol [ 482.721501][ T7979] usb 2-1: USB disconnect, device number 25 [ 482.935889][ T10] io_ti 1-1:32.21: required endpoints missing [ 483.475588][ T10] usb 1-1: USB disconnect, device number 27 [ 487.745427][ T9527] netlink: zone id is out of range [ 487.750991][ T9527] netlink: zone id is out of range [ 487.758103][ T9527] netlink: zone id is out of range [ 487.775603][ T9527] netlink: zone id is out of range [ 487.787736][ T9527] netlink: zone id is out of range [ 487.793003][ T9527] netlink: zone id is out of range [ 487.815249][ T9527] netlink: zone id is out of range [ 487.835409][ T9527] netlink: zone id is out of range [ 487.846111][ T9527] netlink: zone id is out of range [ 488.023474][ T9533] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 488.620544][ T9527] netlink: set zone limit has 4 unknown bytes [ 490.054968][ T9539] kAFS: unable to lookup cell '.,' [ 491.305923][ T9554] sctp: [Deprecated]: syz.1.942 (pid 9554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.305923][ T9554] Use struct sctp_sack_info instead [ 491.837866][ T55] non-paged memory [ 491.842036][ T55] list_del corruption, ffff888033099d00->next is LIST_POISON1 (dead000000000100) [ 491.852484][ T55] ------------[ cut here ]------------ [ 491.858374][ T55] kernel BUG at lib/list_debug.c:58! [ 491.866364][ T55] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 491.872663][ T55] CPU: 1 UID: 0 PID: 55 Comm: kworker/u9:0 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 491.884652][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 491.894716][ T55] Workqueue: hci4 hci_conn_timeout [ 491.899858][ T55] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 491.906909][ T55] Code: e0 fd c0 8b 48 89 de e8 20 5b 70 fc 90 0f 0b 4c 89 e7 e8 85 d0 48 fd 48 c7 c7 40 fe c0 8b 48 89 de 4c 89 e2 e8 03 5b 70 fc 90 <0f> 0b 4c 89 e7 e8 68 d0 48 fd 48 c7 c7 a0 fe c0 8b 48 89 de 4c 89 [ 491.926516][ T55] RSP: 0018:ffffc9000100fa20 EFLAGS: 00010246 [ 491.932583][ T55] RAX: 000000000000004e RBX: ffff888033099d00 RCX: d27ca0598b23d500 [ 491.940578][ T55] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 491.948559][ T55] RBP: ffffffff8a5f0cb0 R08: 0000000000000003 R09: 0000000000000004 [ 491.956644][ T55] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: dead000000000100 [ 491.964633][ T55] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 491.972622][ T55] FS: 0000000000000000(0000) GS:ffff888126200000(0000) knlGS:0000000000000000 [ 491.981569][ T55] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.988162][ T55] CR2: 0000200000029000 CR3: 0000000028690000 CR4: 00000000003526f0 [ 491.996151][ T55] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 492.004135][ T55] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 492.012127][ T55] Call Trace: [ 492.015421][ T55] [ 492.018363][ T55] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 492.024011][ T55] hci_cancel_connect_sync+0xc8/0x120 [ 492.029404][ T55] hci_abort_conn+0x191/0x330 [ 492.034101][ T55] ? process_scheduled_works+0x9ec/0x17a0 [ 492.039944][ T55] process_scheduled_works+0xadb/0x17a0 [ 492.045534][ T55] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.051547][ T55] worker_thread+0x8a0/0xda0 [ 492.056164][ T55] kthread+0x70e/0x8a0 [ 492.060243][ T55] ? __pfx_worker_thread+0x10/0x10 [ 492.065381][ T55] ? __pfx_kthread+0x10/0x10 [ 492.069984][ T55] ? __pfx_kthread+0x10/0x10 [ 492.074577][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.079789][ T55] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.084993][ T55] ? __pfx_kthread+0x10/0x10 [ 492.089593][ T55] ret_from_fork+0x4b/0x80 [ 492.094106][ T55] ? __pfx_kthread+0x10/0x10 [ 492.098699][ T55] ret_from_fork_asm+0x1a/0x30 [ 492.103491][ T55] [ 492.106543][ T55] Modules linked in: [ 492.111552][ T55] ---[ end trace 0000000000000000 ]--- [ 492.185907][ T55] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 492.197091][ T55] Code: e0 fd c0 8b 48 89 de e8 20 5b 70 fc 90 0f 0b 4c 89 e7 e8 85 d0 48 fd 48 c7 c7 40 fe c0 8b 48 89 de 4c 89 e2 e8 03 5b 70 fc 90 <0f> 0b 4c 89 e7 e8 68 d0 48 fd 48 c7 c7 a0 fe c0 8b 48 89 de 4c 89 [ 492.220170][ T55] RSP: 0018:ffffc9000100fa20 EFLAGS: 00010246 [ 492.252989][ T55] RAX: 000000000000004e RBX: ffff888033099d00 RCX: d27ca0598b23d500 [ 492.261245][ T55] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 492.270243][ T55] RBP: ffffffff8a5f0cb0 R08: 0000000000000003 R09: 0000000000000004 [ 492.278303][ T55] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: dead000000000100 [ 492.286351][ T55] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 492.294334][ T55] FS: 0000000000000000(0000) GS:ffff888126100000(0000) knlGS:0000000000000000 [ 492.303335][ T55] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.309967][ T55] CR2: 00007fbc91823d58 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 492.318006][ T55] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 492.326330][ T55] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 492.334345][ T55] Kernel panic - not syncing: Fatal exception [ 492.340810][ T55] Kernel Offset: disabled [ 492.345132][ T55] Rebooting in 86400 seconds..