last executing test programs: 19.01332936s ago: executing program 3 (id=1853): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xfffffffffffffd1c) setuid(r2) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x48, 0x0, "27f3fc07ecd95dffbc6d201f226d29f08b4a0d395e97341f023c7a1eeebbe66eba77d5bf8f607b151b81afe82dcf75ac3f28764097114d5c10583b5888e40aa19d86e36b46a7d7aa67ef49d6d8f59d60"}, 0xd8) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4101, 0x1005}], 0x1, 0x0, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYRES8=r1, @ANYRES64=0x0], 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) 16.845861673s ago: executing program 3 (id=1861): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = syz_open_dev$dri(0x0, 0x5, 0x208082) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0xc000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x1a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'erspan0\x00', 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000340)={0x0, 0x0, r1}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={0x94, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5f, 0xa8, @random="62410861e2f5bfd8061ffa0c7f3f12b3462c3fe56cd5a5741753508f80717f0986fea93e02f1beb559043244bc92608ca33a6f22284c64a70cf4a63b23fcceac508db54590ab8be093629cd8fce71c061d2b995be4f3bfc54b6000"}]}, 0x94}, 0x1, 0x0, 0x0, 0xd1}, 0x40044) 14.258080161s ago: executing program 3 (id=1865): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 13.412453652s ago: executing program 1 (id=1867): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0xbc}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x2c}}, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) 13.174345242s ago: executing program 2 (id=1868): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04ff"], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r5, &(0x7f00000007c0)=""/29, 0x1d, 0x9) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="dcbb2ec18a", 0x5}], 0x1, 0x0, 0x0, 0x6000004}}], 0x1, 0x40050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18000000160a010100000000000000000100000004000380140000001000010000000000000000000002000ad1492a80952dfcbee1b824bb8adeb53c8884992c26deff6bcf8dad9b851e51268b7c4498000c2476b75b86b9cf239019395d9e756d9863716702ca1fd51f7cda088e70fb00bdc906113bfe238a22d33381486f2664504d01ed4f3b1f88f2747d76414b6a93f5e9622ac4b7891df2497439a808db642f2b534e07330db4d08eaef046"], 0x40}}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x10000, @private2}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 12.662972376s ago: executing program 2 (id=1869): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x11, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200f9ff"], 0x0) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) r7 = getpgrp(r5) syz_open_procfs$userns(r7, &(0x7f0000000080)) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 12.437145594s ago: executing program 1 (id=1872): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r0, 0x890b, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000007e80)=[{{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x3, &(0x7f0000000380)=""/95, 0x5f}}, {{&(0x7f0000000400)=@caif=@dbg, 0x80, &(0x7f0000000280)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/135, 0x87}, 0x3}, {{&(0x7f0000000580)=@qipcrtr, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)=""/32, 0x20}], 0x1, &(0x7f0000000680)=""/38, 0x26}, 0x24}, {{&(0x7f00000006c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000740)=""/113, 0x71}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f00000009c0)=""/3, 0x3}, {&(0x7f0000000a00)=""/50, 0x32}, {&(0x7f0000000a40)=""/127, 0x7f}, {&(0x7f0000000b00)=""/45, 0x2d}], 0x8, &(0x7f0000000c00)=""/229, 0xe5}, 0x46}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, &(0x7f0000001180), 0x0, &(0x7f00000011c0)=""/151, 0x97}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)=""/4096, 0x1000}, 0x111}, {{&(0x7f00000078c0)=@can, 0x80, 0x0}, 0x5}, {{&(0x7f0000007cc0)=@isdn, 0x80, &(0x7f0000007e40)=[{&(0x7f0000007700)=""/86, 0x56}, {&(0x7f0000007dc0)=""/114, 0x72}], 0x2}, 0x2}], 0x9, 0x7dc140cddddd1152, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a208"], 0x10}}, 0x0) 12.089169593s ago: executing program 2 (id=1874): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r1, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYBLOB], 0x10) close(r3) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x9, 0x4) ioctl$TUNSETLINK(r4, 0x400454cd, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) 11.216050011s ago: executing program 4 (id=1875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8], [0x4], [0x0, 0x4]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}], '\x00', 0x1268000, 0x0, 0x0, 0x5000000, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r10}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x48800) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r11 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r5, &(0x7f0000003e00)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000440)}, {&(0x7f0000000480)="db131ef87b4d86de2ae0d46b8bb9a5a0", 0x10}, {&(0x7f0000000740)="4fa2bc6786040edac602110ab840694111daae248dae9ea95d9ce723217e7f40ada3f3fb21bf19cf6a636424c98714d6fb93bfd8619e34fa7a6895793bb7a2f89d775ce8054451eff3c0f3a9efee7111e90b7af51dbe2242422478b84cc0033390f7ccaa535e259dcd2e71cb122bde3f18e620be15213a920e5ec29e2bba98aac4d95628c43f079d4d0c3f28bac5e990e6a61d8dfef2817383a4c35807bfd952d2b8e1936e95a2a650c55ead6029ac4930455c509e5c16293ca554b7a0626014414226f0352d2bc762c6875d4e2a1147bd537f395e80d1", 0xd7}, {&(0x7f0000000840)="8da7781c4d625bc331854c62234eb8ec0e301d745feb2e9c6d5110a35c2baf88cc0d4368e0be4de89d6ccefbd1f5ebb7f3b6c7598eece4f874aa64e7853d321ca9980a56ca0fc08db9491b57e7fa26831d7cb8c5c7bb2e697b2082865f291b34940040706d8caae7aba48607597cb283555b6858d6c761ffcbc2f6e90fde6eae7d", 0x81}, {&(0x7f00000004c0)="b37066a99cbd32a605a6fcdf7970f583204cccdb0be41000628be105dfb1198489d06c0efecc30d6fde30b02e071705a30a3ad49b67ff819c34e166f8e6d2e72ee63a4be7d5f5c25362c22", 0x4b}, {&(0x7f0000000900)="1c7bcb1fbc618a27c7bb63fca3d8ac12690f3971981d0494b402c9b4b86478b24cdadf0a31941881575e7630988989f71905e16b8ce9e35f987370f90e6fca1480af666b746ecd9f92e7e991038713867712c6186c0633aa2d273933888361512551d98d9a42f2d06e4ad178dcff278bfa23fd83d9a400b294396decd53fdad832a1ada6df2d9798eb9c9360283364b6fe", 0x91}, {&(0x7f00000009c0)="448623f1730ad5219b6b8da4db538f6507f76e8ace66dcc4076b29f5b9892f256a1d6752c705c4d5e07fb935561d8dc44b14cd296cd1506343e3029bef74c3cef0c0d72da329cfccef4529a9392d5b85632be65f6b64d0784ba17b1c281253cd1b0932bbc34909b70f0a187e5ba084d86f1eb39a1e7f6879519b48cb521faf5b17890bde85ec58302b15a4be3e484e5157b8db19b5ee95d7137b02a46de484a4", 0xa0}, {&(0x7f0000000a80)="ddc15ffcc43cd8b143bc0296c711aa76e15119e7f39ed2c8d1d35901392455013c35348d3957613474b0245cf75dc957d207445175d9dc3a02b486661bcfc03328fd9912333f645c76b50c6bbad759de5e3366155a6e62e652f57f04096911b3e4fb0fea4b4c3764822a5dec2a3cb1d83495d03585aa6778d10dbc11dd4ea5643c86a05bc77cfb22f04e4776131edfc8cb394c42f6f18918c38b202c4e51055de88154cb77e76060bb60b730f1376be059b30352eb0183466919a7ba06", 0xbd}], 0x8, 0x0, 0x0, 0x5}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000000c40)="dce64123266458cb0c3d4e", 0xb}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="4936d8f0a4061bfa2ce40de640c9043eb6d3ea4c3138e383c74b1e48e0205236d598c354c44d444da33b82d2d32a4ea5a9b54abe300610", 0x37}, {&(0x7f0000002cc0)}, {0xffffffffffffffff}, {&(0x7f0000002d00)="446fa64f6652fd67e1a29e605448044ac97d8853fa16d6db0741868af6bfb662d8dd9725fc75887c7dcf88373be9fff153402997ffd0ddd177a247205fec6656", 0x40}, {&(0x7f0000002d40)="ea315aaee231198eb413693cca7f46f68aa4a03e99ba9056962a8642704ded824bca11edc49418ca49f331", 0x2b}, {&(0x7f0000002d80)="347157743497b5910841151d0135810c666577ce3da563c6041951fc87e0214d3685ef4fb15e9ced947ee5d3ac676bae8782b349831a22f0ddfa4a2c0a43020af7300d5fe8b2f6de4bc4bacbd1c3439fc9664ff46c87114f32ee9d1acca16623d08ddbc4b925e04d36c989", 0x6b}, {&(0x7f0000002e00)="3de5d47aa945f17663c4fe207c158be47429d16db593a20286b0c62969da09b9bddf43199f0b33020c21c204e4d366cc7a70402c11e04728e0dbfbfab05ca2a86a4263b68af01f721285bc06653f6b117f23c64a4a3d439e0570e712964c2357dd161b3780e20d440504a6c338ede074ba076030cc416fd6645cd536728322789567127c18b62357e2d460fe0155698337a15449f33363a625c7c64f5fc61938e719a297820669d1fb16c78fd1910b6b2e4d", 0xb2}], 0xa, &(0x7f0000003200)=[@rights={{0x24, 0x1, 0x1, [r6, r3, r6, r6, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r6, 0xffffffffffffffff, r3]}}, @rights={{0x30, 0x1, 0x1, [r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, r4, r2, r6, r6]}}, @rights={{0x18, 0x1, 0x1, [r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}], 0xf8}}, {{&(0x7f0000003300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003700)=[{&(0x7f0000003380)="693bc9393e05fcc30b901c24bbe0017266f702381d7c4c1a1f51225d4d835e0dfca7ab1c425d7c1d014c47088dd371155d74543aa034fbb750ac857f39d2287e27ea3b0505dd0f856026d0ead607d757fa355cffc4e8e696b63efe5b721131b5676f8a70cb0abfd8ae7cdfee0b240a1daa1c205acd1103e6e011778d78ebf92b098fd224a92f001565e841f8fe25899a95e25fc053d350495b77a28dd55a943cbcfa207e841b08a105be035f2114b3de9dfc32eada0b5c70200b3596e9839d6651caa5993260e7e1fb7d430add3e7f", 0xcf}, {&(0x7f0000003480)="beac5787256d060074dff7475949180da94efb742c0c82951cff3b91d8bbccdf6cce835338a3", 0x26}, {&(0x7f00000034c0)="fdb706bc9d5a8e63902f6c15aab65721041c48cd2ec1acee3ba172375aa17ba2e76329", 0x23}, {&(0x7f0000003500)="719e0c7bbf1587f0c9a7ed32819c", 0xe}, {&(0x7f0000003540)="d8fb8cb3ce130a572f3cad05704b7ab83ec8ed055331df0d2788b519c7cd41581ec050e2d8e53c604b8c0f3dbb728212c190e4b3c650248ad9516edae9b9eed953fab98fa9b66b", 0x47}, {&(0x7f00000035c0)="bca6f220ae35052d60670917334946de283d0d3eb8d5c8a48cacf510771d1d3f0b8a8472f4cf7d10d81387d78ef0cac6058c4fb1336ad88e39140d306d779081c57601ead56fc3870441d2a6d6f6d0c1fe", 0x51}, {&(0x7f0000003640)="5e570ffde8190fbc746179c815d0de5c0b5c34dd7c8e4e6277b675d1056b5ede34e72b5ab620ce005b6de34167176350da7acf61958b18fc63a0f520294286c9d852b85c09cd81a2b825f1505de4c04a339aef8165941aa70e9ffb25c6105dc27cc0998103b22497db6fa9a8f5a9aa3975a89a0e9f31991c0011213df25edf0e19b3f495506994237b223952b905e930080b925dc64ca5e4765984", 0x9b}], 0x7, &(0x7f0000003840)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [r8, r3, r3]}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x58, 0x20084010}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000038c0)="4c669ba5cf93ab07f5ca91990827b2b84d8448adf75fe82b317cb82ce92f74a5b55978ee9e6b733e6b1d88b0ccd7aad919434b2b9aa81bd85465b075bfc2d3be5fcd05551bf5004d0d64a96cf1fc38089837dfa3c6a8d7947eebebbcf0ae7c1ffc2fce8fdd072f70f24647098a0221a7827ff36d205976d0250f94f530bea72df86fe539cd657718e2771d62d7d5bf87240ed844affb3a9d7d44240166134a7b9c26559b8633aadcf64733cf", 0xac}, {&(0x7f0000003980)="5f1840e730ed41bd930891c79e22b8beaf49331aa871b0132d399482492548b70232ef23c695793608d2cb5dacb58efe67eb417d99781dfd8d47b42baf5a816fb681d417300155", 0x47}, {&(0x7f0000003a00)="e1b2f5bf0fcec7efdeba17c1f0309074b8933442af5729e19e234197f042e10c222af8a2205afcff2bac86ba3618bdf3d6086522f9a692c2f4650373115f42bc7bf59b37a3669aa4e049d77b4bdc86b1e39fc583ef304b4ee0937b5605ca70119469ea", 0x63}, {&(0x7f0000003a80)="62072fa37bd405ccad22de99c5449f6d39138ca5d0c2d558ed79d71c53845fccff8d5dfc80c6b5c3301a141039d6fc9c1e40f1e7430ca97ad4395f7d45371bca79d48c56d94ef18308cc6f6cec843a5cd06745cc78acc8e9a5b4e65a3d07f78eafbe7e2d8a9579c3b9932e59f229c353aa26bcc84834b4e34248c92370e281a6a393e9", 0x83}], 0x4, &(0x7f0000003d40)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r4]}}, @rights={{0x30, 0x1, 0x1, [r9, r9, r2, 0xffffffffffffffff, r11, r8, r8, r9]}}], 0xb0, 0x4800}}], 0x4, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.608045894s ago: executing program 2 (id=1876): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000040)={{0x7f, 0x8}, 0x15}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) 7.60680007s ago: executing program 3 (id=1877): io_uring_setup(0x2e34, &(0x7f0000000180)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000580), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) unshare(0x2c060000) unshare(0x24020400) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) bind$bt_l2cap(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) sendmmsg$sock(r6, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/nfsfs\x00') write$P9_RVERSION(r7, &(0x7f0000000240)=ANY=[], 0x15) 7.47205751s ago: executing program 4 (id=1878): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = userfaultfd(0x1800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)) sendmmsg$unix(r4, &(0x7f00000002c0), 0x0, 0x804) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='sock_exceed_buf_limit\x00', r5, 0x0, 0x9}, 0x18) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0xfffffffc, @private0}]}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x66, 0x0, &(0x7f0000000140)) fcntl$dupfd(r1, 0x0, r2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa8e9ec00053630000000000000052b333216278a7f16be655dcc7378281f863d4bfd6afd35d86207234f2706875ecd03947369856cfea7d93f2a22858e069156f18b7420771c8971d1507c065a4c2faebe7b54aba0c16ccf03052ac246e6676c7da93"], 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) 7.344935022s ago: executing program 1 (id=1879): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04ff"], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r5, &(0x7f00000007c0)=""/29, 0x1d, 0x9) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="dcbb2ec18a", 0x5}], 0x1, 0x0, 0x0, 0x6000004}}], 0x1, 0x40050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18000000160a010100000000000000000100000004000380140000001000010000000000000000000002000ad1492a80952dfcbee1b824bb8adeb53c8884992c26deff6bcf8dad9b851e51268b7c4498000c2476b75b86b9cf239019395d9e756d9863716702ca1fd51f7cda088e70fb00bdc906113bfe238a22d33381486f2664504d01ed4f3b1f88f2747d76414b6a93f5e9622ac4b7891df2497439a808db642f2b534e07330db4d08eaef046"], 0x40}}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x10000, @private2}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 6.756845114s ago: executing program 1 (id=1880): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000000c0)={0x20, 0xf, 0x1, 'N'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 6.38784218s ago: executing program 3 (id=1881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mm_lru_activate\x00', r2, 0x0, 0x8000000000000001}, 0x18) flock(r4, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) flock(r5, 0x2) flock(r5, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$inet(0xa, 0x801, 0x7) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = io_uring_setup(0x67bb, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00h'], 0x64}}, 0x0) io_uring_enter(r7, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 6.387287112s ago: executing program 4 (id=1882): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000008640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffb34f}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="e7463431c7467d936e808b10aac8e9", 0xf}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000088c0)=ANY=[], 0xf8}}], 0x2, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x1a2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x20) msgrcv(r5, 0x0, 0x0, 0x0, 0x2000) msgrcv(r5, 0x0, 0x0, 0x2, 0x1000) msgsnd(r5, &(0x7f0000001800)={0x2}, 0x8, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCCBRK(r1, 0x5428) 5.069691703s ago: executing program 3 (id=1885): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000006000040000000000000000099af43e41a0b9145a4c71342", @ANYRES16=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_io_uring_setup(0x5129, 0x0, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x8) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40186f40, 0x20000502) flock(r3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffc72) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYRESHEX=r5], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r7}, 0x10) 4.917248973s ago: executing program 0 (id=1886): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r1, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYBLOB], 0x10) close(r3) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x9, 0x4) ioctl$TUNSETLINK(r4, 0x400454cd, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) 4.790751035s ago: executing program 0 (id=1887): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) (fail_nth: 1) 4.726649652s ago: executing program 2 (id=1888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) r2 = socket(0x2, 0x3, 0xff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000064010102000000000000000000000000fc0100000000000000000000000000000000000000000000020000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000ec2f000000000000000000030000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000200000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000fffffffe3c000000000000000a010101000000000000000000000000000000000000eb00"/178], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0xfffffef9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x182, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x700, 0x8, 0x8, 0xffff, {{0x5, 0x4, 0x1, 0x26, 0x14, 0x67, 0x0, 0x5, 0x2f, 0x0, @empty, @private=0xa010101}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', r8, 0x2f, 0xb4, 0x4, 0xfffffffe, 0x6a, @dev={0xfe, 0x80, '\x00', 0x39}, @local, 0x10, 0x80, 0x9, 0x7}}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) 4.465129666s ago: executing program 0 (id=1889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x57, 0x24008080, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x200e, 0x0, 0x0, 0x7fffffff, 0x1}, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeccc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000020000100000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{}, {0x0, 0x9, 0x0, '\x00', 0xff}, {0x0, 0x12}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {}, {}, {0x0, 0x9b, 0x2}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {0xe, 0x0, 0x6}, {}, {}, {0x0, 0x4}, {0x0, 0x40, 0x9}, {0x0, 0x2}]}}) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000028000100008000000000000004000000"], 0x14}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.457161478s ago: executing program 4 (id=1890): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x14, r2, 0xb03}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r3, 0x890b, &(0x7f0000000000)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) r6 = socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f0000007e80)=[{{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x3, &(0x7f0000000380)=""/95, 0x5f}}, {{&(0x7f0000000400)=@caif=@dbg, 0x80, &(0x7f0000000280)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/135, 0x87}, 0x3}, {{&(0x7f0000000580)=@qipcrtr, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)=""/32, 0x20}], 0x1, &(0x7f0000000680)=""/38, 0x26}, 0x24}, {{&(0x7f00000006c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000740)=""/113, 0x71}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f00000009c0)=""/3, 0x3}, {&(0x7f0000000a00)=""/50, 0x32}, {&(0x7f0000000a40)=""/127, 0x7f}, {&(0x7f0000007600)=""/19, 0x13}, {&(0x7f0000000b00)=""/45, 0x2d}], 0x9, &(0x7f0000000c00)=""/229, 0xe5}, 0x46}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d00)=""/9, 0x9}, {&(0x7f0000000d40)=""/239, 0xef}, {&(0x7f0000000e40)=""/192, 0xc0}, {&(0x7f0000000f40)=""/212, 0xd4}], 0x4}, 0xe}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/246, 0xf6}], 0x1, &(0x7f00000011c0)=""/151, 0x97}, 0x3}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001280)=""/236, 0xec}, {&(0x7f0000001380)=""/204, 0xcc}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000001480)=""/160, 0xa0}], 0x4, &(0x7f0000006600)=""/4096, 0x1000}, 0x111}, {{&(0x7f00000077c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000007840)=[{&(0x7f0000001580)=""/64, 0x40}], 0x1, &(0x7f0000007880)=""/15, 0xf}, 0xab7}, {{&(0x7f00000078c0)=@can, 0x80, &(0x7f0000007c40)=[{&(0x7f0000007940)=""/124, 0x7c}, {&(0x7f0000007640)=""/153, 0x99}, {&(0x7f0000007b00)=""/75, 0x4b}, {&(0x7f0000007b80)=""/152, 0x98}], 0x4}, 0x5}], 0x9, 0x7dc140cddddd1152, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a208"], 0x10}}, 0x0) 3.571271816s ago: executing program 2 (id=1891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="baa4780056c4fd18b78ed37c50863d0960f8bc7f56a319a409afc75d48c0de56555ae7e4c1334d9e1691dcb2c75d5fcbf57d818e1434fbee5d224e65d8a322060c79cc55", @ANYRESDEC, @ANYRESHEX=r2, @ANYRES64=r3, @ANYBLOB="8c1b5788bf4771a4670b55a953b8839d6692dafff768511c854ad6125dec912f085e971d8ef1c4f25109358e32c0666bffe5d6db714ad80d67b43bab5aa8c0bebfb5e1ef50d6403a3dfdf771861747d9a51b016963cd29bf478bb5e5f084d0d6a7f4598c", @ANYRES64=r3, @ANYBLOB="333c83fc7921e74f5ac6ff5a6d67cfd7fb93e81bf1c9991c7a242cd748eefe18b44d7af585cb198fbd86340beadfa47e6a6dd170940aebbddae1cd37a05e607fbfb947f6409c7b1202859aa70dec5025b595385ab69dcaec341852199a48b08d887b18f96b68d1b65ac0b90e865263585b01a0d1e16e972de97d68f3b3a2ac7f680f54043741e8f50c8f0cf71d40d71a2955a5c2b42c50c128e949cdafe0e503d9902e96623cd9326f518930b9907d", @ANYRESDEC=r3, @ANYRES8, @ANYRESHEX=r1], 0x90}, {&(0x7f00000005c0)={0x13c, 0x2f, 0x1, 0x70bd2a, 0x259fdbfc, "", [@nested={0xc, 0x4a, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @fd}]}, @typed={0x8, 0x1b, 0x0, 0x0, @uid}, @nested={0x10d, 0x1f, 0x0, 0x1, [@typed={0x14, 0x4b, 0x0, 0x0, @u64=0xa}, @generic="a3d6cf2832524b75eba9c3fb5cd06456f5974da58b0c1afe53c036b86d0a3277e57b13457e9871cdd05db20dee6bc3e19dc4721e019810aa82bbb6072336722d9deb2dc7998c17ab51b99a880f9bc385843c641bbc0544bd55a4ad65e1ef33dafc5f5698365633a52b369e86899f06da34dce599965dbe42843e387d35a2a4930fb06f94c44e1a497b7dc6f5fbc16581837841ff3666f85c1acb31046a28228f4b6a0bd0b0128f5e4ad35f42f0e3a1eccdd36192feabc2c1e73d480579d0d6de5098e9db3f9af825fe35eb684feb9d5a3516956deb3852ec042eeea42637941f2b2248c1d96ca0bad144bb19b0d16a7f659e08d515"]}, @typed={0x0, 0x42, 0x0, 0x0, @ipv4=@loopback}]}, 0x13c}], 0x2, 0x0, 0x0, 0x2000c4d1}, 0x4004004) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xb, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r3, @ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x40, 0x2003) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000100)="b9ff0307604423", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080), 0xe) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 3.544526445s ago: executing program 1 (id=1892): io_uring_setup(0x2e34, &(0x7f0000000180)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000580), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) unshare(0x2c060000) unshare(0x24020400) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) bind$bt_l2cap(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="305c065ae182d12fd8326183700398d1c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b93d502b0cd490e35d53ddf6fd0461690982b0269490100b06df5aa58a09a000000808ce41d86b9b949004fd8fe7b80000000", 0x5e, 0xfffffffffffffffe) syz_open_procfs(0x0, &(0x7f00000001c0)='net/nfsfs\x00') write$P9_RVERSION(r7, &(0x7f0000000240)=ANY=[], 0x15) 3.480891213s ago: executing program 0 (id=1893): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockname$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, 0x0, 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 1.516991317s ago: executing program 1 (id=1894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="baa4780056c4fd18b78ed37c50863d0960f8bc7f56a319a409afc75d48c0de56555ae7e4c1334d9e1691dcb2c75d5fcbf57d818e1434fbee5d224e65d8a322060c79cc55", @ANYRESDEC, @ANYRESHEX=r2, @ANYRES64=r3, @ANYBLOB="8c1b5788bf4771a4670b55a953b8839d6692dafff768511c854ad6125dec912f085e971d8ef1c4f25109358e32c0666bffe5d6db714ad80d67b43bab5aa8c0bebfb5e1ef50d6403a3dfdf771861747d9a51b016963cd29bf478bb5e5f084d0d6a7f4598c", @ANYRES64=r3, @ANYBLOB="333c83fc7921e74f5ac6ff5a6d67cfd7fb93e81bf1c9991c7a242cd748eefe18b44d7af585cb198fbd86340beadfa47e6a6dd170940aebbddae1cd37a05e607fbfb947f6409c7b1202859aa70dec5025b595385ab69dcaec341852199a48b08d887b18f96b68d1b65ac0b90e865263585b01a0d1e16e972de97d68f3b3a2ac7f680f54043741e8f50c8f0cf71d40d71a2955a5c2b42c50c128e949cdafe0e503d9902e96623cd9326f518930b9907d", @ANYRESDEC=r3, @ANYRES8, @ANYRESHEX=r1], 0x90}, {&(0x7f00000005c0)={0x13c, 0x2f, 0x1, 0x70bd2a, 0x259fdbfc, "", [@nested={0xc, 0x4a, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @fd}]}, @typed={0x8, 0x1b, 0x0, 0x0, @uid}, @nested={0x10d, 0x1f, 0x0, 0x1, [@typed={0x14, 0x4b, 0x0, 0x0, @u64=0xa}, @generic="a3d6cf2832524b75eba9c3fb5cd06456f5974da58b0c1afe53c036b86d0a3277e57b13457e9871cdd05db20dee6bc3e19dc4721e019810aa82bbb6072336722d9deb2dc7998c17ab51b99a880f9bc385843c641bbc0544bd55a4ad65e1ef33dafc5f5698365633a52b369e86899f06da34dce599965dbe42843e387d35a2a4930fb06f94c44e1a497b7dc6f5fbc16581837841ff3666f85c1acb31046a28228f4b6a0bd0b0128f5e4ad35f42f0e3a1eccdd36192feabc2c1e73d480579d0d6de5098e9db3f9af825fe35eb684feb9d5a3516956deb3852ec042eeea42637941f2b2248c1d96ca0bad144bb19b0d16a7f659e08d515"]}, @typed={0x0, 0x42, 0x0, 0x0, @ipv4=@loopback}]}, 0x13c}], 0x2, 0x0, 0x0, 0x2000c4d1}, 0x4004004) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xb, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r3, @ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x40, 0x2003) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000100)="b9ff0307604423", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080), 0xe) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 1.021550889s ago: executing program 4 (id=1895): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockname$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, 0x0, 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 139.076402ms ago: executing program 0 (id=1896): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}}) (async) write$qrtrtun(r0, &(0x7f0000000080)="2f51610356111e1dc573379112d558a4d5aca2dbbeb7c1fb6b98188fab31c93740c0ad9f038917f975ab7785ee5f296799e68605776b3806b91a5070cfb5670e8d4a1915d6577dbd73d572365e538406a826ad252c321a4c8b379d6d45b632e244ff5ed69e1a7ce35e0e867196c1a31a3f4fcf18e88677f0d17e", 0x7a) r1 = socket$kcm(0x29, 0x3b8b81d68168d688, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@llc={0x1a, 0xffff, 0x8, 0x10, 0x18, 0x3, @multicast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="06235f121242141684bcd5ff3a16deb71c2aed84aa32aeb3d10341effd46269af2dea43803fbd79f7171f9476ee9af7957b597524940cff86fd3354953e5167797fea853ac76ca94fa2437e971fe20ef980e28a9dbfdbc3a4fed2680ea67e4ff630f845346283502bccb3e41796d25de1a629af6d0da24e643df3f923fe933b2cf0035c27ebf5a9244871559f2ea82189663dc952fa76ae9016752991d3a69ecba109b06b33c38fdd38dcc8a7337545c021bba712f7fc7fe98ccf54ceecd2143308df405605c966d73", 0xc9}], 0x1, &(0x7f00000002c0)=[{0x98, 0x115, 0xc49, "298421b835a9c9286a8775a0ce0868aef5c8996d258cc1f4cdfd413960ad5013cbfdf9dab6b4a8e6e5ee808b5d584f9167ecd886d5da76315e24152d0467456000cef3f4b10a77c7b7a997141f828252fa21c1a1301e47cf8595c7e5b1d20894c872ee3458550f301ce8dfa39bd7eabc95e53db3b287ea9d63731564765752d4b4e13bac2e2351d6"}, {0x50, 0x1, 0x8001, "a9f87240ef06e86f67b845547080669fdbf2f223fceb63df56988b5be92971835cdb02592834efd975a513674e1a89ea51e699d0311142333ae12b6fb6c5"}, {0x10, 0x115, 0x5}], 0xf8}, 0x24000040) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, &(0x7f00000004c0)=0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0xc855}, &(0x7f0000000540)=0x8) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/17, 0x11, 0x1, &(0x7f00000005c0)=""/208, 0xd0}, &(0x7f0000000700)=0x40) (async) r5 = accept4$x25(r0, 0x0, &(0x7f0000000740), 0x80000) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000780)={0x1}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000007c0)={0x1, 0x9, {0xffffffffffffffff}, {}, 0x6, 0xd3e}) fcntl$setownex(r0, 0xf, &(0x7f0000000800)={0x1, r6}) (async) r7 = openat$incfs(r0, &(0x7f0000000840)='.log\x00', 0x80280, 0xe1) ioctl$KDMKTONE(r7, 0x4b30, 0x2) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r8, 0xc0109428, &(0x7f0000000880)={0x1, 0x6}) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'pimreg\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x5, &(0x7f0000000900)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xc2}], &(0x7f0000000940)='GPL\x00', 0xb506, 0xe7, &(0x7f0000000980)=""/231, 0x40f00, 0xc, '\x00', r10, 0x0, r7, 0x8, &(0x7f0000000ac0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x3, 0xd, 0x10, 0xfffffffe}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b40)=[r7, r9, r9], &(0x7f0000000b80)=[{0x1, 0x2, 0x8, 0x5}, {0x4, 0x3, 0xa, 0x7}, {0x5, 0x4, 0xf, 0x3}, {0x2, 0x3, 0xb, 0x2}, {0x0, 0x1, 0xf, 0x6}], 0x10, 0xe82, @void, @value}, 0x94) (async) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000d00)={0x5, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}]}) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000d40)={0x89, 0x8, 0x0, 0x1, 0x0, [@private2, @mcast2, @private0, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x48) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) syz_open_dev$video(&(0x7f0000000dc0), 0x916a, 0x387840) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000e00)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000e40)=0x2c) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000001280)={0x3, 0x0, 0x3, 0x7, 0xb, &(0x7f0000000e80)}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sched_setscheduler(r6, 0x2, &(0x7f00000012c0)=0xfffffffe) (async) getpid() 52.041312ms ago: executing program 4 (id=1897): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r1, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYBLOB], 0x10) close(r3) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x9, 0x4) ioctl$TUNSETLINK(r4, 0x400454cd, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1898): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000040)={{0x7f, 0x8}, 0x15}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) kernel console output (not intermixed with test programs): T5876] pwc: recv_control_msg error -71 req 02 val 2100 [ 426.315590][ T5876] pwc: recv_control_msg error -71 req 04 val 1500 [ 426.327783][ T5876] pwc: recv_control_msg error -71 req 02 val 2500 [ 426.416788][ T5876] pwc: recv_control_msg error -71 req 02 val 2400 [ 426.519323][ T5876] pwc: recv_control_msg error -71 req 02 val 2600 [ 426.533356][ T5876] pwc: recv_control_msg error -71 req 02 val 2900 [ 426.755501][ T5876] pwc: recv_control_msg error -71 req 02 val 2800 [ 426.822888][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 426.851988][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 426.865638][ T5876] pwc: Registered as video103. [ 426.880219][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input45 [ 426.977244][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 427.581053][ T45] usb 2-1: USB disconnect, device number 55 [ 427.590104][ T5876] usb 5-1: USB disconnect, device number 59 [ 428.036140][ T1194] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 428.583024][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'. [ 428.684303][ T1194] usb 3-1: Using ep0 maxpacket: 8 [ 428.706633][ T1194] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 428.720356][ T1194] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 428.763544][ T1194] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.802407][ T1194] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.831539][ T1194] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.841330][ T1194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.331129][ T1194] usb 3-1: GET_CAPABILITIES returned 0 [ 429.336845][ T1194] usbtmc 3-1:16.0: can't read capabilities [ 429.751681][ T5837] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 429.760984][ T45] usb 3-1: USB disconnect, device number 38 [ 430.904688][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 431.188362][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 433.224987][ T5876] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 433.251140][T10543] autofs: Unknown parameter 'fd0x0000000000000000' [ 433.532007][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 433.654285][ T5876] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 433.671692][ T5876] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 433.687059][ T5876] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.698425][ T5876] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.711719][ T5876] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 433.730808][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.029414][ T5876] usb 4-1: GET_CAPABILITIES returned 0 [ 434.035205][ T5876] usbtmc 4-1:16.0: can't read capabilities [ 434.136309][T10557] openvswitch: netlink: Actions may not be safe on all matching packets [ 434.650830][ T5876] usb 4-1: USB disconnect, device number 34 [ 434.895263][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 436.202087][ T5876] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 436.411957][ T5911] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 436.594452][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 436.631875][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 436.649053][ T5876] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 436.673945][ T5876] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 436.692121][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 436.698567][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.717195][ T5876] usb 5-1: Product: syz [ 436.718792][ T5911] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 436.733959][ T5876] usb 5-1: Manufacturer: syz [ 436.746159][ T5876] usb 5-1: SerialNumber: syz [ 436.763243][ T5876] usb 5-1: config 0 descriptor?? [ 436.788947][T10579] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 436.802804][ T5876] hub 5-1:0.0: bad descriptor, ignoring hub [ 436.808766][ T5876] hub 5-1:0.0: probe with driver hub failed with error -5 [ 436.870450][ T5876] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input46 [ 436.918984][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 436.929757][ T5911] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 436.940067][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 436.950000][ T5911] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.963082][ T5911] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.972177][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.207884][ T5911] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 437.512057][ T5911] usb 5-1: USB disconnect, device number 60 [ 437.512061][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 438.082051][ T5878] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 438.284830][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 438.318529][ T5878] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 438.464770][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 438.531223][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.547914][ T5878] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.561191][ T5878] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 438.571116][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.575050][T10617] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1400'. [ 438.803118][ T5878] usb 4-1: GET_CAPABILITIES returned 0 [ 438.808908][ T5878] usbtmc 4-1:16.0: can't read capabilities [ 439.636148][T10624] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 439.645350][T10624] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 439.790802][ T25] usb 4-1: USB disconnect, device number 35 [ 440.780544][ T45] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 440.883668][ T5879] usb 3-1: USB disconnect, device number 39 [ 441.704767][ T45] usb 5-1: device descriptor read/64, error -71 [ 441.937164][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.943952][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.211876][ T45] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 443.812339][T10650] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 443.821309][T10650] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 444.503716][ T5879] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 446.020705][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 447.861761][ T5879] usb 3-1: device descriptor read/64, error -71 [ 448.231892][ T5879] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 448.407909][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 448.414897][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 448.444866][ T5879] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 448.460034][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.468680][ T5879] usb 3-1: Product: syz [ 448.488497][ T5879] usb 3-1: Manufacturer: syz [ 448.500267][ T5879] usb 3-1: SerialNumber: syz [ 448.519538][ T5879] usb 3-1: config 0 descriptor?? [ 448.539765][T10663] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 448.565893][ T5879] hub 3-1:0.0: bad descriptor, ignoring hub [ 448.572065][ T6284] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 448.594469][ T5879] hub 3-1:0.0: probe with driver hub failed with error -5 [ 448.615660][ T5879] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input47 [ 448.639742][ T5879] usb 3-1: USB disconnect, device number 41 [ 448.639805][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 448.731794][ T6284] usb 2-1: device descriptor read/64, error -71 [ 448.802127][ T1194] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 448.961804][ T1194] usb 5-1: Using ep0 maxpacket: 8 [ 448.968755][ T1194] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 448.981182][ T1194] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 448.997123][ T6284] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 449.025255][ T1194] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.181134][ T1194] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.211715][ T6284] usb 2-1: device descriptor read/64, error -71 [ 449.322928][ T6284] usb usb2-port1: attempt power cycle [ 449.682106][ T6284] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 449.685700][ T1194] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.698897][ T1194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.712519][ T6284] usb 2-1: device descriptor read/8, error -71 [ 449.732125][ T5879] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 449.871867][ T5879] usb 4-1: device descriptor read/64, error -71 [ 449.912784][ T1194] usb 5-1: GET_CAPABILITIES returned 0 [ 449.918350][ T1194] usbtmc 5-1:16.0: can't read capabilities [ 449.961874][ T6284] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 449.982901][ T6284] usb 2-1: device descriptor read/8, error -71 [ 450.092645][ T6284] usb usb2-port1: unable to enumerate USB device [ 450.117981][ T6284] usb 5-1: USB disconnect, device number 63 [ 450.152072][ T5879] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 450.291931][ T5879] usb 4-1: device descriptor read/64, error -71 [ 450.542093][ T5879] usb usb4-port1: attempt power cycle [ 450.882759][ T5879] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 450.925769][ T5879] usb 4-1: device descriptor read/8, error -71 [ 451.472241][ T6284] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 451.512038][ T5879] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 451.582271][ T5879] usb 4-1: device descriptor read/8, error -71 [ 451.814343][T10717] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1425'. [ 452.316909][ T5879] usb usb4-port1: unable to enumerate USB device [ 452.422313][T10719] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 452.431235][T10719] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 452.475331][ T6284] usb 5-1: device descriptor read/64, error -71 [ 452.640936][ T1194] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 452.732101][ T6284] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 452.912311][ T6284] usb 5-1: device descriptor read/64, error -71 [ 453.028383][ T1194] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 453.049207][ T1194] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 453.071746][ T1194] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.080007][ T6284] usb usb5-port1: attempt power cycle [ 453.081055][ T1194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.097949][ T1194] usb 2-1: config 0 descriptor?? [ 453.124652][ T1194] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 453.162493][T10735] No control pipe specified [ 453.452283][ T6284] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 453.493372][ T6284] usb 5-1: device descriptor read/8, error -71 [ 454.083355][T10753] openvswitch: netlink: Actions may not be safe on all matching packets [ 454.611817][ T5879] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 454.772802][ T5879] usb 3-1: device descriptor read/64, error -71 [ 455.044610][ T5879] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 455.221871][ T5879] usb 3-1: device descriptor read/64, error -71 [ 455.796976][ T5879] usb usb3-port1: attempt power cycle [ 456.402606][ T5878] usb 2-1: USB disconnect, device number 60 [ 456.442467][ T5879] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 456.473762][ T5879] usb 3-1: device descriptor read/8, error -71 [ 456.531968][ T45] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 457.668464][ T45] usb 5-1: device descriptor read/64, error -71 [ 458.141910][ T45] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 458.241987][ T3066] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 458.312843][ T45] usb 5-1: device descriptor read/64, error -71 [ 458.423617][ T45] usb usb5-port1: attempt power cycle [ 458.550712][ T3066] usb 2-1: device descriptor read/64, error -71 [ 459.558026][ T3066] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 459.701760][ T3066] usb 2-1: device descriptor read/64, error -71 [ 459.813530][ T3066] usb usb2-port1: attempt power cycle [ 462.942180][ T3066] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 463.099853][ T3066] usb 2-1: Using ep0 maxpacket: 8 [ 463.316833][ T3066] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 463.407442][ T3066] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 463.417808][ T3066] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.427972][ T3066] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.441123][ T3066] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 463.450575][ T3066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.721788][ T3066] usb 2-1: usb_control_msg returned -32 [ 463.727788][ T3066] usbtmc 2-1:16.0: can't read capabilities [ 463.742349][ T5876] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 463.810665][ T3066] usb 2-1: USB disconnect, device number 63 [ 464.211775][ T5876] usb 3-1: device descriptor read/64, error -71 [ 465.022085][ T5876] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 465.218171][T10833] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 465.227285][T10833] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 465.681859][ T5876] usb 3-1: device descriptor read/64, error -71 [ 465.848173][ T5876] usb usb3-port1: attempt power cycle [ 466.881871][ T5876] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 466.927214][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'. [ 467.128718][ T5876] usb 3-1: device descriptor read/8, error -71 [ 467.648285][T10863] No control pipe specified [ 468.477828][ T5837] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 468.813113][ T1194] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 469.111852][ T1194] usb 2-1: Using ep0 maxpacket: 8 [ 469.122973][ T1194] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 469.159331][ T1194] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 469.181794][ T1194] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 469.194011][ T1194] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.207302][ T1194] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 469.216709][ T1194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.992893][T10900] openvswitch: netlink: Actions may not be safe on all matching packets [ 471.824367][ T1194] usb 2-1: usb_control_msg returned -32 [ 471.829989][ T1194] usbtmc 2-1:16.0: can't read capabilities [ 472.230129][ T1194] usb 2-1: USB disconnect, device number 64 [ 473.931427][ T45] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 474.108563][T10924] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 474.117649][T10924] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 474.773500][ T45] usb 1-1: device descriptor read/64, error -71 [ 474.853506][T10922] No control pipe specified [ 475.011739][ T45] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 475.302894][ T45] usb 1-1: device descriptor read/64, error -71 [ 475.732763][T10939] openvswitch: netlink: Actions may not be safe on all matching packets [ 476.152124][ T45] usb usb1-port1: attempt power cycle [ 476.485141][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 476.931791][ T45] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 477.358734][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 477.378316][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 477.387628][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.697989][ T45] usb 1-1: config 0 descriptor?? [ 477.784738][ T45] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 477.873773][ T3066] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 478.312222][ T3066] usb 4-1: Using ep0 maxpacket: 8 [ 478.331480][ T3066] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 478.358756][ T3066] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 478.426933][ T3066] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.454511][ T3066] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.470982][ T3066] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 478.481320][ T3066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.282961][ T3066] usb 4-1: usb_control_msg returned -32 [ 479.321800][ T3066] usbtmc 4-1:16.0: can't read capabilities [ 479.359518][ T3066] usb 4-1: USB disconnect, device number 40 [ 479.692055][ T5907] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 479.903527][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.914742][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.042155][ T5907] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 480.082540][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.308678][ T5907] usb 3-1: config 0 descriptor?? [ 480.316479][ T5878] usb 1-1: USB disconnect, device number 42 [ 481.078341][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1498'. [ 481.294490][ T5907] usbhid 3-1:0.0: can't add hid device: -32 [ 481.324924][ T5907] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 481.391793][ T5907] usb 3-1: USB disconnect, device number 50 [ 483.002106][ T7208] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 484.250786][ T7208] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.262591][ T7208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 484.273539][ T7208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 484.283323][ T7208] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.296370][ T7208] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.305595][ T7208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.330923][ T7208] usb 5-1: config 0 descriptor?? [ 484.891936][ T7208] usbhid 5-1:0.0: can't add hid device: -71 [ 484.898167][ T7208] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 484.953975][ T45] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 485.113668][ T7208] usb 5-1: USB disconnect, device number 71 [ 485.116564][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 485.231989][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 485.251958][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 485.262408][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 485.275720][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.285112][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.482737][ T45] usb 4-1: config 0 descriptor?? [ 486.474779][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 486.480944][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 486.561933][ T45] usb 4-1: USB disconnect, device number 41 [ 486.912125][T11081] openvswitch: netlink: Actions may not be safe on all matching packets [ 487.322953][T11083] openvswitch: netlink: Actions may not be safe on all matching packets [ 488.937815][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 491.760738][T11126] autofs: Unknown parameter '0x0000000000000000' [ 492.958852][T11140] autofs: Unknown parameter '0x0000000000000000' [ 493.163781][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 493.611727][ T1194] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 493.997669][T11169] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 494.006706][T11169] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 494.575260][ T1194] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.589402][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.604808][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 494.618156][ T1194] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.634532][ T1194] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.668664][ T1194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.718094][ T1194] usb 2-1: config 0 descriptor?? [ 494.782976][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'. [ 495.154895][ T1194] usbhid 2-1:0.0: can't add hid device: -71 [ 495.173903][ T1194] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 495.201823][ T1194] usb 2-1: USB disconnect, device number 65 [ 497.935544][T11206] FAULT_INJECTION: forcing a failure. [ 497.935544][T11206] name failslab, interval 1, probability 0, space 0, times 0 [ 497.992244][T11206] CPU: 1 UID: 0 PID: 11206 Comm: syz.0.1551 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 498.003079][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 498.013168][T11206] Call Trace: [ 498.016455][T11206] [ 498.019390][T11206] dump_stack_lvl+0x16c/0x1f0 [ 498.024077][T11206] should_fail_ex+0x497/0x5b0 [ 498.028850][T11206] ? fs_reclaim_acquire+0xae/0x150 [ 498.034049][T11206] should_failslab+0xc2/0x120 [ 498.038731][T11206] __kmalloc_cache_noprof+0x6b/0x300 [ 498.044103][T11206] ? rtnl_newlink+0x49/0xa0 [ 498.048621][T11206] rtnl_newlink+0x49/0xa0 [ 498.053007][T11206] ? __pfx_rtnl_newlink+0x10/0x10 [ 498.058061][T11206] rtnetlink_rcv_msg+0x3c7/0xea0 [ 498.063155][T11206] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 498.068650][T11206] netlink_rcv_skb+0x16b/0x440 [ 498.073440][T11206] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 498.078925][T11206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.084230][T11206] ? netlink_deliver_tap+0x1ae/0xd90 [ 498.089529][T11206] netlink_unicast+0x53c/0x7f0 [ 498.094324][T11206] ? __pfx_netlink_unicast+0x10/0x10 [ 498.099637][T11206] netlink_sendmsg+0x8b8/0xd70 [ 498.104408][T11206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.109704][T11206] ____sys_sendmsg+0xaaf/0xc90 [ 498.114478][T11206] ? copy_msghdr_from_user+0x10b/0x160 [ 498.119943][T11206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.125264][T11206] ? __pfx___lock_acquire+0x10/0x10 [ 498.130465][T11206] ___sys_sendmsg+0x135/0x1e0 [ 498.135159][T11206] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.140410][T11206] ? lock_acquire+0x2f/0xb0 [ 498.144919][T11206] ? __fget_files+0x40/0x3f0 [ 498.149529][T11206] ? fdget+0x176/0x210 [ 498.153604][T11206] __sys_sendmsg+0x117/0x1f0 [ 498.158206][T11206] ? __pfx___sys_sendmsg+0x10/0x10 [ 498.163410][T11206] ? __fget_files+0x244/0x3f0 [ 498.168115][T11206] do_syscall_64+0xcd/0x250 [ 498.172637][T11206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.178628][T11206] RIP: 0033:0x7fa6bc97e719 [ 498.183044][T11206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.202748][T11206] RSP: 002b:00007fa6bd85d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.211210][T11206] RAX: ffffffffffffffda RBX: 00007fa6bcb35f80 RCX: 00007fa6bc97e719 [ 498.219190][T11206] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000007 [ 498.227162][T11206] RBP: 00007fa6bd85d090 R08: 0000000000000000 R09: 0000000000000000 [ 498.235170][T11206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.243142][T11206] R13: 0000000000000000 R14: 00007fa6bcb35f80 R15: 00007ffc88d931d8 [ 498.251125][T11206] [ 498.526057][T11214] netlink: 'syz.0.1556': attribute type 3 has an invalid length. [ 499.166935][T11221] autofs: Unknown parameter '0x0000000000000000' [ 499.582602][ T1194] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 499.791349][ T1194] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 500.116508][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 500.161736][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 500.171545][ T1194] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 500.184698][ T1194] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 500.193865][ T1194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.532551][ T1194] usb 3-1: config 0 descriptor?? [ 500.611607][ C1] sd 0:0:1:0: [sda] tag#4864 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 500.622168][ C1] sd 0:0:1:0: [sda] tag#4864 CDB: Read(6) 08 00 00 00 85 f0 [ 500.635704][ T30] audit: type=1400 audit(1731545641.142:380): avc: denied { ioctl } for pid=11238 comm="syz.1.1562" path="/dev/sg0" dev="devtmpfs" ino=710 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 500.957413][T11246] openvswitch: netlink: Actions may not be safe on all matching packets [ 501.573845][ T1194] usbhid 3-1:0.0: can't add hid device: -71 [ 501.604051][ T1194] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 501.769616][ T1194] usb 3-1: USB disconnect, device number 51 [ 502.624221][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.631094][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.562859][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 505.445742][T11296] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 505.454871][T11296] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 506.658059][T11311] openvswitch: netlink: Actions may not be safe on all matching packets [ 507.782928][T11314] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 507.792912][T11314] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 509.094406][ T30] audit: type=1326 audit(1731545649.632:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336497e719 code=0x7ffc0000 [ 509.118546][ T30] audit: type=1326 audit(1731545649.632:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336497e719 code=0x7ffc0000 [ 509.161744][ T30] audit: type=1326 audit(1731545649.632:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f336497e719 code=0x7ffc0000 [ 509.211764][ T30] audit: type=1326 audit(1731545649.632:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336497e719 code=0x7ffc0000 [ 509.250916][ T30] audit: type=1326 audit(1731545649.632:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336497e719 code=0x7ffc0000 [ 509.409207][ T30] audit: type=1326 audit(1731545649.632:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f336497e719 code=0x7ffc0000 [ 509.433237][ T30] audit: type=1326 audit(1731545649.632:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336497e719 code=0x7ffc0000 [ 509.457471][ T30] audit: type=1326 audit(1731545649.632:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336497e719 code=0x7ffc0000 [ 509.483423][ T30] audit: type=1326 audit(1731545649.632:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f336497e719 code=0x7ffc0000 [ 509.506951][ T30] audit: type=1326 audit(1731545649.632:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336497e719 code=0x7ffc0000 [ 509.581981][ T5878] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 509.673036][T11348] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 509.682078][T11348] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 510.252326][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 510.261459][ T5878] usb 4-1: config 6 has an invalid interface number: 35 but max is 1 [ 510.304294][ T5878] usb 4-1: config 6 has an invalid interface number: 39 but max is 1 [ 510.321847][ T5878] usb 4-1: config 6 has no interface number 0 [ 510.344051][ T5878] usb 4-1: config 6 has no interface number 1 [ 510.386833][ T5878] usb 4-1: config 6 interface 35 has no altsetting 0 [ 510.395659][ T5878] usb 4-1: config 6 interface 39 has no altsetting 0 [ 510.410903][ T5878] usb 4-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=28.ad [ 510.426147][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.435633][ T5878] usb 4-1: Product: syz [ 510.446613][ T5878] usb 4-1: Manufacturer: syz [ 510.467336][ T5878] usb 4-1: SerialNumber: syz [ 510.669241][T11358] openvswitch: netlink: Actions may not be safe on all matching packets [ 510.762095][ T45] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 510.942177][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 510.967709][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 511.318055][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 511.338320][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 511.339018][T11336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.349912][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 511.358925][T11336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.370242][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 511.450946][T11363] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1592'. [ 511.481058][ T5878] usb 4-1: USB disconnect, device number 42 [ 511.852053][ T5837] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 511.865547][ T45] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 511.874987][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.886688][ T45] usb 1-1: Product: syz [ 511.890992][ T45] usb 1-1: Manufacturer: syz [ 511.896511][ T45] usb 1-1: SerialNumber: syz [ 512.132260][ T5879] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 512.535400][ T45] usb 1-1: config 0 descriptor?? [ 512.651879][ T5879] usb 5-1: device descriptor read/64, error -71 [ 512.660612][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 512.767043][ T45] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 512.775348][ T45] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 512.786207][ T45] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 512.902013][ T5879] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 513.505915][ T45] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 513.661768][ T5879] usb 5-1: device descriptor read/64, error -71 [ 513.717191][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.727516][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.735244][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.742052][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.749492][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.757285][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.765109][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.772196][ T5879] usb usb5-port1: attempt power cycle [ 513.781740][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.789362][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.796533][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.804199][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.811676][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.825712][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.834195][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.841387][ T45] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 513.848144][ T45] input input48: Timeout waiting for response from device. [ 513.871930][ T7208] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 513.883521][ T45] usb 1-1: USB disconnect, device number 43 [ 514.054450][ T7208] usb 4-1: config 0 has an invalid interface number: 187 but max is 0 [ 514.063056][ T7208] usb 4-1: config 0 has no interface number 0 [ 514.069317][ T7208] usb 4-1: too many endpoints for config 0 interface 187 altsetting 208: 104, using maximum allowed: 30 [ 514.082611][ T7208] usb 4-1: config 0 interface 187 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 514.099529][ T7208] usb 4-1: config 0 interface 187 has no altsetting 0 [ 514.106757][ T7208] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 514.116698][ T7208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.121752][ T5879] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 514.132462][ T7208] usb 4-1: config 0 descriptor?? [ 514.162479][ T5879] usb 5-1: device descriptor read/8, error -71 [ 514.348707][T11386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.389772][T11391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.420635][T11386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.449423][T11391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.514774][T11392] misc userio: No port type given on /dev/userio [ 514.654568][ T5879] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 514.889054][ T5879] usb 5-1: device not accepting address 75, error -71 [ 514.933100][ T5879] usb usb5-port1: unable to enumerate USB device [ 515.265046][T11406] openvswitch: netlink: Actions may not be safe on all matching packets [ 516.475146][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 516.475163][ T30] audit: type=1400 audit(1731545657.012:394): avc: denied { ioctl } for pid=11416 comm="syz.4.1607" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 516.634934][ T7208] usb 4-1: string descriptor 0 read error: -71 [ 516.642662][ T30] audit: type=1400 audit(1731545657.082:395): avc: denied { setattr } for pid=11416 comm="syz.4.1607" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 516.642798][ T7208] asix 4-1:0.187 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 516.671797][ T5879] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 516.684831][ T7208] asix 4-1:0.187: probe with driver asix failed with error -71 [ 516.742283][ T7208] usb 4-1: USB disconnect, device number 43 [ 516.827017][ T3066] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 516.838042][T11421] trusted_key: syz.3.1608 sent an empty control message without MSG_MORE. [ 516.892464][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.903296][ T5879] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 516.920314][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.958258][ T5879] usb 3-1: config 0 descriptor?? [ 517.007349][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 517.015495][ T3066] usb 5-1: Invalid ep0 maxpacket: 32 [ 517.162457][ T3066] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 517.322910][ T1194] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 517.352286][ T3066] usb 5-1: Invalid ep0 maxpacket: 32 [ 517.361150][ T3066] usb usb5-port1: attempt power cycle [ 517.458715][ T5879] pwc: send_video_command error -71 [ 517.474264][ T5879] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 517.489411][ T5879] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 517.521352][ T5879] usb 3-1: USB disconnect, device number 52 [ 517.762664][ T3066] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 517.793822][ T3066] usb 5-1: Invalid ep0 maxpacket: 32 [ 517.932007][ T3066] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 517.964092][ T3066] usb 5-1: Invalid ep0 maxpacket: 32 [ 517.997707][ T3066] usb usb5-port1: unable to enumerate USB device [ 518.004568][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.052483][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.076812][ T1194] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 518.112618][ T1194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.156482][ T1194] usb 2-1: config 0 descriptor?? [ 518.221993][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 519.206981][ T5907] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 519.216790][T11437] syz.0.1612 uses obsolete (PF_INET,SOCK_PACKET) [ 519.342178][ T1194] holtek 0003:1241:5015.000D: item fetching failed at offset 1/5 [ 519.362248][ T1194] holtek 0003:1241:5015.000D: parse failed [ 519.392188][ T1194] holtek 0003:1241:5015.000D: probe with driver holtek failed with error -22 [ 519.408996][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.419419][ T5907] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 519.453198][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.473664][ T3066] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 519.489999][ T5907] usb 3-1: config 0 descriptor?? [ 519.641094][ T30] audit: type=1400 audit(1731545660.172:396): avc: denied { open } for pid=11439 comm="syz.4.1615" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 519.680099][ T3066] usb 4-1: device descriptor read/64, error -71 [ 519.696144][ T30] audit: type=1400 audit(1731545660.202:397): avc: denied { ioctl } for pid=11439 comm="syz.4.1615" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 519.861935][ T1194] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 520.083433][ T1194] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.184359][ T1194] usb 1-1: config 0 has no interfaces? [ 520.268505][ T1194] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 520.322034][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 520.471055][ T1194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.827416][ T3066] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 520.850253][ T5879] usb 2-1: USB disconnect, device number 66 [ 520.908695][ T1194] usb 1-1: config 0 descriptor?? [ 520.967972][ T3066] usb 4-1: device descriptor read/64, error -71 [ 521.093076][ T3066] usb usb4-port1: attempt power cycle [ 521.262024][ T5907] usb 3-1: can't set config #0, error -71 [ 521.300602][ T5907] usb 3-1: USB disconnect, device number 53 [ 521.479507][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1617'. [ 521.550022][ T5879] usb 1-1: USB disconnect, device number 44 [ 522.251946][ T5879] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 522.381773][T11371] Bluetooth: hci4: command 0x0c1a tx timeout [ 522.419882][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.432318][ T5879] usb 1-1: config 0 has no interfaces? [ 522.443545][ T5879] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 522.468286][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.624566][ T5879] usb 1-1: config 0 descriptor?? [ 522.738694][T11483] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 522.989374][T11477] cgroup: noprefix used incorrectly [ 523.096883][T11483] audit: out of memory in audit_log_start [ 523.159783][ T5907] usb 1-1: USB disconnect, device number 45 [ 524.182909][ T30] audit: type=1400 audit(1731545664.062:398): avc: denied { append } for pid=11478 comm="syz.2.1625" name="sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 525.103531][ T5911] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 525.131154][T11513] FAULT_INJECTION: forcing a failure. [ 525.131154][T11513] name failslab, interval 1, probability 0, space 0, times 0 [ 525.191428][T11513] CPU: 0 UID: 0 PID: 11513 Comm: syz.3.1634 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 525.202267][T11513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 525.212344][T11513] Call Trace: [ 525.215627][T11513] [ 525.218561][T11513] dump_stack_lvl+0x16c/0x1f0 [ 525.223262][T11513] should_fail_ex+0x497/0x5b0 [ 525.227961][T11513] ? fs_reclaim_acquire+0xae/0x150 [ 525.233093][T11513] should_failslab+0xc2/0x120 [ 525.237795][T11513] kmem_cache_alloc_node_noprof+0x71/0x310 [ 525.243621][T11513] ? __alloc_skb+0x2b1/0x380 [ 525.248232][T11513] __alloc_skb+0x2b1/0x380 [ 525.252669][T11513] ? __pfx___alloc_skb+0x10/0x10 [ 525.257656][T11513] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 525.263669][T11513] netlink_alloc_large_skb+0x69/0x130 [ 525.269064][T11513] netlink_sendmsg+0x689/0xd70 [ 525.273849][T11513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.279152][T11513] ____sys_sendmsg+0xaaf/0xc90 [ 525.283932][T11513] ? copy_msghdr_from_user+0x10b/0x160 [ 525.289403][T11513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.294717][T11513] ? __pfx___lock_acquire+0x10/0x10 [ 525.299937][T11513] ___sys_sendmsg+0x135/0x1e0 [ 525.304638][T11513] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.309880][T11513] ? lock_acquire+0x2f/0xb0 [ 525.314404][T11513] ? __fget_files+0x40/0x3f0 [ 525.319111][T11513] ? fdget+0x176/0x210 [ 525.323221][T11513] __sys_sendmsg+0x117/0x1f0 [ 525.327844][T11513] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.332977][T11513] ? __fget_files+0x244/0x3f0 [ 525.337699][T11513] do_syscall_64+0xcd/0x250 [ 525.342216][T11513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.344365][ T5911] usb 5-1: device descriptor read/64, error -71 [ 525.348121][T11513] RIP: 0033:0x7f87e437e719 [ 525.358786][T11513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.378416][T11513] RSP: 002b:00007f87e5117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.386855][T11513] RAX: ffffffffffffffda RBX: 00007f87e4535f80 RCX: 00007f87e437e719 [ 525.394841][T11513] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 525.402829][T11513] RBP: 00007f87e5117090 R08: 0000000000000000 R09: 0000000000000000 [ 525.410819][T11513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.418808][T11513] R13: 0000000000000000 R14: 00007f87e4535f80 R15: 00007ffcc7f3ba38 [ 525.426898][T11513] [ 525.612111][ T5911] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 525.742642][ T5911] usb 5-1: device descriptor read/64, error -71 [ 525.863316][ T5911] usb usb5-port1: attempt power cycle [ 526.221991][ T5911] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 526.243232][ T5911] usb 5-1: device descriptor read/8, error -71 [ 527.600913][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 530.145779][T11546] openvswitch: netlink: Actions may not be safe on all matching packets [ 530.151126][T11547] openvswitch: netlink: Actions may not be safe on all matching packets [ 533.031715][ T30] audit: type=1800 audit(1731545673.562:399): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1646" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 533.204075][T11561] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 533.211105][T11561] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 533.219621][T11561] vhci_hcd vhci_hcd.0: Device attached [ 533.242283][T11564] vhci_hcd: connection closed [ 533.364576][ T3552] vhci_hcd: stop threads [ 533.375797][ T3552] vhci_hcd: release socket [ 533.393321][ T3552] vhci_hcd: disconnect device [ 533.441772][ T45] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 533.593337][ T45] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 533.608420][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.619412][ T45] usb 4-1: config 0 descriptor?? [ 533.624701][ T5911] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 533.642344][ T45] cp210x 4-1:0.0: cp210x converter detected [ 533.760450][T11573] autofs: Unknown parameter 'fd0x0000000000000000' [ 533.819145][ T5911] usb 5-1: device descriptor read/64, error -71 [ 533.847346][T11550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.082629][T11550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.192054][ T5911] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 534.305377][ T45] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 534.327359][ T45] cp210x 4-1:0.0: querying part number failed [ 534.361985][ T45] usb 4-1: cp210x converter now attached to ttyUSB0 [ 534.460869][T11581] sctp: [Deprecated]: syz.2.1652 (pid 11581) Use of int in maxseg socket option. [ 534.460869][T11581] Use struct sctp_assoc_value instead [ 534.548776][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 534.602086][ T5907] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 534.643567][ T5911] usb 5-1: device descriptor read/64, error -71 [ 534.796487][ T5911] usb usb5-port1: attempt power cycle [ 535.202268][ T5911] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 535.242191][ T45] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 535.261761][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 535.278594][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 535.294469][ T5911] usb 5-1: device descriptor read/8, error -71 [ 535.301087][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 535.319435][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 535.329529][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 535.372092][ T1194] usb 4-1: USB disconnect, device number 47 [ 535.388494][ T45] usb 2-1: device descriptor read/64, error -71 [ 535.392144][ T1194] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 535.402747][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 535.419189][ T1194] cp210x 4-1:0.0: device disconnected [ 535.440170][ T5907] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 535.458697][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.479100][ T5907] usb 1-1: Product: syz [ 535.483544][ T5907] usb 1-1: Manufacturer: syz [ 535.488182][ T5907] usb 1-1: SerialNumber: syz [ 535.500324][ T5907] usb 1-1: config 0 descriptor?? [ 535.752729][T11597] openvswitch: netlink: Actions may not be safe on all matching packets [ 535.779439][ T45] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 535.932104][ T45] usb 2-1: device descriptor read/64, error -71 [ 536.167297][ T45] usb usb2-port1: attempt power cycle [ 536.355848][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 536.387175][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 536.450192][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 536.631538][ T30] audit: type=1400 audit(1731545677.162:400): avc: denied { getopt } for pid=11590 comm="syz.4.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.665772][ T45] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 536.666366][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 536.714410][ T45] usb 2-1: device descriptor read/8, error -71 [ 537.335359][ T45] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 537.366720][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 537.393653][ T45] usb 2-1: device descriptor read/8, error -71 [ 537.401841][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 537.512675][ T45] usb usb2-port1: unable to enumerate USB device [ 537.556830][T11371] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 538.075938][T11617] openvswitch: netlink: Actions may not be safe on all matching packets [ 538.605458][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 538.619936][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 538.627323][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 538.634453][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 538.640784][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 538.898580][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 538.946280][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 538.954227][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 539.031845][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 539.094265][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 539.130255][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 539.151760][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 539.158056][ T5907] input input50: Timeout waiting for response from device. [ 539.232096][ T5907] usb 1-1: USB disconnect, device number 46 [ 542.335701][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 542.582854][T11641] FAULT_INJECTION: forcing a failure. [ 542.582854][T11641] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 542.599263][T11641] CPU: 0 UID: 0 PID: 11641 Comm: syz.4.1665 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 542.610091][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 542.620250][T11641] Call Trace: [ 542.623531][T11641] [ 542.626465][T11641] dump_stack_lvl+0x16c/0x1f0 [ 542.631165][T11641] should_fail_ex+0x497/0x5b0 [ 542.635862][T11641] _copy_from_user+0x2e/0xd0 [ 542.640467][T11641] snd_seq_write+0x3ea/0x6c0 [ 542.645091][T11641] ? __pfx_snd_seq_write+0x10/0x10 [ 542.650231][T11641] ? __pfx_snd_seq_write+0x10/0x10 [ 542.655362][T11641] vfs_write+0x24c/0x1150 [ 542.659729][T11641] ? __fget_files+0x23a/0x3f0 [ 542.664427][T11641] ? __pfx_lock_release+0x10/0x10 [ 542.669459][T11641] ? trace_lock_acquire+0x14a/0x1d0 [ 542.674688][T11641] ? __pfx_vfs_write+0x10/0x10 [ 542.679592][T11641] ? lock_acquire+0x2f/0xb0 [ 542.684130][T11641] ? __fget_files+0x40/0x3f0 [ 542.688752][T11641] ? __fget_files+0x244/0x3f0 [ 542.693485][T11641] ksys_write+0x1fa/0x260 [ 542.697829][T11641] ? __pfx_ksys_write+0x10/0x10 [ 542.702711][T11641] do_syscall_64+0xcd/0x250 [ 542.707247][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.713169][T11641] RIP: 0033:0x7f336497e719 [ 542.717644][T11641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.737270][T11641] RSP: 002b:00007f336571e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 542.745719][T11641] RAX: ffffffffffffffda RBX: 00007f3364b36058 RCX: 00007f336497e719 [ 542.753716][T11641] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000004 [ 542.761708][T11641] RBP: 00007f336571e090 R08: 0000000000000000 R09: 0000000000000000 [ 542.769788][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.777851][T11641] R13: 0000000000000000 R14: 00007f3364b36058 R15: 00007ffcc6a79518 [ 542.785879][T11641] [ 544.430213][ T30] audit: type=1326 audit(1731545684.962:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc97e719 code=0x7ffc0000 [ 545.063337][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'. [ 545.415541][T11660] sd 0:0:1:0: device reset [ 545.511982][ T30] audit: type=1326 audit(1731545685.952:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc97e719 code=0x7ffc0000 [ 545.513415][ T45] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 545.682969][ T45] usb 5-1: device descriptor read/64, error -71 [ 545.811835][ T30] audit: type=1326 audit(1731545685.952:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fa6bc97e719 code=0x7ffc0000 [ 545.840398][ T30] audit: type=1326 audit(1731545685.952:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc97e719 code=0x7ffc0000 [ 545.864110][ T30] audit: type=1326 audit(1731545685.952:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc97e719 code=0x7ffc0000 [ 545.891827][ T30] audit: type=1326 audit(1731545685.952:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6bc97d0b0 code=0x7ffc0000 [ 545.940330][ T30] audit: type=1326 audit(1731545685.952:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc97e719 code=0x7ffc0000 [ 545.966926][ T30] audit: type=1326 audit(1731545685.952:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc97e719 code=0x7ffc0000 [ 545.972025][ T45] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 545.994418][ T30] audit: type=1326 audit(1731545685.952:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa6bc97e719 code=0x7ffc0000 [ 546.025772][ T30] audit: type=1326 audit(1731545685.952:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc97e719 code=0x7ffc0000 [ 546.212234][ T45] usb 5-1: device descriptor read/64, error -71 [ 546.358857][ T45] usb usb5-port1: attempt power cycle [ 547.045212][T11703] netlink: 'syz.2.1681': attribute type 1 has an invalid length. [ 547.722773][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 547.964573][T11705] Driver unsupported XDP return value 0 on prog (id 236) dev N/A, expect packet loss! [ 548.419192][T11714] tipc: Started in network mode [ 548.424375][T11714] tipc: Node identity ac1414aa, cluster identity 4711 [ 548.436527][T11714] tipc: Enabled bearer , priority 10 [ 548.465613][T11714] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 548.631988][ T5878] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 549.153881][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.166162][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 549.177889][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 549.187799][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 549.200980][ T5878] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 549.210347][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.887129][ T1194] tipc: Node number set to 2886997162 [ 549.895600][ T5878] usb 3-1: config 0 descriptor?? [ 550.003564][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 550.003581][ T30] audit: type=1326 audit(1731545690.542:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e437e719 code=0x7ffc0000 [ 550.051866][ T30] audit: type=1326 audit(1731545690.542:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e437e719 code=0x7ffc0000 [ 550.121499][ T30] audit: type=1400 audit(1731545690.652:447): avc: denied { connect } for pid=11728 comm="syz.0.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 550.185838][ T30] audit: type=1400 audit(1731545690.722:448): avc: denied { write } for pid=11728 comm="syz.0.1691" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 550.239616][ T30] audit: type=1400 audit(1731545690.752:449): avc: denied { ioctl } for pid=11728 comm="syz.0.1691" path="socket:[28431]" dev="sockfs" ino=28431 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 550.317370][ T30] audit: type=1400 audit(1731545690.822:450): avc: denied { sqpoll } for pid=11730 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 550.891949][ T45] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 550.942174][ T5907] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 550.951435][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 550.957582][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 550.992078][ T5878] usb 3-1: USB disconnect, device number 54 [ 551.098533][ T5907] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 551.112684][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.148299][ T5907] usb 5-1: Product: syz [ 551.168289][ T5907] usb 5-1: Manufacturer: syz [ 551.175908][ T5907] usb 5-1: SerialNumber: syz [ 551.185489][ T45] usb 2-1: device descriptor read/64, error -71 [ 551.205712][ T5907] usb 5-1: config 0 descriptor?? [ 551.207372][T11748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1696'. [ 551.219908][T11748] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 551.227589][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'. [ 551.242621][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 551.474807][ T45] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 551.611845][ T45] usb 2-1: device descriptor read/64, error -71 [ 551.994682][ T1194] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 552.163514][ T45] usb usb2-port1: attempt power cycle [ 552.320079][ T1194] usb 1-1: Using ep0 maxpacket: 16 [ 552.515335][ T5907] usb 5-1: Firmware version (0.0) predates our first public release. [ 552.531998][ T45] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 552.532339][ T5907] usb 5-1: Please update to version 0.2 or newer [ 552.584071][ T1194] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 552.591865][ T1194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 552.604385][ T1194] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 552.614787][ T1194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.635916][ T1194] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 552.648638][ T1194] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 552.658128][ T1194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.666672][ T45] usb 2-1: device descriptor read/8, error -71 [ 552.674691][ T1194] usb 1-1: Product: syz [ 552.678876][ T1194] usb 1-1: Manufacturer: syz [ 552.683766][ T1194] usb 1-1: SerialNumber: syz [ 552.707932][ T1194] usb 1-1: config 0 descriptor?? [ 552.731120][T11745] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 552.754085][ T1194] mcba_usb 1-1:0.0 can0: couldn't setup read URBs [ 552.775025][ T1194] mcba_usb 1-1:0.0 can0: couldn't start device: -90 [ 552.842853][ T1194] mcba_usb 1-1:0.0: probe with driver mcba_usb failed with error -90 [ 552.942210][ T45] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 553.533208][ T45] usb 2-1: device descriptor read/8, error -71 [ 553.628720][ T5879] usb 5-1: USB disconnect, device number 91 [ 553.642359][ T45] usb usb2-port1: unable to enumerate USB device [ 557.764169][ T30] audit: type=1400 audit(1731545698.272:451): avc: denied { block_suspend } for pid=11810 comm="syz.4.1712" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 557.892867][ T6284] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 558.146825][T11820] openvswitch: netlink: Actions may not be safe on all matching packets [ 558.216446][ T6284] usb 4-1: device descriptor read/64, error -71 [ 558.532083][ T6284] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 558.854683][ T45] usb 1-1: USB disconnect, device number 47 [ 558.975891][ T6284] usb 4-1: device descriptor read/64, error -71 [ 559.134780][T11830] vivid-000: disconnect [ 559.163852][ T6284] usb usb4-port1: attempt power cycle [ 559.681513][T11821] vivid-000: reconnect [ 559.763792][ T30] audit: type=1400 audit(1731545700.302:452): avc: denied { write } for pid=11833 comm="syz.3.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 560.062913][T11840] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1719'. [ 561.442367][T11847] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 561.451911][T11847] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 561.845357][ T30] audit: type=1400 audit(1731545702.372:453): avc: denied { module_load } for pid=11854 comm="syz.2.1723" path="/sys/power/wakeup_count" dev="sysfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 561.881815][ T30] audit: type=1400 audit(1731545702.392:454): avc: denied { audit_write } for pid=11856 comm="syz.3.1724" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 561.903144][ T30] audit: type=1400 audit(1731545702.392:455): avc: denied { bind } for pid=11856 comm="syz.3.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 561.922710][ T30] audit: type=1400 audit(1731545702.392:456): avc: denied { name_bind } for pid=11856 comm="syz.3.1724" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 561.943464][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.949671][ T30] audit: type=1400 audit(1731545702.392:457): avc: denied { node_bind } for pid=11856 comm="syz.3.1724" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 561.970737][ T5907] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 561.970769][ T30] audit: type=1400 audit(1731545702.402:458): avc: denied { setopt } for pid=11856 comm="syz.3.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 561.998437][ T30] audit: type=1400 audit(1731545702.402:459): avc: denied { connect } for pid=11856 comm="syz.3.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 562.018333][ T30] audit: type=1400 audit(1731545702.402:460): avc: denied { name_connect } for pid=11856 comm="syz.3.1724" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 562.131907][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 562.141505][ T5907] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 562.157713][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.198518][ T5907] usb 2-1: config 0 descriptor?? [ 563.018845][T11851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1721'. [ 563.053566][T11863] delete_channel: no stack [ 563.100921][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 563.158252][ T5907] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 563.168498][ T5907] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 563.292287][ T5907] asix 2-1:0.0: probe with driver asix failed with error -71 [ 563.331770][ T5907] usb 2-1: USB disconnect, device number 75 [ 563.365369][T11871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1728'. [ 564.420764][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.427211][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.622838][T11878] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 564.681898][T11878] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 565.141795][ T5878] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 565.260138][T11885] openvswitch: netlink: Actions may not be safe on all matching packets [ 565.382254][ T5878] usb 5-1: device descriptor read/64, error -71 [ 565.448359][T11892] netlink: 'syz.3.1732': attribute type 10 has an invalid length. [ 565.457275][T11892] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 565.469844][T11892] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 565.481210][T11892] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 565.991867][ T5878] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 566.131853][ T5878] usb 5-1: device descriptor read/64, error -71 [ 566.332694][ T5878] usb usb5-port1: attempt power cycle [ 566.462359][T11912] ax25_connect(): syz.2.1737 uses autobind, please contact jreuter@yaina.de [ 566.519894][ T30] audit: type=1400 audit(1731545706.952:461): avc: denied { mount } for pid=11900 comm="syz.2.1737" name="/" dev="gadgetfs" ino=29797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 566.542560][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.840796][ T5907] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 566.993360][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.004499][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.022606][ T5907] usb 2-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 567.311911][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.355348][ T5907] usb 2-1: config 0 descriptor?? [ 570.378132][T11929] openvswitch: netlink: Actions may not be safe on all matching packets [ 570.861112][ T5907] usbhid 2-1:0.0: can't add hid device: -71 [ 570.900727][ T5907] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 570.943802][ T5907] usb 2-1: USB disconnect, device number 76 [ 570.998031][T11935] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1744'. [ 571.165855][T11942] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 572.438172][ T5907] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 572.601771][ T5907] usb 3-1: device descriptor read/64, error -71 [ 572.609176][ T5878] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 572.682625][T11961] FAULT_INJECTION: forcing a failure. [ 572.682625][T11961] name failslab, interval 1, probability 0, space 0, times 0 [ 572.710086][T11961] CPU: 0 UID: 0 PID: 11961 Comm: syz.4.1752 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 572.720914][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 572.730993][T11961] Call Trace: [ 572.734285][T11961] [ 572.737221][T11961] dump_stack_lvl+0x16c/0x1f0 [ 572.741928][T11961] should_fail_ex+0x497/0x5b0 [ 572.746626][T11961] ? fs_reclaim_acquire+0xae/0x150 [ 572.751794][T11961] should_failslab+0xc2/0x120 [ 572.756501][T11961] kmem_cache_alloc_node_noprof+0x71/0x310 [ 572.762422][T11961] ? __alloc_skb+0x2b1/0x380 [ 572.767044][T11961] __alloc_skb+0x2b1/0x380 [ 572.771464][T11961] ? __pfx___alloc_skb+0x10/0x10 [ 572.776396][T11961] ? __pfx___lock_acquire+0x10/0x10 [ 572.781589][T11961] ? hlock_class+0x4e/0x130 [ 572.786091][T11961] ? __lock_acquire+0x163e/0x3ce0 [ 572.791107][T11961] __ip6_append_data.isra.0+0x2a9e/0x4540 [ 572.796835][T11961] ? __pfx_raw6_getfrag+0x10/0x10 [ 572.801858][T11961] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 572.807921][T11961] ? ip6_mtu+0x231/0x4a0 [ 572.812180][T11961] ? ip6_setup_cork+0xbdc/0x1370 [ 572.817125][T11961] ip6_append_data+0x1e6/0x500 [ 572.821891][T11961] ? __pfx_raw6_getfrag+0x10/0x10 [ 572.826911][T11961] rawv6_sendmsg+0x1565/0x43d0 [ 572.831668][T11961] ? avc_has_perm_noaudit+0x119/0x3a0 [ 572.837054][T11961] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 572.842161][T11961] ? avc_has_perm_noaudit+0x143/0x3a0 [ 572.847533][T11961] ? avc_has_perm+0x11b/0x1c0 [ 572.852204][T11961] ? __pfx_avc_has_perm+0x10/0x10 [ 572.857225][T11961] ? __pfx___lock_acquire+0x10/0x10 [ 572.862419][T11961] ? __lock_acquire+0x163e/0x3ce0 [ 572.867454][T11961] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 572.872559][T11961] ? inet_sendmsg+0x119/0x140 [ 572.877226][T11961] inet_sendmsg+0x119/0x140 [ 572.881745][T11961] ____sys_sendmsg+0x98c/0xc90 [ 572.886534][T11961] ? copy_msghdr_from_user+0x10b/0x160 [ 572.891995][T11961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.897286][T11961] ? __pfx___lock_acquire+0x10/0x10 [ 572.902481][T11961] ___sys_sendmsg+0x135/0x1e0 [ 572.907157][T11961] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.912402][T11961] ? lock_acquire+0x2f/0xb0 [ 572.916905][T11961] ? __fget_files+0x40/0x3f0 [ 572.921518][T11961] ? fdget+0x176/0x210 [ 572.925589][T11961] __sys_sendmsg+0x117/0x1f0 [ 572.930175][T11961] ? __pfx___sys_sendmsg+0x10/0x10 [ 572.935307][T11961] ? __fget_files+0x244/0x3f0 [ 572.940005][T11961] do_syscall_64+0xcd/0x250 [ 572.944504][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.950397][T11961] RIP: 0033:0x7f336497e719 [ 572.954808][T11961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.974950][T11961] RSP: 002b:00007f336571e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.983382][T11961] RAX: ffffffffffffffda RBX: 00007f3364b36058 RCX: 00007f336497e719 [ 572.991364][T11961] RDX: 0000000000044004 RSI: 00000000200000c0 RDI: 0000000000000004 [ 572.999332][T11961] RBP: 00007f336571e090 R08: 0000000000000000 R09: 0000000000000000 [ 573.007315][T11961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.015298][T11961] R13: 0000000000000000 R14: 00007f3364b36058 R15: 00007ffcc6a79518 [ 573.023291][T11961] [ 573.171139][ T5878] usb 4-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 573.180906][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.189262][ T5878] usb 4-1: Product: syz [ 573.193628][ T5878] usb 4-1: Manufacturer: syz [ 573.198456][ T5878] usb 4-1: SerialNumber: syz [ 573.205327][ T5878] usb 4-1: config 0 descriptor?? [ 573.214342][ T5878] r8712u: register rtl8712_netdev_ops to netdev_ops [ 573.222227][ T5907] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 573.231355][ T5878] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 573.311841][ T45] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 573.351975][ T5907] usb 3-1: device descriptor read/64, error -71 [ 573.461779][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 573.462885][ T5907] usb usb3-port1: attempt power cycle [ 573.470449][ T45] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 573.482300][ T45] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 573.490447][ T45] usb 2-1: Product: syz [ 573.494819][ T45] usb 2-1: Manufacturer: syz [ 573.499440][ T45] usb 2-1: SerialNumber: syz [ 573.507112][ T45] usb 2-1: config 0 descriptor?? [ 573.591891][ T5876] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 573.620100][ T5878] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 573.626951][ T5878] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 573.636188][ T5878] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 573.726831][ T45] usb 2-1: USB disconnect, device number 77 [ 573.742123][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 573.768309][ T5876] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 573.779382][ T5876] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 573.798586][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 573.810051][ T5876] usb 1-1: config 1 has no interface number 0 [ 573.817379][ T5907] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 573.831520][ T5876] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.845474][ T5876] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 573.859025][ T5876] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 573.868817][ T5907] usb 3-1: device descriptor read/8, error -71 [ 573.881773][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.909073][ T5876] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 574.068621][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 574.087671][ T1194] usb 4-1: USB disconnect, device number 51 [ 574.123998][ T5907] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 574.152609][ T5907] usb 3-1: device descriptor read/8, error -71 [ 574.262447][ T5907] usb usb3-port1: unable to enumerate USB device [ 574.448877][T11971] batman_adv: batadv0: Adding interface: dummy0 [ 574.467556][T11971] batman_adv: batadv0: Interface activated: dummy0 [ 574.490313][T11971] batadv0: mtu less than device minimum [ 574.501275][T11971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 574.513646][T11971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 574.525522][T11971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 574.537362][T11971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 574.549194][T11971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 574.561056][T11971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 574.572982][T11971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 574.584841][T11971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 574.685165][T11971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.697668][T11971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.760147][ T5907] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 574.914180][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.933237][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.950589][ T5907] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 574.971878][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.996189][ T5907] usb 3-1: config 0 descriptor?? [ 576.428079][ T5876] snd_usb_pod 1-1:1.1: set_interface failed [ 576.459453][ T5876] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 576.487147][ T5876] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 576.518593][ T5876] usb 1-1: USB disconnect, device number 48 [ 576.550445][ T5907] hid (null): bogus close delimiter [ 576.605515][T12038] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1769'. [ 576.785305][ T5907] usb 3-1: language id specifier not provided by device, defaulting to English [ 576.960141][T12043] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 576.969168][T12043] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 577.481714][ T30] audit: type=1400 audit(1731545717.422:462): avc: denied { module_request } for pid=12037 comm="syz.1.1769" kmod="netdev-syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 577.753647][ T5907] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 577.762687][ T5907] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 577.770881][ T5907] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 577.780446][T12050] evm: overlay not supported [ 577.784136][ T5907] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 577.793321][ T5876] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 577.801151][T12048] net_ratelimit: 11 callbacks suppressed [ 577.801169][T12048] openvswitch: netlink: Actions may not be safe on all matching packets [ 577.815793][ T5907] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 577.844114][ T5907] usb 3-1: USB disconnect, device number 59 [ 577.974210][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 577.993368][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 578.010452][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 578.027228][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 578.050313][ T5876] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 578.059987][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.097177][ T5876] usb 5-1: config 0 descriptor?? [ 578.814191][ T5876] usbhid 5-1:0.0: can't add hid device: -71 [ 578.820446][ T5876] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 579.802499][ T5876] usb 5-1: USB disconnect, device number 95 [ 579.961687][ T30] audit: type=1400 audit(1731545720.382:463): avc: denied { getopt } for pid=12066 comm="syz.0.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 580.075543][T12078] autofs: Unknown parameter 'fd0x0000000000000000' [ 581.141598][ T30] audit: type=1400 audit(1731545721.672:464): avc: denied { nlmsg_read } for pid=12090 comm="syz.4.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 581.490945][T12098] befs: Unrecognized mount option "gid0xffffffffffffffff" or missing value [ 581.500200][T12098] befs: (nullb0): cannot parse mount options [ 581.672298][ T7208] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 581.682687][ T30] audit: type=1400 audit(1731545722.192:465): avc: denied { ioctl } for pid=12093 comm="syz.1.1785" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 581.852927][ T7208] usb 4-1: Using ep0 maxpacket: 32 [ 581.875018][ T7208] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.936454][ T7208] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.971405][ T7208] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 581.981138][ T7208] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 581.995199][ T7208] usb 4-1: Product: syz [ 581.999609][ T7208] usb 4-1: Manufacturer: syz [ 582.057911][ T7208] hub 4-1:4.0: USB hub found [ 582.221940][ T45] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 582.251104][ T7208] hub 4-1:4.0: 2 ports detected [ 582.264233][ T5911] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 582.361779][ T6284] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 582.393554][ T45] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 582.401875][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.416767][ T45] usb 2-1: config 0 has no interface number 0 [ 582.423894][ T45] usb 2-1: config 0 interface 229 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 582.440740][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.451054][ T5911] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 582.460373][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.503532][ T5911] usb 5-1: config 0 descriptor?? [ 582.510143][ T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 582.628282][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.636403][ T45] usb 2-1: Product: syz [ 582.640995][ T45] usb 2-1: Manufacturer: syz [ 582.646040][ T45] usb 2-1: SerialNumber: syz [ 582.653265][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 582.662884][ T45] usb 2-1: config 0 descriptor?? [ 583.323096][ T6284] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 583.332487][ T6284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.352618][ T6284] usb 3-1: config 0 descriptor?? [ 583.362122][ T6284] cp210x 3-1:0.0: cp210x converter detected [ 583.502248][ T7208] hub 4-1:4.0: hub_hub_status failed (err = -110) [ 583.529505][ T7208] hub 4-1:4.0: config failed, can't get hub status (err -110) [ 583.564425][ T30] audit: type=1326 audit(1731545724.102:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc5d7e719 code=0x7ffc0000 [ 583.636879][ T30] audit: type=1326 audit(1731545724.132:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc5d7e719 code=0x7ffc0000 [ 583.728154][ T30] audit: type=1326 audit(1731545724.132:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbbc5d7e719 code=0x7ffc0000 [ 583.740994][ T6284] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 583.806972][ T6284] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 583.814032][ T30] audit: type=1326 audit(1731545724.132:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc5d7e719 code=0x7ffc0000 [ 583.866199][ T6284] usb 3-1: cp210x converter now attached to ttyUSB0 [ 583.871817][ T30] audit: type=1326 audit(1731545724.132:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc5d7e719 code=0x7ffc0000 [ 583.949948][ T6284] usb 3-1: USB disconnect, device number 60 [ 584.008918][ T6284] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 584.029609][ T6284] cp210x 3-1:0.0: device disconnected [ 584.169594][ T45] qmi_wwan 2-1:0.229: probe with driver qmi_wwan failed with error -22 [ 584.182704][ T45] usb 2-1: USB disconnect, device number 78 [ 584.258761][T12108] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 584.576186][ T5876] usb 4-1: USB disconnect, device number 52 [ 585.935383][ T30] audit: type=1400 audit(1731545726.472:471): avc: denied { write } for pid=12128 comm="syz.2.1794" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 586.012488][ T5911] pwc: recv_control_msg error -71 req 02 val 2b00 [ 586.019995][ T5911] pwc: recv_control_msg error -71 req 02 val 2700 [ 586.028530][ T5911] pwc: recv_control_msg error -71 req 02 val 2c00 [ 586.046652][T12133] FAULT_INJECTION: forcing a failure. [ 586.046652][T12133] name failslab, interval 1, probability 0, space 0, times 0 [ 586.062126][ T5911] pwc: recv_control_msg error -71 req 04 val 1000 [ 586.070838][ T5911] pwc: recv_control_msg error -71 req 04 val 1300 [ 586.079922][ T5911] pwc: recv_control_msg error -71 req 04 val 1400 [ 586.104241][ T5911] pwc: recv_control_msg error -71 req 02 val 2000 [ 586.119154][ T5911] pwc: recv_control_msg error -71 req 02 val 2100 [ 586.119179][T12133] CPU: 0 UID: 0 PID: 12133 Comm: syz.1.1793 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 586.136391][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 586.146463][T12133] Call Trace: [ 586.149730][T12133] [ 586.152649][T12133] dump_stack_lvl+0x16c/0x1f0 [ 586.157342][T12133] should_fail_ex+0x497/0x5b0 [ 586.162009][T12133] ? fs_reclaim_acquire+0xae/0x150 [ 586.167111][T12133] should_failslab+0xc2/0x120 [ 586.171791][T12133] kmem_cache_alloc_node_noprof+0x71/0x310 [ 586.177599][T12133] ? __alloc_skb+0x2b1/0x380 [ 586.182185][T12133] __alloc_skb+0x2b1/0x380 [ 586.186586][T12133] ? __pfx___alloc_skb+0x10/0x10 [ 586.191507][T12133] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 586.197484][T12133] netlink_alloc_large_skb+0x69/0x130 [ 586.202838][T12133] netlink_sendmsg+0x689/0xd70 [ 586.207582][T12133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.212852][T12133] ____sys_sendmsg+0xaaf/0xc90 [ 586.217603][T12133] ? copy_msghdr_from_user+0x10b/0x160 [ 586.223060][T12133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.228358][T12133] ? __pfx___lock_acquire+0x10/0x10 [ 586.233558][T12133] ___sys_sendmsg+0x135/0x1e0 [ 586.238235][T12133] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.243517][T12133] ? lock_acquire+0x2f/0xb0 [ 586.247999][T12133] ? __fget_files+0x40/0x3f0 [ 586.252583][T12133] ? fdget+0x176/0x210 [ 586.256636][T12133] __sys_sendmsg+0x117/0x1f0 [ 586.261226][T12133] ? __pfx___sys_sendmsg+0x10/0x10 [ 586.266323][T12133] ? __fget_files+0x244/0x3f0 [ 586.271006][T12133] do_syscall_64+0xcd/0x250 [ 586.275498][T12133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.281379][T12133] RIP: 0033:0x7fd14597e719 [ 586.285794][T12133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.305389][T12133] RSP: 002b:00007fd143df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.313815][T12133] RAX: ffffffffffffffda RBX: 00007fd145b35f80 RCX: 00007fd14597e719 [ 586.321768][T12133] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 586.329762][T12133] RBP: 00007fd143df6090 R08: 0000000000000000 R09: 0000000000000000 [ 586.337743][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.345712][T12133] R13: 0000000000000000 R14: 00007fd145b35f80 R15: 00007ffcaa7640e8 [ 586.353687][T12133] [ 586.964164][ T5911] pwc: recv_control_msg error -71 req 04 val 1500 [ 586.971851][ T5911] pwc: recv_control_msg error -71 req 02 val 2500 [ 587.539961][ T5911] pwc: recv_control_msg error -71 req 02 val 2400 [ 587.546135][ T30] audit: type=1326 audit(1731545728.082:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12142 comm="syz.4.1797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f336497e719 code=0x0 [ 587.596358][ T5911] pwc: recv_control_msg error -71 req 02 val 2600 [ 587.663876][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 587.687203][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 587.701954][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 587.760394][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 587.804139][T12146] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 587.810673][T12146] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 587.826595][ T5911] pwc: Registered as video103. [ 587.835909][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input51 [ 587.856808][T12146] vhci_hcd vhci_hcd.0: Device attached [ 587.866755][T12150] vhci_hcd: connection closed [ 587.903243][ T2990] vhci_hcd: stop threads [ 587.920651][ T2990] vhci_hcd: release socket [ 587.926395][ T5911] usb 5-1: USB disconnect, device number 96 [ 588.046335][ T2990] vhci_hcd: disconnect device [ 588.165345][ T30] audit: type=1400 audit(1731545728.692:473): avc: denied { listen } for pid=12152 comm="syz.0.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 588.575955][ T30] audit: type=1400 audit(1731545728.702:474): avc: denied { accept } for pid=12152 comm="syz.0.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 588.822316][ T30] audit: type=1400 audit(1731545728.952:475): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 589.372291][ T5879] usb usb36-port1: attempt power cycle [ 590.572722][ T5879] usb usb36-port1: unable to enumerate USB device [ 591.180687][T12186] input: syz1 as /devices/virtual/input/input52 [ 591.207469][T12185] autofs: Unknown parameter 'fd0x0000000000000000' [ 591.265849][ T30] audit: type=1400 audit(1731545731.802:476): avc: denied { write } for pid=12184 comm="syz.2.1808" path="socket:[29643]" dev="sockfs" ino=29643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 591.661775][ T30] audit: type=1400 audit(1731545731.802:477): avc: denied { ioctl } for pid=12184 comm="syz.2.1808" path="socket:[29643]" dev="sockfs" ino=29643 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 595.190324][T12232] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.200299][ T30] audit: type=1400 audit(1731545735.722:478): avc: denied { create } for pid=12224 comm="syz.0.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 595.307217][T12229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1816'. [ 595.612531][ T30] audit: type=1400 audit(1731545735.722:479): avc: denied { write } for pid=12224 comm="syz.0.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 596.686550][ T5876] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 596.887068][T12245] 9pnet_fd: Insufficient options for proto=fd [ 596.917024][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.938808][T12242] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 596.948136][T12242] PKCS7: Only support pkcs7_signedData type [ 596.958563][ T5876] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 597.531740][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.543494][ T5876] usb 3-1: config 0 descriptor?? [ 597.589568][ T5876] usb 3-1: can't set config #0, error -71 [ 597.615750][ T5876] usb 3-1: USB disconnect, device number 61 [ 597.671866][ T30] audit: type=1400 audit(1731545738.202:480): avc: denied { mount } for pid=12251 comm="syz.3.1821" name="/" dev="configfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 597.794102][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1822'. [ 597.847682][ T30] audit: type=1400 audit(1731545738.382:481): avc: denied { write } for pid=12259 comm="syz.0.1823" path="socket:[30766]" dev="sockfs" ino=30766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 598.102582][ T5876] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 598.791928][ T5907] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 598.877581][ T5911] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 598.891540][ T5876] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 598.960693][ T5876] usb 5-1: config 0 has no interface number 0 [ 598.976278][ T5876] usb 5-1: config 0 interface 143 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 599.032445][ T5911] usb 3-1: device descriptor read/64, error -71 [ 599.035432][ T30] audit: type=1400 audit(1731545739.572:482): avc: denied { bind } for pid=12276 comm="syz.3.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 599.121557][ T5876] usb 5-1: New USB device found, idVendor=05e3, idProduct=f170, bcdDevice=50.75 [ 599.132375][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.140641][ T5876] usb 5-1: Product: syz [ 599.145183][ T5876] usb 5-1: Manufacturer: syz [ 599.150045][ T5876] usb 5-1: SerialNumber: syz [ 599.155029][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 599.162117][ T5907] usb 1-1: config 251 has an invalid interface number: 29 but max is 0 [ 599.170723][ T5907] usb 1-1: config 251 has no interface number 0 [ 599.178734][ T5876] usb 5-1: config 0 descriptor?? [ 599.185126][ T5907] usb 1-1: config 251 interface 29 altsetting 71 has an invalid descriptor for endpoint zero, skipping [ 599.197840][ T5907] usb 1-1: config 251 interface 29 altsetting 71 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 599.214054][ T5907] usb 1-1: config 251 interface 29 has no altsetting 0 [ 599.221130][ T5907] usb 1-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= a.8d [ 599.231420][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.282236][ T5911] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 599.432812][ T5911] usb 3-1: device descriptor read/64, error -71 [ 599.604999][ T5911] usb usb3-port1: attempt power cycle [ 600.011602][T12290] 9pnet_fd: Insufficient options for proto=fd [ 600.122125][ T5911] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 600.142386][ T5911] usb 3-1: device descriptor read/8, error -71 [ 600.402237][ T5911] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 600.461303][ T5911] usb 3-1: device descriptor read/8, error -71 [ 600.703156][ T5911] usb usb3-port1: unable to enumerate USB device [ 601.219959][T12304] sp0: Synchronizing with TNC [ 601.238186][T12306] sp0: Found TNC [ 601.420470][T12307] 9pnet_fd: Insufficient options for proto=fd [ 601.441368][T12307] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 601.450218][T12307] PKCS7: Only support pkcs7_signedData type [ 601.874506][ T5907] usb 1-1: string descriptor 0 read error: -71 [ 601.927846][ T5907] usb-storage 1-1:251.29: USB Mass Storage device detected [ 602.028504][ T5907] usb-storage 1-1:251.29: Quirks match for vid 054c pid 0069: 1 [ 602.312358][ T5907] usb 1-1: USB disconnect, device number 49 [ 602.373146][T12303] [U] è` [ 602.393898][ T30] audit: type=1400 audit(1731545742.922:483): avc: denied { write } for pid=12316 comm="syz.0.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 602.631839][ T5878] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 602.753457][T12326] bridge0: port 3(erspan0) entered blocking state [ 602.760132][T12326] bridge0: port 3(erspan0) entered disabled state [ 602.767343][T12326] erspan0: entered allmulticast mode [ 602.777352][T12326] erspan0: entered promiscuous mode [ 602.782918][ T5879] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 602.783420][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 602.792177][T12326] bridge0: port 3(erspan0) entered blocking state [ 602.809056][T12326] bridge0: port 3(erspan0) entered forwarding state [ 602.821735][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 602.836109][T12326] ptrace attach of ""[12328] was attempted by "./syz-executor exec"[12326] [ 602.841818][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 602.849992][ T30] audit: type=1400 audit(1731545743.382:484): avc: denied { getopt } for pid=12325 comm="syz.1.1838" laddr=172.20.20.10 lport=3 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 602.859825][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 602.918691][ T5878] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 602.938263][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.957009][ T5878] usb 4-1: config 0 descriptor?? [ 602.964008][T12298] usb 5-1: USB disconnect, device number 97 [ 603.125870][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 603.137620][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 603.151792][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 603.161583][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 603.184809][ T5879] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.210720][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.233435][ T5879] usb 1-1: config 0 descriptor?? [ 603.390243][ T5878] usbhid 4-1:0.0: can't add hid device: -71 [ 603.396914][ T5878] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 603.414424][ T5878] usb 4-1: USB disconnect, device number 53 [ 603.431880][T12298] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 603.505687][ T5911] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 603.591783][T12298] usb 5-1: Using ep0 maxpacket: 32 [ 603.599302][T12298] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 603.611919][T12298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 603.623048][T12298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 603.633563][T12298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 603.644804][T12298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 603.663611][ T5879] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 603.664497][T12298] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 603.687194][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.688895][T12298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.699193][ T5879] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 603.712384][T12298] usb 5-1: Product: syz [ 603.719692][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.727485][T12298] usb 5-1: Manufacturer: syz [ 603.736214][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 603.739382][T12298] usb 5-1: SerialNumber: syz [ 603.755515][ T5911] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 603.765604][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.784501][ T5911] usb 3-1: config 0 descriptor?? [ 603.818908][T12298] usb 5-1: config 0 descriptor?? [ 604.263038][T12298] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 604.268642][ T45] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 604.280458][ T5911] acrux 0003:1A34:0802.0010: hidraw1: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 604.281842][T12298] input input53: Device does not respond to id packet M [ 604.292046][ T5911] acrux 0003:1A34:0802.0010: no inputs found [ 604.308850][ T5911] acrux 0003:1A34:0802.0010: Failed to enable force feedback support, error: -19 [ 604.317804][T12298] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 604.327252][T12298] input input53: Device does not respond to id packet P [ 604.328763][ T6284] usb 1-1: USB disconnect, device number 50 [ 604.349639][T12298] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 604.357987][T12298] input input53: Device does not respond to id packet B [ 604.370382][T12298] input input53: Device does not respond to id packet N [ 604.524438][ T5878] usb 3-1: USB disconnect, device number 66 [ 604.561077][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 604.581362][T12298] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 604.588473][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 604.606859][T12298] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 604.611742][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 604.622686][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 604.624108][T12298] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 604.635741][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 604.635771][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.665328][ T45] usb 2-1: config 0 descriptor?? [ 604.670978][T12298] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 604.698155][T12298] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input53 [ 604.726028][T12298] usb 5-1: USB disconnect, device number 98 [ 605.121373][ T45] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 605.170536][ T45] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 605.238092][ T30] audit: type=1326 audit(1731545745.752:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e437e719 code=0x7ffc0000 [ 605.318337][ T30] audit: type=1326 audit(1731545745.752:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e437e719 code=0x7ffc0000 [ 605.439198][ T30] audit: type=1326 audit(1731545745.752:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f87e437e719 code=0x7ffc0000 [ 605.462818][ T30] audit: type=1326 audit(1731545745.752:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e437e719 code=0x7ffc0000 [ 605.491838][ T30] audit: type=1326 audit(1731545745.752:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e437e719 code=0x7ffc0000 [ 606.047355][ T30] audit: type=1326 audit(1731545745.762:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f87e437e719 code=0x7ffc0000 [ 606.176362][ T30] audit: type=1326 audit(1731545745.762:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e437e719 code=0x7ffc0000 [ 606.200365][ T30] audit: type=1326 audit(1731545745.762:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e437e719 code=0x7ffc0000 [ 606.212720][ T5907] usb 2-1: USB disconnect, device number 79 [ 606.237314][ T45] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 606.322812][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 606.433338][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.448213][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.493765][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 606.528937][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.572616][ T45] usb 3-1: config 0 descriptor?? [ 606.986105][ T45] isku 0003:1E7D:319C.0012: ignoring exceeding usage max [ 607.022679][ T45] isku 0003:1E7D:319C.0012: unbalanced collection at end of report description [ 607.056429][ T45] isku 0003:1E7D:319C.0012: parse failed [ 607.076444][ T45] isku 0003:1E7D:319C.0012: probe with driver isku failed with error -22 [ 607.121740][ T5911] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 607.189997][ T45] usb 3-1: USB disconnect, device number 67 [ 607.301335][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 607.337956][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 607.382426][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 607.421013][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 607.451747][ T5911] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 607.476380][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.524293][ T5911] usb 2-1: config 0 descriptor?? [ 608.351838][ T5911] usbhid 2-1:0.0: can't add hid device: -71 [ 608.358198][ T5911] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 608.531848][ T5911] usb 2-1: USB disconnect, device number 80 [ 608.741355][T12298] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 608.892503][T12298] usb 1-1: Using ep0 maxpacket: 32 [ 608.952526][T12298] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 609.015977][T12298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 609.074529][T12298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 609.240486][T12298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 609.845158][T12298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 609.872548][T12298] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 609.882265][T12298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.897325][T12298] usb 1-1: Product: syz [ 609.942581][T12298] usb 1-1: Manufacturer: syz [ 609.947239][T12298] usb 1-1: SerialNumber: syz [ 609.997327][T12298] usb 1-1: config 0 descriptor?? [ 611.056370][T12298] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 611.062625][T12298] input input54: Device does not respond to id packet M [ 611.115373][T12298] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 611.123570][T12298] input input54: Device does not respond to id packet P [ 611.267588][T12298] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 611.273931][T12298] input input54: Device does not respond to id packet B [ 611.297694][T12298] input input54: Device does not respond to id packet N [ 611.507582][T12413] 9pnet_fd: Insufficient options for proto=fd [ 611.525920][T12413] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 611.534967][T12413] PKCS7: Only support pkcs7_signedData type [ 611.741227][T12298] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 611.843806][T12411] FAULT_INJECTION: forcing a failure. [ 611.843806][T12411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.864224][T12298] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 611.901128][T12298] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 611.971972][ T5911] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 611.994248][T12411] CPU: 0 UID: 0 PID: 12411 Comm: syz.2.1866 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 612.005070][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 612.015135][T12411] Call Trace: [ 612.018412][T12411] [ 612.021349][T12411] dump_stack_lvl+0x16c/0x1f0 [ 612.026030][T12411] should_fail_ex+0x497/0x5b0 [ 612.030730][T12411] _copy_to_user+0x32/0xd0 [ 612.035155][T12411] simple_read_from_buffer+0xd0/0x160 [ 612.040554][T12411] proc_fail_nth_read+0x198/0x270 [ 612.045601][T12411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.051146][T12411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.056691][T12411] vfs_read+0x1df/0xbe0 [ 612.060857][T12411] ? __fget_files+0x23a/0x3f0 [ 612.065543][T12411] ? fdget_pos+0x24c/0x360 [ 612.069950][T12411] ? __pfx_lock_release+0x10/0x10 [ 612.075012][T12411] ? trace_lock_acquire+0x14a/0x1d0 [ 612.080218][T12411] ? __pfx_vfs_read+0x10/0x10 [ 612.085114][T12411] ? __pfx___mutex_lock+0x10/0x10 [ 612.085172][T12411] ? __fget_files+0x244/0x3f0 [ 612.094873][T12411] ksys_read+0x12f/0x260 [ 612.099116][T12411] ? __pfx_ksys_read+0x10/0x10 [ 612.103897][T12411] do_syscall_64+0xcd/0x250 [ 612.108445][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.108484][T12411] RIP: 0033:0x7fbbc5d7d15c [ 612.108501][T12411] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 612.108517][T12411] RSP: 002b:00007fbbc6bed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 612.108537][T12411] RAX: ffffffffffffffda RBX: 00007fbbc5f35f80 RCX: 00007fbbc5d7d15c [ 612.108549][T12411] RDX: 000000000000000f RSI: 00007fbbc6bed0a0 RDI: 0000000000000004 [ 612.108560][T12411] RBP: 00007fbbc6bed090 R08: 0000000000000000 R09: 0000000000000000 [ 612.108571][T12411] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 612.108581][T12411] R13: 0000000000000000 R14: 00007fbbc5f35f80 R15: 00007fff6afa6e18 [ 612.108602][T12411] [ 612.198876][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 612.208815][T12298] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 612.217497][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 612.228671][T12298] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input54 [ 612.466905][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 612.467185][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 612.468007][ T5911] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 612.468310][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.753951][ T5911] usb 4-1: config 0 descriptor?? [ 612.806198][T12298] usb 1-1: USB disconnect, device number 51 [ 613.004932][T12424] netlink: 'syz.0.1870': attribute type 21 has an invalid length. [ 613.012944][T12424] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1870'. [ 613.022196][T12424] netlink: 'syz.0.1870': attribute type 4 has an invalid length. [ 613.030021][T12424] netlink: 'syz.0.1870': attribute type 5 has an invalid length. [ 613.037930][T12424] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1870'. [ 613.205503][ T5911] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 613.244628][T12427] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1871'. [ 613.302104][ T5911] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 613.605380][T12441] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 613.614474][T12441] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 617.547969][ T3066] usb 4-1: USB disconnect, device number 54 [ 618.177733][T12469] netlink: 'syz.4.1878': attribute type 10 has an invalid length. [ 618.187857][T12469] team0: Port device netdevsim0 added [ 618.529068][T12474] 9pnet_fd: Insufficient options for proto=fd [ 619.274828][ T3066] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 619.495795][ T3066] usb 2-1: Using ep0 maxpacket: 32 [ 619.510175][ T3066] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 619.531867][ T3066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 619.547058][ T3066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 619.742116][ T3066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 619.753969][ T3066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 619.859348][ T3066] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 619.906862][ T3066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.916314][ T3066] usb 2-1: Product: syz [ 619.921372][ T3066] usb 2-1: Manufacturer: syz [ 619.926614][ T3066] usb 2-1: SerialNumber: syz [ 620.422492][ T3066] usb 2-1: config 0 descriptor?? [ 620.430393][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 620.430410][ T30] audit: type=1400 audit(1731545760.952:498): avc: denied { connect } for pid=12480 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 620.458872][ T30] audit: type=1400 audit(1731545760.952:499): avc: denied { bind } for pid=12480 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 620.549869][ T30] audit: type=1400 audit(1731545761.082:500): avc: denied { getopt } for pid=12480 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 620.659643][T12502] FAULT_INJECTION: forcing a failure. [ 620.659643][T12502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.688964][T12502] CPU: 1 UID: 0 PID: 12502 Comm: syz.0.1887 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 620.699788][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 620.709854][T12502] Call Trace: [ 620.713175][T12502] [ 620.716149][T12502] dump_stack_lvl+0x16c/0x1f0 [ 620.721351][T12502] should_fail_ex+0x497/0x5b0 [ 620.726030][T12502] _copy_from_user+0x2e/0xd0 [ 620.730620][T12502] move_addr_to_kernel+0x68/0x160 [ 620.735657][T12502] __sys_connect+0xb4/0x180 [ 620.740162][T12502] ? __pfx___sys_connect+0x10/0x10 [ 620.745398][T12502] ? __pfx_ksys_write+0x10/0x10 [ 620.750287][T12502] __x64_sys_connect+0x72/0xb0 [ 620.755055][T12502] ? lockdep_hardirqs_on+0x7c/0x110 [ 620.760261][T12502] do_syscall_64+0xcd/0x250 [ 620.764771][T12502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.770757][T12502] RIP: 0033:0x7fa6bc97e719 [ 620.775174][T12502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.794777][T12502] RSP: 002b:00007fa6bd85d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 620.803186][T12502] RAX: ffffffffffffffda RBX: 00007fa6bcb35f80 RCX: 00007fa6bc97e719 [ 620.811173][T12502] RDX: 000000000000006e RSI: 00000000200000c0 RDI: 0000000000000004 [ 620.819158][T12502] RBP: 00007fa6bd85d090 R08: 0000000000000000 R09: 0000000000000000 [ 620.827131][T12502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.835103][T12502] R13: 0000000000000000 R14: 00007fa6bcb35f80 R15: 00007ffc88d931d8 [ 620.843091][T12502] [ 620.848435][ T3066] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 620.854645][ T5879] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 620.862286][ T3066] input input55: Device does not respond to id packet M [ 620.891950][ T3066] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 620.898612][ T3066] input input55: Device does not respond to id packet P [ 620.906023][T12504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1888'. [ 620.906723][ T3066] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 620.921319][ T3066] input input55: Device does not respond to id packet B [ 620.929522][ T3066] input input55: Device does not respond to id packet N [ 621.122027][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 621.129289][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.141125][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.286760][T12514] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 621.295823][T12514] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 621.706365][ T3066] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 621.712615][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 621.725618][ T3066] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 621.802949][ T5879] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 621.812170][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.821044][ T3066] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 621.828110][ T3066] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 621.838916][ T3066] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input55 [ 621.873073][ T5879] usb 4-1: config 0 descriptor?? [ 621.901064][ T3066] usb 2-1: USB disconnect, device number 81 [ 622.289525][T12528] 9pnet_fd: Insufficient options for proto=fd [ 622.298477][T12528] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 622.307470][T12528] PKCS7: Only support pkcs7_signedData type [ 623.054967][T12534] ubi0: attaching mtd0 [ 623.066685][T12534] ubi0: scanning is finished [ 623.071399][T12534] ubi0: empty MTD device detected [ 623.132694][ T30] audit: type=1400 audit(1731545763.652:501): avc: denied { lock } for pid=12497 comm="syz.3.1885" path="socket:[31365]" dev="sockfs" ino=31365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 623.863308][ T30] audit: type=1400 audit(1731545764.182:502): avc: denied { create } for pid=12520 comm="syz.2.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 624.031956][ T30] audit: type=1400 audit(1731545764.302:503): avc: denied { write } for pid=12520 comm="syz.2.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 624.262215][ T30] audit: type=1400 audit(1731545764.302:504): avc: denied { nlmsg_read } for pid=12520 comm="syz.2.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 624.278648][T12534] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 624.290602][T12534] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 624.297997][T12534] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 624.305118][T12534] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 624.312600][T12534] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 624.319963][T12534] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 624.328261][T12534] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1229492226 [ 624.338434][T12534] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 624.350309][T12541] ubi0: background thread "ubi_bgt0d" started, PID 12541 [ 625.293911][ T30] audit: type=1400 audit(1731545765.832:505): avc: denied { ioctl } for pid=12551 comm="syz.0.1896" path="socket:[32165]" dev="sockfs" ino=32165 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 625.403407][T12548] ================================================================== [ 625.411502][T12548] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 625.420643][T12548] Read of size 8 at addr ffff8880291ed550 by task syz.4.1895/12548 [ 625.428528][T12548] [ 625.430851][T12548] CPU: 0 UID: 0 PID: 12548 Comm: syz.4.1895 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 625.441605][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 625.451675][T12548] Call Trace: [ 625.454966][T12548] [ 625.457889][T12548] dump_stack_lvl+0x116/0x1f0 [ 625.462566][T12548] print_report+0xc3/0x620 [ 625.466981][T12548] ? __virt_addr_valid+0x5e/0x590 [ 625.472018][T12548] ? __phys_addr+0xc6/0x150 [ 625.476516][T12548] kasan_report+0xd9/0x110 [ 625.480943][T12548] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 625.487447][T12548] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 625.493857][T12548] __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 625.500126][T12548] bt_accept_unlink+0x34/0x2e0 [ 625.504898][T12548] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 625.510281][T12548] l2cap_chan_del+0xba/0x900 [ 625.514884][T12548] l2cap_conn_del+0x37c/0x730 [ 625.519574][T12548] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 625.525024][T12548] l2cap_disconn_cfm+0x96/0xd0 [ 625.529793][T12548] hci_conn_hash_flush+0x114/0x260 [ 625.534921][T12548] hci_dev_close_sync+0x603/0x11b0 [ 625.540072][T12548] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 625.545719][T12548] ? up_write+0x1b2/0x520 [ 625.550053][T12548] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 625.555796][T12548] ? rcu_is_watching+0x12/0xc0 [ 625.560573][T12548] hci_dev_do_close+0x2e/0x90 [ 625.565261][T12548] hci_unregister_dev+0x213/0x620 [ 625.570307][T12548] ? __pfx_vhci_release+0x10/0x10 [ 625.575322][T12548] vhci_release+0x79/0xf0 [ 625.579664][T12548] __fput+0x3f6/0xb60 [ 625.583643][T12548] task_work_run+0x14e/0x250 [ 625.588231][T12548] ? __pfx_task_work_run+0x10/0x10 [ 625.593334][T12548] do_exit+0xadd/0x2d70 [ 625.597488][T12548] ? get_signal+0x1dcd/0x2770 [ 625.602164][T12548] ? __pfx_do_exit+0x10/0x10 [ 625.606763][T12548] ? cgroup_update_frozen+0x14d/0x6a0 [ 625.612142][T12548] do_group_exit+0xd3/0x2a0 [ 625.616655][T12548] get_signal+0x25fb/0x2770 [ 625.621188][T12548] ? __pfx_get_signal+0x10/0x10 [ 625.626066][T12548] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 625.631261][T12548] arch_do_signal_or_restart+0x90/0x7e0 [ 625.637192][T12548] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 625.643348][T12548] syscall_exit_to_user_mode+0x150/0x2a0 [ 625.648992][T12548] do_syscall_64+0xda/0x250 [ 625.653508][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.659404][T12548] RIP: 0033:0x7f33649b0805 [ 625.663807][T12548] Code: Unable to access opcode bytes at 0x7f33649b07db. [ 625.670821][T12548] RSP: 002b:00007f33656dbf80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 625.679242][T12548] RAX: fffffffffffffdfc RBX: 00007f3364b36208 RCX: 00007f33649b0805 [ 625.687208][T12548] RDX: 00007f33656dbfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.695184][T12548] RBP: 00007f33649f175e R08: 0000000000000000 R09: 0000000000000000 [ 625.703147][T12548] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 625.711110][T12548] R13: 0000000000000000 R14: 00007f3364b36208 R15: 00007ffcc6a79518 [ 625.719090][T12548] [ 625.722112][T12548] [ 625.724432][T12548] Allocated by task 2990: [ 625.728752][T12548] kasan_save_stack+0x33/0x60 [ 625.733440][T12548] kasan_save_track+0x14/0x30 [ 625.738122][T12548] __kasan_kmalloc+0xaa/0xb0 [ 625.742704][T12548] __kmalloc_node_track_caller_noprof+0x20f/0x430 [ 625.749137][T12548] kmalloc_reserve+0xef/0x2c0 [ 625.753921][T12548] __alloc_skb+0x164/0x380 [ 625.758344][T12548] nsim_dev_trap_report_work+0x2a4/0xc90 [ 625.763988][T12548] process_one_work+0x9c5/0x1ba0 [ 625.768920][T12548] worker_thread+0x6c8/0xf00 [ 625.773530][T12548] kthread+0x2c1/0x3a0 [ 625.777610][T12548] ret_from_fork+0x45/0x80 [ 625.782030][T12548] ret_from_fork_asm+0x1a/0x30 [ 625.786795][T12548] [ 625.789109][T12548] Freed by task 2990: [ 625.793171][T12548] kasan_save_stack+0x33/0x60 [ 625.797856][T12548] kasan_save_track+0x14/0x30 [ 625.802529][T12548] kasan_save_free_info+0x3b/0x60 [ 625.807549][T12548] __kasan_slab_free+0x51/0x70 [ 625.812320][T12548] kfree+0x14f/0x4b0 [ 625.816213][T12548] skb_free_head+0x108/0x1d0 [ 625.820794][T12548] skb_release_data+0x560/0x730 [ 625.825649][T12548] consume_skb+0xbf/0x100 [ 625.829969][T12548] nsim_dev_trap_report_work+0x878/0xc90 [ 625.835602][T12548] process_one_work+0x9c5/0x1ba0 [ 625.840556][T12548] worker_thread+0x6c8/0xf00 [ 625.845135][T12548] kthread+0x2c1/0x3a0 [ 625.849207][T12548] ret_from_fork+0x45/0x80 [ 625.853626][T12548] ret_from_fork_asm+0x1a/0x30 [ 625.858494][T12548] [ 625.860809][T12548] The buggy address belongs to the object at ffff8880291ec000 [ 625.860809][T12548] which belongs to the cache kmalloc-4k of size 4096 [ 625.874950][T12548] The buggy address is located 1360 bytes to the right of [ 625.874950][T12548] allocated 4096-byte region [ffff8880291ec000, ffff8880291ed000) [ 625.889792][T12548] [ 625.892114][T12548] The buggy address belongs to the physical page: [ 625.898543][T12548] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x291e8 [ 625.907311][T12548] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 625.915818][T12548] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 625.923466][T12548] page_type: f5(slab) [ 625.927455][T12548] raw: 00fff00000000040 ffff88801b042140 dead000000000122 0000000000000000 [ 625.936038][T12548] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 625.944634][T12548] head: 00fff00000000040 ffff88801b042140 dead000000000122 0000000000000000 [ 625.953327][T12548] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 625.962125][T12548] head: 00fff00000000003 ffffea0000a47a01 ffffffffffffffff 0000000000000000 [ 625.970803][T12548] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 625.979638][T12548] page dumped because: kasan: bad access detected [ 625.986108][T12548] page_owner tracks the page as allocated [ 625.991822][T12548] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2990, tgid 2990 (kworker/u8:8), ts 606162096690, free_ts 605488937883 [ 626.012863][T12548] post_alloc_hook+0x2d1/0x350 [ 626.017634][T12548] get_page_from_freelist+0xfce/0x2f80 [ 626.023096][T12548] __alloc_pages_noprof+0x223/0x25a0 [ 626.028378][T12548] alloc_pages_mpol_noprof+0x2c9/0x610 [ 626.033839][T12548] new_slab+0x2c9/0x410 [ 626.037998][T12548] ___slab_alloc+0xdac/0x1880 [ 626.042665][T12548] __slab_alloc.constprop.0+0x56/0xb0 [ 626.048040][T12548] __kmalloc_node_track_caller_noprof+0x355/0x430 [ 626.054451][T12548] kmalloc_reserve+0xef/0x2c0 [ 626.059147][T12548] __alloc_skb+0x164/0x380 [ 626.063566][T12548] nsim_dev_trap_report_work+0x2a4/0xc90 [ 626.069198][T12548] process_one_work+0x9c5/0x1ba0 [ 626.074145][T12548] worker_thread+0x6c8/0xf00 [ 626.078728][T12548] kthread+0x2c1/0x3a0 [ 626.082797][T12548] ret_from_fork+0x45/0x80 [ 626.087195][T12548] ret_from_fork_asm+0x1a/0x30 [ 626.091964][T12548] page last free pid 12359 tgid 12359 stack trace: [ 626.098451][T12548] free_unref_page+0x5f4/0xdc0 [ 626.103229][T12548] __put_partials+0x14c/0x170 [ 626.107905][T12548] qlist_free_all+0x4e/0x120 [ 626.112496][T12548] kasan_quarantine_reduce+0x192/0x1e0 [ 626.117946][T12548] __kasan_slab_alloc+0x69/0x90 [ 626.122797][T12548] kmem_cache_alloc_noprof+0x121/0x2f0 [ 626.128246][T12548] jbd2__journal_start+0x193/0x6a0 [ 626.133374][T12548] __ext4_journal_start_sb+0x358/0x660 [ 626.138846][T12548] ext4_dirty_inode+0xa1/0x130 [ 626.143619][T12548] __mark_inode_dirty+0x1f6/0xe60 [ 626.148618][T12548] generic_update_time+0xcf/0xf0 [ 626.153530][T12548] file_update_time+0x12e/0x160 [ 626.158371][T12548] ext4_page_mkwrite+0x368/0x1760 [ 626.163392][T12548] do_page_mkwrite+0x177/0x380 [ 626.168142][T12548] do_pte_missing+0x29e/0x3e70 [ 626.172881][T12548] __handle_mm_fault+0x100a/0x2a10 [ 626.177965][T12548] [ 626.180262][T12548] Memory state around the buggy address: [ 626.185883][T12548] ffff8880291ed400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 626.193918][T12548] ffff8880291ed480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 626.201961][T12548] >ffff8880291ed500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 626.209993][T12548] ^ [ 626.216727][T12548] ffff8880291ed580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 626.224765][T12548] ffff8880291ed600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 626.232815][T12548] ================================================================== [ 626.243555][T12548] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 626.250795][T12548] CPU: 1 UID: 0 PID: 12548 Comm: syz.4.1895 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 626.261540][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 626.271587][T12548] Call Trace: [ 626.274848][T12548] [ 626.277768][T12548] dump_stack_lvl+0x3d/0x1f0 [ 626.282361][T12548] panic+0x71d/0x800 [ 626.286259][T12548] ? __pfx_panic+0x10/0x10 [ 626.290670][T12548] ? preempt_schedule_thunk+0x1a/0x30 [ 626.296029][T12548] ? preempt_schedule_common+0x44/0xc0 [ 626.301498][T12548] ? check_panic_on_warn+0x1f/0xb0 [ 626.306614][T12548] check_panic_on_warn+0xab/0xb0 [ 626.311537][T12548] end_report+0x117/0x180 [ 626.315847][T12548] kasan_report+0xe9/0x110 [ 626.320241][T12548] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 626.326639][T12548] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 626.333041][T12548] __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 626.339261][T12548] bt_accept_unlink+0x34/0x2e0 [ 626.344011][T12548] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 626.349365][T12548] l2cap_chan_del+0xba/0x900 [ 626.353955][T12548] l2cap_conn_del+0x37c/0x730 [ 626.358612][T12548] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 626.364049][T12548] l2cap_disconn_cfm+0x96/0xd0 [ 626.368801][T12548] hci_conn_hash_flush+0x114/0x260 [ 626.373895][T12548] hci_dev_close_sync+0x603/0x11b0 [ 626.378989][T12548] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 626.384516][T12548] ? up_write+0x1b2/0x520 [ 626.388824][T12548] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 626.394537][T12548] ? rcu_is_watching+0x12/0xc0 [ 626.399280][T12548] hci_dev_do_close+0x2e/0x90 [ 626.403957][T12548] hci_unregister_dev+0x213/0x620 [ 626.408977][T12548] ? __pfx_vhci_release+0x10/0x10 [ 626.413990][T12548] vhci_release+0x79/0xf0 [ 626.418296][T12548] __fput+0x3f6/0xb60 [ 626.422261][T12548] task_work_run+0x14e/0x250 [ 626.426827][T12548] ? __pfx_task_work_run+0x10/0x10 [ 626.431936][T12548] do_exit+0xadd/0x2d70 [ 626.436073][T12548] ? get_signal+0x1dcd/0x2770 [ 626.440729][T12548] ? __pfx_do_exit+0x10/0x10 [ 626.445300][T12548] ? cgroup_update_frozen+0x14d/0x6a0 [ 626.450656][T12548] do_group_exit+0xd3/0x2a0 [ 626.455154][T12548] get_signal+0x25fb/0x2770 [ 626.459635][T12548] ? __pfx_get_signal+0x10/0x10 [ 626.464466][T12548] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 626.469656][T12548] arch_do_signal_or_restart+0x90/0x7e0 [ 626.475190][T12548] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 626.481343][T12548] syscall_exit_to_user_mode+0x150/0x2a0 [ 626.486959][T12548] do_syscall_64+0xda/0x250 [ 626.491453][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.497328][T12548] RIP: 0033:0x7f33649b0805 [ 626.501718][T12548] Code: Unable to access opcode bytes at 0x7f33649b07db. [ 626.508706][T12548] RSP: 002b:00007f33656dbf80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 626.517094][T12548] RAX: fffffffffffffdfc RBX: 00007f3364b36208 RCX: 00007f33649b0805 [ 626.525046][T12548] RDX: 00007f33656dbfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.533016][T12548] RBP: 00007f33649f175e R08: 0000000000000000 R09: 0000000000000000 [ 626.540960][T12548] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 626.548907][T12548] R13: 0000000000000000 R14: 00007f3364b36208 R15: 00007ffcc6a79518 [ 626.556860][T12548] [ 626.560098][T12548] Kernel Offset: disabled [ 626.564403][T12548] Rebooting in 86400 seconds..