last executing test programs: 1m21.390015123s ago: executing program 4 (id=7607): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_usb_connect(0x4, 0xbf, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cb54d9e7c60536904e7b010203010902ad0001000400000904030300d2d55700070000000000000095010d240f0100000000090004000b052415f7ff7f0fd71d2d59aeffab49ff4ce431ba3122d7239baea712705fa2bda32ede635678ddda44f31bdda1956557fb342b2974758d4d1c299a297dae9d8bb8c023b2fb4db5bfb91431136c53917d9672b7c35f5e7fead39d296e43ca6bec2cab33319b4eb0db1dea538e8ae19804a2b4c5d2954660f9ab8fb5c895feb77a67bcbaff"], 0x0) r1 = open(0x0, 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000002"], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYRES32=r2, @ANYBLOB="0200"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400), &(0x7f00000001c0)=0xc) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$cgroup_ro(r10, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000340)={0x20, 0x15, 0xc8, "a7212277e7727c0b4bd3e15019dca59e352fab1deb7e595151eff31bdf853395626af7c971493ab2f1d63df405cbc09a4a0d4493c01c784dbefa18365dac77fd3c855492ec7ed58c28940e9cadbd74615b83075200002ff5345a74cb0df2315c71ace6f7a8818ca5bdcccc00000000000085f68c067672cde56c2150fc92345e25664168d6325235052e455a5400ee924961a09c776554b5974f876dc0ab1a4115f53b806138305e137954636132bb36c84ab1cc0ef43b5d5c1cb1b7e3d2442814c62b0beaae4453"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) 1m17.788126241s ago: executing program 4 (id=7616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x3b, &(0x7f0000000040)={0x0, 0x2, 0x10100, 0x40000000, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r5, 0xd81, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r10 = signalfd(0xffffffffffffffff, &(0x7f0000000580)={[0x8]}, 0x8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001940)={0x0, 0x0, 0x0}, &(0x7f0000001980)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0, 0x0}, &(0x7f0000001a40)=0xc) r15 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r15, 0x1, &(0x7f00000002c0)={0x20}, 0x0) landlock_restrict_self(r15, 0x0) sendmmsg$unix(r3, &(0x7f0000004100)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000380)="4b88b33450104616ea5b6ce4995cc44317e8dffca9a29764398a7478092a282d869d0c99f682dcc789da4cb166eea8d866ed8878e33e54a28f08ce75ba5a76e68f3544dd293589c000c90655bb5de3deaed04b8963f33d3da8689ad3f6c903d67b9570bb182628dccf0e660e0243a72986bbd2f05d9d6e701d840b19e5cec8cf831f82216df60393e6b9de0672", 0x8d}], 0x2, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r9}}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, r5, r0, r3]}}], 0x50, 0x20000000}}, {{&(0x7f0000001740)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001900)=[{&(0x7f00000017c0)="578cd7de64b11f4795270dc2bf7dac37fb30ec25e382b4c8ac8a110b24099f0bf3aabcd8576b872b5306484acf0e2a155a76c0bcb173e2864359a37acd7f165243ffa08b89a72a33b9f5bcc218abff53", 0x50}, {&(0x7f0000001840)="ae55293282b1ddb249246fc6cf44c452fbef33d0e7f38c3105706c9aac0894f728c45c07fbe863094053c29d883cf0ef55b95b622b3d686e07baff23b53ded5a656c83fec9520ac3ce4a90d7164bb7caa17f8dffcc", 0x55}, {&(0x7f00000018c0)="6a7c851e27d382033a916a098d31f7837eb822b2bc7eff6a608bc068fd5ac4b18e5fab9844321d29a13e1c91", 0x2c}], 0x3, &(0x7f0000003b00)=[@cred={{0x1c, 0x1, 0x2, {r2, r12, r14}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r15]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r10, r4, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, r10]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r9}}}], 0xc8, 0x4004000}}, {{&(0x7f0000003c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003f80)=[{&(0x7f0000003c80)="7a4673c3c0b1690aeaa7186a1c64d76029eb45593c8a203fb1682a4b9c1ee45494b324581375d9c3c067bf9994275dc6a70e02011cd52426fbe3c70af02c940991da39830e85b553aa740e519294e9fadb7ee991df2187aa7144263e19b63ea2106e42789d88cf3ada1f8e02887c5ccb11d9581f056becf4523bb56f1ce8225b0a61f1ea93c1f0221c0927f23176386c3ba49accfa93d76494835b0c110796fcc51952b8d0ba2e9f8d5bd7f1f799d28984e16f595958c9a407414e67779cc79c4f3460d9226c26f2967a2d7b830603938e45", 0xd2}, {&(0x7f0000003d80)="50f9387f1f6773e30985654a3179be255db7bfeeb8bd4190e990641b94bf9f69a4742c9c41acd7e779515555ddf3f2616f6c123f82585c483ed0c20fcab19cb12df034f991d1dad14335f50332be508183c12bdeba7ee440b65fc1948f32eebabac5249b2c22d41118520e2cee84f125e9e324d998eabf1a07ff91ff6d4e95cd5c0a6661a27202e663dc3dac18e0735b384031ee0a3f9bf5b7c4c46248562ea1800657ccf6e658c68368cf39fcbe9cdb6a682c29b09c90e861916cdc5ae2cca2ba6b7165887b0b202f69f9a76aa7f7e88f5b05128010ebab64d199", 0xdb}, {&(0x7f0000003e80)="08471b0f146b817319764c23e8a1f7d247a45377576f53384c7440d7c183c0f4802f092c559f8923959d7c196b8b7f759405c85b7fac5f79eff5", 0x3a}, {&(0x7f0000003ec0)="923d885b68bbea3dd15f27bef8dfcafb4b7129161eddb6c4dad1a807a320cc616dd3bf49b78a1dde47b4e2a2e76aa03078f480f80eccfd79efc79befe876dd48360b141f0866b6914bc6", 0x4a}, {&(0x7f0000003f40)="a8f08f33e61fe4f60c702df094c2e3a1db4645e3f19c5090740903506fe1b7bb94d979d872300f473767f50d7a0c8e66be", 0x31}], 0x5, &(0x7f0000004000)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [r5, r5, 0xffffffffffffffff, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @rights={{0x18, 0x1, 0x1, [r1, r15]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r13}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r9}}}], 0xe0, 0x24000040}}], 0x3, 0x4044814) 1m16.831988052s ago: executing program 4 (id=7620): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast1, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x7fffffffffffffff, 0x0, 0x5, 0x2}, {0x538}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 56.241806191s ago: executing program 4 (id=7620): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast1, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x7fffffffffffffff, 0x0, 0x5, 0x2}, {0x538}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 37.161245657s ago: executing program 4 (id=7620): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast1, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x7fffffffffffffff, 0x0, 0x5, 0x2}, {0x538}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 13.135623686s ago: executing program 4 (id=7620): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast1, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x7fffffffffffffff, 0x0, 0x5, 0x2}, {0x538}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 10.591014722s ago: executing program 2 (id=7786): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000"], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.104047673s ago: executing program 2 (id=7791): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI2.0\x00\x00\x00\x00\x00\x00'], 0x13) 8.69992728s ago: executing program 2 (id=7793): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.743653789s ago: executing program 2 (id=7795): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000040)=[{0x9, 0xec11, 0x11a, &(0x7f00000003c0)="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"}], 0x1}) 7.591777553s ago: executing program 3 (id=7797): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x9, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000040), 0x55, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb3}}], 0x30}, 0x8000) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) close(0x3) syz_open_dev$vcsu(&(0x7f0000000100), 0x8001, 0x400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 6.817002413s ago: executing program 0 (id=7799): r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x3bfd, 0x80, 0x3, 0x205}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x4}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002"], 0x58}}, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000100)={0x3, r3, 0xffffffff, 0xff010000, 0xa, 0x1ff, 0x1}) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.559772182s ago: executing program 0 (id=7801): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0080003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x2c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) open$dir(0x0, 0x20a40, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 5.421005135s ago: executing program 3 (id=7802): r0 = syz_io_uring_setup(0x1361, &(0x7f0000000000)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, r4}}) r5 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, r5) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000006c0)=ANY=[], 0x158) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x90}, 0x1, 0xd}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) shutdown(r8, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x8, 0xa, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000158000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000d9b5c7790000000000bfc359d0b78e1a1d24f190f43fdf87a4f09a24a609902e626c826061b0cbd463132f1e9d36bec8fe9e5269c9c6fb35b0a80033132215ac97"], 0x48) recvmmsg(r11, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000600)=[{{&(0x7f0000000200)=@in={0x2, 0x4e21, @remote}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="9bee618ad14ee477f3b9610cca1b4a99cbe4a8cbe64ab88517fe462267890b463509ff3499387e10e463a5ea5d7d546e1436af1819766d46a9f0c9f18df451dc4929bf8ed0cd7d74c62d1c424f4f004219f7194e8c5e6deae6fe3caac400f6dda60f2156a7f1a97fe3dcf64e63fae6f25936a6fe776200bea1d02b991349c3cccd2ea6c92315053561d94276394e0b4a2acd8b75"}, {&(0x7f0000000500)="eb3c8f40b5f1c7b6099b5d6c3b2ef2648b97aa20de0481b84810a4d9495a3f96736d53adc8eea2dc9245f32d3f5db9d06e7dcd41313da1aed0aace72b410124d526ae1e0bd2ba1c248bf07affbcd5f44ce6e61c6be81ae61df4491d6eee50eedeff8fea45cfd8c65ce889e2b30621e015a4efdb1e77a8d2075f2a0c6f451d81a7a6aa88210c910699edef0eddf203ebba17af0daf9902571eaa45d347078c502307f4efc92c737d608ba2201da"}], 0x0, &(0x7f0000000780)=[{0x0, 0x9a, 0x8, "1c0f93b610e19f0708f78dc71fa2ddc477e3186662f73c860db540b895042f1986f2323615e6678a4593d827111a0231a872f9b32f44cee0647f35f3b197e81862ffa70e42960cafe749ffa8025887b1e66dee788a60b052a76526b55b364cc259ab4559cf0ed177f0d956bcd5ec095942562d8db0eb0886f600e6522baba8c730f699b7fe714b7e44865ccf01124afaa9ab5ffa748cdb766738459bf76ba0a13eaf04ccd44447ce74"}, {0x0, 0x3a, 0x4, "3a97afb75d76e147ab313beeca3b3ea0c3fcc680a6bb1885be15066fd7f3f5ec27756b2e7b403f540c8d56902b2805684ae31804f650f63cdcc725822545f343f9497efde0ce42d94d98fbca64f5529bbf8b7855f880452d0018f6637e1b5ed25a7a6aecb0c37312d828f5c2be0680f06e3d718f0ce9d9f11414147c2bdc8fb469547bc1f4abf29d7f61ab22716387a781201809240e06c02f0baf457f42f75e43d825a601988c066f436daf2217b378813d5761c8bbcea704b5309e4f"}, {0x0, 0x118, 0x9}, {0x0, 0x113, 0xfff, "b49cca096730e009a1736cd3050abc764cd0fb746faffe878ae96151c12a9576d3d374748e5bf6384b5e8d094e8d8c57724d91fa0957c68fecf0333f8b9accdca2e49cd39a181aae082ffb78df4f93a795f25bcc2ad2117fe750941e97af703472dd770d9e99dafcb756e9a9b3c92a27a9dae4360429ccbf242781437fa8c7d11c28113160daa7e6f87c4c6fe0bb357d191becd11e487a839fe58fe56e3bf9585bd990e3b1cd79a2e59cb897a56158e1cfc47c619ef445946379bda4c68a710f9dc2cf1faa4a4550e201ba087e85e7b70e7d042aa7"}, {0x0, 0x865331d91fbbd274, 0x9, "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"}, {0x0, 0x119, 0x2, "c0ba3ca6da3707ad52673792e0a7db9057d9f67957497ae8e7279757f67c7364e7eb9b66005f3a78e336"}, {0x0, 0x114, 0x200, "c8a1a5bf5d4064f151abadff8ec24a40e0f3413760a458d87f6e106410070c2cda6defc9de0697c831d55f0bbca0dd3a0b12184bb2130896293d92bedb76d55a5657e269d660a7939ff85f4b81bd1175ec05a6a21aa82965320dddfd57a48c980c3441e9f9abe12c07ca7077867838c6714b7a520aec0144affe4eb5ae005db59cd94bf3fb63cb66a471f7401ec5adac9a3cc68416a780a15f45a1b43539efb1722b7c1719054caab77ecb"}, {0x0, 0x117, 0x8, "37bd56bfe30a263eef3aedeca965e12697019c668214293e8c01473411fd8717589c5f"}, {0x0, 0x115, 0x4c, "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"}, {0x0, 0x10f, 0x3, "2e67c01544fdf3194908d8a9d0c3e934250ca58cccbc92e050134187e08f5a78dd2038a122cfdb197b91a16a215886b8468bf1a673c56e25c64bfee36d62918034aa0a039efbf1861ca8ce25c9e541c02b3805f9"}]}}], 0x40000000000029f, 0x4040014) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket(0x10, 0x3, 0x0) 5.35341179s ago: executing program 0 (id=7803): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI2.0\x00\x00\x00\x00\x00\x00'], 0x13) 5.183901709s ago: executing program 0 (id=7805): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805510, 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000000005000300000000001500020001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) 5.136335413s ago: executing program 2 (id=7807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x0, 0x62}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) unshare(0x2040400) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x12020, 0x0) 4.138467809s ago: executing program 2 (id=7808): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2b, 0x9, 0x1, 0x401, 0x18, @empty, @mcast1, 0x80, 0x8000, 0x7, 0x416f}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x1, 0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="00005e77aed800f0ae7b8306", @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r1, 0x29, 0x2, 0x3, 0x2, 0x76, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x20, 0x10, 0x40000, 0x1}}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f00000003c0)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'sit0\x00', @link_local}) 4.003466301s ago: executing program 3 (id=7809): socketpair$nbd(0x1, 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = dup2(r4, r0) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x2, 0xa62, 0x5}}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 3.418099075s ago: executing program 0 (id=7810): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x6, 0x16, 0x192, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) syz_usb_control_io(r4, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8d04"]) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f00000002c0)={0x40, 0x14, 0x3, "09051d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r9}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000300)=0x822) 3.286223684s ago: executing program 1 (id=7811): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000300000000000000000000000000000200000000000000000000000602"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0xa05, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) 2.847782857s ago: executing program 1 (id=7812): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x4, 0x0, 0x8, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffd, 0x0, 0x5}, &(0x7f00000000c0)={0x1f, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4089, 0x5, 0x200000000000049a) fstat(r0, &(0x7f00000000c0)) setresuid(0x0, 0xee00, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000258eccca00dc20070000000000000000000000001c0000ff8e13fdae", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioperm(0x0, 0x7, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70304000000000085e6a39e781a98fecd67784529236e729f00000005000000bf0900000000000055090100000000009500000000000000bf020000000000007b9af8ff00000000b609080089ffffff7baaf0ff00000000bf8700000000000007090009acbc8a958ab06a7400f8ffffffbfa400000000000007040000f0ffffffb70200", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7050000080000004600020076004000bf980000000000007e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x800046, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRES16]) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x4e20, 0x20, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0x2, @in=@remote, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x1}}, 0xe8) io_uring_enter(0xffffffffffffffff, 0x7087, 0x60, 0x19, &(0x7f00000001c0)={[0x3]}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2.742236455s ago: executing program 1 (id=7813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x28}}, 0x48004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)={0x800, 0x7, 0x4, 0x1, 0xa, 0x0, [{0x2, 0x7, 0x40, '\x00', 0x500}, {0x9, 0x7fff, 0x0, '\x00', 0x1000}, {0x1b8c, 0x200, 0x0, '\x00', 0x1}, {0x0, 0x1, 0x6, '\x00', 0x2201}, {0x3, 0xfffffffffffffff8, 0x3, '\x00', 0x8}, {0x103, 0x2, 0xfffffffffffffffd, '\x00', 0x200e}, {0x7, 0x8, 0x8, '\x00', 0x100}, {0x0, 0x9, 0xf023, '\x00', 0x3b87}, {0xec62, 0x6, 0x9, '\x00', 0x900}, {0x40008, 0xd, 0x40, '\x00', 0x100}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000003d0007010000000000000000047c0000040008800c00018006000600800ad0d30c000280050019"], 0x30}}, 0xc000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) getpriority(0x1, r0) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000800)={0x8, 0x120, 0xfa00, {0x0, {0x5, 0x7, "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", 0x4, 0x8, 0x81, 0x2, 0x4, 0x5, 0x2}}}, 0x128) 2.713492517s ago: executing program 3 (id=7814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x28}}, 0x48004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)={0x800, 0x7, 0x4, 0x1, 0xa, 0x0, [{0x2, 0x7, 0x40, '\x00', 0x500}, {0x9, 0x7fff, 0x0, '\x00', 0x1000}, {0x1b8c, 0x200, 0x0, '\x00', 0x1}, {0x0, 0x1, 0x6, '\x00', 0x2201}, {0x3, 0xfffffffffffffff8, 0x3, '\x00', 0x8}, {0x103, 0x2, 0xfffffffffffffffd, '\x00', 0x200e}, {0x7, 0x8, 0x8, '\x00', 0x100}, {0x0, 0x9, 0xf023, '\x00', 0x3b87}, {0xec62, 0x6, 0x9, '\x00', 0x900}, {0x40008, 0xd, 0x40, '\x00', 0x100}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000003d0007010000000000000000047c0000040008800c00018006000600800ad0d30c000280050019"], 0x30}}, 0xc000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) getpriority(0x1, r0) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000800)={0x8, 0x120, 0xfa00, {0x0, {0x5, 0x7, "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", 0x4, 0x8, 0x81, 0x2, 0x4, 0x5, 0x2}}}, 0x128) 1.517996118s ago: executing program 1 (id=7815): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI2.0\x00\x00\x00\x00\x00\x00'], 0x13) 592.124342ms ago: executing program 1 (id=7816): r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x40000000000001, {0x1, 0xf0, 0x3}, 0xfe}, 0x18) (fail_nth: 1) 511.887944ms ago: executing program 3 (id=7817): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000009"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r2], 0x50) close(r2) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) (async) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r1, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) recvmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000000) close_range(r0, 0xffffffffffffffff, 0x0) 388.218728ms ago: executing program 3 (id=7818): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) pipe2$9p(&(0x7f0000001900), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 75.703783ms ago: executing program 0 (id=7819): r0 = syz_io_uring_setup(0x1361, &(0x7f0000000000)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, r4}}) r5 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, r5) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000006c0)=ANY=[], 0x158) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x90}, 0x1, 0xd}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) shutdown(r8, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x8, 0xa, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000158000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000d9b5c7790000000000bfc359d0b78e1a1d24f190f43fdf87a4f09a24a609902e626c826061b0cbd463132f1e9d36bec8fe9e5269c9c6fb35b0a80033132215ac97"], 0x48) recvmmsg(r11, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000600)=[{{&(0x7f0000000200)=@in={0x2, 0x4e21, @remote}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="9bee618ad14ee477f3b9610cca1b4a99cbe4a8cbe64ab88517fe462267890b463509ff3499387e10e463a5ea5d7d546e1436af1819766d46a9f0c9f18df451dc4929bf8ed0cd7d74c62d1c424f4f004219f7194e8c5e6deae6fe3caac400f6dda60f2156a7f1a97fe3dcf64e63fae6f25936a6fe776200bea1d02b991349c3cccd2ea6c92315053561d94276394e0b4a2acd8b75"}, {&(0x7f0000000500)="eb3c8f40b5f1c7b6099b5d6c3b2ef2648b97aa20de0481b84810a4d9495a3f96736d53adc8eea2dc9245f32d3f5db9d06e7dcd41313da1aed0aace72b410124d526ae1e0bd2ba1c248bf07affbcd5f44ce6e61c6be81ae61df4491d6eee50eedeff8fea45cfd8c65ce889e2b30621e015a4efdb1e77a8d2075f2a0c6f451d81a7a6aa88210c910699edef0eddf203ebba17af0daf9902571eaa45d347078c502307f4efc92c737d608ba2201da"}], 0x0, &(0x7f0000000780)=[{0x0, 0x9a, 0x8, "1c0f93b610e19f0708f78dc71fa2ddc477e3186662f73c860db540b895042f1986f2323615e6678a4593d827111a0231a872f9b32f44cee0647f35f3b197e81862ffa70e42960cafe749ffa8025887b1e66dee788a60b052a76526b55b364cc259ab4559cf0ed177f0d956bcd5ec095942562d8db0eb0886f600e6522baba8c730f699b7fe714b7e44865ccf01124afaa9ab5ffa748cdb766738459bf76ba0a13eaf04ccd44447ce74"}, {0x0, 0x3a, 0x4, "3a97afb75d76e147ab313beeca3b3ea0c3fcc680a6bb1885be15066fd7f3f5ec27756b2e7b403f540c8d56902b2805684ae31804f650f63cdcc725822545f343f9497efde0ce42d94d98fbca64f5529bbf8b7855f880452d0018f6637e1b5ed25a7a6aecb0c37312d828f5c2be0680f06e3d718f0ce9d9f11414147c2bdc8fb469547bc1f4abf29d7f61ab22716387a781201809240e06c02f0baf457f42f75e43d825a601988c066f436daf2217b378813d5761c8bbcea704b5309e4f"}, {0x0, 0x118, 0x9}, {0x0, 0x113, 0xfff, "b49cca096730e009a1736cd3050abc764cd0fb746faffe878ae96151c12a9576d3d374748e5bf6384b5e8d094e8d8c57724d91fa0957c68fecf0333f8b9accdca2e49cd39a181aae082ffb78df4f93a795f25bcc2ad2117fe750941e97af703472dd770d9e99dafcb756e9a9b3c92a27a9dae4360429ccbf242781437fa8c7d11c28113160daa7e6f87c4c6fe0bb357d191becd11e487a839fe58fe56e3bf9585bd990e3b1cd79a2e59cb897a56158e1cfc47c619ef445946379bda4c68a710f9dc2cf1faa4a4550e201ba087e85e7b70e7d042aa7"}, {0x0, 0x865331d91fbbd274, 0x9, "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"}, {0x0, 0x119, 0x2, "c0ba3ca6da3707ad52673792e0a7db9057d9f67957497ae8e7279757f67c7364e7eb9b66005f3a78e336"}, {0x0, 0x114, 0x200, "c8a1a5bf5d4064f151abadff8ec24a40e0f3413760a458d87f6e106410070c2cda6defc9de0697c831d55f0bbca0dd3a0b12184bb2130896293d92bedb76d55a5657e269d660a7939ff85f4b81bd1175ec05a6a21aa82965320dddfd57a48c980c3441e9f9abe12c07ca7077867838c6714b7a520aec0144affe4eb5ae005db59cd94bf3fb63cb66a471f7401ec5adac9a3cc68416a780a15f45a1b43539efb1722b7c1719054caab77ecb"}, {0x0, 0x117, 0x8, "37bd56bfe30a263eef3aedeca965e12697019c668214293e8c01473411fd8717589c5f"}, {0x0, 0x115, 0x4c, "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"}, {0x0, 0x10f, 0x3, "2e67c01544fdf3194908d8a9d0c3e934250ca58cccbc92e050134187e08f5a78dd2038a122cfdb197b91a16a215886b8468bf1a673c56e25c64bfee36d62918034aa0a039efbf1861ca8ce25c9e541c02b3805f9"}]}}], 0x40000000000029f, 0x4040014) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=7820): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x9, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000040), 0x55, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb3}}], 0x30}, 0x8000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) close(0x3) syz_open_dev$vcsu(&(0x7f0000000100), 0x8001, 0x400) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 00000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2518.290670][T31588] R13: 0000000000000000 R14: 00007fdedb5b5fa0 R15: 00007ffe54777da8 [ 2518.290697][T31588] [ 2518.491684][T12881] usb 3-1: config 0 has an invalid interface number: 91 but max is 0 [ 2518.522863][T12881] usb 3-1: config 0 has no interface number 0 [ 2518.586565][T31591] netlink: 'syz.3.7132': attribute type 1 has an invalid length. [ 2518.721382][T31591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7132'. [ 2518.880643][T12881] usb 3-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16 [ 2518.894215][T12881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2518.927186][T12881] usb 3-1: Product: syz [ 2518.932155][T12881] usb 3-1: Manufacturer: syz [ 2518.994661][T12881] usb 3-1: SerialNumber: syz [ 2519.017654][T12881] usb 3-1: config 0 descriptor?? [ 2519.243627][ T24] usb 3-1: USB disconnect, device number 80 [ 2520.368194][T31605] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2520.426668][T31601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7135'. [ 2521.516842][T31615] netlink: 'syz.2.7138': attribute type 1 has an invalid length. [ 2521.524872][T31615] netlink: 'syz.2.7138': attribute type 2 has an invalid length. [ 2522.079708][T31625] FAULT_INJECTION: forcing a failure. [ 2522.079708][T31625] name failslab, interval 1, probability 0, space 0, times 0 [ 2522.125369][T31625] CPU: 1 UID: 0 PID: 31625 Comm: syz.2.7144 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2522.125396][T31625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2522.125407][T31625] Call Trace: [ 2522.125414][T31625] [ 2522.125422][T31625] dump_stack_lvl+0x189/0x250 [ 2522.125454][T31625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2522.125478][T31625] ? __pfx__printk+0x10/0x10 [ 2522.125510][T31625] ? __pfx___might_resched+0x10/0x10 [ 2522.125536][T31625] ? fs_reclaim_acquire+0x7d/0x100 [ 2522.125562][T31625] should_fail_ex+0x414/0x560 [ 2522.125585][T31625] should_failslab+0xa8/0x100 [ 2522.125605][T31625] __kmalloc_cache_noprof+0x70/0x3d0 [ 2522.125631][T31625] ? assoc_array_delete+0xc1/0xf90 [ 2522.125661][T31625] assoc_array_delete+0xc1/0xf90 [ 2522.125686][T31625] ? key_unlink+0xb3/0x320 [ 2522.125716][T31625] ? __pfx_assoc_array_delete+0x10/0x10 [ 2522.125738][T31625] ? down_write+0x162/0x1f0 [ 2522.125763][T31625] ? __pfx_down_write+0x10/0x10 [ 2522.125789][T31625] ? __pfx_lookup_user_key+0x10/0x10 [ 2522.125817][T31625] key_unlink+0xcd/0x320 [ 2522.125835][T31625] ? __pfx_keyring_search_iterator+0x10/0x10 [ 2522.125852][T31625] ? __pfx_key_unlink+0x10/0x10 [ 2522.125868][T31625] ? vfs_write+0x8d8/0xa90 [ 2522.125901][T31625] keyctl_keyring_unlink+0x11f/0x160 [ 2522.125924][T31625] __se_sys_keyctl+0x1ba/0x910 [ 2522.125948][T31625] ? __pfx___se_sys_keyctl+0x10/0x10 [ 2522.125973][T31625] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2522.126000][T31625] ? __fget_files+0x3a0/0x420 [ 2522.126024][T31625] ? fput+0xa0/0xd0 [ 2522.126044][T31625] ? ksys_write+0x1f0/0x250 [ 2522.126066][T31625] ? rcu_is_watching+0x15/0xb0 [ 2522.126100][T31625] ? do_syscall_64+0xba/0x210 [ 2522.126121][T31625] ? __x64_sys_keyctl+0x20/0xc0 [ 2522.126152][T31625] do_syscall_64+0xf6/0x210 [ 2522.126175][T31625] ? clear_bhb_loop+0x60/0xb0 [ 2522.126198][T31625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.126216][T31625] RIP: 0033:0x7f4a0658e969 [ 2522.126232][T31625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2522.126248][T31625] RSP: 002b:00007f4a073cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2522.126267][T31625] RAX: ffffffffffffffda RBX: 00007f4a067b5fa0 RCX: 00007f4a0658e969 [ 2522.126281][T31625] RDX: 0000000001ff9f36 RSI: 00000000385dece8 RDI: 0000000000000009 [ 2522.126292][T31625] RBP: 00007f4a073cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2522.126304][T31625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2522.126314][T31625] R13: 0000000000000000 R14: 00007f4a067b5fa0 R15: 00007ffffb1d13c8 [ 2522.126343][T31625] [ 2522.397160][ T920] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 2522.568780][ T920] usb 2-1: config 54 has an invalid interface number: 154 but max is 0 [ 2522.587307][ T920] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 2522.688120][T31627] netlink: 'syz.2.7145': attribute type 1 has an invalid length. [ 2522.720919][T31633] netlink: 'syz.3.7147': attribute type 21 has an invalid length. [ 2522.740698][ T920] usb 2-1: config 54 has no interface number 0 [ 2522.759668][ T920] usb 2-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 2522.792283][ T920] usb 2-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2522.793362][T31627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7145'. [ 2522.829904][ T920] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 2522.858419][ T920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2522.870505][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2522.870519][ T30] audit: type=1326 audit(2000000307.560:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31635 comm="syz.0.7146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdedb38e969 code=0x0 [ 2522.913271][ T920] usb 2-1: Product: syz [ 2522.918036][ T920] usb 2-1: Manufacturer: syz [ 2522.922854][ T920] usb 2-1: SerialNumber: syz [ 2522.961179][T31633] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2523.672977][T31648] netlink: 828 bytes leftover after parsing attributes in process `syz.3.7150'. [ 2523.703675][ T920] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2523.730379][ T920] usb 2-1: USB disconnect, device number 90 [ 2523.731168][T30715] usb 2-1: Failed to submit usb control message: -19 [ 2523.766985][T30715] usb 2-1: unable to send the bmi data to the device: -19 [ 2523.777267][T30715] usb 2-1: unable to get target info from device [ 2523.783696][T30715] usb 2-1: could not get target info (-19) [ 2523.789885][T30715] usb 2-1: could not probe fw (-19) [ 2525.336837][T31671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7155'. [ 2525.399851][T31678] netlink: 'syz.3.7157': attribute type 1 has an invalid length. [ 2525.407932][T31678] netlink: 'syz.3.7157': attribute type 2 has an invalid length. [ 2526.286758][ T9] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 2526.609387][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2526.621500][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2526.637721][ T9] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2526.766923][ T9] usb 3-1: Product: syz [ 2526.786708][ T9] usb 3-1: Manufacturer: syz [ 2526.807221][ T9] usb 3-1: SerialNumber: syz [ 2526.841622][T31688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7159'. [ 2527.150334][ T9] usb 3-1: config 0 descriptor?? [ 2527.196954][ T9] gspca_main: conex-2.14.0 probing 0572:0041 [ 2527.874315][ T9] usb 3-1: USB disconnect, device number 81 [ 2529.170068][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.435462][T31728] FAULT_INJECTION: forcing a failure. [ 2530.435462][T31728] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.448650][T31728] CPU: 0 UID: 0 PID: 31728 Comm: syz.3.7170 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2530.448675][T31728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2530.448687][T31728] Call Trace: [ 2530.448695][T31728] [ 2530.448703][T31728] dump_stack_lvl+0x189/0x250 [ 2530.448734][T31728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2530.448759][T31728] ? __pfx__printk+0x10/0x10 [ 2530.448787][T31728] ? fs_reclaim_acquire+0x7d/0x100 [ 2530.448816][T31728] should_fail_ex+0x414/0x560 [ 2530.448839][T31728] should_failslab+0xa8/0x100 [ 2530.448858][T31728] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2530.448884][T31728] ? getname_flags+0xb8/0x540 [ 2530.448906][T31728] getname_flags+0xb8/0x540 [ 2530.448927][T31728] do_sys_openat2+0xbc/0x1c0 [ 2530.448950][T31728] ? __pfx_do_sys_openat2+0x10/0x10 [ 2530.448974][T31728] ? ksys_write+0x1f0/0x250 [ 2530.449005][T31728] __x64_sys_openat+0x138/0x170 [ 2530.449031][T31728] do_syscall_64+0xf6/0x210 [ 2530.449055][T31728] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2530.449072][T31728] ? clear_bhb_loop+0x60/0xb0 [ 2530.449093][T31728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2530.449111][T31728] RIP: 0033:0x7f7d4198d2d0 [ 2530.449126][T31728] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 2530.449141][T31728] RSP: 002b:00007f7d42899f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2530.449160][T31728] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7d4198d2d0 [ 2530.449172][T31728] RDX: 0000000000000002 RSI: 00007f7d42899fa0 RDI: 00000000ffffff9c [ 2530.449184][T31728] RBP: 00007f7d42899fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2530.449196][T31728] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2530.449207][T31728] R13: 0000000000000000 R14: 00007f7d41bb6160 R15: 00007ffcfb8c1dc8 [ 2530.449235][T31728] [ 2531.818706][T31738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7173'. [ 2531.857264][T31739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7177'. [ 2532.807204][ T9] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 2533.088754][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2533.642615][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2533.657185][ T9] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2533.665596][ T9] usb 2-1: Product: syz [ 2533.670164][ T9] usb 2-1: Manufacturer: syz [ 2533.677019][ T9] usb 2-1: SerialNumber: syz [ 2533.689219][ T9] usb 2-1: config 0 descriptor?? [ 2533.706767][ T9] gspca_main: conex-2.14.0 probing 0572:0041 [ 2534.566927][ T9] usb 2-1: USB disconnect, device number 91 [ 2535.230816][T31785] lo speed is unknown, defaulting to 1000 [ 2535.458304][T31790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7190'. [ 2535.859320][T31795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7192'. [ 2536.929621][T31808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7195'. [ 2537.370217][ T24] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 2537.623693][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2537.649265][ T24] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2537.659738][ T24] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2537.675801][ T24] usb 5-1: Product: syz [ 2537.694884][ T24] usb 5-1: Manufacturer: syz [ 2537.780698][ T24] usb 5-1: SerialNumber: syz [ 2537.826094][ T24] usb 5-1: config 0 descriptor?? [ 2537.879713][ T24] gspca_main: conex-2.14.0 probing 0572:0041 [ 2538.457678][ T9] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 2538.693529][ T24] usb 5-1: USB disconnect, device number 61 [ 2538.791486][ T30] audit: type=1326 audit(2000000323.480:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31829 comm="syz.3.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4198e969 code=0x7ffc0000 [ 2538.815001][T31830] netlink: 'syz.3.7202': attribute type 13 has an invalid length. [ 2538.842217][ T9] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 2538.875145][ T9] usb 3-1: config 0 has no interface number 0 [ 2538.881837][ T30] audit: type=1326 audit(2000000323.480:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31829 comm="syz.3.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7d4198e969 code=0x7ffc0000 [ 2538.912140][ T9] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2538.922104][ T9] usb 3-1: config 0 interface 200 has no altsetting 0 [ 2538.932979][ T30] audit: type=1326 audit(2000000323.480:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31829 comm="syz.3.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4198e969 code=0x7ffc0000 [ 2538.975966][ T9] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 2539.006628][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2539.017207][ T30] audit: type=1326 audit(2000000323.480:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31829 comm="syz.3.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7d4198e969 code=0x7ffc0000 [ 2539.045485][ T9] usb 3-1: Product: syz [ 2539.055513][ T9] usb 3-1: Manufacturer: syz [ 2539.067301][ T9] usb 3-1: SerialNumber: syz [ 2539.072540][ T30] audit: type=1326 audit(2000000323.480:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31829 comm="syz.3.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4198e969 code=0x7ffc0000 [ 2539.101915][ T9] usb 3-1: config 0 descriptor?? [ 2539.346993][T31823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2539.364226][ T30] audit: type=1326 audit(2000000323.480:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31829 comm="syz.3.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f7d4198e969 code=0x7ffc0000 [ 2539.375286][T31823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2539.414737][ T9] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input64 [ 2539.507864][ T30] audit: type=1326 audit(2000000323.480:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31829 comm="syz.3.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4198e969 code=0x7ffc0000 [ 2539.534012][ T30] audit: type=1326 audit(2000000323.480:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31829 comm="syz.3.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d4198e969 code=0x7ffc0000 [ 2539.574792][ T30] audit: type=1326 audit(2000000323.480:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31829 comm="syz.3.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4198e969 code=0x7ffc0000 [ 2539.612307][ T30] audit: type=1326 audit(2000000323.480:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31829 comm="syz.3.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7d4198e969 code=0x7ffc0000 [ 2539.689198][ T9] usb 3-1: USB disconnect, device number 82 [ 2539.983480][T31842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7206'. [ 2540.340572][T31852] fuse: Bad value for 'fd' [ 2541.378224][T31872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7215'. [ 2541.727507][ T24] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 2541.915418][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2541.940454][ T24] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2541.949682][T12881] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2541.962793][ T24] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2541.991069][ T24] usb 2-1: Product: syz [ 2541.999501][ T24] usb 2-1: Manufacturer: syz [ 2542.010219][ T24] usb 2-1: SerialNumber: syz [ 2542.025175][ T24] usb 2-1: config 0 descriptor?? [ 2542.046417][ T24] gspca_main: conex-2.14.0 probing 0572:0041 [ 2542.247811][T12881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2542.268380][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 2542.275724][T12881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2542.286503][T12881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2542.321429][T12881] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2542.337311][T12881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.362262][T12881] usb 1-1: config 0 descriptor?? [ 2542.482368][ T24] usb 2-1: USB disconnect, device number 92 [ 2543.213733][T12881] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 2543.480749][T12881] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2543.580425][T12881] usb 1-1: USB disconnect, device number 46 [ 2543.634653][T31887] netlink: 'syz.1.7219': attribute type 21 has an invalid length. [ 2543.766134][T31885] fido_id[31885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2543.802529][T31887] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2544.545567][T31902] netlink: 'syz.3.7224': attribute type 1 has an invalid length. [ 2544.624496][T31902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7224'. [ 2544.697227][T12881] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2544.867200][T12881] usb 1-1: Using ep0 maxpacket: 32 [ 2544.885840][T12881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2544.916341][T12881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2544.946575][T12881] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 2544.967280][T12881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2544.988801][T12881] usb 1-1: Product: syz [ 2544.992995][T12881] usb 1-1: Manufacturer: syz [ 2545.017151][T12881] usb 1-1: SerialNumber: syz [ 2545.044034][T12881] usb 1-1: config 0 descriptor?? [ 2545.164711][T31916] [U] .Ž§hòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 2545.283085][T31900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2545.303224][T31916] [U] …¥` w*ÌÀBØBOLhUÇ [ 2545.309762][T12881] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 2545.318693][T12881] f6 f2 2c fa 89 99 d8 d7 [ 2545.323370][T12881] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 2545.514228][T20175] usb 1-1: USB disconnect, device number 47 [ 2545.584771][T31919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7229'. [ 2545.909268][T31913] [U] w$·nÓ|ÝÅ#‘±%o.z\ïÌ [ 2545.927142][T20175] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 2546.129505][T20175] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2546.142440][T20175] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2546.158400][T20175] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2546.170775][T20175] usb 3-1: Product: syz [ 2546.175037][T20175] usb 3-1: Manufacturer: syz [ 2546.181058][T20175] usb 3-1: SerialNumber: syz [ 2546.313678][T20175] usb 3-1: config 0 descriptor?? [ 2546.462641][T20175] gspca_main: conex-2.14.0 probing 0572:0041 [ 2546.769697][T20175] usb 3-1: USB disconnect, device number 83 [ 2547.165917][T31938] lo: entered promiscuous mode [ 2547.171364][T31938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7234'. [ 2547.181783][T31938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2548.181438][T31946] Failed to get privilege flags for destination (handle=0x2:0x7) [ 2550.777469][T31952] netlink: 'syz.0.7236': attribute type 1 has an invalid length. [ 2550.863450][T31951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7236'. [ 2551.506514][T31950] netlink: 'syz.4.7238': attribute type 1 has an invalid length. [ 2551.571598][T31950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7238'. [ 2553.645375][T31982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7247'. [ 2553.938858][T31992] netlink: 'syz.2.7250': attribute type 1 has an invalid length. [ 2553.978985][T11888] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 2554.061894][T31992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7250'. [ 2554.360127][T11888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2554.395377][T11888] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2554.429421][T11888] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2554.446556][T11888] usb 4-1: Product: syz [ 2554.477597][T31996] netlink: 'syz.4.7251': attribute type 1 has an invalid length. [ 2554.501219][T11888] usb 4-1: Manufacturer: syz [ 2554.527819][T11888] usb 4-1: SerialNumber: syz [ 2554.582172][T11888] usb 4-1: config 0 descriptor?? [ 2554.583133][T31996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7251'. [ 2554.594378][T11888] gspca_main: conex-2.14.0 probing 0572:0041 [ 2555.334570][T11888] usb 4-1: USB disconnect, device number 71 [ 2556.841641][T11888] libceph: connect (1)[b::]:6789 error -101 [ 2556.858680][T11888] libceph: mon0 (1)[b::]:6789 connect error [ 2556.906038][T32026] netlink: 'syz.3.7258': attribute type 1 has an invalid length. [ 2557.093283][T32026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2557.134190][T11888] libceph: connect (1)[b::]:6789 error -101 [ 2557.172428][T11888] libceph: mon0 (1)[b::]:6789 connect error [ 2557.306783][T32021] ceph: No mds server is up or the cluster is laggy [ 2557.843624][T32041] netlink: 'syz.3.7263': attribute type 1 has an invalid length. [ 2558.396724][T32041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7263'. [ 2558.708241][T32040] netlink: 'syz.2.7264': attribute type 1 has an invalid length. [ 2558.772536][T32040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7264'. [ 2561.087319][ T920] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2561.307627][ T920] usb 4-1: Using ep0 maxpacket: 8 [ 2561.606591][ T920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 2561.617299][ T920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2561.708384][ T920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 141 [ 2561.916071][ T920] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2561.926153][ T920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.068839][ T920] usb 4-1: config 0 descriptor?? [ 2562.074746][T32077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2562.087397][T32077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2562.504701][ T920] usb 4-1: string descriptor 0 read error: -71 [ 2562.512273][T32092] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7278'. [ 2562.527474][ T920] usb 4-1: USB disconnect, device number 72 [ 2562.654283][T32096] netlink: 'syz.0.7279': attribute type 1 has an invalid length. [ 2562.761706][T32096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7279'. [ 2562.846452][T32092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7278'. [ 2564.027806][T32104] netlink: 'syz.1.7280': attribute type 1 has an invalid length. [ 2564.112347][T32104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7280'. [ 2565.498111][ T920] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 2565.915627][ T920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2566.057385][ T920] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2566.077253][ T920] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2566.135981][ T920] usb 2-1: Product: syz [ 2566.141327][ T920] usb 2-1: Manufacturer: syz [ 2566.417191][ T920] usb 2-1: SerialNumber: syz [ 2566.507156][ T920] usb 2-1: config 0 descriptor?? [ 2566.651670][ T920] gspca_main: conex-2.14.0 probing 0572:0041 [ 2567.542464][ T920] usb 2-1: USB disconnect, device number 93 [ 2568.735178][T32158] netlink: 'syz.0.7295': attribute type 1 has an invalid length. [ 2568.795107][T32158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7295'. [ 2572.290105][T32204] netlink: 'syz.3.7310': attribute type 1 has an invalid length. [ 2572.535316][T32204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7310'. [ 2572.734222][T32213] netlink: 'syz.0.7314': attribute type 21 has an invalid length. [ 2573.011573][T32221] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2573.024408][T32220] [U] .Ž§hòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 2573.040680][T32220] [U] …¥` w*ÌÀBØBOLhUÇ [ 2573.855398][T32216] [U] w$·nÓ|ÝÅ#‘±%o.z\ïÌ [ 2574.187825][T20175] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 2574.833962][T20175] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2575.037186][T20175] usb 1-1: not running at top speed; connect to a high speed hub [ 2575.173939][T20175] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2575.198550][T20175] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2575.211554][T20175] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 2575.221699][T20175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2575.243833][T20175] usb 1-1: Product: syz [ 2575.254646][T20175] usb 1-1: Manufacturer: syz [ 2575.260198][T20175] usb 1-1: SerialNumber: syz [ 2575.498885][T28662] Bluetooth: hci0: Frame reassembly failed (-84) [ 2575.503452][T32233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2575.521343][T32233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2575.667213][T12881] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 2575.851630][T12881] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 2576.258475][T12881] usb 4-1: config 0 has no interface number 0 [ 2576.264735][T12881] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2576.318576][T12881] usb 4-1: config 0 interface 200 has no altsetting 0 [ 2576.333379][T12881] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 2576.354003][T12881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2576.411817][T12881] usb 4-1: Product: syz [ 2576.445908][T12881] usb 4-1: Manufacturer: syz [ 2576.468367][T12881] usb 4-1: SerialNumber: syz [ 2576.484050][T12881] usb 4-1: config 0 descriptor?? [ 2576.524217][T32264] netlink: 'syz.2.7327': attribute type 21 has an invalid length. [ 2576.609238][T32265] netlink: 'syz.4.7326': attribute type 1 has an invalid length. [ 2576.679022][T32265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7326'. [ 2576.703320][T32266] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2576.722004][T32247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2576.747002][T32247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2576.965663][T12881] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input66 [ 2577.021794][T12881] usb 4-1: USB disconnect, device number 73 [ 2577.426913][T32272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7328'. [ 2577.503840][T26994] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2577.574993][T20175] usb 1-1: USB disconnect, device number 48 [ 2578.346212][T32283] netlink: 'syz.1.7333': attribute type 1 has an invalid length. [ 2578.379282][T32283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2579.923158][T32306] FAULT_INJECTION: forcing a failure. [ 2579.923158][T32306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2579.936377][T32306] CPU: 0 UID: 0 PID: 32306 Comm: syz.0.7338 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2579.936401][T32306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2579.936413][T32306] Call Trace: [ 2579.936421][T32306] [ 2579.936429][T32306] dump_stack_lvl+0x189/0x250 [ 2579.936457][T32306] ? __lock_acquire+0xaac/0xd20 [ 2579.936484][T32306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2579.936507][T32306] ? __pfx__printk+0x10/0x10 [ 2579.936535][T32306] ? __might_fault+0xb0/0x130 [ 2579.936572][T32306] should_fail_ex+0x414/0x560 [ 2579.936596][T32306] _copy_from_user+0x2d/0xb0 [ 2579.936621][T32306] do_sock_getsockopt+0x1cd/0x650 [ 2579.936649][T32306] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2579.936671][T32306] ? do_syscall_64+0x40/0x210 [ 2579.936694][T32306] ? __fget_files+0x2a/0x420 [ 2579.936709][T32306] ? __fget_files+0x3a0/0x420 [ 2579.936725][T32306] ? __fget_files+0x2a/0x420 [ 2579.936748][T32306] __x64_sys_getsockopt+0x1a5/0x250 [ 2579.936771][T32306] ? do_syscall_64+0x40/0x210 [ 2579.936794][T32306] ? do_syscall_64+0x40/0x210 [ 2579.936819][T32306] do_syscall_64+0xf6/0x210 [ 2579.936842][T32306] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2579.936859][T32306] ? clear_bhb_loop+0x60/0xb0 [ 2579.936881][T32306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2579.936898][T32306] RIP: 0033:0x7fdedb38e969 [ 2579.936915][T32306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2579.936931][T32306] RSP: 002b:00007fdedc204038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2579.936950][T32306] RAX: ffffffffffffffda RBX: 00007fdedb5b6160 RCX: 00007fdedb38e969 [ 2579.936963][T32306] RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000008 [ 2579.936974][T32306] RBP: 00007fdedc204090 R08: 0000000000000000 R09: 0000000000000000 [ 2579.936986][T32306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2579.936996][T32306] R13: 0000000000000000 R14: 00007fdedb5b6160 R15: 00007ffe54777da8 [ 2579.937024][T32306] [ 2581.509796][T26994] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 2581.779714][T32324] netlink: 'syz.3.7344': attribute type 1 has an invalid length. [ 2581.788583][T32324] netlink: 'syz.3.7344': attribute type 2 has an invalid length. [ 2583.571131][T32346] netlink: 'syz.0.7351': attribute type 1 has an invalid length. [ 2584.071952][T32346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7351'. [ 2584.152788][T32355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7355'. [ 2584.599167][ T9] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 2584.895404][T32361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7356'. [ 2584.927491][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2584.979381][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2584.989824][ T9] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2584.999474][ T9] usb 2-1: Product: syz [ 2585.004138][ T9] usb 2-1: Manufacturer: syz [ 2585.019372][ T9] usb 2-1: SerialNumber: syz [ 2585.032004][ T9] usb 2-1: config 0 descriptor?? [ 2585.051869][ T9] gspca_main: conex-2.14.0 probing 0572:0041 [ 2585.362206][ T9] usb 2-1: USB disconnect, device number 94 [ 2585.579786][T26994] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2585.588901][T26994] Bluetooth: hci4: Injecting HCI hardware error event [ 2585.596924][T26994] Bluetooth: hci4: hardware error 0x00 [ 2586.571460][T32386] FAULT_INJECTION: forcing a failure. [ 2586.571460][T32386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2586.649465][T32386] CPU: 0 UID: 0 PID: 32386 Comm: syz.4.7363 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2586.649484][T32386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2586.649492][T32386] Call Trace: [ 2586.649498][T32386] [ 2586.649504][T32386] dump_stack_lvl+0x189/0x250 [ 2586.649528][T32386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2586.649545][T32386] ? __pfx__printk+0x10/0x10 [ 2586.649572][T32386] should_fail_ex+0x414/0x560 [ 2586.649589][T32386] _copy_to_user+0x31/0xb0 [ 2586.649608][T32386] simple_read_from_buffer+0xe1/0x170 [ 2586.649636][T32386] proc_fail_nth_read+0x1df/0x250 [ 2586.649652][T32386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2586.649667][T32386] ? rw_verify_area+0x258/0x650 [ 2586.649683][T32386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2586.649697][T32386] vfs_read+0x200/0x980 [ 2586.649718][T32386] ? __pfx___mutex_lock+0x10/0x10 [ 2586.649735][T32386] ? __pfx_vfs_read+0x10/0x10 [ 2586.649752][T32386] ? __fget_files+0x2a/0x420 [ 2586.649767][T32386] ? __fget_files+0x3a0/0x420 [ 2586.649777][T32386] ? __fget_files+0x2a/0x420 [ 2586.649795][T32386] ksys_read+0x145/0x250 [ 2586.649811][T32386] ? __fget_files+0x2a/0x420 [ 2586.649823][T32386] ? __pfx_ksys_read+0x10/0x10 [ 2586.649842][T32386] ? do_syscall_64+0xba/0x210 [ 2586.649861][T32386] do_syscall_64+0xf6/0x210 [ 2586.649878][T32386] ? clear_bhb_loop+0x60/0xb0 [ 2586.649893][T32386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2586.649905][T32386] RIP: 0033:0x7f83fc78d37c [ 2586.649916][T32386] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2586.649928][T32386] RSP: 002b:00007f83fa5d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2586.649941][T32386] RAX: ffffffffffffffda RBX: 00007f83fc9b6160 RCX: 00007f83fc78d37c [ 2586.649950][T32386] RDX: 000000000000000f RSI: 00007f83fa5d50a0 RDI: 000000000000000c [ 2586.649958][T32386] RBP: 00007f83fa5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2586.649966][T32386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2586.649973][T32386] R13: 0000000000000001 R14: 00007f83fc9b6160 R15: 00007ffe006803a8 [ 2586.649993][T32386] [ 2587.767559][T26994] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2587.848925][T32400] futex_wake_op: syz.1.7368 tries to shift op by 32; fix this program [ 2588.295256][T32407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7369'. [ 2588.347934][T17340] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 2588.670439][T17340] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2588.953099][T17340] usb 4-1: not running at top speed; connect to a high speed hub [ 2588.992215][T17340] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2589.046205][T17340] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2589.061162][T17340] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 2589.090631][T17340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.095132][T32414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7372'. [ 2589.129153][T17340] usb 4-1: Product: syz [ 2589.175747][T17340] usb 4-1: Manufacturer: syz [ 2589.217870][T17340] usb 4-1: SerialNumber: syz [ 2589.437156][ T9] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 2589.536695][T25316] Bluetooth: hci0: Frame reassembly failed (-84) [ 2589.547164][T25316] Bluetooth: hci0: Frame reassembly failed (-84) [ 2589.585194][T32402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2589.606028][T32402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2589.637399][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2589.657500][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2589.673631][ T9] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2589.682483][ T9] usb 2-1: Product: syz [ 2589.687488][ T9] usb 2-1: Manufacturer: syz [ 2589.692414][ T9] usb 2-1: SerialNumber: syz [ 2589.712681][ T9] usb 2-1: config 0 descriptor?? [ 2589.743448][ T9] gspca_main: conex-2.14.0 probing 0572:0041 [ 2590.166387][ T9] usb 2-1: USB disconnect, device number 95 [ 2590.551582][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.578824][T26994] Bluetooth: hci0: command 0x1003 tx timeout [ 2591.608087][T30631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2591.908810][T17340] usb 4-1: USB disconnect, device number 74 [ 2591.965144][T32439] netlink: 'syz.1.7379': attribute type 1 has an invalid length. [ 2592.623755][T32439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7379'. [ 2593.663510][T32462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7385'. [ 2596.577195][T32490] netlink: 'syz.3.7391': attribute type 1 has an invalid length. [ 2596.584945][T32490] netlink: 'syz.3.7391': attribute type 2 has an invalid length. [ 2598.173136][T32502] netlink: 'syz.4.7396': attribute type 21 has an invalid length. [ 2598.586594][T32514] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2600.021191][T32534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7403'. [ 2600.813307][T32534] veth1_macvtap: left promiscuous mode [ 2602.533718][T32551] netlink: 'syz.4.7407': attribute type 1 has an invalid length. [ 2602.541521][T32551] netlink: 'syz.4.7407': attribute type 2 has an invalid length. [ 2603.576885][T32565] netlink: 'syz.2.7410': attribute type 1 has an invalid length. [ 2603.666475][T32565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7410'. [ 2604.739006][T32575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7412'. [ 2605.091832][T32578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7413'. [ 2605.229521][T32587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7415'. [ 2606.287266][T16292] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 2606.529324][T16292] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2606.917442][T32606] [U] .Ž§hòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 2606.944298][T16292] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2606.954343][T32606] [U] …¥` w*ÌÀBØBOLhUÇ [ 2606.961664][T16292] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2606.971398][T16292] usb 3-1: Product: syz [ 2606.986947][T16292] usb 3-1: Manufacturer: syz [ 2607.162212][T16292] usb 3-1: SerialNumber: syz [ 2607.264049][T32600] [U] w$·nÓ|ÝÅ#‘±%o.z\ïÌ [ 2607.318693][T16292] usb 3-1: config 0 descriptor?? [ 2607.360620][T16292] gspca_main: conex-2.14.0 probing 0572:0041 [ 2607.653341][T16292] usb 3-1: USB disconnect, device number 84 [ 2609.790838][T32633] netlink: 'syz.1.7426': attribute type 1 has an invalid length. [ 2609.798649][T32633] netlink: 'syz.1.7426': attribute type 2 has an invalid length. [ 2610.429642][T32640] lo speed is unknown, defaulting to 1000 [ 2614.007097][T32681] lo speed is unknown, defaulting to 1000 [ 2614.013598][T32684] netlink: 'syz.1.7440': attribute type 1 has an invalid length. [ 2614.021345][T32684] netlink: 'syz.1.7440': attribute type 2 has an invalid length. [ 2614.048404][T32687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7441'. [ 2614.377327][T20175] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 2614.763250][T20175] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2614.811933][T20175] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2614.831536][T20175] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2614.844436][T20175] usb 3-1: Product: syz [ 2614.897475][T20175] usb 3-1: Manufacturer: syz [ 2614.902106][T20175] usb 3-1: SerialNumber: syz [ 2614.978992][T20175] usb 3-1: config 0 descriptor?? [ 2614.992550][T20175] gspca_main: conex-2.14.0 probing 0572:0041 [ 2615.809143][T20175] usb 3-1: USB disconnect, device number 85 [ 2618.400324][T32727] lo speed is unknown, defaulting to 1000 [ 2621.623373][T32757] netlink: 'syz.1.7458': attribute type 21 has an invalid length. [ 2621.845559][T32758] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2624.651292][ T325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7468'. [ 2625.955052][ T335] lo speed is unknown, defaulting to 1000 [ 2627.196969][ T355] netlink: 'syz.2.7475': attribute type 1 has an invalid length. [ 2627.673179][ T352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7475'. [ 2627.682431][T16292] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 2627.899609][T16292] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2628.002284][T16292] usb 5-1: not running at top speed; connect to a high speed hub [ 2628.175107][T16292] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2628.187570][ T372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7480'. [ 2628.465900][T16292] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2628.494425][T16292] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 2628.524030][T16292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2628.567225][T16292] usb 5-1: Product: syz [ 2628.574373][ T375] netlink: 'syz.3.7482': attribute type 21 has an invalid length. [ 2628.577485][T16292] usb 5-1: Manufacturer: syz [ 2628.613185][T16292] usb 5-1: SerialNumber: syz [ 2628.646269][ T375] bpq0: entered promiscuous mode [ 2628.706178][ T375] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2629.132111][ T385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2629.180974][ T385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2630.674533][ T399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7487'. [ 2630.951520][T30631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2631.001775][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2631.001795][ T30] audit: type=1800 audit(2000000012.120:2026): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.7489" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2631.038022][ T24] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 2631.231287][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2631.305553][ T24] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2631.311865][T16292] usb 5-1: USB disconnect, device number 62 [ 2631.339120][ T24] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2631.351249][ T24] usb 4-1: Product: syz [ 2631.355957][ T24] usb 4-1: Manufacturer: syz [ 2631.362111][ T24] usb 4-1: SerialNumber: syz [ 2631.446898][ T24] usb 4-1: config 0 descriptor?? [ 2631.469417][ T24] gspca_main: conex-2.14.0 probing 0572:0041 [ 2631.884540][ T419] netlink: 'syz.4.7491': attribute type 1 has an invalid length. [ 2631.993816][ T419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7491'. [ 2632.788055][T30631] Bluetooth: hci2: command 0x0406 tx timeout [ 2632.805259][ T426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7494'. [ 2633.023216][ T24] usb 4-1: USB disconnect, device number 75 [ 2634.037468][ T440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7498'. [ 2636.087239][ T458] [U] .Ž§hòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 2636.093424][ T458] [U] …¥` w*ÌÀBØBOLhUÇ [ 2636.347275][T27119] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 2636.490835][ T467] fuse: Unknown parameter '0x0000000000000004' [ 2636.534117][ T468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7507'. [ 2636.544940][T27119] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2636.553959][T27119] usb 1-1: not running at top speed; connect to a high speed hub [ 2636.564031][T27119] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2636.577338][T27119] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2636.589935][T27119] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 2636.602159][T27119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2636.607448][T12881] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2636.651588][T27119] usb 1-1: Product: syz [ 2636.658982][T27119] usb 1-1: Manufacturer: syz [ 2636.669969][T27119] usb 1-1: SerialNumber: syz [ 2636.783395][ T452] [U] w$·nÓ|ÝÅ#‘±%o.z\ïÌ [ 2636.790265][T12881] usb 5-1: Using ep0 maxpacket: 32 [ 2636.815605][T12881] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2636.836530][T12881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2636.852962][T12881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2636.865108][ T24] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 2636.875279][T12881] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2636.887867][T12881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2636.899837][T12881] usb 5-1: config 0 descriptor?? [ 2636.906527][ T464] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2636.943936][ T8799] Bluetooth: hci0: Frame reassembly failed (-84) [ 2636.961441][T12881] hub 5-1:0.0: USB hub found [ 2636.985572][ T457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2637.003960][ T457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2637.039842][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2637.053665][ T24] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2637.082451][ T24] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2637.101601][ T24] usb 4-1: Product: syz [ 2637.106901][ T24] usb 4-1: Manufacturer: syz [ 2637.112735][ T24] usb 4-1: SerialNumber: syz [ 2637.152323][ T24] usb 4-1: config 0 descriptor?? [ 2637.159309][T12881] hub 5-1:0.0: 1 port detected [ 2637.170774][ T24] gspca_main: conex-2.14.0 probing 0572:0041 [ 2637.690279][ T476] netlink: 'syz.2.7509': attribute type 1 has an invalid length. [ 2637.700142][ T476] netlink: 'syz.2.7509': attribute type 2 has an invalid length. [ 2638.136642][ T24] usb 4-1: USB disconnect, device number 76 [ 2638.928912][T11888] usb 5-1: USB disconnect, device number 63 [ 2638.929010][T12881] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 2639.017313][T30628] Bluetooth: hci0: command 0x1003 tx timeout [ 2639.027663][T30631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2639.191984][ T486] netlink: 'syz.3.7511': attribute type 21 has an invalid length. [ 2639.200550][T27119] usb 1-1: USB disconnect, device number 49 [ 2639.333047][ T486] bpq0: left promiscuous mode [ 2639.370213][ T486] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2641.764773][ T504] fuse: Unknown parameter '0x0000000000000004' [ 2642.009266][ T514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7521'. [ 2642.327222][T16292] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 2643.601410][T16292] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2643.643772][T16292] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2643.664398][T16292] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2643.683033][T16292] usb 1-1: Product: syz [ 2643.714534][ T526] netlink: 'syz.2.7525': attribute type 21 has an invalid length. [ 2643.736421][T16292] usb 1-1: Manufacturer: syz [ 2643.754741][T16292] usb 1-1: SerialNumber: syz [ 2643.778984][ T526] bpq0: entered promiscuous mode [ 2643.790265][ T526] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2643.802525][T16292] usb 1-1: config 0 descriptor?? [ 2643.825880][T16292] gspca_main: conex-2.14.0 probing 0572:0041 [ 2643.891005][ T534] [U] .Ž§hòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 2643.897504][ T534] [U] …¥` w*ÌÀBØBOLhUÇ [ 2644.296663][T16292] usb 1-1: USB disconnect, device number 50 [ 2644.626751][ T529] [U] w$·nÓ|ÝÅ#‘±%o.z\ïÌ [ 2645.007515][T12881] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 2645.627392][T12881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2645.638658][T12881] usb 2-1: not running at top speed; connect to a high speed hub [ 2645.677726][T12881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2645.728752][T12881] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2645.773623][T12881] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 2645.813978][T12881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.837442][T12881] usb 2-1: Product: syz [ 2645.844042][T12881] usb 2-1: Manufacturer: syz [ 2645.870977][T12881] usb 2-1: SerialNumber: syz [ 2646.171401][T18441] Bluetooth: hci0: Frame reassembly failed (-84) [ 2646.189449][ T547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2646.215952][ T547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2647.309202][ T577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7543'. [ 2647.938410][T26994] Bluetooth: hci2: command 0x0406 tx timeout [ 2648.020585][T20175] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 2648.217432][T30631] Bluetooth: hci0: command 0x1003 tx timeout [ 2648.252527][T20175] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2648.256722][T30628] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2648.390514][T20175] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2648.472606][T12881] usb 2-1: USB disconnect, device number 96 [ 2648.479272][T20175] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2648.505272][T20175] usb 4-1: Product: syz [ 2648.512242][T20175] usb 4-1: Manufacturer: syz [ 2648.520307][T20175] usb 4-1: SerialNumber: syz [ 2648.561894][T20175] usb 4-1: config 0 descriptor?? [ 2648.593089][T20175] gspca_main: conex-2.14.0 probing 0572:0041 [ 2649.857820][T20175] usb 4-1: USB disconnect, device number 77 [ 2650.037558][T12881] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2650.202583][ T610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7552'. [ 2650.227461][T12881] usb 1-1: Using ep0 maxpacket: 32 [ 2650.551226][T12881] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2650.563137][T12881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2650.574449][T12881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2650.593797][T12881] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2650.631789][ T614] [U] .Ž§hòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 2650.639002][ T614] [U] …¥` w*ÌÀBØBOLhUÇ [ 2650.727499][T12881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2650.783723][T12881] usb 1-1: config 0 descriptor?? [ 2650.872471][ T597] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2650.886372][T12881] hub 1-1:0.0: USB hub found [ 2651.028141][ T607] [U] w$·nÓ|ÝÅ#‘±%o.z\ïÌ [ 2651.096543][ T620] netlink: 'syz.2.7556': attribute type 21 has an invalid length. [ 2651.125708][T12881] hub 1-1:0.0: 1 port detected [ 2651.126200][ T620] bpq0: left promiscuous mode [ 2651.142775][ T620] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2651.970238][T12881] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 2651.970677][T16292] usb 1-1: USB disconnect, device number 51 [ 2653.533259][ T655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7565'. [ 2653.606390][ T659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7566'. [ 2653.904689][ T657] netlink: 'syz.3.7567': attribute type 21 has an invalid length. [ 2654.028453][T16292] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 2654.063075][ T657] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2654.314765][T16292] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2654.341888][T16292] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2654.798597][T16292] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2654.819355][T16292] usb 1-1: Product: syz [ 2654.823586][T16292] usb 1-1: Manufacturer: syz [ 2654.840754][T16292] usb 1-1: SerialNumber: syz [ 2654.878473][T16292] usb 1-1: config 0 descriptor?? [ 2654.931058][T16292] gspca_main: conex-2.14.0 probing 0572:0041 [ 2655.001700][ T672] binder: 671:672 ioctl c0306201 200000000280 returned -14 [ 2655.417391][T16292] usb 1-1: USB disconnect, device number 52 [ 2656.986038][ T697] netlink: 'syz.4.7579': attribute type 1 has an invalid length. [ 2657.256459][ T697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7579'. [ 2657.557419][T12881] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2658.187070][T12881] usb 2-1: Using ep0 maxpacket: 32 [ 2658.286057][T12881] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2658.323110][T12881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2658.351141][T12881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2658.365510][T12881] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2658.375109][T12881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2658.407559][T12881] usb 2-1: config 0 descriptor?? [ 2658.413137][ T700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2658.439371][T12881] hub 2-1:0.0: USB hub found [ 2658.604829][ T715] netlink: 'syz.0.7583': attribute type 21 has an invalid length. [ 2658.656526][ T715] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2658.694676][T12881] hub 2-1:0.0: 1 port detected [ 2659.208002][ T9] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 2659.363137][ T730] netlink: 'syz.0.7588': attribute type 1 has an invalid length. [ 2659.523583][ T730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7588'. [ 2659.787866][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2659.815925][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 2659.829106][ T24] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2659.830062][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2659.850653][ T24] usb 2-1: USB disconnect, device number 97 [ 2659.936833][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2659.961071][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 2659.973558][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2660.005517][ T9] usb 4-1: Product: syz [ 2660.033525][ T9] usb 4-1: Manufacturer: syz [ 2660.043694][ T9] usb 4-1: SerialNumber: syz [ 2660.850748][ T8799] Bluetooth: hci0: Frame reassembly failed (-84) [ 2660.888791][ T726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2660.941701][ T726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2661.170982][ T753] FAULT_INJECTION: forcing a failure. [ 2661.170982][ T753] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.184083][ T753] CPU: 0 UID: 0 PID: 753 Comm: syz.4.7595 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2661.184107][ T753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2661.184144][ T753] Call Trace: [ 2661.184152][ T753] [ 2661.184160][ T753] dump_stack_lvl+0x189/0x250 [ 2661.184194][ T753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2661.184227][ T753] ? __pfx__printk+0x10/0x10 [ 2661.184279][ T753] ? __pfx___might_resched+0x10/0x10 [ 2661.184308][ T753] ? fs_reclaim_acquire+0x7d/0x100 [ 2661.184335][ T753] should_fail_ex+0x414/0x560 [ 2661.184360][ T753] should_failslab+0xa8/0x100 [ 2661.184380][ T753] __kmalloc_noprof+0xcb/0x4f0 [ 2661.184407][ T753] ? kfree+0x4d/0x440 [ 2661.184430][ T753] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2661.184461][ T753] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2661.184488][ T753] ? tomoyo_domain+0xda/0x130 [ 2661.184520][ T753] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2661.184542][ T753] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2661.184566][ T753] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2661.184604][ T753] ? __lock_acquire+0xaac/0xd20 [ 2661.184636][ T753] ? __fget_files+0x2a/0x420 [ 2661.184652][ T753] ? __fget_files+0x3a0/0x420 [ 2661.184663][ T753] ? __fget_files+0x2a/0x420 [ 2661.184678][ T753] security_file_ioctl+0xcb/0x2d0 [ 2661.184696][ T753] __se_sys_ioctl+0x47/0x170 [ 2661.184715][ T753] do_syscall_64+0xf6/0x210 [ 2661.184734][ T753] ? clear_bhb_loop+0x60/0xb0 [ 2661.184751][ T753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2661.184764][ T753] RIP: 0033:0x7f83fc78e969 [ 2661.184776][ T753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2661.184788][ T753] RSP: 002b:00007f83fd515038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2661.184802][ T753] RAX: ffffffffffffffda RBX: 00007f83fc9b5fa0 RCX: 00007f83fc78e969 [ 2661.184812][ T753] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 2661.184820][ T753] RBP: 00007f83fd515090 R08: 0000000000000000 R09: 0000000000000000 [ 2661.184829][ T753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2661.184837][ T753] R13: 0000000000000000 R14: 00007f83fc9b5fa0 R15: 00007ffe006803a8 [ 2661.184859][ T753] [ 2661.217090][ T753] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2661.707443][T12881] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2661.937200][T12881] usb 3-1: Using ep0 maxpacket: 32 [ 2661.968651][T12881] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2661.988887][T12881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2662.167247][T12881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2662.197702][T12881] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2662.206787][T12881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2662.255276][T12881] usb 3-1: config 0 descriptor?? [ 2662.321030][ T773] xt_hashlimit: max too large, truncated to 1048576 [ 2662.328225][ T773] xt_hashlimit: overflow, try lower: 0/0 [ 2662.363077][ T760] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2662.449473][T12881] hub 3-1:0.0: USB hub found [ 2662.775313][ T777] [U] .Ž§hòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 2662.781729][ T777] [U] …¥` w*ÌÀBØBOLhUÇ [ 2662.857306][T30631] Bluetooth: hci0: command 0x1003 tx timeout [ 2662.857428][T30628] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2662.859579][T12881] hub 3-1:0.0: 1 port detected [ 2662.994153][ T9] usb 4-1: USB disconnect, device number 78 [ 2663.128065][ T780] netlink: 'syz.4.7601': attribute type 1 has an invalid length. [ 2663.198283][ T781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7601'. [ 2663.576476][ T772] [U] w$·nÓ|ÝÅ#‘±%o.z\ïÌ [ 2663.754628][ T9] usb 3-1: USB disconnect, device number 86 [ 2663.803405][T12881] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2665.944889][ T30] audit: type=1326 audit(2000000047.060:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=805 comm="syz.4.7607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83fc78e969 code=0x0 [ 2667.388433][ T827] syz.3.7613: attempt to access beyond end of device [ 2667.388433][ T827] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2667.402258][ T827] syz.3.7613: attempt to access beyond end of device [ 2667.402258][ T827] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2667.415549][ T827] Mount JFS Failure: -5 [ 2667.419852][ T827] jfs_mount failed w/return code = -5 [ 2667.487235][T27119] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2668.461846][ T832] netlink: 'syz.1.7614': attribute type 1 has an invalid length. [ 2668.525435][T27119] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2668.564199][T27119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2668.581164][T27119] usb 3-1: Product: syz [ 2668.622467][T27119] usb 3-1: Manufacturer: syz [ 2668.724959][T27119] usb 3-1: SerialNumber: syz [ 2668.973379][ T832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7614'. [ 2670.408667][T28662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2670.455684][T12881] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2670.510499][T27119] cdc_ncm 3-1:1.0: failed to get mac address [ 2670.519237][T27119] cdc_ncm 3-1:1.0: bind() failure [ 2670.593636][T27119] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2670.608025][T27119] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2670.620852][T27119] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 2670.633649][T27119] usb 3-1: USB disconnect, device number 87 [ 2670.657467][T12881] usb 4-1: Using ep0 maxpacket: 8 [ 2670.669856][T12881] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2670.672239][T28662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2670.697135][T12881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2670.738675][T12881] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2670.745728][T12881] pvrusb2: ********** [ 2670.768054][T12881] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2670.784163][T12881] pvrusb2: Important functionality might not be entirely working. [ 2670.792356][T12881] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2670.805385][T12881] pvrusb2: ********** [ 2670.821358][T28662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2670.916176][T28662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2670.951072][T12881] usb 4-1: USB disconnect, device number 79 [ 2670.978911][T12881] pvrusb2: Device being rendered inoperable [ 2671.261413][T28662] bridge_slave_1: left allmulticast mode [ 2671.269867][T28662] bridge_slave_1: left promiscuous mode [ 2671.275717][T28662] bridge0: port 2(bridge_slave_1) entered disabled state [ 2671.517342][T28662] bridge_slave_0: left allmulticast mode [ 2671.857058][T28662] bridge_slave_0: left promiscuous mode [ 2671.883701][T28662] bridge0: port 1(bridge_slave_0) entered disabled state [ 2673.312655][T30631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2673.325871][T30631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2673.334825][T30631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2673.343349][T30631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2673.350968][T30631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2673.933964][ T889] netlink: 'syz.3.7629': attribute type 1 has an invalid length. [ 2674.118647][ T890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7629'. [ 2674.528762][T28662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2674.545203][T28662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2674.556226][T28662] bond0 (unregistering): Released all slaves [ 2674.681615][T28662] bond1 (unregistering): Released all slaves [ 2674.798720][T28662] bond2 (unregistering): Released all slaves [ 2674.894570][ T882] lo speed is unknown, defaulting to 1000 [ 2675.014584][T28662] IPVS: stopping master sync thread 30094 ... [ 2675.559131][T30631] Bluetooth: hci0: command tx timeout [ 2677.580126][T30631] Bluetooth: hci0: command tx timeout [ 2677.718112][T28662] hsr_slave_0: left promiscuous mode [ 2677.746792][T28662] hsr_slave_1: left promiscuous mode [ 2677.753120][T28662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2677.762835][T28662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2677.984391][T28662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2677.992814][T28662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2678.356748][T28662] veth1_macvtap: left promiscuous mode [ 2678.381360][T28662] veth0_macvtap: left promiscuous mode [ 2678.402665][T28662] veth1_vlan: left promiscuous mode [ 2678.490237][T28662] veth0_vlan: left promiscuous mode [ 2679.454085][T28662] team0 (unregistering): Port device team_slave_1 removed [ 2679.497824][T28662] team0 (unregistering): Port device team_slave_0 removed [ 2679.657210][T30631] Bluetooth: hci0: command tx timeout [ 2680.077931][ T882] chnl_net:caif_netlink_parms(): no params data found [ 2681.510330][ T975] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2681.552312][T30631] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 2681.680725][ T882] bridge0: port 1(bridge_slave_0) entered blocking state [ 2681.688758][ T882] bridge0: port 1(bridge_slave_0) entered disabled state [ 2681.695940][ T882] bridge_slave_0: entered allmulticast mode [ 2681.715422][ T882] bridge_slave_0: entered promiscuous mode [ 2681.737137][T30631] Bluetooth: hci0: command tx timeout [ 2681.749626][ T882] bridge0: port 2(bridge_slave_1) entered blocking state [ 2681.757201][ T882] bridge0: port 2(bridge_slave_1) entered disabled state [ 2681.787283][ T882] bridge_slave_1: entered allmulticast mode [ 2681.798051][ T985] netlink: 'syz.3.7647': attribute type 1 has an invalid length. [ 2681.808753][ T882] bridge_slave_1: entered promiscuous mode [ 2681.898517][ T985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7647'. [ 2681.908527][ T882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2681.926458][ T882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2682.031922][ T882] team0: Port device team_slave_0 added [ 2682.061800][ T882] team0: Port device team_slave_1 added [ 2682.133754][ T882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2682.141853][ T882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2682.169312][ T882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2682.207569][ T882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2682.216778][ T882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2682.247162][ T882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2682.325873][ T882] hsr_slave_0: entered promiscuous mode [ 2682.333224][ T882] hsr_slave_1: entered promiscuous mode [ 2683.076177][ T882] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2683.088581][ T882] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2683.105338][ T882] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2683.116573][ T882] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2683.316010][ T882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2683.382956][ T882] 8021q: adding VLAN 0 to HW filter on device team0 [ 2683.415013][T28662] bridge0: port 1(bridge_slave_0) entered blocking state [ 2683.422204][T28662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2683.649747][ T1008] netlink: 'syz.0.7655': attribute type 1 has an invalid length. [ 2683.660984][ T1008] netlink: 'syz.0.7655': attribute type 4 has an invalid length. [ 2683.670577][ T1008] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7655'. [ 2683.691134][ T1008] netlink: 'syz.0.7655': attribute type 1 has an invalid length. [ 2683.702002][ T1008] netlink: 'syz.0.7655': attribute type 4 has an invalid length. [ 2683.711809][ T1008] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7655'. [ 2683.748377][T23812] bridge0: port 2(bridge_slave_1) entered blocking state [ 2683.755475][T23812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2683.789742][T27119] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2683.868515][ T1010] Bluetooth: MGMT ver 1.23 [ 2684.070525][T27119] usb 2-1: Using ep0 maxpacket: 32 [ 2684.231504][T27119] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2684.442616][T27119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2684.456156][T27119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2684.470640][ T1017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7656'. [ 2684.511658][ T1017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7656'. [ 2684.623565][T27119] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2684.777176][ T1018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7656'. [ 2684.861739][T27119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2684.870593][ T1021] FAULT_INJECTION: forcing a failure. [ 2684.870593][ T1021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2684.900820][ T1018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7656'. [ 2684.944190][ T1021] CPU: 1 UID: 0 PID: 1021 Comm: syz.2.7658 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2684.944217][ T1021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2684.944229][ T1021] Call Trace: [ 2684.944244][ T1021] [ 2684.944253][ T1021] dump_stack_lvl+0x189/0x250 [ 2684.944290][ T1021] ? __lock_acquire+0xaac/0xd20 [ 2684.944317][ T1021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2684.944356][ T1021] ? __pfx__printk+0x10/0x10 [ 2684.944384][ T1021] ? __might_fault+0xb0/0x130 [ 2684.944420][ T1021] should_fail_ex+0x414/0x560 [ 2684.944443][ T1021] _copy_from_user+0x2d/0xb0 [ 2684.944470][ T1021] ___sys_sendmsg+0x158/0x2a0 [ 2684.944499][ T1021] ? __pfx____sys_sendmsg+0x10/0x10 [ 2684.944569][ T1021] ? __fget_files+0x2a/0x420 [ 2684.944585][ T1021] ? __fget_files+0x3a0/0x420 [ 2684.944607][ T1021] __x64_sys_sendmsg+0x19b/0x260 [ 2684.944628][ T1021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2684.944661][ T1021] ? do_syscall_64+0xba/0x210 [ 2684.944682][ T1021] do_syscall_64+0xf6/0x210 [ 2684.944701][ T1021] ? clear_bhb_loop+0x60/0xb0 [ 2684.944718][ T1021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2684.944732][ T1021] RIP: 0033:0x7f4a0658e969 [ 2684.944744][ T1021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2684.944756][ T1021] RSP: 002b:00007f4a073cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2684.944773][ T1021] RAX: ffffffffffffffda RBX: 00007f4a067b5fa0 RCX: 00007f4a0658e969 [ 2684.944783][ T1021] RDX: 00000000000008d0 RSI: 0000200000000500 RDI: 0000000000000005 [ 2684.944792][ T1021] RBP: 00007f4a073cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2684.944801][ T1021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2684.944810][ T1021] R13: 0000000000000000 R14: 00007f4a067b5fa0 R15: 00007ffffb1d13c8 [ 2684.944832][ T1021] [ 2685.133108][ C1] vkms_vblank_simulate: vblank timer overrun [ 2685.288027][T27119] usb 2-1: config 0 descriptor?? [ 2685.296779][ T1006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2685.351182][T27119] hub 2-1:0.0: USB hub found [ 2685.402700][ T1025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input67 [ 2685.583261][T30628] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2685.593299][T30628] Bluetooth: hci5: Injecting HCI hardware error event [ 2685.611383][T26994] Bluetooth: hci5: hardware error 0x00 [ 2685.653812][T27119] hub 2-1:0.0: 1 port detected [ 2685.690839][ T1038] netlink: 'syz.2.7661': attribute type 1 has an invalid length. [ 2685.897204][T30628] Bluetooth: hci0: command tx timeout [ 2685.987462][ T1038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7661'. [ 2686.204059][ T882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2686.503381][T12881] usb 2-1: USB disconnect, device number 98 [ 2686.516817][T27119] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2687.249030][ T1076] netlink: 'syz.0.7667': attribute type 1 has an invalid length. [ 2687.497299][ T1082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7667'. [ 2687.820384][T26994] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2687.977367][T26994] Bluetooth: hci0: command 0x0405 tx timeout [ 2688.051530][ T882] veth0_vlan: entered promiscuous mode [ 2688.088364][ T882] veth1_vlan: entered promiscuous mode [ 2688.192319][ T882] veth0_macvtap: entered promiscuous mode [ 2688.213509][ T882] veth1_macvtap: entered promiscuous mode [ 2688.431555][ T882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2688.778061][ T882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2688.898624][ T882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2688.917457][ T882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2689.053370][ T882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2689.071126][ T882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2689.569799][ T6005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2689.601442][ T6005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2690.191612][T28662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2690.205351][T28662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2690.219288][ T1099] netlink: 'syz.1.7673': attribute type 1 has an invalid length. [ 2690.282288][ T1099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7673'. [ 2691.470303][T25316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2691.500569][T11888] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2691.514162][ T1122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7678'. [ 2691.625503][T25316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2691.687096][T11888] usb 1-1: Using ep0 maxpacket: 32 [ 2691.696470][T11888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2691.713144][T11888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2691.728055][T11888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2691.758424][T11888] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2691.780292][T11888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2691.799261][T25316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2691.822415][T11888] usb 1-1: config 0 descriptor?? [ 2691.842746][ T1118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2691.855665][T11888] hub 1-1:0.0: USB hub found [ 2691.932330][T25316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2692.060639][T11888] hub 1-1:0.0: 1 port detected [ 2692.281896][T25316] bridge_slave_1: left allmulticast mode [ 2692.335531][T25316] bridge_slave_1: left promiscuous mode [ 2692.348213][T25316] bridge0: port 2(bridge_slave_1) entered disabled state [ 2692.392660][T25316] bridge_slave_0: left allmulticast mode [ 2692.400067][T25316] bridge_slave_0: left promiscuous mode [ 2692.406116][T25316] bridge0: port 1(bridge_slave_0) entered disabled state [ 2692.799441][T11888] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 2692.806932][T11888] usb 1-1: USB disconnect, device number 53 [ 2692.813096][T16292] usb 1-1: Failed to suspend device, error -19 [ 2694.393889][T26994] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2694.405462][T26994] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2694.416579][T26994] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2694.527844][T26994] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2694.552264][T26994] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2695.238176][T25316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2695.257243][ T1153] netlink: 'syz.3.7687': attribute type 1 has an invalid length. [ 2695.453785][ T1128] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 2695.467989][ T1154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7687'. [ 2695.567443][T25316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2695.652276][T25316] bond0 (unregistering): Released all slaves [ 2695.693528][ T1139] lo speed is unknown, defaulting to 1000 [ 2695.763745][ T1128] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 2695.779349][ T1128] usb 1-1: config 0 has no interface number 0 [ 2695.789408][ T1128] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2695.809602][ T1128] usb 1-1: config 0 interface 200 has no altsetting 0 [ 2695.844548][ T1128] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 2695.853883][ T1128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.891170][ T1128] usb 1-1: Product: syz [ 2695.895367][ T1128] usb 1-1: Manufacturer: syz [ 2695.917241][ T1128] usb 1-1: SerialNumber: syz [ 2696.067271][ T1160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7689'. [ 2696.093295][ T1128] usb 1-1: config 0 descriptor?? [ 2696.520816][ T1166] FAULT_INJECTION: forcing a failure. [ 2696.520816][ T1166] name failslab, interval 1, probability 0, space 0, times 0 [ 2696.546360][ T1166] CPU: 1 UID: 0 PID: 1166 Comm: syz.2.7691 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2696.546387][ T1166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2696.546398][ T1166] Call Trace: [ 2696.546406][ T1166] [ 2696.546413][ T1166] dump_stack_lvl+0x189/0x250 [ 2696.546446][ T1166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2696.546468][ T1166] ? __pfx__printk+0x10/0x10 [ 2696.546500][ T1166] ? __pfx___might_resched+0x10/0x10 [ 2696.546527][ T1166] ? fs_reclaim_acquire+0x7d/0x100 [ 2696.546553][ T1166] should_fail_ex+0x414/0x560 [ 2696.546577][ T1166] should_failslab+0xa8/0x100 [ 2696.546596][ T1166] __kmalloc_noprof+0xcb/0x4f0 [ 2696.546621][ T1166] ? kfree+0x4d/0x440 [ 2696.546642][ T1166] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2696.546672][ T1166] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2696.546698][ T1166] ? tomoyo_domain+0xda/0x130 [ 2696.546728][ T1166] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2696.546747][ T1166] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2696.546769][ T1166] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2696.546793][ T1166] ? sb_end_write+0xe9/0x1c0 [ 2696.546812][ T1166] ? vfs_write+0x8d8/0xa90 [ 2696.546869][ T1166] ? ksys_write+0x1e1/0x250 [ 2696.546890][ T1166] ? rcu_is_watching+0x15/0xb0 [ 2696.546920][ T1166] security_file_ioctl+0xcb/0x2d0 [ 2696.546944][ T1166] __se_sys_ioctl+0x47/0x170 [ 2696.546968][ T1166] do_syscall_64+0xf6/0x210 [ 2696.546995][ T1166] ? clear_bhb_loop+0x60/0xb0 [ 2696.547017][ T1166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2696.547034][ T1166] RIP: 0033:0x7f4a0658e969 [ 2696.547051][ T1166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2696.547067][ T1166] RSP: 002b:00007f4a073cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2696.547086][ T1166] RAX: ffffffffffffffda RBX: 00007f4a067b5fa0 RCX: 00007f4a0658e969 [ 2696.547098][ T1166] RDX: 0000000000000000 RSI: 0000000000004161 RDI: 0000000000000003 [ 2696.547108][ T1166] RBP: 00007f4a073cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2696.547119][ T1166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2696.547129][ T1166] R13: 0000000000000000 R14: 00007f4a067b5fa0 R15: 00007ffffb1d13c8 [ 2696.547157][ T1166] [ 2696.793861][T26994] Bluetooth: hci0: command tx timeout [ 2696.825538][ T1166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2696.868308][ T1148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2696.890665][ T1148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2696.928799][ T1128] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input68 [ 2696.991292][ T1128] usb 1-1: USB disconnect, device number 54 [ 2697.147247][ T9] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2697.326270][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 2697.357590][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2697.421898][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2697.506624][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2697.527385][T25316] hsr_slave_0: left promiscuous mode [ 2697.542276][T25316] hsr_slave_1: left promiscuous mode [ 2697.573347][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2697.576014][T25316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2697.609197][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2697.624862][T25316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2697.636876][ T9] usb 4-1: config 0 descriptor?? [ 2697.666603][ T1169] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2697.675580][ T9] hub 4-1:0.0: USB hub found [ 2697.675608][T25316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2697.689089][ T1181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7695'. [ 2697.698525][T25316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2697.877747][ T9] hub 4-1:0.0: 1 port detected [ 2697.885804][T25316] veth1_macvtap: left promiscuous mode [ 2698.010282][T25316] veth0_macvtap: left promiscuous mode [ 2698.029242][T25316] veth1_vlan: left promiscuous mode [ 2698.067476][T25316] veth0_vlan: left promiscuous mode [ 2698.858799][T26994] Bluetooth: hci0: command tx timeout [ 2698.871191][ T1200] netlink: 'syz.0.7697': attribute type 1 has an invalid length. [ 2698.879540][ T1200] netlink: 'syz.0.7697': attribute type 2 has an invalid length. [ 2698.892937][ T1128] usb 4-1: USB disconnect, device number 80 [ 2698.901805][ T9] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2700.937269][T26994] Bluetooth: hci0: command tx timeout [ 2700.955166][T25316] team0 (unregistering): Port device team_slave_1 removed [ 2701.011170][T25316] team0 (unregistering): Port device team_slave_0 removed [ 2701.517436][ T1139] chnl_net:caif_netlink_parms(): no params data found [ 2701.867610][ T1211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7702'. [ 2702.258649][ T1219] FAULT_INJECTION: forcing a failure. [ 2702.258649][ T1219] name failslab, interval 1, probability 0, space 0, times 0 [ 2702.335824][ T1219] CPU: 0 UID: 0 PID: 1219 Comm: syz.2.7704 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2702.335850][ T1219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2702.335861][ T1219] Call Trace: [ 2702.335868][ T1219] [ 2702.335876][ T1219] dump_stack_lvl+0x189/0x250 [ 2702.335907][ T1219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2702.335931][ T1219] ? __pfx__printk+0x10/0x10 [ 2702.335963][ T1219] ? __pfx___might_resched+0x10/0x10 [ 2702.335990][ T1219] ? fs_reclaim_acquire+0x7d/0x100 [ 2702.336014][ T1219] should_fail_ex+0x414/0x560 [ 2702.336036][ T1219] should_failslab+0xa8/0x100 [ 2702.336055][ T1219] __kmalloc_noprof+0xcb/0x4f0 [ 2702.336081][ T1219] ? kfree+0x4d/0x440 [ 2702.336103][ T1219] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2702.336130][ T1219] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2702.336155][ T1219] ? tomoyo_domain+0xda/0x130 [ 2702.336178][ T1219] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2702.336192][ T1219] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2702.336208][ T1219] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2702.336233][ T1219] ? __lock_acquire+0xaac/0xd20 [ 2702.336263][ T1219] ? __fget_files+0x2a/0x420 [ 2702.336278][ T1219] ? __fget_files+0x3a0/0x420 [ 2702.336289][ T1219] ? __fget_files+0x2a/0x420 [ 2702.336303][ T1219] security_file_ioctl+0xcb/0x2d0 [ 2702.336320][ T1219] __se_sys_ioctl+0x47/0x170 [ 2702.336338][ T1219] do_syscall_64+0xf6/0x210 [ 2702.336355][ T1219] ? clear_bhb_loop+0x60/0xb0 [ 2702.336371][ T1219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2702.336384][ T1219] RIP: 0033:0x7f4a0658e969 [ 2702.336395][ T1219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2702.336406][ T1219] RSP: 002b:00007f4a073cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2702.336420][ T1219] RAX: ffffffffffffffda RBX: 00007f4a067b5fa0 RCX: 00007f4a0658e969 [ 2702.336430][ T1219] RDX: 0000200000002300 RSI: 0000000080047437 RDI: 0000000000000003 [ 2702.336438][ T1219] RBP: 00007f4a073cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2702.336446][ T1219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2702.336454][ T1219] R13: 0000000000000000 R14: 00007f4a067b5fa0 R15: 00007ffffb1d13c8 [ 2702.336474][ T1219] [ 2702.336479][ T1219] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2702.627198][ T1128] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2703.310821][T26994] Bluetooth: hci0: command tx timeout [ 2703.378581][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 2703.410733][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 2703.418151][ T1139] bridge_slave_0: entered allmulticast mode [ 2703.548289][ T1139] bridge_slave_0: entered promiscuous mode [ 2703.559038][ T1128] usb 4-1: Using ep0 maxpacket: 16 [ 2703.767306][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 2703.767323][ T1128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2703.785559][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 2703.809725][ T1128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2703.827249][ T1128] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2703.833788][ T1139] bridge_slave_1: entered allmulticast mode [ 2703.869765][ T1128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2703.887557][ T1139] bridge_slave_1: entered promiscuous mode [ 2703.905348][ T1128] usb 4-1: config 0 descriptor?? [ 2703.989743][ T1139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2704.014573][ T1139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2704.064760][ T1139] team0: Port device team_slave_0 added [ 2704.074943][ T1139] team0: Port device team_slave_1 added [ 2704.110994][ T1139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2704.118637][ T1139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2704.145893][ T1139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2704.159676][ T1139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2704.166661][ T1139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2704.195289][ T1139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2704.207570][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2704.247195][ T24] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 2704.259922][ T1139] hsr_slave_0: entered promiscuous mode [ 2704.266349][ T1139] hsr_slave_1: entered promiscuous mode [ 2704.272369][T30738] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 2704.366845][ T1217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2704.375985][ T1217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2704.391278][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2704.400064][ T1217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2704.410508][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2704.414975][ T1217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2704.422982][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2704.441633][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2704.458678][ T24] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 2704.466889][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2704.466940][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2704.487247][ T9] usb 3-1: config 0 descriptor?? [ 2704.488717][ T24] usb 2-1: config 0 has no interface number 0 [ 2704.495231][ T1128] hid (null): bogus close delimiter [ 2704.498613][ T24] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2704.498640][ T24] usb 2-1: config 0 interface 200 has no altsetting 0 [ 2704.501248][ T24] usb 2-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 2704.517376][ T1128] hid (null): unknown global tag 0xc [ 2704.521400][T30738] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 2704.530721][ T1237] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2704.541221][T30738] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 2704.563725][ T1128] hid (null): unknown global tag 0xc [ 2704.574830][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2704.576180][ T1128] hid (null): unknown global tag 0xe [ 2704.583181][T30738] usb 1-1: config 54 has no interface number 0 [ 2704.594673][ T24] usb 2-1: Product: syz [ 2704.595741][ T9] hub 3-1:0.0: USB hub found [ 2704.599923][ T24] usb 2-1: Manufacturer: syz [ 2704.604200][ T1128] hid (null): unknown global tag 0xe [ 2704.624640][T30738] usb 1-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 2704.639913][ T24] usb 2-1: SerialNumber: syz [ 2704.645910][T30738] usb 1-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2704.661205][ T24] usb 2-1: config 0 descriptor?? [ 2704.671027][T30738] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 2704.680341][T30738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2704.688654][T30738] usb 1-1: Product: syz [ 2704.692878][T30738] usb 1-1: Manufacturer: syz [ 2704.694969][ T1128] usb 4-1: string descriptor 0 read error: -71 [ 2704.698856][T30738] usb 1-1: SerialNumber: syz [ 2704.744238][ T1128] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 2704.755202][ T1128] letsketch 0003:6161:4D15.0039: probe with driver letsketch failed with error -32 [ 2704.779059][ T1128] usb 4-1: USB disconnect, device number 81 [ 2704.813742][ T9] hub 3-1:0.0: 1 port detected [ 2704.877133][ T1139] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2704.888578][ T1139] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2704.902294][ T1139] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2704.905856][ T1230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2704.924309][ T1139] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2704.945300][ T1230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2704.968134][T28660] usb 1-1: Failed to submit usb control message: -71 [ 2704.976383][T30738] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2704.991758][T28660] usb 1-1: unable to send the bmi data to the device: -71 [ 2705.000178][T28660] usb 1-1: unable to get target info from device [ 2705.000215][T28660] usb 1-1: could not get target info (-71) [ 2705.000264][T28660] usb 1-1: could not probe fw (-71) [ 2705.005500][T30738] usb 1-1: USB disconnect, device number 55 [ 2705.072195][ T24] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input69 [ 2705.076330][ T1139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2705.135548][ T1139] 8021q: adding VLAN 0 to HW filter on device team0 [ 2705.137737][ T24] usb 2-1: USB disconnect, device number 99 [ 2705.162399][T30715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2705.169576][T30715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2705.197000][T30715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2705.204162][T30715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2705.263352][ T1139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2705.526924][ T1139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2705.545966][ T1253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7712'. [ 2705.550020][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2705.573915][ T9] usb 3-1: Failed to suspend device, error -71 [ 2705.597793][ T9] usb 3-1: USB disconnect, device number 88 [ 2705.851521][ T1259] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input70 [ 2706.246682][ T1270] Bluetooth: MGMT ver 1.23 [ 2706.769817][ T1139] veth0_vlan: entered promiscuous mode [ 2706.783411][ T1139] veth1_vlan: entered promiscuous mode [ 2706.946323][ T1139] veth0_macvtap: entered promiscuous mode [ 2706.975257][ T1139] veth1_macvtap: entered promiscuous mode [ 2707.379608][ T1273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7716'. [ 2707.480237][ T1139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2707.563437][ T1139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2708.312388][T26994] Bluetooth: hci0: command 0x0405 tx timeout [ 2708.414802][ T1285] netlink: 'syz.2.7717': attribute type 1 has an invalid length. [ 2708.422676][ T1285] netlink: 'syz.2.7717': attribute type 2 has an invalid length. [ 2708.734459][ T1139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2708.787098][ T1139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2708.799752][ T1139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2708.822245][ T1139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2709.346797][ T1292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7719'. [ 2709.407127][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2709.471823][T30715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2709.491532][T30715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2709.528017][T30715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2709.537267][T30715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2709.601509][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2709.621215][ T9] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 2709.637105][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2709.664146][ T9] usb 1-1: Product: syz [ 2709.672654][ T9] usb 1-1: Manufacturer: syz [ 2709.677485][ T9] usb 1-1: SerialNumber: syz [ 2709.688720][ T9] usb 1-1: config 0 descriptor?? [ 2709.716634][ T9] gm12u320 1-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 2709.744246][ T9] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 2709.774612][ T9] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2709.849003][ T9] usb-storage 1-1:0.0: device ignored [ 2709.954878][ T9] usb 1-1: USB disconnect, device number 56 [ 2710.881579][T23812] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2711.019745][T23812] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2711.168764][ T1310] FAULT_INJECTION: forcing a failure. [ 2711.168764][ T1310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2711.197071][ T1310] CPU: 0 UID: 0 PID: 1310 Comm: syz.1.7724 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2711.197096][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2711.197107][ T1310] Call Trace: [ 2711.197114][ T1310] [ 2711.197122][ T1310] dump_stack_lvl+0x189/0x250 [ 2711.197150][ T1310] ? __lock_acquire+0xaac/0xd20 [ 2711.197176][ T1310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2711.197199][ T1310] ? __pfx__printk+0x10/0x10 [ 2711.197230][ T1310] ? __might_fault+0xb0/0x130 [ 2711.197257][ T1310] should_fail_ex+0x414/0x560 [ 2711.197274][ T1310] _copy_from_user+0x2d/0xb0 [ 2711.197292][ T1310] ___sys_sendmsg+0x158/0x2a0 [ 2711.197312][ T1310] ? __pfx____sys_sendmsg+0x10/0x10 [ 2711.197352][ T1310] ? __fget_files+0x2a/0x420 [ 2711.197364][ T1310] ? __fget_files+0x3a0/0x420 [ 2711.197382][ T1310] __x64_sys_sendmsg+0x19b/0x260 [ 2711.197401][ T1310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2711.197429][ T1310] ? do_syscall_64+0xba/0x210 [ 2711.197449][ T1310] do_syscall_64+0xf6/0x210 [ 2711.197465][ T1310] ? clear_bhb_loop+0x60/0xb0 [ 2711.197481][ T1310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2711.197493][ T1310] RIP: 0033:0x7f02d218e969 [ 2711.197505][ T1310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2711.197516][ T1310] RSP: 002b:00007f02d2f50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2711.197530][ T1310] RAX: ffffffffffffffda RBX: 00007f02d23b5fa0 RCX: 00007f02d218e969 [ 2711.197539][ T1310] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 2711.197547][ T1310] RBP: 00007f02d2f50090 R08: 0000000000000000 R09: 0000000000000000 [ 2711.197555][ T1310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2711.197562][ T1310] R13: 0000000000000000 R14: 00007f02d23b5fa0 R15: 00007ffdce3981c8 [ 2711.197582][ T1310] [ 2711.710811][T30631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2711.723492][T30631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2711.735248][T30631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2711.757199][T30631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2711.764888][T30631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2711.766582][ T1319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7727'. [ 2711.843913][ T1319] bridge0: entered promiscuous mode [ 2711.909621][ T1319] macsec1: entered promiscuous mode [ 2712.513748][ T1315] lo speed is unknown, defaulting to 1000 [ 2713.680666][ T1336] netlink: 'syz.2.7731': attribute type 1 has an invalid length. [ 2713.689338][ T1336] netlink: 'syz.2.7731': attribute type 2 has an invalid length. [ 2713.820905][T30631] Bluetooth: hci0: command tx timeout [ 2714.032970][ T1337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7730'. [ 2714.538606][T23812] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2714.633232][ T1323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7728'. [ 2714.918747][T23812] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2715.093878][T11888] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 2715.549129][T11888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2715.557726][T11888] usb 2-1: not running at top speed; connect to a high speed hub [ 2715.575846][T11888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2715.586430][T11888] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2715.621691][T11888] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 2715.696920][T11888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2715.714176][ T1358] FAULT_INJECTION: forcing a failure. [ 2715.714176][ T1358] name failslab, interval 1, probability 0, space 0, times 0 [ 2715.736494][T11888] usb 2-1: Product: syz [ 2715.746273][T11888] usb 2-1: Manufacturer: syz [ 2715.759188][ T1361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7737'. [ 2715.771523][T11888] usb 2-1: SerialNumber: syz [ 2715.776361][ T1358] CPU: 0 UID: 0 PID: 1358 Comm: syz.0.7738 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2715.776386][ T1358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2715.776399][ T1358] Call Trace: [ 2715.776407][ T1358] [ 2715.776415][ T1358] dump_stack_lvl+0x189/0x250 [ 2715.776449][ T1358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2715.776475][ T1358] ? __pfx__printk+0x10/0x10 [ 2715.776510][ T1358] ? __pfx___might_resched+0x10/0x10 [ 2715.776549][ T1358] ? fs_reclaim_acquire+0x7d/0x100 [ 2715.776574][ T1358] should_fail_ex+0x414/0x560 [ 2715.776597][ T1358] should_failslab+0xa8/0x100 [ 2715.776616][ T1358] __kmalloc_noprof+0xcb/0x4f0 [ 2715.776641][ T1358] ? kfree+0x4d/0x440 [ 2715.776663][ T1358] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2715.776693][ T1358] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2715.776719][ T1358] ? tomoyo_domain+0xda/0x130 [ 2715.776755][ T1358] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2715.776776][ T1358] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2715.776798][ T1358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2715.776862][ T1358] ? __lock_acquire+0xaac/0xd20 [ 2715.776906][ T1358] ? __fget_files+0x2a/0x420 [ 2715.776929][ T1358] ? __fget_files+0x3a0/0x420 [ 2715.776946][ T1358] ? __fget_files+0x2a/0x420 [ 2715.776968][ T1358] security_file_ioctl+0xcb/0x2d0 [ 2715.776997][ T1358] __se_sys_ioctl+0x47/0x170 [ 2715.777024][ T1358] do_syscall_64+0xf6/0x210 [ 2715.777050][ T1358] ? clear_bhb_loop+0x60/0xb0 [ 2715.777071][ T1358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2715.777086][ T1358] RIP: 0033:0x7fdedb38e969 [ 2715.777107][ T1358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2715.777121][ T1358] RSP: 002b:00007fdedc246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2715.777138][ T1358] RAX: ffffffffffffffda RBX: 00007fdedb5b5fa0 RCX: 00007fdedb38e969 [ 2715.777149][ T1358] RDX: 00002000000000c0 RSI: 0000000040046109 RDI: 0000000000000003 [ 2715.777162][ T1358] RBP: 00007fdedc246090 R08: 0000000000000000 R09: 0000000000000000 [ 2715.777173][ T1358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2715.777182][ T1358] R13: 0000000000000000 R14: 00007fdedb5b5fa0 R15: 00007ffe54777da8 [ 2715.777211][ T1358] [ 2716.011076][ T1315] chnl_net:caif_netlink_parms(): no params data found [ 2716.017223][ T1358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2716.053221][T30631] Bluetooth: hci0: command tx timeout [ 2716.086025][T23812] bridge_slave_1: left allmulticast mode [ 2716.091797][T23812] bridge_slave_1: left promiscuous mode [ 2716.097758][T23812] bridge0: port 2(bridge_slave_1) entered disabled state [ 2716.127354][T23812] bridge_slave_0: left allmulticast mode [ 2716.133080][T23812] bridge_slave_0: left promiscuous mode [ 2716.139348][T23812] bridge0: port 1(bridge_slave_0) entered disabled state [ 2716.335473][T25910] Bluetooth: hci2: Frame reassembly failed (-84) [ 2716.349137][ T1343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2716.368102][ T1343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2717.237078][T30738] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2717.421241][T30738] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2717.431041][T30738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2717.450683][T30738] usb 4-1: config 0 descriptor?? [ 2717.471953][T30738] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2717.544548][T23812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2717.559790][T23812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2717.575751][T23812] bond0 (unregistering): Released all slaves [ 2717.776947][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.805488][ T1315] bridge0: port 1(bridge_slave_0) entered disabled state [ 2717.820934][ T1315] bridge_slave_0: entered allmulticast mode [ 2717.842297][ T1315] bridge_slave_0: entered promiscuous mode [ 2718.033876][T30738] gspca_cpia1: usb_control_msg 03, error -32 [ 2718.065337][T30738] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 2718.135742][ T1387] netlink: 'syz.0.7744': attribute type 1 has an invalid length. [ 2718.143789][ T1387] netlink: 'syz.0.7744': attribute type 2 has an invalid length. [ 2718.326176][T26994] Bluetooth: hci0: command tx timeout [ 2718.353071][T30738] gspca_cpia1: usb_control_msg 01, error -32 [ 2718.377360][T30631] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2718.409117][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 2718.416544][ T1315] bridge0: port 2(bridge_slave_1) entered disabled state [ 2718.428353][ T1315] bridge_slave_1: entered allmulticast mode [ 2718.442735][T11888] usb 2-1: USB disconnect, device number 100 [ 2718.456610][ T1315] bridge_slave_1: entered promiscuous mode [ 2718.599108][ T1389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7745'. [ 2718.747357][ T1392] netlink: 'syz.1.7746': attribute type 1 has an invalid length. [ 2718.748686][ T1315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2718.906583][ T1315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2718.913764][ T1393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2719.549317][T30738] gspca_cpia1: usb_control_msg 01, error -110 [ 2719.555862][T30738] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 2719.624753][ T1315] team0: Port device team_slave_0 added [ 2720.377160][T30631] Bluetooth: hci0: command tx timeout [ 2720.511978][ T1315] team0: Port device team_slave_1 added [ 2720.527119][ T920] usb 4-1: USB disconnect, device number 82 [ 2721.148251][T23812] hsr_slave_0: left promiscuous mode [ 2721.224815][T23812] hsr_slave_1: left promiscuous mode [ 2721.308328][ T1417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7753'. [ 2721.387911][T23812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2721.395359][T23812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2721.447093][T23812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2721.459881][T23812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2721.764324][T23812] veth1_macvtap: left promiscuous mode [ 2721.784972][T23812] veth0_macvtap: left promiscuous mode [ 2721.796825][T23812] veth1_vlan: left promiscuous mode [ 2721.804641][T23812] veth0_vlan: left promiscuous mode [ 2722.097238][T20175] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 2722.385237][T20175] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 2722.407050][T20175] usb 1-1: config 0 has no interface number 0 [ 2722.417062][T20175] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2722.455507][T20175] usb 1-1: config 0 interface 200 has no altsetting 0 [ 2722.511570][T20175] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 2722.541928][T20175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2722.554023][T20175] usb 1-1: Product: syz [ 2722.558777][T20175] usb 1-1: Manufacturer: syz [ 2722.565074][T20175] usb 1-1: SerialNumber: syz [ 2722.607676][T20175] usb 1-1: config 0 descriptor?? [ 2722.839232][ T1420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2722.851767][ T1420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2722.926655][ T1438] netlink: 'syz.2.7757': attribute type 1 has an invalid length. [ 2722.934764][ T1438] netlink: 'syz.2.7757': attribute type 2 has an invalid length. [ 2723.412953][T20175] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input71 [ 2723.449981][T20175] usb 1-1: USB disconnect, device number 57 [ 2723.703468][T23812] team0 (unregistering): Port device team_slave_1 removed [ 2723.753857][T23812] team0 (unregistering): Port device team_slave_0 removed [ 2725.728363][ T1315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2725.735389][ T1315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2725.761988][ T1315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2725.907561][ T1315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2725.914548][ T1315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2726.223051][ T1448] Bluetooth: MGMT ver 1.23 [ 2726.317574][ T1315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2726.999475][ T1315] hsr_slave_0: entered promiscuous mode [ 2727.028407][ T1315] hsr_slave_1: entered promiscuous mode [ 2728.297418][T30631] Bluetooth: hci0: command tx timeout [ 2728.487181][T12881] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2728.628734][ T1315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2728.637395][T12881] usb 1-1: Using ep0 maxpacket: 16 [ 2728.639309][ T1315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2728.652884][T12881] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2728.653120][ T1315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2728.665465][T12881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2728.682175][ T1315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2728.685255][T12881] usb 1-1: Product: syz [ 2728.693382][T12881] usb 1-1: Manufacturer: syz [ 2728.703036][T12881] usb 1-1: SerialNumber: syz [ 2728.711256][T12881] usb 1-1: config 0 descriptor?? [ 2728.805109][ T1315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2728.827682][ T1315] 8021q: adding VLAN 0 to HW filter on device team0 [ 2728.856531][T25147] bridge0: port 1(bridge_slave_0) entered blocking state [ 2728.863719][T25147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2728.891503][T25147] bridge0: port 2(bridge_slave_1) entered blocking state [ 2728.898723][T25147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2729.000177][ T1473] netlink: 'syz.3.7768': attribute type 21 has an invalid length. [ 2729.059967][ T1475] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2729.143410][T12881] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2729.168338][T12881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2729.200483][T12881] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2729.357326][T12881] usb 1-1: media controller created [ 2729.371229][ T1479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7769'. [ 2729.447159][ T1482] netlink: 'syz.3.7770': attribute type 1 has an invalid length. [ 2729.455536][ T1482] netlink: 'syz.3.7770': attribute type 2 has an invalid length. [ 2729.940292][T12881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2730.095887][T12881] zl10353_read_register: readreg error (reg=127, ret==0) [ 2730.116653][T12881] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2730.138303][T12881] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2730.170173][T12881] usb 1-1: USB disconnect, device number 58 [ 2730.185950][ T1315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2730.287777][T30738] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 2730.296674][T12881] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2730.472775][T30738] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2730.596936][T30738] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 2730.621475][T30738] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 2730.639501][T30738] usb 2-1: Product: syz [ 2730.643797][T30738] usb 2-1: Manufacturer: syz [ 2730.666570][T30738] usb 2-1: SerialNumber: syz [ 2730.826529][T30738] usb 2-1: config 0 descriptor?? [ 2730.895376][T30738] gspca_main: conex-2.14.0 probing 0572:0041 [ 2732.005660][T30738] usb 2-1: USB disconnect, device number 101 [ 2732.205714][ T1315] veth0_vlan: entered promiscuous mode [ 2732.651489][ T1315] veth1_vlan: entered promiscuous mode [ 2733.010177][ T1315] veth0_macvtap: entered promiscuous mode [ 2733.180934][ T1315] veth1_macvtap: entered promiscuous mode [ 2733.281202][ T1315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2733.342330][ T1315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2733.380078][ T1315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2733.413703][ T1315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2733.437158][ T1315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2733.447495][ T1315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2733.624779][T25147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2733.650898][T25147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2733.684036][T23812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2733.693653][T23812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2734.026455][T15214] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.147231][T15214] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.282396][T15214] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.396947][T15214] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.494501][T15214] bridge_slave_1: left allmulticast mode [ 2734.500439][T15214] bridge_slave_1: left promiscuous mode [ 2734.508091][T15214] bridge0: port 2(bridge_slave_1) entered disabled state [ 2734.518590][T15214] bridge_slave_0: left allmulticast mode [ 2734.524234][T15214] bridge_slave_0: left promiscuous mode [ 2734.531346][T15214] bridge0: port 1(bridge_slave_0) entered disabled state [ 2735.401260][T15214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2735.571149][T15214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2735.626022][T15214] bond0 (unregistering): Released all slaves [ 2736.749379][T26994] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2736.765861][T26994] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2736.776222][T26994] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2736.791431][T26994] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2736.923297][T26994] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2737.576134][ T1553] lo speed is unknown, defaulting to 1000 [ 2738.821901][T15214] hsr_slave_0: left promiscuous mode [ 2738.833296][T15214] hsr_slave_1: left promiscuous mode [ 2738.839282][T15214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2738.851475][T15214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2738.865347][T15214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2738.874479][T15214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2738.903690][T15214] veth1_macvtap: left promiscuous mode [ 2738.909408][T15214] veth0_macvtap: left promiscuous mode [ 2738.916307][T15214] veth1_vlan: left promiscuous mode [ 2738.922141][T15214] veth0_vlan: left promiscuous mode [ 2739.107253][T30631] Bluetooth: hci0: command tx timeout [ 2739.834858][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2740.077291][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2740.115553][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2740.137451][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2740.157342][ T9] usb 3-1: Product: syz [ 2740.161707][ T9] usb 3-1: Manufacturer: syz [ 2740.166322][ T9] usb 3-1: SerialNumber: syz [ 2740.175671][ T9] usb 3-1: config 0 descriptor?? [ 2740.552687][ T1602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7800'. [ 2740.574546][ T1604] netlink: 'syz.0.7801': attribute type 21 has an invalid length. [ 2740.608445][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2740.621969][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2740.626386][T15214] team0 (unregistering): Port device team_slave_1 removed [ 2740.643379][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2740.662893][ T9] usb 3-1: media controller created [ 2740.701285][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2740.752505][T15214] team0 (unregistering): Port device team_slave_0 removed [ 2741.177474][T30631] Bluetooth: hci0: command tx timeout [ 2741.301957][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 2741.309558][ T1587] dtv5100: wlen = fa, aborting. [ 2741.316175][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2741.334550][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2741.362090][ T9] usb 3-1: USB disconnect, device number 89 [ 2741.406648][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2741.613790][ T1608] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2741.692422][ T1553] chnl_net:caif_netlink_parms(): no params data found [ 2741.943154][ T1553] bridge0: port 1(bridge_slave_0) entered blocking state [ 2741.959274][ T1553] bridge0: port 1(bridge_slave_0) entered disabled state [ 2741.966613][ T1553] bridge_slave_0: entered allmulticast mode [ 2741.980751][ T1553] bridge_slave_0: entered promiscuous mode [ 2742.074304][ T1553] bridge0: port 2(bridge_slave_1) entered blocking state [ 2742.620439][ T1625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7805'. [ 2742.829357][ T1553] bridge0: port 2(bridge_slave_1) entered disabled state [ 2742.889458][ T1553] bridge_slave_1: entered allmulticast mode [ 2742.896582][ T1553] bridge_slave_1: entered promiscuous mode [ 2743.270910][T26994] Bluetooth: hci0: command tx timeout [ 2743.581383][ T1553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2743.706921][ T1553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2743.884742][ T1553] team0: Port device team_slave_0 added [ 2743.909678][ T1553] team0: Port device team_slave_1 added [ 2744.097512][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2744.243671][ T1553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2744.251730][ T1553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2744.269218][ T9] usb 1-1: config 118 interface 0 has no altsetting 0 [ 2744.278754][ T1553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2744.350899][ T9] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 2744.360156][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2744.367885][ T1553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2744.376812][ T1553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2744.403714][ T9] usb 1-1: Product: syz [ 2744.414077][ T9] usb 1-1: Manufacturer: syz [ 2744.421573][ T1553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2744.612342][ T9] usb 1-1: SerialNumber: syz [ 2744.695038][ T1654] netlink: 'syz.1.7813': attribute type 1 has an invalid length. [ 2744.703620][ T1654] netlink: 'syz.1.7813': attribute type 2 has an invalid length. [ 2745.426498][T26994] Bluetooth: hci0: command 0x0419 tx timeout [ 2745.452454][ T9] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 2745.476936][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2745.562364][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 2745.574110][ T9] usb 1-1: media controller created [ 2745.603800][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2745.876101][ T1661] netlink: 'syz.3.7814': attribute type 1 has an invalid length. [ 2745.884492][ T1661] netlink: 'syz.3.7814': attribute type 2 has an invalid length. [ 2746.458373][ T1553] hsr_slave_0: entered promiscuous mode [ 2746.473577][ T1553] hsr_slave_1: entered promiscuous mode [ 2746.599889][ T9] DVB: Unable to find symbol mt352_attach() [ 2746.605841][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 2746.619878][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input72 [ 2746.639539][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 2746.668286][ T9] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 2746.703357][ T1665] FAULT_INJECTION: forcing a failure. [ 2746.703357][ T1665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2746.749405][ T1665] CPU: 0 UID: 0 PID: 1665 Comm: syz.1.7816 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2746.749432][ T1665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2746.749444][ T1665] Call Trace: [ 2746.749451][ T1665] [ 2746.749459][ T1665] dump_stack_lvl+0x189/0x250 [ 2746.749490][ T1665] ? __lock_acquire+0xaac/0xd20 [ 2746.749516][ T1665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2746.749540][ T1665] ? __pfx__printk+0x10/0x10 [ 2746.749566][ T1665] ? __might_fault+0xb0/0x130 [ 2746.749604][ T1665] should_fail_ex+0x414/0x560 [ 2746.749627][ T1665] _copy_from_user+0x2d/0xb0 [ 2746.749653][ T1665] __sys_bind+0x199/0x3e0 [ 2746.749676][ T1665] ? __pfx___sys_bind+0x10/0x10 [ 2746.749715][ T1665] __x64_sys_bind+0x7a/0x90 [ 2746.749736][ T1665] do_syscall_64+0xf6/0x210 [ 2746.749760][ T1665] ? clear_bhb_loop+0x60/0xb0 [ 2746.749783][ T1665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2746.749800][ T1665] RIP: 0033:0x7f02d218e969 [ 2746.749816][ T1665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2746.749832][ T1665] RSP: 002b:00007f02d2f50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2746.749851][ T1665] RAX: ffffffffffffffda RBX: 00007f02d23b5fa0 RCX: 00007f02d218e969 [ 2746.749864][ T1665] RDX: 0000000000000018 RSI: 0000200000000380 RDI: 0000000000000003 [ 2746.749876][ T1665] RBP: 00007f02d2f50090 R08: 0000000000000000 R09: 0000000000000000 [ 2746.749887][ T1665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2746.749898][ T1665] R13: 0000000000000000 R14: 00007f02d23b5fa0 R15: 00007ffdce3981c8 [ 2746.749926][ T1665] [ 2746.987933][T11888] m920x_read = error: -71 [ 2746.992677][T11888] dvb-usb: error while querying for an remote control event. [ 2747.000598][ T9] dvb_usb_m920x 1-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 2747.012035][ T9] usb 1-1: USB disconnect, device number 59 [ 2747.109517][ T920] m920x_read = error: -19 [ 2747.119744][ T920] dvb-usb: error while querying for an remote control event. [ 2747.248229][ T9] m920x_read = error: -19 [ 2747.290480][ T9] dvb-usb: error while querying for an remote control event. [ 2747.546128][ T9] m920x_read = error: -19 [ 2747.579995][ T9] dvb-usb: error while querying for an remote control event. [ 2747.603244][T30628] non-paged memory [ 2747.607620][T30628] list_del corruption, ffff88805aee3600->next is LIST_POISON1 (dead000000000100) [ 2747.617794][T30628] ------------[ cut here ]------------ [ 2747.623344][T30628] kernel BUG at lib/list_debug.c:58! [ 2747.654304][T30628] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 2747.660575][T30628] CPU: 1 UID: 0 PID: 30628 Comm: kworker/u9:1 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 2747.672802][T30628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2747.682863][T30628] Workqueue: hci0 hci_conn_timeout [ 2747.687992][T30628] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 2747.695013][T30628] Code: 80 26 c1 8b 48 89 de e8 50 b6 6f fc 90 0f 0b 4c 89 e7 e8 f5 61 48 fd 48 c7 c7 e0 26 c1 8b 48 89 de 4c 89 e2 e8 33 b6 6f fc 90 <0f> 0b 4c 89 e7 e8 d8 61 48 fd 48 c7 c7 40 27 c1 8b 48 89 de 4c 89 [ 2747.714610][T30628] RSP: 0018:ffffc9000b6cfa20 EFLAGS: 00010246 [ 2747.720670][T30628] RAX: 000000000000004e RBX: ffff88805aee3600 RCX: 0bb05441eb0cc200 [ 2747.728632][T30628] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2747.736593][T30628] RBP: ffffffff8a5fb340 R08: 0000000000000003 R09: 0000000000000004 [ 2747.744553][T30628] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: dead000000000100 [ 2747.752522][T30628] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 2747.760493][T30628] FS: 0000000000000000(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 2747.769410][T30628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2747.775985][T30628] CR2: 00007f6345212f6f CR3: 0000000030610000 CR4: 00000000003526f0 [ 2747.783954][T30628] Call Trace: [ 2747.787229][T30628] [ 2747.790152][T30628] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 2747.795803][T30628] hci_cancel_connect_sync+0xc8/0x120 [ 2747.801170][T30628] hci_abort_conn+0x191/0x330 [ 2747.805836][T30628] ? process_scheduled_works+0x9ec/0x17a0 [ 2747.811562][T30628] process_scheduled_works+0xade/0x17a0 [ 2747.817117][T30628] ? __pfx_process_scheduled_works+0x10/0x10 [ 2747.823105][T30628] worker_thread+0x8a0/0xda0 [ 2747.827700][T30628] kthread+0x711/0x8a0 [ 2747.831762][T30628] ? __pfx_worker_thread+0x10/0x10 [ 2747.836862][T30628] ? __pfx_kthread+0x10/0x10 [ 2747.841451][T30628] ? __pfx_kthread+0x10/0x10 [ 2747.846033][T30628] ? _raw_spin_unlock_irq+0x23/0x50 [ 2747.851312][T30628] ? lockdep_hardirqs_on+0x9c/0x150 [ 2747.856514][T30628] ? __pfx_kthread+0x10/0x10 [ 2747.861103][T30628] ret_from_fork+0x4b/0x80 [ 2747.865511][T30628] ? __pfx_kthread+0x10/0x10 [ 2747.870094][T30628] ret_from_fork_asm+0x1a/0x30 [ 2747.874865][T30628] [ 2747.877901][T30628] Modules linked in: [ 2747.883764][T30628] ---[ end trace 0000000000000000 ]--- [ 2747.947201][T11888] m920x_read = error: -19 [ 2747.955038][T11888] dvb-usb: error while querying for an remote control event. [ 2748.599471][T11888] m920x_read = error: -19 [ 2748.604150][T11888] dvb-usb: error while querying for an remote control event. [ 2748.619560][T30628] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 2748.657440][T30628] Code: 80 26 c1 8b 48 89 de e8 50 b6 6f fc 90 0f 0b 4c 89 e7 e8 f5 61 48 fd 48 c7 c7 e0 26 c1 8b 48 89 de 4c 89 e2 e8 33 b6 6f fc 90 <0f> 0b 4c 89 e7 e8 d8 61 48 fd 48 c7 c7 40 27 c1 8b 48 89 de 4c 89 [ 2748.677754][T30628] RSP: 0018:ffffc9000b6cfa20 EFLAGS: 00010246 [ 2748.693674][T30628] RAX: 000000000000004e RBX: ffff88805aee3600 RCX: 0bb05441eb0cc200 [ 2748.715604][T30628] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2748.725396][T30628] RBP: ffffffff8a5fb340 R08: 0000000000000003 R09: 0000000000000004 [ 2748.735133][T30628] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: dead000000000100 [ 2748.749009][T30628] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 2748.763923][T30628] FS: 0000000000000000(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000 [ 2748.775126][T30628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2748.787742][T30628] CR2: 0000001b2ca19fa0 CR3: 000000007fbde000 CR4: 00000000003526f0 [ 2748.798962][T30628] DR0: 0000000000000081 DR1: 2000000000000006 DR2: 0800001000000002 [ 2748.808257][T30628] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2748.822542][T30628] Kernel panic - not syncing: Fatal exception [ 2748.828944][T30628] Kernel Offset: disabled [ 2748.833271][T30628] Rebooting in 86400 seconds..