last executing test programs: 16.30774132s ago: executing program 2 (id=3306): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) memfd_create(0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006110540000000000a6080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) fsopen(&(0x7f00000001c0)='ubifs\x00', 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x801}], 0x3) 11.762427479s ago: executing program 2 (id=3319): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0x7}, 0x20) timer_create(0x9, 0x0, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000aec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)='#', 0x1}], 0x1}}], 0x1, 0x4028001) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff) 10.645684391s ago: executing program 2 (id=3321): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000295"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1}, 0x14) 10.535129024s ago: executing program 1 (id=3322): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x26c0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001e0001002cbd7000fedbdf2500000000000000000000000093000001000004d30a00000000000000000000000000000000000001ff030000ff3400"], 0x48}}, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @dev, @rose, 0x0, [@remote, @rose, @rose, @bcast, @rose, @default]}, &(0x7f0000000f80)=0x40, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x9) 10.27814003s ago: executing program 4 (id=3324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd7000000000000000", @ANYRES32=r2, @ANYBLOB="05980000002000001400128008000100677265000800028004001200ba66"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x4c}}, 0x0) 10.133774597s ago: executing program 4 (id=3325): getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x202, 0x8001, 0x15f13b98, 0x0}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={r0, 0x1, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="611834000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf37000000000000350607000fff0720dc06000020000000260300000ee60060bf050000000000000f630000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f3fa039a196ee920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f625480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000008e69cc5c1e7319d39fa6f96c23c8ffd591ef011294c50a0a705549134c4aa3544a99edc9535105d3aeba9ec9441f912bdc65695e731c872278b64167aa46a07c68a9eace7fa485108f9d8cb4304c4b65d61d88aacea85b53893ee96edc310c23b1fc83b4b0f3d28c3861480840b7fe39a2bc2f6a558a20ae4d30b41f32e275faf92af8456141fde716d8d10a6b30981563db05312c39e8074fd5bb8bf95c24ccdb04e40e595927181d1138510fc6162da1a5898534fc2460b957e7b77bc5e192cc36ad2949c85e15142da926fbf6f830e1aaaa5dd9538e259e7f107e49b194c537ed4a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r6 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) 9.277310753s ago: executing program 3 (id=3328): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r2, 0x0, 0x481e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x2000000, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="0a010100ac14140d2b7d05396a010000000300000000000000e00000010000"], 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffda2, 0x1}}, 0x28) 8.962925488s ago: executing program 4 (id=3329): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0xc804) ppoll(&(0x7f0000000280)=[{r7, 0x40}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x8008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 8.766599614s ago: executing program 2 (id=3330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x20}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x6084}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) truncate(&(0x7f0000000680)='./file0\x00', 0x40003e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 8.511958793s ago: executing program 1 (id=3332): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0x7}, 0x20) timer_create(0x9, 0x0, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000aec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)='#', 0x1}], 0x1}}], 0x1, 0x4028001) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff) 7.176612775s ago: executing program 1 (id=3334): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 6.265645747s ago: executing program 1 (id=3337): r0 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 5.941530418s ago: executing program 0 (id=3338): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sigaltstack(&(0x7f0000000040)={0x0, 0x80000001, 0xffffffffffffff76}, 0x0) sigaltstack(0x0, &(0x7f0000000100)={0x0}) read$FUSE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14, r1, 0xc6721ba5ea541f53, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xcd2ddc7cce1b9250}, 0x4000000) 5.700699355s ago: executing program 1 (id=3339): r0 = socket$inet(0x2, 0x2, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x141080, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000ffffffe80000000000008500"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000d00000000000000", @ANYRES32=0x1, @ANYBLOB="0a0000000000e6ffff0c0000000000001a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000300"/28], 0x50) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) unshare(0x22020600) syz_open_dev$usbfs(&(0x7f0000000580), 0xa875, 0xe96753f3c5c9c814) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) socket$netlink(0x10, 0x3, 0x0) 4.488881862s ago: executing program 2 (id=3340): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="06009500000000000600040000000600950004000000060095000600000006009500070000000600950006000000000000", @ANYBLOB="960f715729aed36a66d7709730dfcfbaede7eeb434fd121e3caa72cd3310a5dca8e41160d03eba54f33ef66d1e4dc2775d4733fc5ad75f21386ba6728f3576b10a751bdb1b26b6ab8a15edf23b14793363fe5e57434db2003e6f8e6bcbd1772c965e2d2d78bb7e9899f2c1ec98b10c553f473df7702ba6f7aecec265f9ef918475e0d7ace73cd305224ce0718f462e29c5aec3a9a81a0239732544b0d50dbf7470ee3109596f5bed3f2cfb8fa26f1f4f496986", @ANYRESDEC], 0x54}}, 0x20000000) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x28, 0x2, 0x0, 0x1, [@typed={0x24, 0x14, 0x0, 0x0, @str='B\xa7\xed\x1a\x064!\x89(c\f\x8d\xf6\xfd\x03\xd1\xd4\xbb\xb7\x1f\xd6P\xf6\v{\x83\xea\n\xd0\x11_6'}]}]}, 0x4c}}, 0xc000) 4.421721608s ago: executing program 3 (id=3341): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x22}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r3, 0x0, &(0x7f0000000200)) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001500000008000300f0747d4a63c690749412291c44f7a1b93d91b5792191d80ce3d3704fd2330dfe5fc0851499acc9f42dbde2a9f5b74194440fc5944826c94d0308791a030708f89299f4181520b4", @ANYRES32=0x0, @ANYBLOB="0c0099000100000000000000"], 0x28}}, 0x8080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001900010000000000ff000000802000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r12, &(0x7f0000000100)={0x9000000a}) 4.416571735s ago: executing program 1 (id=3342): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x26c0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001e0001002cbd7000fedbdf2500000000000000000000000093000001000004d30a00000000000000000000000000000000000001ff030000ff34000008000b00"], 0x48}}, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @dev, @rose, 0x0, [@remote, @rose, @rose, @bcast, @rose, @default]}, &(0x7f0000000f80)=0x40, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x9) 4.414945422s ago: executing program 4 (id=3343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000700)=ANY=[@ANYRES32=r0], 0x2d, 0xfffffffffffffff9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa00}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x20044894) 4.339478185s ago: executing program 0 (id=3344): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xfdff) 4.08694694s ago: executing program 0 (id=3345): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0x7}, 0x20) timer_create(0x9, 0x0, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000aec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)='#', 0x1}], 0x1}}], 0x1, 0x4028001) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff) 2.927721195s ago: executing program 3 (id=3346): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x40000200, 0x0, 0x1, 0x3, 0x4}, 0x2e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) syz_open_dev$usbmon(0x0, 0x0, 0x0) r6 = creat(0x0, 0x0) close(r6) inotify_init1(0x800) rseq(0x0, 0x0, 0x0, 0x0) pipe(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.905287452s ago: executing program 0 (id=3347): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 1.89382774s ago: executing program 3 (id=3348): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3b000000010006", 0x7) 1.810700236s ago: executing program 4 (id=3349): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) memfd_create(0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006110540000000000a6080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) fsopen(&(0x7f00000001c0)='ubifs\x00', 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xc01}], 0x3) 1.747093927s ago: executing program 3 (id=3350): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) 1.56200526s ago: executing program 3 (id=3351): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r2, 0x0, 0x481e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x2000000, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="0a010100ac14140d2b7d05396a010000000300000000000000e00000010000"], 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffda2, 0x1}}, 0x28) 1.425551019s ago: executing program 2 (id=3352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x20}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x6084}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) truncate(&(0x7f0000000680)='./file0\x00', 0x40003e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.298801308s ago: executing program 0 (id=3353): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) 1.105948441s ago: executing program 0 (id=3354): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0xc804) ppoll(&(0x7f0000000280)=[{r7, 0x40}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x8008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 0s ago: executing program 4 (id=3355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r3, 0x0) kernel console output (not intermixed with test programs): oved. [ 368.266286][ T5817] usb 1-1: USB disconnect, device number 4 [ 370.371789][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 370.428315][T12180] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 370.434945][T12180] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 370.467026][T12180] vhci_hcd vhci_hcd.0: Device attached [ 370.473393][T12183] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 370.479992][T12183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 370.487590][T12183] vhci_hcd vhci_hcd.0: Device attached [ 370.528667][T12180] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 370.535280][T12180] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 370.550137][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 370.561201][ T10] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 370.569375][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 370.594344][T12180] vhci_hcd vhci_hcd.0: Device attached [ 370.611519][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 370.624413][T12183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 370.653374][ T10] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 370.687572][T12180] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(23) [ 370.694187][T12180] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 370.702140][ T43] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 370.718429][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 370.740941][T12180] vhci_hcd vhci_hcd.0: Device attached [ 370.742645][T12191] tipc: Enabled bearer , priority 0 [ 370.760169][T12183] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 370.766770][T12183] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 370.780212][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 370.789250][ T10] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 370.810203][T12180] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(25) [ 370.816042][T12196] syzkaller0: entered promiscuous mode [ 370.816795][T12180] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 370.830035][T12196] syzkaller0: entered allmulticast mode [ 370.841212][ T10] usb 4-1: Product: syz [ 370.845375][ T10] usb 4-1: Manufacturer: syz [ 370.866834][ T10] usb 4-1: SerialNumber: syz [ 370.879744][T12183] vhci_hcd vhci_hcd.0: Device attached [ 370.899359][T12191] tipc: Resetting bearer [ 370.908133][ T10] usb 4-1: config 0 descriptor?? [ 370.926854][ T10] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 370.930155][T12180] vhci_hcd vhci_hcd.0: Device attached [ 370.955976][T12199] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(27) [ 370.962588][T12199] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 370.970979][T12190] tipc: Resetting bearer [ 370.991484][ T10] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 371.032677][T12199] vhci_hcd vhci_hcd.0: Device attached [ 371.046021][T12183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 371.075266][T12190] tipc: Disabling bearer [ 371.117644][T12200] vhci_hcd: connection closed [ 371.117918][ T3500] vhci_hcd: stop threads [ 371.119005][T12186] vhci_hcd: connection closed [ 371.123101][T12194] vhci_hcd: connection closed [ 371.131988][T12188] vhci_hcd: connection closed [ 371.136719][T12192] vhci_hcd: connection closed [ 371.141543][ T3500] vhci_hcd: release socket [ 371.153680][T12184] vhci_hcd: connection closed [ 371.163624][T12181] vhci_hcd: connection reset by peer [ 371.170535][ T3500] vhci_hcd: disconnect device [ 371.205070][ T3500] vhci_hcd: stop threads [ 371.209365][ T3500] vhci_hcd: release socket [ 371.229071][ T3500] vhci_hcd: disconnect device [ 371.239704][ T3500] vhci_hcd: stop threads [ 371.249553][ T3500] vhci_hcd: release socket [ 371.271434][ T3500] vhci_hcd: disconnect device [ 371.281976][ T3500] vhci_hcd: stop threads [ 371.306406][ T3500] vhci_hcd: release socket [ 371.324740][ T3500] vhci_hcd: disconnect device [ 371.327488][ T10] usb 4-1: USB disconnect, device number 10 [ 371.327529][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 371.347019][T12174] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 371.359913][ T3500] vhci_hcd: stop threads [ 371.374800][ T3500] vhci_hcd: release socket [ 371.375235][ T10] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 371.393227][ T3500] vhci_hcd: disconnect device [ 371.416831][ T3500] vhci_hcd: stop threads [ 371.446892][ T3500] vhci_hcd: release socket [ 371.473080][ T3500] vhci_hcd: disconnect device [ 371.488199][ T3500] vhci_hcd: stop threads [ 371.503553][ T3500] vhci_hcd: release socket [ 371.520987][ T3500] vhci_hcd: disconnect device [ 372.312220][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 372.380444][T12222] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 372.386985][T12222] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 372.471312][T12222] vhci_hcd vhci_hcd.0: Device attached [ 372.485851][T12222] 9pnet_virtio: no channels available for device syz [ 372.515203][ T30] audit: type=1400 audit(1751514291.225:456): avc: denied { create } for pid=12205 comm="syz.4.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 372.561748][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 372.603136][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2402'. [ 372.647125][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 372.669113][ T10] usb 4-1: can't read configurations, error -71 [ 372.679921][T12223] vhci_hcd: connection closed [ 372.683023][ T9943] vhci_hcd: stop threads [ 372.712517][ T9943] vhci_hcd: release socket [ 372.727540][ T9943] vhci_hcd: disconnect device [ 372.750230][ T5817] usb 42-1: SetAddress Request (2) to port 0 [ 372.756446][ T5817] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 372.880259][ T5817] usb 42-1: enqueue for inactive port 0 [ 373.654135][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'. [ 373.664014][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'. [ 373.673711][ T5817] usb usb42-port1: attempt power cycle [ 373.845194][T12250] macsec0: entered promiscuous mode [ 373.877837][T12250] macsec0: entered allmulticast mode [ 373.884422][T12250] veth1_macvtap: entered allmulticast mode [ 373.965061][T12248] bond0: entered promiscuous mode [ 374.006619][T12248] batadv0: entered promiscuous mode [ 374.020849][T12248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.102436][ T30] audit: type=1400 audit(1751514292.825:457): avc: denied { execute_no_trans } for pid=12235 comm="syz.0.2405" path="/468/file0" dev="tmpfs" ino=2416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 374.115256][T12248] Cannot create hsr debugfs directory [ 374.396804][ T5817] usb usb42-port1: unable to enumerate USB device [ 374.412189][T12248] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 375.301368][T12248] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 375.800259][ T43] vhci_hcd: vhci_device speed not set [ 377.105066][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2411'. [ 377.125538][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'. [ 377.154002][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'. [ 377.211284][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'. [ 377.268995][T12282] random: crng reseeded on system resumption [ 377.270806][ T30] audit: type=1400 audit(1751514296.005:458): avc: denied { write } for pid=12280 comm="syz.2.2417" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 377.339602][ T30] audit: type=1400 audit(1751514296.005:459): avc: denied { open } for pid=12280 comm="syz.2.2417" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 378.430614][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.897956][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 382.285510][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2432'. [ 382.377494][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 382.482881][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 382.513579][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 382.551719][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 384.698036][T12375] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2443'. [ 384.820639][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 384.995662][ T30] audit: type=1400 audit(1751514303.725:460): avc: denied { mount } for pid=12381 comm="syz.1.2445" name="/" dev="autofs" ino=34296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 385.163447][ T30] audit: type=1400 audit(1751514303.905:461): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 385.580323][ T30] audit: type=1400 audit(1751514304.255:462): avc: denied { map } for pid=12388 comm="syz.1.2446" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 385.656972][ T30] audit: type=1400 audit(1751514304.255:463): avc: denied { execute } for pid=12388 comm="syz.1.2446" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 386.377232][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2447'. [ 386.490710][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 386.611284][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 386.743396][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 387.208316][ T30] audit: type=1400 audit(1751514305.945:464): avc: denied { ioctl } for pid=12422 comm="syz.3.2437" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 389.277152][ T30] audit: type=1400 audit(1751514308.015:465): avc: denied { append } for pid=12461 comm="syz.1.2459" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 390.823186][T12483] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 390.829724][T12483] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 390.838020][T12483] vhci_hcd vhci_hcd.0: Device attached [ 390.852774][T12483] 9pnet_virtio: no channels available for device syz [ 391.094362][T12484] vhci_hcd: connection closed [ 391.095002][ T49] vhci_hcd: stop threads [ 391.160693][ T49] vhci_hcd: release socket [ 391.220495][ T49] vhci_hcd: disconnect device [ 392.436365][T12509] netlink: 'syz.0.2465': attribute type 1 has an invalid length. [ 392.444197][T12509] netlink: 'syz.0.2465': attribute type 2 has an invalid length. [ 393.629503][T12495] ALSA: mixer_oss: invalid index 40000 [ 394.503294][ T30] audit: type=1400 audit(1751514312.775:466): avc: denied { mount } for pid=12527 comm="syz.2.2471" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 394.655487][ T30] audit: type=1400 audit(1751514313.355:467): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 394.822951][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 395.223653][T12552] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 395.230191][T12552] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 395.260638][T12552] vhci_hcd vhci_hcd.0: Device attached [ 395.525256][T12552] overlayfs: missing 'lowerdir' [ 395.532110][ T5955] usb 34-1: SetAddress Request (2) to port 0 [ 395.544475][ T5955] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 395.582689][ T30] audit: type=1400 audit(1751514314.325:468): avc: denied { create } for pid=12518 comm="syz.0.2467" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 395.772784][T12554] vhci_hcd: connection reset by peer [ 395.778220][ T13] vhci_hcd: stop threads [ 395.869532][ T13] vhci_hcd: release socket [ 395.904650][ T13] vhci_hcd: disconnect device [ 396.633231][ T30] audit: type=1400 audit(1751514315.375:469): avc: denied { unlink } for pid=12582 comm="syz.1.2481" name="#1" dev="tmpfs" ino=2447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 396.724313][ T30] audit: type=1800 audit(1751514315.435:470): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2481" name="file1" dev="overlay" ino=2449 res=0 errno=0 [ 397.870163][ T30] audit: type=1400 audit(1751514316.595:471): avc: denied { read } for pid=12614 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 400.577823][T12638] input: syz0 as /devices/virtual/input/input14 [ 400.610338][ T5955] usb 34-1: device descriptor read/8, error -110 [ 400.620867][T12673] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2504'. [ 400.724053][T12669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2504'. [ 400.807429][T12677] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2504'. [ 401.023048][ T5955] usb usb34-port1: attempt power cycle [ 401.641961][ T5955] usb usb34-port1: unable to enumerate USB device [ 401.853100][T12724] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2521'. [ 403.722536][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 404.182195][T12755] input: syz0 as /devices/virtual/input/input15 [ 404.569445][T12789] macsec0: entered promiscuous mode [ 404.576633][T12789] macsec0: entered allmulticast mode [ 404.582127][T12789] veth1_macvtap: entered allmulticast mode [ 405.554504][T12807] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2541'. [ 406.059560][T12805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2541'. [ 406.930589][T12824] netlink: 'syz.1.2550': attribute type 10 has an invalid length. [ 407.463014][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2556'. [ 408.087997][T12850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2559'. [ 408.109126][T12849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2559'. [ 408.129270][T12850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2559'. [ 410.445736][T12881] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.2575'. [ 410.460154][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2575'. [ 410.489333][T12881] netlink: 125808 bytes leftover after parsing attributes in process `syz.2.2575'. [ 412.531824][T12915] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2585'. [ 412.546748][ T30] audit: type=1400 audit(1751514331.285:472): avc: denied { create } for pid=12914 comm="syz.1.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 412.631707][T12919] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2587'. [ 413.166088][T12915] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2585'. [ 413.451007][T12913] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2585'. [ 416.068760][T12952] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2600'. [ 417.184041][T12959] fuse: Bad value for 'fd' [ 417.883229][ T5887] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 418.130884][ T5887] usb 1-1: config 0 has no interfaces? [ 418.263942][ T5887] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.333129][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.348635][ T5887] usb 1-1: Product: syz [ 418.356613][ T5887] usb 1-1: Manufacturer: syz [ 418.518358][ T5887] usb 1-1: SerialNumber: syz [ 418.525521][ T5887] usb 1-1: config 0 descriptor?? [ 419.064909][ T30] audit: type=1400 audit(1751514337.805:473): avc: denied { append } for pid=12956 comm="syz.0.2602" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.095160][ T5817] usb 1-1: USB disconnect, device number 5 [ 420.020116][ T30] audit: type=1400 audit(1751514338.755:474): avc: denied { write } for pid=12972 comm="syz.1.2608" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 423.187749][T13004] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2615'. [ 425.730925][ T5955] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 425.900188][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 425.910183][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 425.919024][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 425.950206][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 425.966103][ T5955] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 425.975546][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.984045][ T5955] usb 3-1: Product: syz [ 425.988304][ T5955] usb 3-1: Manufacturer: syz [ 425.993329][ T5955] usb 3-1: SerialNumber: syz [ 426.011047][ T5955] usb 3-1: config 0 descriptor?? [ 426.022750][ T5955] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 426.070326][ T928] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 426.100210][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 426.111326][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.128488][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.139020][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 426.155441][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 426.167889][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.209969][T13024] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2623'. [ 426.223919][ T43] usb 1-1: config 0 descriptor?? [ 426.266262][ T928] usb 2-1: config 0 has no interfaces? [ 426.567180][T13029] fuse: Unknown parameter 'f³*0x0000000000000009' [ 426.594199][T13029] xt_hashlimit: size too large, truncated to 1048576 [ 426.645663][T13030] net veth1_virt_wifi : renamed from virt_wifi0 [ 427.200404][ T928] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.229851][ T928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.236606][ T30] audit: type=1400 audit(1751514345.385:475): avc: denied { ioctl } for pid=13021 comm="syz.4.2616" path="socket:[36154]" dev="sockfs" ino=36154 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 428.215844][ T928] usb 2-1: Product: syz [ 428.220109][ T928] usb 2-1: Manufacturer: syz [ 428.224779][ T928] usb 2-1: SerialNumber: syz [ 428.232627][ T928] usb 2-1: config 0 descriptor?? [ 428.263930][ T43] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 428.352592][ T43] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 428.503812][ T43] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 428.518939][T13038] tipc: Enabled bearer , priority 0 [ 428.526249][ T43] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 428.541829][T13038] syzkaller0: entered promiscuous mode [ 428.549459][ T43] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 428.559872][T13038] syzkaller0: entered allmulticast mode [ 428.562710][ T43] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 428.588730][ T43] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 428.598394][ T43] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 428.598940][ T5817] usb 2-1: USB disconnect, device number 9 [ 428.606151][ T43] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 428.621054][ T43] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 428.622802][T13038] tipc: Resetting bearer [ 428.628437][ T43] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 428.644596][ T43] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 428.664060][ T43] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 428.679245][ T43] microsoft 0003:045E:07DA.0007: no inputs found [ 428.686349][ T43] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 428.768479][T13035] tipc: Resetting bearer [ 428.830729][T13035] tipc: Disabling bearer [ 429.840369][ T43] usb 3-1: USB disconnect, device number 10 [ 429.898388][ T5955] usb 1-1: USB disconnect, device number 6 [ 430.239728][ T30] audit: type=1400 audit(1751514348.965:476): avc: denied { mounton } for pid=13058 comm="syz.3.2635" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 430.279018][T13064] ntfs3(nullb0): Primary boot signature is not NTFS. [ 430.322983][T13064] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 430.841714][T13083] loop8: detected capacity change from 0 to 16384 [ 431.115416][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 431.145949][T13084] loop8: detected capacity change from 16384 to 0 [ 431.184568][ C0] blk_print_req_error: 138 callbacks suppressed [ 431.184580][ C0] I/O error, dev loop8, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 431.891291][T13095] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2641'. [ 433.128878][T13118] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 433.142611][T13118] CPU: 1 UID: 0 PID: 13118 Comm: syz.3.2650 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 433.142643][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.142656][T13118] Call Trace: [ 433.142662][T13118] [ 433.142670][T13118] dump_stack_lvl+0x16c/0x1f0 [ 433.142703][T13118] sysfs_warn_dup+0x7f/0xa0 [ 433.142730][T13118] sysfs_do_create_link_sd+0x124/0x140 [ 433.142759][T13118] sysfs_create_link+0x61/0xc0 [ 433.142784][T13118] device_add+0x62c/0x1a70 [ 433.142816][T13118] ? __pfx_device_add+0x10/0x10 [ 433.142843][T13118] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.142876][T13118] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 433.142914][T13118] wiphy_register+0x1c9c/0x2850 [ 433.142934][T13118] ? netdev_run_todo+0x864/0x1320 [ 433.142973][T13118] ? __pfx_wiphy_register+0x10/0x10 [ 433.143002][T13118] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 433.143037][T13118] ieee80211_register_hw+0x24ac/0x4140 [ 433.143066][T13118] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 433.143089][T13118] ? find_held_lock+0x2b/0x80 [ 433.143112][T13118] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.143134][T13118] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 433.143151][T13118] ? __hrtimer_setup+0x176/0x280 [ 433.143174][T13118] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 433.143213][T13118] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 433.143241][T13118] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 433.143267][T13118] ? __asan_memcpy+0x3c/0x60 [ 433.143293][T13118] hwsim_new_radio_nl+0xb51/0x12c0 [ 433.143320][T13118] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 433.143359][T13118] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 433.143384][T13118] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 433.143413][T13118] genl_family_rcv_msg_doit+0x209/0x2f0 [ 433.143439][T13118] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 433.143470][T13118] ? bpf_lsm_capable+0x9/0x10 [ 433.143488][T13118] ? security_capable+0x7e/0x260 [ 433.143509][T13118] ? ns_capable+0xd7/0x110 [ 433.143533][T13118] genl_rcv_msg+0x55c/0x800 [ 433.143558][T13118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.143581][T13118] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 433.143608][T13118] ? __lock_acquire+0x622/0x1c90 [ 433.143640][T13118] netlink_rcv_skb+0x158/0x420 [ 433.143659][T13118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.143681][T13118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.143712][T13118] ? netlink_deliver_tap+0x1ae/0xd30 [ 433.143740][T13118] ? is_vmalloc_addr+0x86/0xa0 [ 433.143766][T13118] genl_rcv+0x28/0x40 [ 433.143784][T13118] netlink_unicast+0x53d/0x7f0 [ 433.143806][T13118] ? __pfx_netlink_unicast+0x10/0x10 [ 433.143832][T13118] netlink_sendmsg+0x8d1/0xdd0 [ 433.143856][T13118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.143884][T13118] ____sys_sendmsg+0xa95/0xc70 [ 433.143905][T13118] ? copy_msghdr_from_user+0x10a/0x160 [ 433.143930][T13118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.143955][T13118] ? __pfx_futex_wake_mark+0x10/0x10 [ 433.143979][T13118] ___sys_sendmsg+0x134/0x1d0 [ 433.144006][T13118] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.144029][T13118] ? __lock_acquire+0x622/0x1c90 [ 433.144090][T13118] __sys_sendmsg+0x16d/0x220 [ 433.144114][T13118] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.144138][T13118] ? __x64_sys_futex+0x1e0/0x4c0 [ 433.144177][T13118] do_syscall_64+0xcd/0x4c0 [ 433.144205][T13118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.144222][T13118] RIP: 0033:0x7f263cd8e929 [ 433.144236][T13118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.144252][T13118] RSP: 002b:00007f263dc9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.144268][T13118] RAX: ffffffffffffffda RBX: 00007f263cfb5fa0 RCX: 00007f263cd8e929 [ 433.144278][T13118] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 433.144288][T13118] RBP: 00007f263ce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 433.144299][T13118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.144309][T13118] R13: 0000000000000000 R14: 00007f263cfb5fa0 R15: 00007ffe3954ba88 [ 433.144342][T13118] [ 433.154872][ T30] audit: type=1400 audit(1751514351.895:477): avc: denied { append } for pid=13119 comm="syz.0.2649" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 435.989579][T13147] fuse: Bad value for 'fd' [ 436.807136][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 436.870367][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 436.911375][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 439.493578][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.546681][T13194] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2677'. [ 441.218389][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'. [ 441.534479][T13215] macsec0: entered promiscuous mode [ 441.550972][T13215] macsec0: entered allmulticast mode [ 441.590463][T13215] veth1_macvtap: entered allmulticast mode [ 441.674798][T13217] ntfs3(nullb0): Primary boot signature is not NTFS. [ 441.682045][T13217] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 442.771495][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 443.898996][T13242] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2689'. [ 444.020244][T13237] futex_wake_op: syz.0.2687 tries to shift op by -1; fix this program [ 444.349944][T13246] tipc: Enabled bearer , priority 10 [ 444.637440][T13249] tipc: Resetting bearer [ 445.556175][T13245] tipc: Resetting bearer [ 445.640141][ T5887] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 445.834865][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 445.857090][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.921813][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.961992][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 445.997028][T13260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2690'. [ 446.049793][ T5887] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 446.100111][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.162256][ T5887] usb 3-1: config 0 descriptor?? [ 446.600252][ T5887] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 446.631484][ T5887] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 446.649951][ T5887] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 446.661585][ T5887] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 446.672144][ T5887] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 446.688265][ T5887] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 446.698726][ T5887] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 446.801516][ T5887] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 446.809803][ T5887] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 446.817577][ T5887] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 446.825752][ T5887] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 446.835871][ T5887] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 447.152099][ T5887] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 447.179175][ T5887] microsoft 0003:045E:07DA.0008: no inputs found [ 447.322916][ T5887] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 448.750680][T13275] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2700'. [ 448.992884][T13281] input: syz0 as /devices/virtual/input/input16 [ 450.769883][T13245] tipc: Disabling bearer [ 450.826572][T13279] tipc: Enabling of bearer rejected, failed to enable media [ 450.863964][ T5887] usb 3-1: USB disconnect, device number 11 [ 451.179749][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2712'. [ 451.220690][T13317] tipc: Enabled bearer , priority 0 [ 451.229914][T13317] tipc: Resetting bearer [ 451.302323][T13319] tipc: Enabled bearer , priority 0 [ 451.337279][T13319] syzkaller0: entered promiscuous mode [ 451.343043][T13319] syzkaller0: entered allmulticast mode [ 451.353753][T13316] tipc: Disabling bearer [ 451.509319][T13322] tipc: Resetting bearer [ 451.548066][T13318] tipc: Resetting bearer [ 451.630909][T13318] tipc: Disabling bearer [ 452.080325][ T5887] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 452.322312][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 452.338367][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.373637][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.416245][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.445955][ T5887] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.465152][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.514570][ T5887] usb 5-1: config 0 descriptor?? [ 452.610142][ T928] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 452.633832][T13341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2721'. [ 452.788831][ T928] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 452.869867][ T928] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 452.897105][ T928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 452.923651][ T5887] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 452.947413][ T5887] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 452.950139][ T928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12408, setting to 64 [ 452.971640][ T928] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 453.001879][ T5887] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 453.013158][ T5887] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 453.023069][ T5887] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 453.024587][ T928] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 453.032607][ T5887] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 453.047909][ T5887] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 453.075210][ T5887] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 453.081824][ T928] usb 1-1: Product: syz [ 453.113874][ T928] usb 1-1: Manufacturer: syz [ 453.128609][ T5887] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 453.144287][ T928] cdc_wdm 1-1:1.0: skipping garbage [ 453.163856][ T928] cdc_wdm 1-1:1.0: skipping garbage [ 453.168181][ T5887] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 453.220094][ T5887] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 453.221240][ T928] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 453.250094][ T5887] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 453.380613][ T5887] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 453.397722][ T5887] microsoft 0003:045E:07DA.0009: no inputs found [ 453.405246][ T5887] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 453.427319][ T10] usb 1-1: USB disconnect, device number 7 [ 453.540774][ T5887] usb 5-1: USB disconnect, device number 7 [ 454.531105][T13352] fido_id[13352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 455.460917][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2731'. [ 455.683026][T13367] bridge_slave_1: left allmulticast mode [ 455.688706][T13367] bridge_slave_1: left promiscuous mode [ 455.797672][T13367] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.558325][T13371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2733'. [ 456.644444][T13367] bridge_slave_0: left allmulticast mode [ 456.670111][T13367] bridge_slave_0: left promiscuous mode [ 456.675943][T13367] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.023229][T13381] tipc: Enabled bearer , priority 0 [ 457.040975][T13381] syzkaller0: entered promiscuous mode [ 457.050207][T13381] syzkaller0: entered allmulticast mode [ 457.072315][T13381] tipc: Resetting bearer [ 457.096329][T13380] tipc: Resetting bearer [ 457.174414][T13380] tipc: Disabling bearer [ 457.450439][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2739'. [ 457.484989][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 457.510327][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 457.589196][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 458.426187][T13430] tipc: Enabled bearer , priority 0 [ 458.434912][T13430] syzkaller0: entered promiscuous mode [ 458.440483][T13430] syzkaller0: entered allmulticast mode [ 458.488082][T13430] tipc: Resetting bearer [ 458.512775][T13429] tipc: Resetting bearer [ 458.549345][T13429] tipc: Disabling bearer [ 458.610275][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 460.227692][T13452] futex_wake_op: syz.4.2760 tries to shift op by -1; fix this program [ 460.939835][T13481] ntfs3(nullb0): Primary boot signature is not NTFS. [ 461.003406][T13481] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 462.416685][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2784'. [ 462.436344][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'. [ 462.466719][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'. [ 462.475815][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'. [ 462.664392][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'. [ 462.711363][T13517] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.718583][T13517] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.747069][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2787'. [ 462.798817][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 462.819980][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 462.875286][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 463.413845][ T30] audit: type=1400 audit(1751514382.155:478): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 463.887287][T13534] netlink: 'syz.0.2790': attribute type 1 has an invalid length. [ 463.895226][T13534] netlink: 'syz.0.2790': attribute type 2 has an invalid length. [ 464.844046][T13544] ntfs3(nullb0): Primary boot signature is not NTFS. [ 464.850968][T13544] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 465.132522][T13545] macsec0: entered promiscuous mode [ 465.148101][T13545] macsec0: entered allmulticast mode [ 465.153615][T13545] veth1_macvtap: entered allmulticast mode [ 466.437546][T13558] syzkaller0: entered promiscuous mode [ 466.453213][T13558] syzkaller0: entered allmulticast mode [ 466.659395][T13562] batman_adv: batadv0: Adding interface: macvlan6 [ 466.675754][T13562] batman_adv: batadv0: The MTU of interface macvlan6 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.755930][T13562] batman_adv: batadv0: Interface activated: macvlan6 [ 466.929698][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.940021][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.949594][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.874916][ T928] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 467.890463][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.903942][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 467.930098][ T30] audit: type=1400 audit(1751514386.655:479): avc: denied { mounton } for pid=13570 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 468.100143][ T928] usb 1-1: Using ep0 maxpacket: 8 [ 468.111787][ T928] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 468.130315][ T928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 468.152358][ T928] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 468.170478][ T928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.188689][ T928] usb 1-1: Product: syz [ 468.198762][ T928] usb 1-1: Manufacturer: syz [ 468.203820][ T928] usb 1-1: SerialNumber: syz [ 468.219641][ T928] usb 1-1: config 0 descriptor?? [ 468.227745][ T928] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 468.376832][T13570] chnl_net:caif_netlink_parms(): no params data found [ 468.909778][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.047999][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.093014][T13570] bridge_slave_0: entered allmulticast mode [ 469.100349][T13570] bridge_slave_0: entered promiscuous mode [ 469.109355][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.116552][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.123742][T13570] bridge_slave_1: entered allmulticast mode [ 469.131710][T13570] bridge_slave_1: entered promiscuous mode [ 469.208012][T13570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.228631][T13570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.310451][T13604] ntfs3(nullb0): Primary boot signature is not NTFS. [ 469.316864][T13570] team0: Port device team_slave_0 added [ 469.323557][T13604] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 469.338564][T13570] team0: Port device team_slave_1 added [ 469.408183][T13570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.423576][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.475637][T13570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.501091][T13570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.516555][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.542471][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.575917][T13570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.656333][T13570] hsr_slave_0: entered promiscuous mode [ 469.674283][T13570] hsr_slave_1: entered promiscuous mode [ 469.687779][T13570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.705637][T13570] Cannot create hsr debugfs directory [ 469.840508][ T5817] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 470.889016][ T5818] Bluetooth: hci0: command tx timeout [ 470.990074][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 471.001843][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.013186][ T43] usb 1-1: USB disconnect, device number 8 [ 471.026601][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.037038][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 471.146758][ T5817] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 471.170501][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.193603][ T5817] usb 3-1: config 0 descriptor?? [ 471.291868][T13570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.451809][T13570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.611706][ T5817] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 471.618965][ T5817] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 471.635394][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 471.638232][T13570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.645435][ T5817] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 471.698585][ T5817] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 471.731574][ T5817] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 471.757281][ T5817] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 471.776385][ T5817] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 471.794703][ T5817] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 471.816258][ T5817] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 471.843949][ T5817] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 471.861852][ T5817] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 471.879243][ T5817] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 471.933973][ T5817] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 471.976889][ T5817] microsoft 0003:045E:07DA.000A: no inputs found [ 472.095288][T13570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.129832][ T5817] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 472.273891][T13664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2829'. [ 472.290579][T13664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2829'. [ 472.314279][T13664] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 472.410271][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 472.562908][T13570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 472.580221][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 472.585623][T13570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 472.607280][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 472.631708][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 472.647669][ T43] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 472.666830][T13570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 472.674570][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.685362][T13570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 472.688906][ T43] usb 1-1: Product: syz [ 472.697965][ T43] usb 1-1: Manufacturer: syz [ 472.705626][ T43] usb 1-1: SerialNumber: syz [ 472.766046][ T43] usb 1-1: config 0 descriptor?? [ 472.790210][ T30] audit: type=1400 audit(1751514391.525:480): avc: denied { bind } for pid=13675 comm="syz.1.2834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 472.792053][T13674] erspan0: entered promiscuous mode [ 472.879721][ T43] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 472.930349][ T5818] Bluetooth: hci0: command tx timeout [ 472.991083][T13674] batman_adv: batadv0: Adding interface: macvlan4 [ 473.076597][T13674] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.101990][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.143345][T13674] batman_adv: batadv0: Interface activated: macvlan4 [ 473.247268][ T43] usb 3-1: USB disconnect, device number 12 [ 473.793889][T13570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.826320][T13570] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.866090][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.873252][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.897164][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.904307][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.453500][T13570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.527537][T13570] veth0_vlan: entered promiscuous mode [ 474.608907][T13570] veth1_vlan: entered promiscuous mode [ 474.983284][T13570] veth0_macvtap: entered promiscuous mode [ 474.994823][T13570] veth1_macvtap: entered promiscuous mode [ 475.011026][ T5818] Bluetooth: hci0: command tx timeout [ 475.013091][T13570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.034530][T13706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2839'. [ 475.101248][T13710] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 475.211826][ T928] usb 1-1: USB disconnect, device number 9 [ 475.242466][T13570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.301388][T13570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.338791][T13570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.348529][T13570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.358027][T13570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.445325][T13703] netlink: 'syz.4.2839': attribute type 12 has an invalid length. [ 475.639427][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.749298][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.819816][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.858625][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.861448][T13726] erspan0: entered promiscuous mode [ 475.879902][T13726] erspan0: left promiscuous mode [ 475.949633][ T30] audit: type=1400 audit(1751514394.685:481): avc: denied { mounton } for pid=13570 comm="syz-executor" path="/root/syzkaller.YJmu3L/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 476.059395][ T30] audit: type=1400 audit(1751514394.795:482): avc: denied { mount } for pid=13570 comm="syz-executor" name="/" dev="gadgetfs" ino=7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 476.660214][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 477.000630][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 477.007081][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 477.045733][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 477.085531][ T43] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 477.100670][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.100707][ T5818] Bluetooth: hci0: command tx timeout [ 477.118494][ T43] usb 4-1: Product: syz [ 477.140500][ T43] usb 4-1: Manufacturer: syz [ 477.164356][ T43] usb 4-1: SerialNumber: syz [ 477.185494][ T43] usb 4-1: config 0 descriptor?? [ 477.205482][ T43] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 478.350382][T13763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2858'. [ 478.403936][T13763] netlink: 'syz.0.2858': attribute type 12 has an invalid length. [ 479.072254][T13812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2873'. [ 479.084663][T13812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2873'. [ 479.094850][T13812] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 479.190211][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'. [ 479.506484][ T43] usb 4-1: USB disconnect, device number 13 [ 479.686248][T13835] fuse: Bad value for 'fd' [ 479.786724][T13839] netlink: 'syz.2.2883': attribute type 1 has an invalid length. [ 479.794563][T13839] netlink: 'syz.2.2883': attribute type 2 has an invalid length. [ 480.648783][T13859] syzkaller0: entered promiscuous mode [ 480.703891][T13859] syzkaller0: entered allmulticast mode [ 480.921018][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2899'. [ 480.958761][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2899'. [ 482.967133][T13879] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 482.975698][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2899'. [ 483.001876][T13890] batman_adv: batadv0: Adding interface: macvlan7 [ 483.020110][T13890] batman_adv: batadv0: The MTU of interface macvlan7 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.090219][T13890] batman_adv: batadv0: Interface activated: macvlan7 [ 483.140198][T13896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2909'. [ 483.158943][T13901] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2910'. [ 483.193905][T13896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2909'. [ 484.147493][T13908] netlink: 'syz.4.2912': attribute type 1 has an invalid length. [ 484.155292][T13908] netlink: 'syz.4.2912': attribute type 2 has an invalid length. [ 484.657070][T13911] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 485.506828][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 485.532727][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 485.555198][T13926] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.617018][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 485.630753][T13936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2925'. [ 485.688335][T13926] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.808769][T13926] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.851970][T13941] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.949054][T13926] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.986253][T13941] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.163433][T13926] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.175999][T13941] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.234580][T13926] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.316470][T13951] macsec0: entered promiscuous mode [ 486.325019][T13951] macsec0: entered allmulticast mode [ 486.331442][T13951] veth1_macvtap: entered allmulticast mode [ 487.193608][T13941] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.240927][T13926] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.287858][T13926] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.462858][T13941] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.475002][T13963] ntfs3(nullb0): Primary boot signature is not NTFS. [ 487.490404][T13963] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 487.505640][T13941] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.542502][T13941] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.673288][T13941] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.876783][T13973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2938'. [ 488.871331][ T5887] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 489.160185][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 489.166590][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 489.193967][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 489.672736][ T5887] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 489.689987][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.707094][ T5887] usb 3-1: Product: syz [ 489.723838][ T5887] usb 3-1: Manufacturer: syz [ 489.737814][ T5887] usb 3-1: SerialNumber: syz [ 489.765612][ T5887] usb 3-1: config 0 descriptor?? [ 489.793706][ T5887] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 490.094391][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 490.103393][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.112201][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.120144][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.127813][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 490.140959][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 490.280199][ T43] usb 2-1: device descriptor read/64, error -71 [ 490.541023][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 490.554397][T14026] ntfs3(nullb0): Primary boot signature is not NTFS. [ 490.633763][T14026] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 490.697028][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.730203][ T43] usb 2-1: device descriptor read/64, error -71 [ 490.764683][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.833249][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.846924][ T43] usb usb2-port1: attempt power cycle [ 490.887565][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.002103][T14019] chnl_net:caif_netlink_parms(): no params data found [ 491.201987][T14037] netlink: 'syz.3.2957': attribute type 1 has an invalid length. [ 491.209772][T14037] netlink: 'syz.3.2957': attribute type 2 has an invalid length. [ 491.563602][T14019] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.571213][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.578344][T14019] bridge_slave_0: entered allmulticast mode [ 491.580183][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 491.585481][T14019] bridge_slave_0: entered promiscuous mode [ 491.601037][T14019] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.608175][T14019] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.615813][T14019] bridge_slave_1: entered allmulticast mode [ 491.624534][T14019] bridge_slave_1: entered promiscuous mode [ 491.645966][ T43] usb 2-1: device descriptor read/8, error -71 [ 491.692875][T14019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.782301][T14019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.803502][ T5955] usb 3-1: USB disconnect, device number 13 [ 491.927766][T14019] team0: Port device team_slave_0 added [ 491.930146][ T43] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 491.954022][T14049] fuse: Bad value for 'group_id' [ 491.956562][T14019] team0: Port device team_slave_1 added [ 491.958969][T14049] fuse: Bad value for 'group_id' [ 492.001135][ T43] usb 2-1: device descriptor read/8, error -71 [ 492.059576][T14019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.072538][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.105239][T14019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.119804][T14019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.124674][ T43] usb usb2-port1: unable to enumerate USB device [ 492.129180][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.158906][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.173433][T14019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.190602][ T36] bridge_slave_1: left allmulticast mode [ 493.131853][ T36] bridge_slave_1: left promiscuous mode [ 493.138954][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.160160][ T5825] Bluetooth: hci1: command tx timeout [ 493.186121][ T36] bridge_slave_0: left allmulticast mode [ 493.221769][ T36] bridge_slave_0: left promiscuous mode [ 493.227502][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.560186][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 493.639399][ T36] batman_adv: batadv0: Interface deactivated: macvlan4 [ 493.666182][ T36] batman_adv: batadv0: Removing interface: macvlan4 [ 493.688853][ T36] batman_adv: batadv0: Interface deactivated: macvlan2 [ 493.710534][ T36] batman_adv: batadv0: Removing interface: macvlan2 [ 493.736789][ T43] usb 2-1: config 0 has no interfaces? [ 493.744840][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.755558][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.777503][ T43] usb 2-1: Product: syz [ 493.785111][ T43] usb 2-1: Manufacturer: syz [ 493.797997][ T43] usb 2-1: SerialNumber: syz [ 493.826467][ T43] usb 2-1: config 0 descriptor?? [ 494.043839][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.055763][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.065779][ T43] usb 2-1: USB disconnect, device number 14 [ 494.066119][ T36] bond0 (unregistering): Released all slaves [ 494.118853][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2967'. [ 494.197424][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 494.220408][ T36] tipc: Left network mode [ 494.224107][T14019] hsr_slave_0: entered promiscuous mode [ 494.331209][T14019] hsr_slave_1: entered promiscuous mode [ 494.337349][T14019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.355318][T14019] Cannot create hsr debugfs directory [ 494.371575][T14085] netlink: 'syz.3.2969': attribute type 1 has an invalid length. [ 494.379283][T14085] netlink: 'syz.3.2969': attribute type 2 has an invalid length. [ 494.593081][T14096] fuse: Bad value for 'group_id' [ 494.598058][T14096] fuse: Bad value for 'group_id' [ 494.850223][ T6009] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 494.980600][T14041] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 495.260150][ T5825] Bluetooth: hci1: command tx timeout [ 495.286751][T14041] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 495.340499][T14041] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 495.355972][T14041] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 495.365210][ T36] hsr_slave_0: left promiscuous mode [ 495.377663][ T36] hsr_slave_1: left promiscuous mode [ 495.384332][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.395840][T14041] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 495.408789][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.420709][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.428099][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.442938][T14041] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 495.456026][T14041] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 495.476871][T14041] usb 4-1: Product: syz [ 495.481834][ T6009] usb 1-1: Using ep0 maxpacket: 8 [ 495.552887][ T6009] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 495.561605][T14041] usb 4-1: Manufacturer: syz [ 495.574084][ T36] veth1_macvtap: left allmulticast mode [ 495.579810][ T36] veth1_macvtap: left promiscuous mode [ 495.588642][T14041] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 495.604047][ T6009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 495.605392][ T36] veth0_macvtap: left promiscuous mode [ 495.624693][ T36] veth1_vlan: left promiscuous mode [ 495.630238][ T36] veth0_vlan: left promiscuous mode [ 495.646225][ T6009] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 495.656113][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.672897][ T6009] usb 1-1: Product: syz [ 495.677202][ T6009] usb 1-1: Manufacturer: syz [ 495.685249][ T6009] usb 1-1: SerialNumber: syz [ 495.699596][ T6009] usb 1-1: config 0 descriptor?? [ 495.713998][ T6009] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 495.793342][ T6009] usb 4-1: USB disconnect, device number 14 [ 496.633363][ T36] team0 (unregistering): Port device team_slave_1 removed [ 496.666012][ T36] team0 (unregistering): Port device team_slave_0 removed [ 496.673249][ T30] audit: type=1400 audit(1751514415.405:483): avc: denied { accept } for pid=14129 comm="syz.3.2981" lport=32818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 497.152616][T14138] fuse: Bad value for 'group_id' [ 497.174819][T14138] fuse: Bad value for 'group_id' [ 497.340552][ T5825] Bluetooth: hci1: command tx timeout [ 497.351503][ T36] IPVS: stop unused estimator thread 0... [ 497.547589][T14041] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 497.612882][T14158] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.663389][T14158] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.717184][T14019] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 497.733884][T14041] usb 2-1: config 0 has no interfaces? [ 497.745492][T14041] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 497.746964][T14019] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 497.761666][T14041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.769778][T14041] usb 2-1: Product: syz [ 497.775118][T14041] usb 2-1: Manufacturer: syz [ 497.779035][T14162] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.779762][T14041] usb 2-1: SerialNumber: syz [ 497.800675][T14041] usb 2-1: config 0 descriptor?? [ 497.810965][T14158] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.829885][T14019] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 497.842002][T14019] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 497.857842][T14162] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.881106][T14158] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.919141][T14162] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.007385][ T6009] usb 1-1: USB disconnect, device number 10 [ 498.053773][ T55] usb 2-1: USB disconnect, device number 15 [ 498.054092][T14162] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.112974][T14019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.154924][T14158] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.186639][T14158] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.247919][T14158] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.265442][T14019] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.297914][T14158] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.315741][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.322881][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.341762][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.348872][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.402209][T14162] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.448831][T14162] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.494513][T14162] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.558916][T14162] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.205134][T14019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.410803][ T5825] Bluetooth: hci1: command tx timeout [ 499.482785][ T928] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 499.581098][ T5817] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 499.661431][ T928] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 499.672272][ T928] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 499.685879][ T928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 499.697170][T14019] veth0_vlan: entered promiscuous mode [ 499.705495][ T928] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.724641][T14019] veth1_vlan: entered promiscuous mode [ 499.741407][ T928] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 499.753400][ T928] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 499.755472][ T5817] usb 4-1: config 0 has no interfaces? [ 499.776846][ T928] usb 3-1: Product: syz [ 499.783432][T14019] veth0_macvtap: entered promiscuous mode [ 499.789214][ T928] usb 3-1: Manufacturer: syz [ 499.812615][ T5817] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.816082][ T928] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 499.835499][T14019] veth1_macvtap: entered promiscuous mode [ 499.845991][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.882098][T14019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.897910][ T5817] usb 4-1: Product: syz [ 499.909368][ T5817] usb 4-1: Manufacturer: syz [ 499.912762][T14019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.930227][ T5817] usb 4-1: SerialNumber: syz [ 499.950916][ T5817] usb 4-1: config 0 descriptor?? [ 499.955643][T14019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.987737][T14019] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.009130][T14019] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.043302][ T928] usb 3-1: USB disconnect, device number 14 [ 500.059571][T14019] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.422145][ T5817] usb 4-1: USB disconnect, device number 15 [ 500.518473][ T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.544798][ T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.631433][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'. [ 500.649198][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.660219][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.942907][T14274] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2953'. [ 500.952650][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.840942][T14307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input18 [ 504.249164][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 504.280283][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 504.289313][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 504.300879][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 504.327037][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 504.489967][T14316] tipc: Started in network mode [ 504.504917][T14316] tipc: Node identity 760fa60f5312, cluster identity 4711 [ 504.533713][T14316] tipc: Enabled bearer , priority 0 [ 504.549224][T14316] tipc: Resetting bearer [ 504.644877][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.746068][T14312] tipc: Disabling bearer [ 504.785494][T14330] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3028'. [ 504.796957][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.956222][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.074081][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.160112][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 505.342778][ T43] usb 4-1: config 0 has no interfaces? [ 505.358826][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 505.378591][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.399294][ T43] usb 4-1: Product: syz [ 505.437474][ T43] usb 4-1: Manufacturer: syz [ 505.463656][ T43] usb 4-1: SerialNumber: syz [ 505.517225][ T43] usb 4-1: config 0 descriptor?? [ 505.681634][T14317] chnl_net:caif_netlink_parms(): no params data found [ 505.789741][ T43] usb 4-1: USB disconnect, device number 16 [ 506.370122][ T5825] Bluetooth: hci5: command tx timeout [ 506.597796][ T13] batman_adv: batadv0: Interface deactivated: macvlan2 [ 506.614544][ T13] batman_adv: batadv0: Removing interface: macvlan2 [ 506.962034][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.973709][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.984138][ T13] bond0 (unregistering): Released all slaves [ 507.012837][T14365] macsec0: entered promiscuous mode [ 507.018131][T14365] macsec0: entered allmulticast mode [ 507.023484][T14365] veth1_macvtap: entered allmulticast mode [ 507.234835][T14375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.263859][T14379] fuse: Bad value for 'user_id' [ 507.285130][T14379] fuse: Bad value for 'user_id' [ 507.295160][ T13] tipc: Left network mode [ 507.434797][T14375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.509514][T14395] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3045'. [ 507.624375][T14317] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.660367][T14317] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.685011][T14317] bridge_slave_0: entered allmulticast mode [ 507.695657][T14317] bridge_slave_0: entered promiscuous mode [ 507.752273][T14375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.849131][T14317] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.862331][T14317] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.869660][T14317] bridge_slave_1: entered allmulticast mode [ 507.879267][T14317] bridge_slave_1: entered promiscuous mode [ 507.971860][T14375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.997421][T14397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3044'. [ 508.139116][T14317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.159256][T14317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.195028][ T13] hsr_slave_0: left promiscuous mode [ 508.206817][ T13] hsr_slave_1: left promiscuous mode [ 508.225127][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.244202][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.268472][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.277314][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.344713][ T13] veth1_macvtap: left allmulticast mode [ 508.359094][ T13] veth1_macvtap: left promiscuous mode [ 508.370674][ T13] veth0_macvtap: left promiscuous mode [ 508.377159][ T13] veth1_vlan: left promiscuous mode [ 508.385761][ T13] veth0_vlan: left promiscuous mode [ 508.460209][ T5825] Bluetooth: hci5: command tx timeout [ 509.555965][ T13] team0 (unregistering): Port device team_slave_1 removed [ 509.632523][ T13] team0 (unregistering): Port device team_slave_0 removed [ 509.636422][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3051'. [ 510.032989][T14375] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.064443][T14434] fuse: Unknown parameter 'grou00000000000000000000' [ 510.077573][T14317] team0: Port device team_slave_0 added [ 510.140513][T14375] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.140991][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3053'. [ 510.178984][T14317] team0: Port device team_slave_1 added [ 510.294899][T14438] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.393453][T14375] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.428108][T14375] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.457260][T14317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.470102][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.506784][T14317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.531015][ T5825] Bluetooth: hci5: command tx timeout [ 510.545197][T14438] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.578657][T14317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.586640][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.618910][T14317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.657820][T14438] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.678042][ T13] IPVS: stop unused estimator thread 0... [ 510.748807][T14438] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.778578][T14041] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 510.856666][T14317] hsr_slave_0: entered promiscuous mode [ 510.865067][T14317] hsr_slave_1: entered promiscuous mode [ 510.873128][T14317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.880912][T14317] Cannot create hsr debugfs directory [ 510.949042][T14438] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.969751][T14041] usb 3-1: config 4 has an invalid interface number: 210 but max is 0 [ 510.983368][T14041] usb 3-1: config 4 has no interface number 0 [ 510.989469][T14041] usb 3-1: config 4 interface 210 has no altsetting 0 [ 510.999268][T14041] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=8d.40 [ 511.012754][T14041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.043819][T14041] usb 3-1: Product: syz [ 511.049490][T14438] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.058260][T14041] usb 3-1: Manufacturer: syz [ 511.066459][T14041] usb 3-1: SerialNumber: syz [ 511.125543][T14438] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.236341][T14438] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.387781][T14041] smsusb:smsusb_probe: board id=8, interface number 210 [ 511.465608][T14041] usb 3-1: USB disconnect, device number 15 [ 512.612499][ T5825] Bluetooth: hci5: command tx timeout [ 514.941739][T14317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 515.016393][T14317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 515.057476][T14317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 515.120498][T14317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 515.290136][ T5887] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 515.340183][ T5817] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 515.423746][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3077'. [ 515.443755][T14317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.445436][ T5887] usb 5-1: config 0 has no interfaces? [ 515.468172][ T5887] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.510201][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.514113][T14317] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.537693][ T5817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 515.555229][ T5887] usb 5-1: Product: syz [ 515.561156][ T5817] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 515.581287][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.588385][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.625363][ T5817] usb 4-1: can't read configurations, error -71 [ 515.632092][ T5887] usb 5-1: Manufacturer: syz [ 515.647061][ T5887] usb 5-1: SerialNumber: syz [ 515.672727][ T5887] usb 5-1: config 0 descriptor?? [ 515.680936][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.688047][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.905886][ T10] usb 5-1: USB disconnect, device number 8 [ 516.209862][T14571] fuse: Bad value for 'fd' [ 516.219559][T14317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.343205][T14317] veth0_vlan: entered promiscuous mode [ 516.379985][T14317] veth1_vlan: entered promiscuous mode [ 516.502502][T14317] veth0_macvtap: entered promiscuous mode [ 516.536159][T14317] veth1_macvtap: entered promiscuous mode [ 516.589516][T14317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.654999][T14317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.699970][T14317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.727959][T14317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.759950][T14317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.806764][T14317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.975176][ T10] IPVS: starting estimator thread 0... [ 517.050509][T14017] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 517.076646][T14594] IPVS: using max 42 ests per chain, 100800 per kthread [ 517.253182][T14017] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 517.285266][T14017] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 517.310430][T14017] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 517.326817][T14017] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.391643][T14017] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 517.404494][T14017] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 517.421841][T14017] usb 2-1: Product: syz [ 517.429411][T14017] usb 2-1: Manufacturer: syz [ 517.454027][T14017] cdc_wdm 2-1:1.0: skipping garbage [ 517.468490][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.507401][T14017] cdc_wdm 2-1:1.0: skipping garbage [ 517.603806][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.634107][T14017] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 518.174816][T14017] usb 2-1: USB disconnect, device number 16 [ 518.345508][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.364026][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.606747][T14621] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3093'. [ 518.631303][T14616] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.770316][T14616] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.922069][T14616] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.077070][T14616] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.211512][T14616] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.276312][T14616] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.353862][T14616] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.420604][T14641] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3099'. [ 519.547738][T14616] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.623193][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 519.633568][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 519.642557][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 519.656365][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 519.664196][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 520.989482][ T6940] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.194426][ T6940] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.266241][T14674] tipc: Enabled bearer , priority 0 [ 521.322470][T14671] tipc: Resetting bearer [ 521.347499][ T6940] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.387987][T14670] tipc: Disabling bearer [ 521.437294][T14682] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3105'. [ 521.499658][ T6940] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.522120][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 521.691583][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 521.713770][ T10] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 521.730626][ T5818] Bluetooth: hci2: command tx timeout [ 521.748242][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 521.753935][T14694] tipc: Enabled bearer , priority 0 [ 521.769320][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.789237][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.798425][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.811079][T14701] syzkaller0: entered promiscuous mode [ 521.822766][T14701] syzkaller0: entered allmulticast mode [ 521.828511][ T10] usb 1-1: Product: syz [ 521.832840][ T10] usb 1-1: Manufacturer: syz [ 521.848152][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 521.858807][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 521.864567][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 521.981269][T14694] tipc: Resetting bearer [ 521.999357][T14650] chnl_net:caif_netlink_parms(): no params data found [ 522.044544][T14691] tipc: Resetting bearer [ 522.057813][ T10] usb 1-1: USB disconnect, device number 11 [ 522.085591][T14691] tipc: Disabling bearer [ 522.106109][ T6940] bridge_slave_1: left allmulticast mode [ 522.112185][ T6940] bridge_slave_1: left promiscuous mode [ 522.117894][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.132383][ T6940] bridge_slave_0: left allmulticast mode [ 522.138077][ T6940] bridge_slave_0: left promiscuous mode [ 522.146604][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.283026][ T6940] batman_adv: batadv0: Interface deactivated: macvlan2 [ 522.289946][ T6940] batman_adv: batadv0: Interface deactivated: macvlan6 [ 522.300035][ T6940] batman_adv: batadv0: Interface deactivated: macvlan7 [ 522.318721][ T6940] batman_adv: batadv0: Removing interface: macvlan2 [ 522.332425][ T6940] batman_adv: batadv0: Removing interface: macvlan6 [ 522.345977][ T6940] batman_adv: batadv0: Removing interface: macvlan7 [ 522.362434][ T6940] batman_adv: batadv0: Interface deactivated: macvlan4 [ 522.377196][ T6940] batman_adv: batadv0: Removing interface: macvlan4 [ 522.499489][T14714] fuse: Unknown parameter 'group_i00000000000000000000' [ 523.202637][ T6940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.217371][ T6940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.227969][ T6940] bond0 (unregistering): Released all slaves [ 523.245127][ T6940] bond1 (unregistering): Released all slaves [ 523.518258][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3120'. [ 523.551942][ T6940] tipc: Left network mode [ 523.635698][T14738] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.643037][T14738] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.651170][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'. [ 523.798867][T14739] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.806440][T14739] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.820627][ T5818] Bluetooth: hci2: command tx timeout [ 523.835621][T14650] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.888949][T14650] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.990259][T14650] bridge_slave_0: entered allmulticast mode [ 524.012274][T14650] bridge_slave_0: entered promiscuous mode [ 524.506643][T14650] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.517805][T14650] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.525199][T14650] bridge_slave_1: entered allmulticast mode [ 524.539984][T14650] bridge_slave_1: entered promiscuous mode [ 524.898196][T14650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.935952][ T5818] Bluetooth: hci2: command tx timeout [ 526.103824][ T6940] hsr_slave_0: left promiscuous mode [ 526.130868][ T6940] hsr_slave_1: left promiscuous mode [ 526.136747][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.152447][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.275172][T14771] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3134'. [ 526.300778][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.333135][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.427869][ T6940] dummy0: left allmulticast mode [ 526.456998][ T6940] veth1_macvtap: left allmulticast mode [ 526.473640][ T6940] veth1_macvtap: left promiscuous mode [ 526.490146][ T6940] veth0_macvtap: left promiscuous mode [ 526.495858][ T6940] veth1_vlan: left promiscuous mode [ 526.522716][ T6940] veth0_vlan: left promiscuous mode [ 526.735841][ T6940] team0 (unregistering): Port device batadv1 removed [ 527.196409][ T6940] team0 (unregistering): Port device team_slave_1 removed [ 527.237638][ T6940] team0 (unregistering): Port device team_slave_0 removed [ 527.503508][T14650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.614540][T14650] team0: Port device team_slave_0 added [ 527.644026][T14650] team0: Port device team_slave_1 added [ 527.825059][T14650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.851606][T14650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.957173][T14650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.989746][T14650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.018367][T14650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.172843][ T5825] Bluetooth: hci2: command tx timeout [ 529.065142][T14650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.140087][ T5955] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 529.186115][T14807] fuse: Bad value for 'rootmode' [ 529.331560][ T5955] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 529.346478][T14650] hsr_slave_0: entered promiscuous mode [ 529.350129][ T5955] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 529.385575][T14650] hsr_slave_1: entered promiscuous mode [ 529.390969][ T5955] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 529.412001][T14650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.419534][T14650] Cannot create hsr debugfs directory [ 529.474781][ T5955] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 529.507812][ T5955] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 529.517313][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 529.561852][ T5955] usb 2-1: Product: syz [ 529.581118][ T5955] usb 2-1: Manufacturer: syz [ 529.621289][ T5955] cdc_wdm 2-1:1.0: skipping garbage [ 529.654804][ T5955] cdc_wdm 2-1:1.0: skipping garbage [ 529.690349][ T5955] cdc_wdm 2-1:1.0: skipping garbage [ 529.695579][ T5955] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 529.871929][ T5955] usb 2-1: USB disconnect, device number 17 [ 530.266928][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3149'. [ 531.285280][T14650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.503465][T14650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.583803][T14650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.595784][T14856] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3156'. [ 531.656031][T14650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.696223][T14862] netlink: 'syz.3.3155': attribute type 1 has an invalid length. [ 531.704197][T14862] netlink: 'syz.3.3155': attribute type 2 has an invalid length. [ 534.337322][T14650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.350596][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'. [ 534.368029][T14650] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.426397][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.433483][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.574787][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.581974][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.675640][T14650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.860438][T14650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.970576][T14885] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3161'. [ 535.819928][T14650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.966765][T14650] veth0_vlan: entered promiscuous mode [ 535.972361][T14041] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 536.138677][T14650] veth1_vlan: entered promiscuous mode [ 536.163140][T14650] veth0_macvtap: entered promiscuous mode [ 536.172717][T14650] veth1_macvtap: entered promiscuous mode [ 536.640730][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 536.650074][T14041] usb 4-1: Using ep0 maxpacket: 8 [ 536.669580][T14041] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 536.677963][T14041] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.688955][T14650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.698122][T14041] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.708074][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 536.730048][T14041] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 536.732036][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 536.750345][T14041] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.763751][T14041] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 536.773815][T14041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.819564][T14650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.864264][T14650] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.873227][T14650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.892156][T14041] usbtmc 4-1:16.0: bulk endpoints not found [ 536.908578][T14650] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.917619][T14650] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.062317][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.072057][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.115366][ T6940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.124036][ T6940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.148427][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3173'. [ 537.168063][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 537.178621][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 537.196092][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 537.221122][T14041] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 537.391475][T14041] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 537.410275][T14041] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 537.430744][T14041] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 537.453772][T14041] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 537.503189][T14041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 12408, setting to 64 [ 537.533593][T14041] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 537.550051][T14041] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 537.577767][T14041] usb 5-1: Product: syz [ 537.596987][T14041] usb 5-1: Manufacturer: syz [ 537.797587][T14041] cdc_wdm 5-1:1.0: skipping garbage [ 537.880806][T14041] cdc_wdm 5-1:1.0: skipping garbage [ 538.029595][T14041] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 538.048860][T14041] usb 5-1: USB disconnect, device number 9 [ 538.630797][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 538.943960][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 538.959485][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.970731][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.981065][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 539.090564][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 539.099627][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.134039][ T10] usb 3-1: config 0 descriptor?? [ 539.226561][T14017] usb 4-1: USB disconnect, device number 19 [ 540.792785][ T10] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 540.916809][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 540.926634][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 540.936301][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 540.943869][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 540.951965][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 540.967546][ T10] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 540.997812][T14994] fuse: Bad value for 'fd' [ 541.005933][ T10] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 541.020073][ T10] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 541.037491][ T10] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 541.060093][ T10] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 541.067346][ T10] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 541.080696][ T10] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 541.110822][ T10] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 541.127190][T14993] tipc: Enabling of bearer rejected, failed to enable media [ 541.128449][ T10] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 541.146727][ T10] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 541.173419][ T10] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 541.193103][T15000] syzkaller0: entered promiscuous mode [ 541.198593][T15000] syzkaller0: entered allmulticast mode [ 541.203423][ T10] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 541.238854][ T10] microsoft 0003:045E:07DA.000B: no inputs found [ 541.269498][ T10] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 542.050721][T14989] chnl_net:caif_netlink_parms(): no params data found [ 542.296094][T14989] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.310924][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 542.330391][T14989] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.349339][T14989] bridge_slave_0: entered allmulticast mode [ 542.369299][T14989] bridge_slave_0: entered promiscuous mode [ 542.403072][T15021] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.410591][T15021] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.424207][T14989] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.436186][T14989] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.452934][T14989] bridge_slave_1: entered allmulticast mode [ 542.469633][T14989] bridge_slave_1: entered promiscuous mode [ 542.590248][T14017] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 542.718657][T14989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.730490][T14989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.770401][T14017] usb 5-1: Using ep0 maxpacket: 8 [ 542.780752][T14989] team0: Port device team_slave_0 added [ 542.786129][T14017] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 542.802757][T14989] team0: Port device team_slave_1 added [ 542.803378][T14017] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.836123][T14017] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 542.875518][T14017] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 542.895515][T14989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.906482][T14017] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.917693][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.935741][T14017] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 542.956502][ T5887] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 542.975265][T14017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.998439][T14017] usbtmc 5-1:16.0: bulk endpoints not found [ 543.010367][ T5818] Bluetooth: hci4: command tx timeout [ 543.027554][T14989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.052902][T14989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.141646][T14017] usb 3-1: USB disconnect, device number 16 [ 543.164853][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.208527][T14989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.220319][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 543.237078][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.256101][ T5887] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 543.306129][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 543.314029][T14989] hsr_slave_0: entered promiscuous mode [ 543.321998][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'. [ 543.322493][T14989] hsr_slave_1: entered promiscuous mode [ 543.338566][T14989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.343552][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.346700][T14989] Cannot create hsr debugfs directory [ 543.369648][ T5887] usb 4-1: Product: syz [ 543.381884][ T5887] usb 4-1: Manufacturer: syz [ 543.386495][ T5887] usb 4-1: SerialNumber: syz [ 543.390263][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 543.399923][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 543.429402][ T5887] usb 4-1: config 0 descriptor?? [ 543.447014][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 543.625453][T14989] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.757828][T14989] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.774748][T14017] usb 4-1: USB disconnect, device number 20 [ 543.844372][T14989] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.926773][T14989] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.630383][T14989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 544.645551][T14989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 544.657921][T14989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 544.673368][T14989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 544.753752][T14989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.772546][T14989] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.848314][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.855468][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.868931][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.876018][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.091479][ T5818] Bluetooth: hci4: command tx timeout [ 545.204672][T14989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.928027][T14989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.928606][T14017] usb 5-1: USB disconnect, device number 10 [ 546.433452][T14989] veth0_vlan: entered promiscuous mode [ 546.580941][T14989] veth1_vlan: entered promiscuous mode [ 546.825421][T14989] veth0_macvtap: entered promiscuous mode [ 546.836049][T14989] veth1_macvtap: entered promiscuous mode [ 546.838454][T15114] ntfs3(nullb0): Primary boot signature is not NTFS. [ 546.848654][T15114] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 547.210391][ T5818] Bluetooth: hci4: command tx timeout [ 547.328748][T14989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.356734][T14989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.384211][T14989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.394515][T14989] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.406062][T14989] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.420444][T14989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.531384][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 547.599873][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.632356][ T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.637035][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.651611][ T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.940784][T14041] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 548.501506][T14041] usb 4-1: Using ep0 maxpacket: 8 [ 548.525396][T14041] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 548.525806][T15145] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 548.534814][T14041] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.565483][T14041] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.595299][T15145] netlink: 'syz.1.3177': attribute type 2 has an invalid length. [ 548.604561][T14041] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 548.614579][T14041] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 548.633220][T15149] macsec0: entered promiscuous mode [ 548.638651][T15149] macsec0: entered allmulticast mode [ 548.644084][T15149] veth1_macvtap: entered allmulticast mode [ 548.658042][T14041] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.672572][T14041] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 548.682934][T14041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.785149][T14041] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 549.769388][ T5818] Bluetooth: hci4: command tx timeout [ 551.270213][T14041] usb 4-1: USB disconnect, device number 21 [ 552.155128][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3225'. [ 554.649590][T15195] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 555.337823][T15211] tipc: Enabling of bearer rejected, failed to enable media [ 555.632956][T15224] netlink: 'syz.2.3234': attribute type 1 has an invalid length. [ 555.640740][T15224] netlink: 'syz.2.3234': attribute type 2 has an invalid length. [ 556.201384][T15233] tipc: Enabled bearer , priority 0 [ 556.208967][T15233] syzkaller0: entered promiscuous mode [ 556.219864][T15233] syzkaller0: entered allmulticast mode [ 556.341222][T15237] tipc: Resetting bearer [ 556.386065][T15232] tipc: Resetting bearer [ 556.448977][T15232] tipc: Disabling bearer [ 557.627350][T15257] macsec0: entered promiscuous mode [ 557.726664][T15257] macsec0: entered allmulticast mode [ 557.760083][T15257] veth1_macvtap: entered allmulticast mode [ 559.671529][T15281] ntfs3(nullb0): Primary boot signature is not NTFS. [ 559.678308][T15281] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 560.910009][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.950012][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.376590][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.002527][T15360] netlink: 'syz.0.3267': attribute type 4 has an invalid length. [ 567.428277][T15372] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 570.056566][T15400] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 572.520520][T15421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3272'. [ 574.591169][T15444] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 577.339148][T15463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3294'. [ 579.626874][T15489] fuse: Bad value for 'rootmode' [ 579.657243][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3302'. [ 580.800078][ T928] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 580.950269][ T928] usb 2-1: Using ep0 maxpacket: 16 [ 580.969554][ T928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.021617][T14017] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 581.022571][ T928] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 581.082389][T15509] ntfs3(nullb0): Primary boot signature is not NTFS. [ 581.089283][T15509] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 581.110359][ T928] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 581.132690][ T928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.150066][ T928] usb 2-1: Product: syz [ 581.154374][ T928] usb 2-1: Manufacturer: syz [ 581.173143][ T928] usb 2-1: SerialNumber: syz [ 581.196154][ T928] usb 2-1: config 0 descriptor?? [ 581.234863][T14017] usb 3-1: config 0 has no interfaces? [ 581.245635][T14017] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.264267][T14017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.290022][T14017] usb 3-1: Product: syz [ 581.300246][T14017] usb 3-1: Manufacturer: syz [ 581.305094][T14017] usb 3-1: SerialNumber: syz [ 581.325955][T14017] usb 3-1: config 0 descriptor?? [ 582.719394][ T928] usb 3-1: USB disconnect, device number 17 [ 582.728836][ T5887] usb 2-1: USB disconnect, device number 18 [ 584.339001][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3318'. [ 585.311180][T15535] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.318762][T15535] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.541600][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3323'. [ 585.619191][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3322'. [ 585.752571][T15547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3324'. [ 585.865910][T15549] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3317'. [ 586.202394][T15555] fuse: Unknown parameter 'use00000000000000000000' [ 587.240142][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 587.332620][ T5887] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 587.490713][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 587.570154][T14017] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 587.596466][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.784313][ T5887] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 587.888512][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 588.027187][T14017] usb 3-1: Using ep0 maxpacket: 16 [ 588.034392][T14017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.052883][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 588.053972][ T5887] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 588.070063][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 588.088059][T14017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.182693][ T24] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 588.568033][T14017] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.583078][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.591266][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.591288][ T5887] usb 5-1: Product: syz [ 588.609430][T14017] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 588.609472][ T24] usb 4-1: Product: syz [ 588.630076][ T24] usb 4-1: Manufacturer: syz [ 588.631923][ T5887] usb 5-1: Manufacturer: syz [ 588.634713][ T24] usb 4-1: SerialNumber: syz [ 588.649401][ T5887] usb 5-1: SerialNumber: syz [ 588.654076][T14017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.658407][ T24] usb 4-1: config 0 descriptor?? [ 588.685943][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 588.694929][ T5887] usb 5-1: config 0 descriptor?? [ 588.710760][T14017] usb 3-1: config 0 descriptor?? [ 588.722163][ T24] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 588.915196][T15584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3335'. [ 589.176052][T15586] fuse: Bad value for 'fd' [ 589.633138][T14017] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 589.646609][T14017] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 589.648474][T14041] usb 5-1: USB disconnect, device number 11 [ 589.658506][T14017] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 589.669361][T14017] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 589.676604][T14017] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 589.685611][T14017] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 589.699387][T14017] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 589.711871][T14017] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 589.738586][T14017] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 589.834918][T14017] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 589.845699][T14017] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 589.853420][T14017] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 590.129492][T14017] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 590.146033][T14017] microsoft 0003:045E:07DA.000C: no inputs found [ 590.154144][T14017] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 591.430471][T14041] usb 3-1: USB disconnect, device number 18 [ 591.487351][ T5887] usb 4-1: USB disconnect, device number 22 [ 591.521808][ T30] audit: type=1400 audit(1751514510.245:484): avc: denied { create } for pid=15595 comm="syz.0.3338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 591.632128][ T30] audit: type=1400 audit(1751514510.325:485): avc: denied { setopt } for pid=15595 comm="syz.0.3338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 591.728023][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3341'. [ 591.742195][ T30] audit: type=1400 audit(1751514510.325:486): avc: denied { create } for pid=15595 comm="syz.0.3338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 591.776682][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 591.833721][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 591.846378][ T30] audit: type=1400 audit(1751514510.325:487): avc: denied { write } for pid=15595 comm="syz.0.3338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 591.861135][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 593.816813][T15621] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 593.825493][T15621] netlink: 'syz.2.3340': attribute type 2 has an invalid length. [ 594.100612][T15623] Bluetooth: MGMT ver 1.23 [ 594.510057][ T55] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 594.670051][ T928] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 594.701558][ T55] usb 5-1: config 0 has no interfaces? [ 594.708634][ T55] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.717947][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.733754][ T55] usb 5-1: Product: syz [ 594.742014][ T55] usb 5-1: Manufacturer: syz [ 594.758930][ T55] usb 5-1: SerialNumber: syz [ 594.779136][ T55] usb 5-1: config 0 descriptor?? [ 594.820046][ T928] usb 4-1: Using ep0 maxpacket: 8 [ 594.840280][ T928] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 594.860191][ T928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 594.920084][ T5887] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 594.931994][ T928] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 594.944827][ T928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.963960][ T928] usb 4-1: Product: syz [ 594.984172][ T928] usb 4-1: Manufacturer: syz [ 594.990141][ T928] usb 4-1: SerialNumber: syz [ 595.002230][ T928] usb 4-1: config 0 descriptor?? [ 595.015228][ T928] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 595.043672][ T55] usb 5-1: USB disconnect, device number 12 [ 595.082323][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 595.088761][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.102480][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.116321][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 595.130181][ T5887] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 595.142285][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.159828][ T5887] usb 3-1: config 0 descriptor?? [ 595.200054][T14017] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 595.350088][T14017] usb 1-1: Using ep0 maxpacket: 16 [ 595.356529][T14017] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.370428][T14017] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 595.440368][T15642] fuse: Bad value for 'fd' [ 595.887268][T14017] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 595.917640][T14017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.987106][T14017] usb 1-1: Product: syz [ 595.997649][T14017] usb 1-1: Manufacturer: syz [ 596.009023][T14017] usb 1-1: SerialNumber: syz [ 596.100920][ T5887] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 596.109423][ T5887] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 596.121560][ T5887] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 596.128751][ T5887] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 596.139255][ T5887] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 596.147181][T14017] usb 1-1: config 0 descriptor?? [ 596.152864][ T5887] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 596.161685][ T5887] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 596.168873][ T5887] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 596.176581][ T5887] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 596.184151][ T5887] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 596.196066][ T5887] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 596.210209][ T5887] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 596.235629][ T5887] ================================================================== [ 596.243694][ T5887] BUG: KASAN: slab-out-of-bounds in mon_copy_to_buff+0xc2/0x170 [ 596.251343][ T5887] Read of size 4032 at addr ffff8880330e0801 by task kworker/0:6/5887 [ 596.259495][ T5887] [ 596.261818][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: kworker/0:6 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 596.261844][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 596.261858][ T5887] Workqueue: usb_hub_wq hub_event [ 596.261882][ T5887] Call Trace: [ 596.261889][ T5887] [ 596.261895][ T5887] dump_stack_lvl+0x116/0x1f0 [ 596.261924][ T5887] print_report+0xcd/0x680 [ 596.261950][ T5887] ? __virt_addr_valid+0x81/0x610 [ 596.261976][ T5887] ? __phys_addr+0xe8/0x180 [ 596.261996][ T5887] ? mon_copy_to_buff+0xc2/0x170 [ 596.262019][ T5887] kasan_report+0xe0/0x110 [ 596.262044][ T5887] ? mon_copy_to_buff+0xc2/0x170 [ 596.262072][ T5887] kasan_check_range+0x100/0x1b0 [ 596.262090][ T5887] __asan_memcpy+0x23/0x60 [ 596.262110][ T5887] mon_copy_to_buff+0xc2/0x170 [ 596.262137][ T5887] mon_bin_event+0x1071/0x2050 [ 596.262169][ T5887] ? __pfx_mon_bin_event+0x10/0x10 [ 596.262198][ T5887] mon_bus_submit+0xcf/0x140 [ 596.262222][ T5887] usb_hcd_submit_urb+0x12d/0x1c60 [ 596.262246][ T5887] ? __device_attach+0x1e4/0x4b0 [ 596.262271][ T5887] ? bus_probe_device+0x17f/0x1c0 [ 596.262290][ T5887] ? device_add+0x1148/0x1a70 [ 596.262317][ T5887] ? usb_set_configuration+0x1187/0x1e20 [ 596.262336][ T5887] ? usb_generic_driver_probe+0xb1/0x110 [ 596.262366][ T5887] usb_submit_urb+0x87c/0x1790 [ 596.262393][ T5887] ? lockdep_set_lock_cmp_fn+0xb1/0xe0 [ 596.262422][ T5887] ? __init_swait_queue_head+0xca/0x150 [ 596.262444][ T5887] usb_start_wait_urb+0x104/0x4b0 [ 596.262473][ T5887] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 596.262506][ T5887] ? __asan_memset+0x23/0x50 [ 596.262528][ T5887] usb_control_msg+0x326/0x4a0 [ 596.262557][ T5887] ? __pfx_usb_control_msg+0x10/0x10 [ 596.262588][ T5887] usbhid_raw_request+0x58f/0x700 [ 596.262617][ T5887] ? __pfx_usbhid_raw_request+0x10/0x10 [ 596.262644][ T5887] __hid_request+0x299/0x3c0 [ 596.262665][ T5887] hidinput_connect+0x1ada/0x2bd0 [ 596.262695][ T5887] hid_connect+0x13f3/0x1a60 [ 596.262714][ T5887] ? trace_kmalloc+0x2b/0xd0 [ 596.262740][ T5887] ? __kmalloc_noprof+0x242/0x510 [ 596.262763][ T5887] ? __asan_memset+0x23/0x50 [ 596.262784][ T5887] ? __pfx_hid_connect+0x10/0x10 [ 596.262809][ T5887] hid_hw_start+0xaa/0x140 [ 596.262829][ T5887] ms_probe+0x195/0x500 [ 596.262856][ T5887] ? __pfx_ms_probe+0x10/0x10 [ 596.262883][ T5887] hid_device_probe+0x363/0x720 [ 596.262904][ T5887] ? __pfx_hid_device_probe+0x10/0x10 [ 596.262925][ T5887] really_probe+0x241/0xa90 [ 596.262950][ T5887] __driver_probe_device+0x1de/0x440 [ 596.262984][ T5887] driver_probe_device+0x4c/0x1b0 [ 596.263010][ T5887] __device_attach_driver+0x1df/0x310 [ 596.263034][ T5887] ? __pfx___device_attach_driver+0x10/0x10 [ 596.263055][ T5887] bus_for_each_drv+0x159/0x1e0 [ 596.263074][ T5887] ? __pfx_bus_for_each_drv+0x10/0x10 [ 596.263095][ T5887] ? lockdep_hardirqs_on+0x7c/0x110 [ 596.263118][ T5887] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 596.263141][ T5887] __device_attach+0x1e4/0x4b0 [ 596.263166][ T5887] ? __pfx___device_attach+0x10/0x10 [ 596.263191][ T5887] ? do_raw_spin_unlock+0x172/0x230 [ 596.263212][ T5887] bus_probe_device+0x17f/0x1c0 [ 596.263235][ T5887] device_add+0x1148/0x1a70 [ 596.263264][ T5887] ? __pfx_device_add+0x10/0x10 [ 596.263292][ T5887] ? debugfs_create_file_full+0x41/0x60 [ 596.263319][ T5887] hid_add_device+0x373/0xa60 [ 596.263338][ T5887] ? __pfx_hid_add_device+0x10/0x10 [ 596.263356][ T5887] ? lockdep_init_map_type+0x5c/0x280 [ 596.263384][ T5887] ? lockdep_init_map_type+0x5c/0x280 [ 596.263413][ T5887] usbhid_probe+0xd38/0x13f0 [ 596.263441][ T5887] usb_probe_interface+0x300/0x9c0 [ 596.263465][ T5887] ? __pfx_usb_probe_interface+0x10/0x10 [ 596.263489][ T5887] really_probe+0x241/0xa90 [ 596.263513][ T5887] __driver_probe_device+0x1de/0x440 [ 596.263538][ T5887] driver_probe_device+0x4c/0x1b0 [ 596.263563][ T5887] __device_attach_driver+0x1df/0x310 [ 596.263588][ T5887] ? __pfx___device_attach_driver+0x10/0x10 [ 596.263613][ T5887] bus_for_each_drv+0x159/0x1e0 [ 596.263633][ T5887] ? __pfx_bus_for_each_drv+0x10/0x10 [ 596.263653][ T5887] ? lockdep_hardirqs_on+0x7c/0x110 [ 596.263679][ T5887] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 596.263705][ T5887] __device_attach+0x1e4/0x4b0 [ 596.263729][ T5887] ? __pfx___device_attach+0x10/0x10 [ 596.263754][ T5887] ? do_raw_spin_unlock+0x172/0x230 [ 596.263775][ T5887] bus_probe_device+0x17f/0x1c0 [ 596.263797][ T5887] device_add+0x1148/0x1a70 [ 596.263825][ T5887] ? __pfx_device_add+0x10/0x10 [ 596.263851][ T5887] ? preempt_schedule_thunk+0x16/0x30 [ 596.263877][ T5887] usb_set_configuration+0x1187/0x1e20 [ 596.263904][ T5887] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 596.263931][ T5887] usb_generic_driver_probe+0xb1/0x110 [ 596.263967][ T5887] usb_probe_device+0xec/0x3e0 [ 596.263988][ T5887] ? __pfx_usb_probe_device+0x10/0x10 [ 596.264010][ T5887] really_probe+0x241/0xa90 [ 596.264036][ T5887] __driver_probe_device+0x1de/0x440 [ 596.264060][ T5887] ? usb_driver_applicable+0x1c7/0x220 [ 596.264081][ T5887] driver_probe_device+0x4c/0x1b0 [ 596.264105][ T5887] __device_attach_driver+0x1df/0x310 [ 596.264130][ T5887] ? __pfx___device_attach_driver+0x10/0x10 [ 596.264155][ T5887] bus_for_each_drv+0x159/0x1e0 [ 596.264175][ T5887] ? __pfx_bus_for_each_drv+0x10/0x10 [ 596.264198][ T5887] ? lockdep_hardirqs_on+0x7c/0x110 [ 596.264220][ T5887] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 596.264247][ T5887] __device_attach+0x1e4/0x4b0 [ 596.264273][ T5887] ? __pfx___device_attach+0x10/0x10 [ 596.264298][ T5887] ? do_raw_spin_unlock+0x172/0x230 [ 596.264319][ T5887] bus_probe_device+0x17f/0x1c0 [ 596.264341][ T5887] device_add+0x1148/0x1a70 [ 596.264369][ T5887] ? __pfx_device_add+0x10/0x10 [ 596.264395][ T5887] ? usb_detect_static_quirks+0x335/0x3e0 [ 596.264425][ T5887] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 596.264451][ T5887] usb_new_device+0xd07/0x1a20 [ 596.264471][ T5887] ? do_raw_spin_lock+0x12c/0x2b0 [ 596.264490][ T5887] ? __pfx_usb_new_device+0x10/0x10 [ 596.264508][ T5887] ? mark_held_locks+0x49/0x80 [ 596.264536][ T5887] hub_event+0x2eb7/0x4fa0 [ 596.264564][ T5887] ? __pfx_hub_event+0x10/0x10 [ 596.264583][ T5887] ? assoc_array_gc+0x1260/0x15b0 [ 596.264614][ T5887] ? rcu_is_watching+0x12/0xc0 [ 596.264637][ T5887] process_one_work+0x9cf/0x1b70 [ 596.264659][ T5887] ? __pfx_hcd_resume_work+0x10/0x10 [ 596.264681][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 596.264701][ T5887] ? assign_work+0x1a0/0x250 [ 596.264727][ T5887] worker_thread+0x6c8/0xf10 [ 596.264748][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 596.264765][ T5887] kthread+0x3c2/0x780 [ 596.264781][ T5887] ? __pfx_kthread+0x10/0x10 [ 596.264796][ T5887] ? rcu_is_watching+0x12/0xc0 [ 596.264817][ T5887] ? __pfx_kthread+0x10/0x10 [ 596.264832][ T5887] ret_from_fork+0x5d4/0x6f0 [ 596.264857][ T5887] ? __pfx_kthread+0x10/0x10 [ 596.264872][ T5887] ret_from_fork_asm+0x1a/0x30 [ 596.264895][ T5887] [ 596.264902][ T5887] [ 596.922299][ T5887] Allocated by task 5887: [ 596.926601][ T5887] kasan_save_stack+0x33/0x60 [ 596.931261][ T5887] kasan_save_track+0x14/0x30 [ 596.935925][ T5887] __kasan_kmalloc+0xaa/0xb0 [ 596.940501][ T5887] __kmalloc_noprof+0x223/0x510 [ 596.945358][ T5887] __hid_request+0x2c/0x3c0 [ 596.949835][ T5887] hidinput_connect+0x1ada/0x2bd0 [ 596.954837][ T5887] hid_connect+0x13f3/0x1a60 [ 596.959399][ T5887] hid_hw_start+0xaa/0x140 [ 596.963791][ T5887] ms_probe+0x195/0x500 [ 596.967926][ T5887] hid_device_probe+0x363/0x720 [ 596.972751][ T5887] really_probe+0x241/0xa90 [ 596.977228][ T5887] __driver_probe_device+0x1de/0x440 [ 596.982502][ T5887] driver_probe_device+0x4c/0x1b0 [ 596.987502][ T5887] __device_attach_driver+0x1df/0x310 [ 596.992864][ T5887] bus_for_each_drv+0x159/0x1e0 [ 596.997707][ T5887] __device_attach+0x1e4/0x4b0 [ 597.002463][ T5887] bus_probe_device+0x17f/0x1c0 [ 597.007290][ T5887] device_add+0x1148/0x1a70 [ 597.011779][ T5887] hid_add_device+0x373/0xa60 [ 597.016435][ T5887] usbhid_probe+0xd38/0x13f0 [ 597.021009][ T5887] usb_probe_interface+0x300/0x9c0 [ 597.026109][ T5887] really_probe+0x241/0xa90 [ 597.030587][ T5887] __driver_probe_device+0x1de/0x440 [ 597.035848][ T5887] driver_probe_device+0x4c/0x1b0 [ 597.040854][ T5887] __device_attach_driver+0x1df/0x310 [ 597.046221][ T5887] bus_for_each_drv+0x159/0x1e0 [ 597.051046][ T5887] __device_attach+0x1e4/0x4b0 [ 597.055785][ T5887] bus_probe_device+0x17f/0x1c0 [ 597.060610][ T5887] device_add+0x1148/0x1a70 [ 597.065090][ T5887] usb_set_configuration+0x1187/0x1e20 [ 597.070522][ T5887] usb_generic_driver_probe+0xb1/0x110 [ 597.075959][ T5887] usb_probe_device+0xec/0x3e0 [ 597.080695][ T5887] really_probe+0x241/0xa90 [ 597.085183][ T5887] __driver_probe_device+0x1de/0x440 [ 597.090456][ T5887] driver_probe_device+0x4c/0x1b0 [ 597.095474][ T5887] __device_attach_driver+0x1df/0x310 [ 597.100824][ T5887] bus_for_each_drv+0x159/0x1e0 [ 597.105666][ T5887] __device_attach+0x1e4/0x4b0 [ 597.110417][ T5887] bus_probe_device+0x17f/0x1c0 [ 597.115248][ T5887] device_add+0x1148/0x1a70 [ 597.119748][ T5887] usb_new_device+0xd07/0x1a20 [ 597.124495][ T5887] hub_event+0x2eb7/0x4fa0 [ 597.128884][ T5887] process_one_work+0x9cf/0x1b70 [ 597.133796][ T5887] worker_thread+0x6c8/0xf10 [ 597.138360][ T5887] kthread+0x3c2/0x780 [ 597.142409][ T5887] ret_from_fork+0x5d4/0x6f0 [ 597.146993][ T5887] ret_from_fork_asm+0x1a/0x30 [ 597.151730][ T5887] [ 597.154030][ T5887] The buggy address belongs to the object at ffff8880330e0800 [ 597.154030][ T5887] which belongs to the cache kmalloc-8 of size 8 [ 597.167708][ T5887] The buggy address is located 1 bytes inside of [ 597.167708][ T5887] allocated 7-byte region [ffff8880330e0800, ffff8880330e0807) [ 597.181474][ T5887] [ 597.183772][ T5887] The buggy address belongs to the physical page: [ 597.190163][ T5887] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x330e0 [ 597.198910][ T5887] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 597.205993][ T5887] page_type: f5(slab) [ 597.209947][ T5887] raw: 00fff00000000000 ffff88801b841500 ffffea000085b700 dead000000000002 [ 597.218505][ T5887] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 597.227072][ T5887] page dumped because: kasan: bad access detected [ 597.233451][ T5887] page_owner tracks the page as allocated [ 597.239137][ T5887] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (init), ts 15743776341, free_ts 15035826353 [ 597.257164][ T5887] post_alloc_hook+0x1c0/0x230 [ 597.261912][ T5887] get_page_from_freelist+0x1321/0x3890 [ 597.267435][ T5887] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 597.273303][ T5887] alloc_pages_mpol+0x1fb/0x550 [ 597.278130][ T5887] new_slab+0x23b/0x330 [ 597.282257][ T5887] ___slab_alloc+0xd9c/0x1940 [ 597.286930][ T5887] __slab_alloc.constprop.0+0x56/0xb0 [ 597.292284][ T5887] __kmalloc_noprof+0x2f2/0x510 [ 597.297137][ T5887] str_read+0x58/0x220 [ 597.301203][ T5887] genfs_read+0x688/0xe20 [ 597.305517][ T5887] policydb_read+0x28de/0x3220 [ 597.310270][ T5887] security_load_policy+0x15c/0x12c0 [ 597.315532][ T5887] sel_write_load+0x332/0x1bd0 [ 597.320276][ T5887] vfs_write+0x29d/0x1150 [ 597.324599][ T5887] ksys_write+0x12a/0x250 [ 597.328905][ T5887] do_syscall_64+0xcd/0x4c0 [ 597.333389][ T5887] page last free pid 1 tgid 1 stack trace: [ 597.339169][ T5887] __free_frozen_pages+0x7fe/0x1180 [ 597.344356][ T5887] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 597.350069][ T5887] __apply_to_page_range+0xa92/0x1350 [ 597.355414][ T5887] kasan_release_vmalloc+0xd1/0xe0 [ 597.360508][ T5887] purge_vmap_node+0x1c4/0xa30 [ 597.365250][ T5887] __purge_vmap_area_lazy+0xa06/0xc60 [ 597.370597][ T5887] _vm_unmap_aliases+0x43b/0x670 [ 597.375509][ T5887] change_page_attr_set_clr+0x252/0x4a0 [ 597.381036][ T5887] set_memory_nx+0xb5/0x110 [ 597.385521][ T5887] free_init_pages+0x79/0xd0 [ 597.390101][ T5887] free_kernel_image_pages+0x24/0x50 [ 597.395374][ T5887] kernel_init+0x30/0x2b0 [ 597.399676][ T5887] ret_from_fork+0x5d4/0x6f0 [ 597.404242][ T5887] ret_from_fork_asm+0x1a/0x30 [ 597.408980][ T5887] [ 597.411276][ T5887] Memory state around the buggy address: [ 597.416879][ T5887] ffff8880330e0700: 00 fc fc fc 04 fc fc fc 06 fc fc fc 06 fc fc fc [ 597.424913][ T5887] ffff8880330e0780: 05 fc fc fc 05 fc fc fc 05 fc fc fc 00 fc fc fc [ 597.432950][ T5887] >ffff8880330e0800: 07 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 597.440990][ T5887] ^ [ 597.445044][ T5887] ffff8880330e0880: 06 fc fc fc 05 fc fc fc 05 fc fc fc fa fc fc fc [ 597.453081][ T5887] ffff8880330e0900: fa fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 597.461120][ T5887] ================================================================== [ 597.469174][ T5887] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 597.476351][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: kworker/0:6 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 597.488381][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.498500][ T5887] Workqueue: usb_hub_wq hub_event [ 597.503514][ T5887] Call Trace: [ 597.506780][ T5887] [ 597.509689][ T5887] dump_stack_lvl+0x3d/0x1f0 [ 597.514258][ T5887] panic+0x71c/0x800 [ 597.518131][ T5887] ? __pfx_panic+0x10/0x10 [ 597.522525][ T5887] ? __pfx__printk+0x10/0x10 [ 597.527090][ T5887] ? end_report+0x4c/0x170 [ 597.531489][ T5887] ? mon_copy_to_buff+0xc2/0x170 [ 597.536410][ T5887] check_panic_on_warn+0xab/0xb0 [ 597.541340][ T5887] end_report+0x107/0x170 [ 597.545670][ T5887] kasan_report+0xee/0x110 [ 597.550062][ T5887] ? mon_copy_to_buff+0xc2/0x170 [ 597.554984][ T5887] kasan_check_range+0x100/0x1b0 [ 597.559911][ T5887] __asan_memcpy+0x23/0x60 [ 597.564304][ T5887] mon_copy_to_buff+0xc2/0x170 [ 597.569047][ T5887] mon_bin_event+0x1071/0x2050 [ 597.573794][ T5887] ? __pfx_mon_bin_event+0x10/0x10 [ 597.578886][ T5887] mon_bus_submit+0xcf/0x140 [ 597.583453][ T5887] usb_hcd_submit_urb+0x12d/0x1c60 [ 597.588539][ T5887] ? __device_attach+0x1e4/0x4b0 [ 597.593463][ T5887] ? bus_probe_device+0x17f/0x1c0 [ 597.598482][ T5887] ? device_add+0x1148/0x1a70 [ 597.603138][ T5887] ? usb_set_configuration+0x1187/0x1e20 [ 597.608749][ T5887] ? usb_generic_driver_probe+0xb1/0x110 [ 597.614359][ T5887] usb_submit_urb+0x87c/0x1790 [ 597.619101][ T5887] ? lockdep_set_lock_cmp_fn+0xb1/0xe0 [ 597.624543][ T5887] ? __init_swait_queue_head+0xca/0x150 [ 597.630068][ T5887] usb_start_wait_urb+0x104/0x4b0 [ 597.635076][ T5887] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 597.640612][ T5887] ? __asan_memset+0x23/0x50 [ 597.645202][ T5887] usb_control_msg+0x326/0x4a0 [ 597.649957][ T5887] ? __pfx_usb_control_msg+0x10/0x10 [ 597.655230][ T5887] usbhid_raw_request+0x58f/0x700 [ 597.660252][ T5887] ? __pfx_usbhid_raw_request+0x10/0x10 [ 597.665779][ T5887] __hid_request+0x299/0x3c0 [ 597.670347][ T5887] hidinput_connect+0x1ada/0x2bd0 [ 597.675352][ T5887] hid_connect+0x13f3/0x1a60 [ 597.679922][ T5887] ? trace_kmalloc+0x2b/0xd0 [ 597.684491][ T5887] ? __kmalloc_noprof+0x242/0x510 [ 597.689498][ T5887] ? __asan_memset+0x23/0x50 [ 597.694065][ T5887] ? __pfx_hid_connect+0x10/0x10 [ 597.698983][ T5887] hid_hw_start+0xaa/0x140 [ 597.703375][ T5887] ms_probe+0x195/0x500 [ 597.707511][ T5887] ? __pfx_ms_probe+0x10/0x10 [ 597.712186][ T5887] hid_device_probe+0x363/0x720 [ 597.717016][ T5887] ? __pfx_hid_device_probe+0x10/0x10 [ 597.722373][ T5887] really_probe+0x241/0xa90 [ 597.726877][ T5887] __driver_probe_device+0x1de/0x440 [ 597.732148][ T5887] driver_probe_device+0x4c/0x1b0 [ 597.737157][ T5887] __device_attach_driver+0x1df/0x310 [ 597.742520][ T5887] ? __pfx___device_attach_driver+0x10/0x10 [ 597.748409][ T5887] bus_for_each_drv+0x159/0x1e0 [ 597.753233][ T5887] ? __pfx_bus_for_each_drv+0x10/0x10 [ 597.758580][ T5887] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.763764][ T5887] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 597.769563][ T5887] __device_attach+0x1e4/0x4b0 [ 597.774303][ T5887] ? __pfx___device_attach+0x10/0x10 [ 597.779563][ T5887] ? do_raw_spin_unlock+0x172/0x230 [ 597.784736][ T5887] bus_probe_device+0x17f/0x1c0 [ 597.789563][ T5887] device_add+0x1148/0x1a70 [ 597.794056][ T5887] ? __pfx_device_add+0x10/0x10 [ 597.798907][ T5887] ? debugfs_create_file_full+0x41/0x60 [ 597.804435][ T5887] hid_add_device+0x373/0xa60 [ 597.809085][ T5887] ? __pfx_hid_add_device+0x10/0x10 [ 597.814254][ T5887] ? lockdep_init_map_type+0x5c/0x280 [ 597.819606][ T5887] ? lockdep_init_map_type+0x5c/0x280 [ 597.824956][ T5887] usbhid_probe+0xd38/0x13f0 [ 597.829526][ T5887] usb_probe_interface+0x300/0x9c0 [ 597.834620][ T5887] ? __pfx_usb_probe_interface+0x10/0x10 [ 597.840238][ T5887] really_probe+0x241/0xa90 [ 597.844739][ T5887] __driver_probe_device+0x1de/0x440 [ 597.850011][ T5887] driver_probe_device+0x4c/0x1b0 [ 597.855021][ T5887] __device_attach_driver+0x1df/0x310 [ 597.860374][ T5887] ? __pfx___device_attach_driver+0x10/0x10 [ 597.866245][ T5887] bus_for_each_drv+0x159/0x1e0 [ 597.871070][ T5887] ? __pfx_bus_for_each_drv+0x10/0x10 [ 597.876417][ T5887] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.881602][ T5887] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 597.887389][ T5887] __device_attach+0x1e4/0x4b0 [ 597.892144][ T5887] ? __pfx___device_attach+0x10/0x10 [ 597.897434][ T5887] ? do_raw_spin_unlock+0x172/0x230 [ 597.902634][ T5887] bus_probe_device+0x17f/0x1c0 [ 597.907483][ T5887] device_add+0x1148/0x1a70 [ 597.911980][ T5887] ? __pfx_device_add+0x10/0x10 [ 597.916817][ T5887] ? preempt_schedule_thunk+0x16/0x30 [ 597.922175][ T5887] usb_set_configuration+0x1187/0x1e20 [ 597.927620][ T5887] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 597.933677][ T5887] usb_generic_driver_probe+0xb1/0x110 [ 597.939130][ T5887] usb_probe_device+0xec/0x3e0 [ 597.943880][ T5887] ? __pfx_usb_probe_device+0x10/0x10 [ 597.949244][ T5887] really_probe+0x241/0xa90 [ 597.953735][ T5887] __driver_probe_device+0x1de/0x440 [ 597.959007][ T5887] ? usb_driver_applicable+0x1c7/0x220 [ 597.964453][ T5887] driver_probe_device+0x4c/0x1b0 [ 597.969461][ T5887] __device_attach_driver+0x1df/0x310 [ 597.974821][ T5887] ? __pfx___device_attach_driver+0x10/0x10 [ 597.980700][ T5887] bus_for_each_drv+0x159/0x1e0 [ 597.985538][ T5887] ? __pfx_bus_for_each_drv+0x10/0x10 [ 597.990892][ T5887] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.996082][ T5887] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 598.001875][ T5887] __device_attach+0x1e4/0x4b0 [ 598.006630][ T5887] ? __pfx___device_attach+0x10/0x10 [ 598.011909][ T5887] ? do_raw_spin_unlock+0x172/0x230 [ 598.017092][ T5887] bus_probe_device+0x17f/0x1c0 [ 598.021929][ T5887] device_add+0x1148/0x1a70 [ 598.026422][ T5887] ? __pfx_device_add+0x10/0x10 [ 598.031259][ T5887] ? usb_detect_static_quirks+0x335/0x3e0 [ 598.036971][ T5887] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 598.042852][ T5887] usb_new_device+0xd07/0x1a20 [ 598.047600][ T5887] ? do_raw_spin_lock+0x12c/0x2b0 [ 598.052607][ T5887] ? __pfx_usb_new_device+0x10/0x10 [ 598.057786][ T5887] ? mark_held_locks+0x49/0x80 [ 598.062537][ T5887] hub_event+0x2eb7/0x4fa0 [ 598.066947][ T5887] ? __pfx_hub_event+0x10/0x10 [ 598.071691][ T5887] ? assoc_array_gc+0x1260/0x15b0 [ 598.076706][ T5887] ? rcu_is_watching+0x12/0xc0 [ 598.081454][ T5887] process_one_work+0x9cf/0x1b70 [ 598.086376][ T5887] ? __pfx_hcd_resume_work+0x10/0x10 [ 598.091646][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 598.097002][ T5887] ? assign_work+0x1a0/0x250 [ 598.101585][ T5887] worker_thread+0x6c8/0xf10 [ 598.106160][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 598.111251][ T5887] kthread+0x3c2/0x780 [ 598.115308][ T5887] ? __pfx_kthread+0x10/0x10 [ 598.119877][ T5887] ? rcu_is_watching+0x12/0xc0 [ 598.124628][ T5887] ? __pfx_kthread+0x10/0x10 [ 598.129196][ T5887] ret_from_fork+0x5d4/0x6f0 [ 598.133771][ T5887] ? __pfx_kthread+0x10/0x10 [ 598.138340][ T5887] ret_from_fork_asm+0x1a/0x30 [ 598.143091][ T5887] [ 598.146282][ T5887] Kernel Offset: disabled [ 598.150580][ T5887] Rebooting in 86400 seconds..