last executing test programs: 20.280701515s ago: executing program 2 (id=444): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000ca85000000ae000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000008c0)='percpu_alloc_percpu\x00', r1}, 0x10) io_uring_setup(0x1a6f, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x80000, 0xfffffffe}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x3, 0x3, 0x50}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 17.023903158s ago: executing program 0 (id=455): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x100, 0x1) prlimit64(0x0, 0xa, &(0x7f00000002c0)={0x339, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000400dd0a000000000000630120000000ba0095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc5, &(0x7f0000000400)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x19, &(0x7f0000000180)={0x808, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0xa, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0xfffffffffffffffe, 0x7fffffff, 0x0, 0xf9, 0xe, 0x0, 0x4, 0x1, 0x1, 0x80000001, 0x1, 0x10000000000, 0x809, 0x800000, 0xffffffeffffffffa, 0x3, 0x2000000000004}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_xen(0x0, 0x0, 0x0, 0x244404, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000008c0)={0x0, @bt={0xfffffffe, 0x4, 0x0, 0x1, 0x8, 0x2, 0x1, 0x40, 0x5, 0x46, 0x1, 0xffffffff, 0x6, 0x2, 0x4, 0x1d, {0x2, 0x6}, 0xb5, 0x3}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x41a800, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0xb0000000, @local, 0x7}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) shutdown(r1, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x2200) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mknod(0x0, 0x0, 0x6) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000580)='cifs\x00', 0x2400004, &(0x7f0000000340)='norecove\x84y?\a\x8c\xd4\x01Q\xe4c2\xaa\xce\xb1p\xc2\xf4wE<\x9b\n\xa3j\xf9\xca\xd3\x85\xf9`\x8f\xb5\x05\xde\x87\xccV_\xb6O\x9a\x89\x894\x15\xf0Z\x80\xa1\x1a\xa0\xdce\xb4\xd4M\xac\x87#\x92Qa\xf38\xfd\x90\xaa>#j\xa7v\xd2\x90\'N\x8c\x88\xed{l\xf3\xbb0\x05q\xdf\xe3z\xc0\xe7\x18') mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000a, 0x100010, r6, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16.749052187s ago: executing program 2 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0xd7c, &(0x7f0000000480)={0x0, 0x0, 0x10000, 0x20000, 0x10000000}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r2, 0x291c, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80049367, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000003c0), 0x2, 0x82400) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3c, r7, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x88, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x42}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x8041) r11 = getpid() r12 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x50}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e03000000000000001b00000000000008000000000000000000000003000000000200000039000b3a622c0026001c00616100"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(r11, &(0x7f0000000000)='net/ip6_tables_targets\x00') 16.504684481s ago: executing program 2 (id=457): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4040) socket(0x10, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000400010002", 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_open_dev$ndb(0x0, 0x0, 0x40) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8005) socket$kcm(0x10, 0x2, 0x0) 12.232169533s ago: executing program 4 (id=465): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x1, 0x4, 0x82, 0x3}, 'syz1\x00', 0x28}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0xa2dd3d984948a9c9, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc8, 0x0, &(0x7f00000002c0)=[@dead_binder_done, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x110a}, @flat=@weak_handle={0x77682a85, 0x100b, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}, @free_buffer={0x40086303, r3}, @request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1101, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x7fff}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}], 0xeb, 0x0, &(0x7f0000000500)="ad2dc78b6d659ba208123c8d27940bb7731785e71e38347413d4b389bdffda548b51d7720d8d46530e9ef2138c1b1c5053ff0ceb277de45eadc9469661653e9658a92ac5689a76e73a0ee882df1ac13938f140701e9aeb2691372ffce958ae2390ea39afcea21466c621a4f05e48bec6cfba9594a4ffaa4dcf3e70cf1a688e0b99a12b36a123575b6e6b6434dae3db0922c6a018281596234e8e1ca855fcd2ed3f82931ec10e581468740a2e2272ac1f41f5cb9b3780b69206f091220583bef54f7038ccf57626b75620f31f977774d675d29e99140a395a811725fcd4e8a1154a43260a3240df872277a6"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 10.747080497s ago: executing program 1 (id=467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 10.280178839s ago: executing program 3 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x600000) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 9.647255441s ago: executing program 0 (id=469): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f0000001780)="12dfbd793db81fe4", 0x8}, {&(0x7f0000000580)="2ee9", 0x2}], 0x2, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x97) 9.350963766s ago: executing program 3 (id=470): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x100000000000000, 0x0) 9.254039591s ago: executing program 4 (id=471): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r0, 0x1) 9.036445919s ago: executing program 0 (id=472): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0x7, 0x4) 7.987125167s ago: executing program 3 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) sendmsg$NFT_BATCH(r0, 0x0, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) arch_prctl$ARCH_GET_GS(0x1004, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x40000) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4004885) accept(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x88, 0x12003, 0x0, 0x19) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000008000000070000000000000000000000000000000000000003000000000000000800000000000000000000000000004dcfe05aa9e1bef8000000000000000000050000005c0000007fa500000000000000000000000000000100000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eb00"/532]) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c1) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r4, 0x0, 0x0) 7.808766018s ago: executing program 1 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) r2 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0xf0ff1f) r4 = socket(0x22, 0x3, 0x7fff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"]) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x44080) socket$kcm(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b00279706"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000728435e2d0745c35b7cd02207a661dbbc248320e5cf29c5da863e93eba7cf0f45f3404c20f8e7c78675b66b2cbd52f7e0cbbe6997028e249e31734bbd235ff22b33da3294fce1e5926798b2c31f9b999b55a47f8b5fd15be8f9653d2ef1e71a6e53dec5ed72f090272c695b095ff97f3c7609480b32ca4222c615e48796803d74dd0487c5ca378cf3bdfb98839d5841b8151abba82251a4e067e37048a20dd6ea22ae19410f8debad", @ANYRES16=r9], 0x1c}}, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000001240)={0x2020}, 0x2020) 7.736918052s ago: executing program 2 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) sendmsg$NFT_BATCH(r0, 0x0, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) arch_prctl$ARCH_GET_GS(0x1004, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x40000) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4004885) accept(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace(0x10, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000008000000070000000000000000000000000000000000000003000000000000000800000000000000000000000000004dcfe05aa9e1bef8000000000000000000050000005c0000007fa500000000000000000000000000000100000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eb00"/532]) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c1) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r4, 0x0, 0x0) 7.687679183s ago: executing program 0 (id=476): ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) 5.54996215s ago: executing program 3 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) unshare(0x22020600) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000084102, 0x0) fadvise64(r5, 0x8000000000000604, 0x1000000, 0x4) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) 5.432162471s ago: executing program 0 (id=478): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00001b4000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4048aecb, &(0x7f0000000000)) 5.416554989s ago: executing program 1 (id=479): prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)={0x2e, 0x4, 0x0, {0x3, 0x0, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)}, 0x1, 0x0, 0x0, 0x4000890}, 0x20004854) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) 4.095245154s ago: executing program 3 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x600000) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 3.46421006s ago: executing program 4 (id=481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1e, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000006000000230000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000003000000181b0000", @ANYRES32=0x1, @ANYBLOB="000000000000000018000000070000000000000001000000183000000100000000000000000000000c5004004400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000050000006c58500001000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x26, &(0x7f0000000240)=""/38, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0xe, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x1], &(0x7f0000000300)=[{0x0, 0x4, 0x0, 0x9}, {0x5, 0x3, 0xe, 0x8}, {0x3, 0x2, 0x9, 0x6}, {0x4, 0x5, 0xb, 0x4}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x4000000000000000}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) 3.416909693s ago: executing program 1 (id=482): prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)={0x2e, 0x4, 0x0, {0x3, 0x0, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="e9bed39c101417d7e467170468da901a864cd36ebbdc4e493534e8550a", 0x1d}, 0x1, 0x0, 0x0, 0x4000890}, 0x20004854) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) 3.356364503s ago: executing program 0 (id=483): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000000080, 0xffffffffffffffff, &(0x7f0000000000)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x519900, 0x100, 0xb}, 0x18) open_tree(r1, &(0x7f0000000640)='\x00', 0x49100) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40001) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r2, 0xfffffffd) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0c050700"/15], 0xf) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth1_macvtap\x00'}) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a0003"], 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 3.354727437s ago: executing program 2 (id=484): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x2c020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x602000, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='veth1_to_batadv\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x1, 0xdcfcce17ca608fdd, 0x4, 0xb5c, {{0x29, 0x4, 0x0, 0x7, 0xa4, 0x64, 0x0, 0x7, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@cipso={0x86, 0x32, 0x3, [{0x6, 0xe, "8c22ef0eec55b8c7ba8e0b7d"}, {0x6, 0xd, "1558ec969dc1ae56dffc36"}, {0x0, 0x11, "eb7f01c4a18a3fb8a9b21d3e7c1ce3"}]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x8, "26587cfb5695"}, {0x7, 0xb, "fd177e08637825a256"}]}, @rr={0x7, 0x7, 0xbf, [@multicast1]}, @timestamp={0x44, 0x14, 0xb0, 0x0, 0x0, [0x96, 0xb38, 0x0, 0x71]}, @end, @lsrr={0x83, 0x7, 0x24, [@loopback]}, @lsrr={0x83, 0x1f, 0x54, [@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010101, @local, @private=0xa010100, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x21}]}]}}}}}) sendmsg$inet6(r4, &(0x7f00000014c0)={&(0x7f0000000040)={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="0e97efe941501707a0bd811794adadcd59eb88cc88aae89c82a15bee719382eca9b86fbfed5e7541010b2473179a532b6efd72b374ba84dcb5b450b05d942df35cb3e021b8da921be2b66d79baae7c3161a11ab8d2d41be3fbc153e4851fb7b57533aa2e07d187ebe30a4b3738c5877f8b99f7724ff917ea118e01f9cf0cde50a9dc4a0868a6f84c8c36c88ea806dead4900232dd7c74b62063ef61e300e1752027301604c318180bfc2bc151c1bac54", 0xb0}, {&(0x7f0000000140)}], 0x2, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYBLOB="0000000014000000000000002900000043000000000000800000000024000000000000002900000032000000ff0100"/56, @ANYRES32=r6, @ANYBLOB="002f00004e43414e17be106febbb1136dd8ad019fb5744e42b4e9f23b2a3368d11ebd9cf2039d5fe86d869bf21740b2ccac5f748c4143f92aec4a0060343485c49377518f1e7d95906dda09f"], 0x1180}, 0x20008000) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2, &(0x7f0000000380)=@raw=[@generic={0x5, 0x4, 0x6, 0xff14, 0x7fffffff}, @alu={0x7, 0x0, 0xb, 0x4, 0x3, 0x18, 0x10}], &(0x7f00000003c0)='syzkaller\x00', 0x7c, 0x0, 0x0, 0x41000, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x2, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x1, 0x1], &(0x7f0000000500)=[{0x3, 0x2, 0xe, 0x6}, {0x0, 0x1, 0xa, 0x8}, {0x0, 0x1, 0x5, 0xb}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) landlock_restrict_self(r7, 0x0) r8 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) unshare(0x600) 2.435970035s ago: executing program 3 (id=485): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4040) socket(0x10, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000400010002", 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_open_dev$ndb(0x0, 0x0, 0x40) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8005) socket$kcm(0x10, 0x2, 0x0) 2.204237035s ago: executing program 4 (id=486): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0x7, 0x4) 2.067556758s ago: executing program 2 (id=487): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r0, &(0x7f0000000100)={0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x234}) r1 = open(0x0, 0x40, 0x142) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x4c}}, 0x2) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000007940)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf8a, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x12}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) landlock_restrict_self(r3, 0x0) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x62) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x1c9800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x75f5, 0x0, 0xff}) r7 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2881, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f0000002400)=ANY=[], 0x3d}) r11 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000088000000000000001000000000000000420000c744240233d8cecbc7442406000000000f011c24660f3881", @ANYRES8=r10], 0xa0}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904000003080662000905070000000000000924"], 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000000280)={{0x1, 0x0, 0xffffffffffffff36, {0xdddd1000, 0x5000}}, "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", "9986796767d9fd0fda908f894acb12cdce55740ac5c480c3a3291bc10f5ae80fc048fd49821940b8aab380c250e8b64e7629e1ea8236830b784a414ae62716bb5b957d61e75a09f18fad215aec29525458397e4c494bc6a2340c615f0e8c6dfd57d0bdb781f3062f58ddc25ca307e4a9816ee98a7ff97669e571bb3d047a785f93b2aec21f2173bf7eb483327c51f9a4f1ee34d8c5c2bb59d4df7aa879bcb8f6c9f1cd59b6dd2b68a8dc427421a5312819800d471e8b2fd4eac6885cb5fec1504e1d5914850712a421e8c8b6573ef49802f6e0939cc69b8e512762759c8463c49bf0eede745a1c0a083c8901b41c0668f343247f2ffc215eb8b693f3f66619c23a7c6a2d8fcc09cb8f22e9a82c74b149374a4717ab6d1f5d2f03611e9dc5a2fa14e5ff5ebc62d433a8487c71be97deecc9abbec781147f0aef4a01e9a1776a0feb903a9a99b483858a1db2925a6e3319260302c77ac47e0f5645a22ae58ee9a30e5fb287d6dd37a2dc4b6ef5135dc116156028c050720216ba767992608333a67537ad40421161524ac1e1fecadf09a1e487a447554a4a630e597637f196bb0578efdefcd7c81531dc4829e936e775be839e847744ff3c2958455094497703e57d749156f7b2f5489a9a50c5a46febf1dc3e4de3fbc941e225d7086b87180dc37a8a131bc024481d9953731165f48e9c64f014b6c803bfbf694a585f627ae76106c73b6a4b75b0e69521d4a6afba4c7124dfa3bd7703209b183b5226da8f2d28a9bd698c56f27a65c4e99f17dfdab71f1eceaeee7dfc3cce8eb3e4da0f0ba0067382b76d81256332942332bcdb2549f73bae3cbde7afda7f55de4c66a5c735cca09f6a69a078d358a0e6cfecf5f75bb8f98269784b57a0dacbf70c7e50fb6d825e12aaaada902badc93a39c97b17d2aad056223076c61dda9c8b0bc725e19b643662e98ba15f3cd9112fb3626143eb133ff63b28479e6a493e3da73775a4e5cd8e4056056b4b2e95071ba1f39b2e20845366ff10506e1cdab955d7553f1ccf7fa48b016d056f88c096a80a84bc80bcfeb2ae63d9de7b7d1dfc13fbedcd1dea588e314acb93f36b689cacbe7a0493a200e2140f5af57a4a9aac1d7e8aa4700a9b8e7df328c48aa74283e1f2aa65cf282f1e8a510652f181cb8d275e3b9c439f520f0cad22499907450b18b599f61573934a9702e669a2841ce927162823f5e78474a5dccc89f17b69a13f8678db56116d16e7b615d6c0d5035c01046db298f1709df8e026db208a49234869cb152fe8372d1dd92cbe5a9a1af7ca24da40e627bd3a0bf1bce4fa4ca7f84f1d653659fbc1673929644f206f921fb45998f14be6f973f17d12057f404794ac33bb9537bbfa2db701a6786d61e80c80ae0277cfd596bc00a64122b2c0679c9b53a23448bdb30748d256b74fd397190de0fb1b788635ed90ab3ba1f3ad5a6626fd32d443dc6ef612a98fcad01dc4adec4008f107781f75736a060debc3e435fce322fa9062e7d9dc61eff2066ccd198c4c79c27293a3ba32a5112a9b0e1a1f0038c4302ae0034324c275250958708f63771713dd77795a85024d5c1988193dbecdc5e270660c63186354d0aa8c94a5f4656008087eba2a80740c0751269aecfb19e44769b7103f4ce75e2217ef19fd082279d6b5365bb9e48a5a52228d2e3d2a8700008add626c77c8d86cbe79a18544b5c22d6c259b61d2a2cadc23790f78eea04f904d03e07bdc69c969a65a0c3fa12b84b603b9190dd861db36a31a2a23454a291a497aa5eddf301d08408c5cf2a7637983d0adf416f0d374b6f329e4c6cc70423e068bc52c29b9f3d90c3ceb980e5e72d6ba116bae4c1814daf96525df4edfdc36128ccb867484bb742ac67d390d51223ec9100672da49675e7bc60376231009fa7f7045521d0c848da8b90b2e1aed06e21b836e358def56699171f51c4edd7cabb5de5a8d69e0f8c8a6b43537bc487236ed0bf58a574028de77ec1075989eca2f30379c457c86c6fe881db3c14b37b528e6bbc71dec6e31f82a5dfa31b2a1198e494880f3bbcbf3fdd63e76555453abf5e80f5108484352c9e7281be00cbc90193ed93c8318e8798bb226d5117d5b53e882bda1d85c0245eaf3f07e54a86d40b39f3ae637e6042036d0be12f547208b104107b4b0de9b141755e785ab100d99d27e92152d40542395258648982065618d2500ffb7aa3bbe721a54d198cbc9f3aa92b43f22aff291823be272a68d5157ab0ba948cc2cb6a66d359162188db0866bfb7d174f453101b63112df10561f2b8181b45ed6fd59ae773a021f312b4cc24abe897981de1dba2687551ee15d56cf8423d553cdf870eee38c8aea321ade420398d4e4d1ec47332e4b45059cc212613dc3d4f1cfeb8eb0620da33cb4fa1067e008e9ffebe062943a519aec5da9cab4f606c3a306f609270d85ef7c34231a361b5bf4736a6b9c14fc567bcd10466cc59897f904bcf724efcab14d13d02a61a3bc9f92fdedbfba255cd90ced87762143f6e9fbf3cbc1415742c3fefc3d7d472016eea3732c79b607d391f66dc961d33a06f81af3e8cf0a31470e35ff37396ff5af91057bdb2173a565cd269373c34f80f663abc217848b28359d6605b7f0b76ba125b19627fd4abee6fa91840a7b06345619f0930723bae7f5e016d9ac81995d320d47e1888ff033bab4269a2e8f9e237c5b2a37c59af2f7b48bac346dc1398de210ef5bc852b3e518a909c4f7843d1d0b139f47be1b53a6aff54ebb29adcc0ce1ae08260fdb6f1b591c18d256a201f28263771e8ddb36cc25ab46b63b3b26756ad560510ce6eed1cec2bb27387d95502327507fcaab937b8be866f165af119cf6cf333e8043be2378e8650f5f08e089897867b0e95cf0b24fb9d33ea0288fb08d3f69efaf96b53e2d813a545091283c082540abbc70cb80eefbadd77986f1ec79e0349e0bd04896e36de3467c938c57776c33ddd8de665e99554b7a3be004031f314ae2a91ca4c2f8f3b05c4dd77cc8aca8da6174c2116213ce7f3d941715d9b3e82f1dd35b464f0d7b28aff912e22783320cfe8bc44d634d0e86be66f78348b6319b4ce7b82b743396fd52c2be18e5998b58bb887ef8211aaa0c2251a80aa919882aee8cf01c0ad7c2d55f1249d84d8e960cde236989e6565b3b4afda3644cb10bddf9fdaa965c537bc92714920baa9940292e497dd4d25e59aced4117bf98e9f80b226b12dec2c6d1ee03b477114e5fcac102290ff321301c24190a6f6fc192737752904cf02b03eaa631e86add86b751e26fe5b9bec2c41dfe6f776bc74498fd98aa175884c7d66ac9be1ee54b8a8372e4f19530c013483181b471dd3649f70a69209d9204c337a543d2f15d24faec1b2515a4ea73e786f7efedd994f892b6501c07da2bc9e5f30a3b499f68521cd2cddc17ecde8d8d5d437a60e9680891b988aee820ff69b23073a2f981b6777aac61f3b2d073e060119a9cb5437a29b90b4b2280b8d33ddf1bac2e169d58dc61c3091b311146d711eaee9b81e0aba60a5bd577956d149c449a7cf669da9cc7e1a8dc43a293efa14ae800af36e84d1feeba889bf180fd62ed7b671da4727f35cbac893fca3ebfb88eb7148c18b08084f2fc67f0d1de982a4d3d49ee7bbb0b62f2240992042ec71816d649a1e16c0ee0485c18a2ef56d48b8c847f4437ec0dbceb6be97c6355aad410b03d5b2f6d2f82415ab7b16534545339fbad40e0bd5267bfc15eba537c8e44547d0ae4e3fb800db23a560ad4ac5929a168c04b407e02d100b7f6fcd877a6acb8e1a1e2b5cf9054ccfc066be7e7357471fb418af6f376c080feec6686c7865d02087beeddda86b997abf6449ccf7535d954c1f6e98cbf42d662e6ac9742ca3551ae9beac32db3328f4af227ee8d5896e58d139d9494c3d3293d68d40259bb77e953203b5c615ee47d1243282b5abe64d5e1e65272f50132b97912442470791e7c9787896f4c7c284f53d677ccba5ac990508c749f6188ce13880946143a677f81a87994ec1f205814fe02028faec4236c91a071b57378b879888546eb6c2ba6e9e6316d854eaba6a5e4770ce875336c9ae19e400fa77f7ee20b1bbada742875845520c74a502d13f93338b14ba06db9483e233bcd4ed807c5031cc5f08e6b1ceebe672fc3ab464769fd4fa01331fc6d8322aa5f019a1b1bd83ee1f80117a749bca27df6fbd42abfb78b680c0418cc4a94a84b4edf3bff81a6b2d00ce987425dbbd043afcf7d8451f8267fed87c30cb0295ceae4892b80cf045c260913cc1be6f428077486fd9c548cb2eb50f501c26ea75df51abd13d8d990df05f6f99e3b1f766f7d9b96ec1ebb3e049b93fdf7ad593a29c59d27c828deeb596f088913926cb37eeb0e544b089329e9ff9eb328d6ab19fe9fe36e88e70101f041a4967f500f0c6c41d65a02936673012477c7e9ce18225003d5df048476522f24414aa72dc223af6eb6f0902b717a49fcec98739f75b3ce449b8356b31f3803c53ddf12b9839092e005a8dc2e2163dda50c1bc419f8a16e029e1bd06731b2537ab2f5be050c1dc07edacd301d5d7590f0462c566be0456ae35eb34d3bea801645bb89935d20c79f8d2e496049b2bbfcbda5b943b0e4c57c1c842ed24f8509ef2257652d6fc491ca3e9fb41a7f4ccb0bc80ef049418ce235b2fe67fdbe1d53781871187b5ec576234cd2f443cc70848724a2c56fd4147338656628552ff41d24b132d5c82cfe08d51388cbdbfab729de805e96e1a977f9c71b80a2171e32d192bd02f76fa0c0ff3a39fb44cd6d651444196cff54e325f0f3bfb3cb5b354de0864648e741074bb0aada73215c2dd3ca29a6f0fba470bd12b0230d18795e3ffa8390102600f3201d2c6230bba3afc71d3a0554eba4362515300395782195a7a9e9249178466a02ded2db88edc7770d162a5f6227292aa0eebc018e814caeff69904bcbbb54ccf03665312daee061341db9c7915cf64da55feadb5a7d21680eb5d7c1ad33245f9ea22cabdf307419b883588f3689629bf2e73c293f3acf35588bac03ca269892fe2e5f2caed291bc76a8bb851d8ae4c6f26dc1712c0ef4c4722255940d2908cc90e5b7e735e4ada7271b9c1239f5e278555af2b99cb44caaff1450e7942ab1c89ea0003ba27e3f6caae4bce3b203badd471ef454f60e1da6fe44193b130b3b7459956d8e569fea1674517b19433f949b41747648013b493b192d393130048d11243bfebe7758200d8828fa214439fdac0c1fbd0fd1b8a2a5b0b75fdf9bd43cb3429256075d980c8708a9ce60eb7b465f8d53e2a8bb8d713ec93c3a6ba90a55eb4e4f5c72f11eacbd2949657de43f5bca7fbe7a01b48461009937e3f6a7a3157add383fef8336ab43cceb5be4dd714d1c010ca5cbc7b097a6cc0bfd0b85f48e6fb8b36516f670572dabe87cf330219279d76811bddffc0d7c3d8cee770eb0e7058d92faf0ba8c57a67f6fdffb4d51daec920c023b16073333b0173df4776665a7092099916db73499760bdd5ed8dd6c3daad452fea39f3c5cbf22fd2efb2e627f536b6ac7493adb8d2b8569bc0082df50e792fad4b7accfdf349803aeef0b6c92a31687ff14dc360164f7ad97c712ae050aec577f618e7652de1ae5fc19b3d9bdab4758b8549e2607b9f5d0ccdff0b762a4355209d3b9ce59678ef016482d82920f372d55c918bb4508f2e32a674e7a12feff736a8a6a7cebb8add976a4e4327ce8ac20aabc5834281ed43d37e14cda3a8f0d3bd568a5cb53ecb510ed5c24"}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.05735767s ago: executing program 4 (id=488): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 1.476250537s ago: executing program 1 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0xffffffff, 0xa, 0x4, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 356.235395ms ago: executing program 4 (id=490): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x897, &(0x7f0000000440)={0x0, 0xaee1, 0x8, 0x0, 0x67}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r3, 0x5608, 0x1) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0xc0046209, 0x0) r4 = syz_io_uring_setup(0x2239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x7866, 0x4000, 0x0, 0x0, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x77359400}, 0x0) 0s ago: executing program 1 (id=491): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x6, 0x8, 0x81, 0x100, 0x16, "4d349c1d49fb36b70f98786244308846cecef5"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r1, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 81.497486][ T5806] cgroup: Unknown subsys name 'net' [ 81.614854][ T5806] cgroup: Unknown subsys name 'cpuset' [ 81.624367][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.311135][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.030725][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.040511][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.049296][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.073278][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.081360][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.088784][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.091556][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.103615][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.104031][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.120303][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.126618][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.128549][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.135730][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.142152][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.149992][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.156697][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.170953][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.179804][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.189960][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.197262][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.204605][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.212475][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.220944][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.226996][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.244068][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.878596][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 87.047738][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 87.253861][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 87.269649][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 87.338289][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 87.460593][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.468000][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.475699][ T5818] bridge_slave_0: entered allmulticast mode [ 87.483863][ T5818] bridge_slave_0: entered promiscuous mode [ 87.493259][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.500700][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.507889][ T5830] bridge_slave_0: entered allmulticast mode [ 87.515907][ T5830] bridge_slave_0: entered promiscuous mode [ 87.569003][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.576254][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.583978][ T5816] bridge_slave_0: entered allmulticast mode [ 87.592127][ T5816] bridge_slave_0: entered promiscuous mode [ 87.599597][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.606749][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.614858][ T5818] bridge_slave_1: entered allmulticast mode [ 87.622182][ T5818] bridge_slave_1: entered promiscuous mode [ 87.644086][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.651762][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.659457][ T5830] bridge_slave_1: entered allmulticast mode [ 87.666754][ T5830] bridge_slave_1: entered promiscuous mode [ 87.689185][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.696339][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.703785][ T5816] bridge_slave_1: entered allmulticast mode [ 87.711736][ T5816] bridge_slave_1: entered promiscuous mode [ 87.774462][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.833838][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.846471][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.860396][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.898832][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.949834][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.957092][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.964632][ T5817] bridge_slave_0: entered allmulticast mode [ 87.972860][ T5817] bridge_slave_0: entered promiscuous mode [ 87.983249][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.032625][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.040347][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.047503][ T5819] bridge_slave_0: entered allmulticast mode [ 88.055963][ T5819] bridge_slave_0: entered promiscuous mode [ 88.064810][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.072413][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.080175][ T5817] bridge_slave_1: entered allmulticast mode [ 88.087472][ T5817] bridge_slave_1: entered promiscuous mode [ 88.112627][ T5818] team0: Port device team_slave_0 added [ 88.122828][ T5830] team0: Port device team_slave_0 added [ 88.129021][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.136170][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.144147][ T5819] bridge_slave_1: entered allmulticast mode [ 88.151658][ T5819] bridge_slave_1: entered promiscuous mode [ 88.190625][ T5816] team0: Port device team_slave_0 added [ 88.198999][ T5818] team0: Port device team_slave_1 added [ 88.206903][ T5830] team0: Port device team_slave_1 added [ 88.256879][ T5816] team0: Port device team_slave_1 added [ 88.300000][ T5822] Bluetooth: hci1: command tx timeout [ 88.300006][ T5835] Bluetooth: hci0: command tx timeout [ 88.300330][ T5822] Bluetooth: hci2: command tx timeout [ 88.305752][ T5835] Bluetooth: hci3: command tx timeout [ 88.312409][ T5825] Bluetooth: hci4: command tx timeout [ 88.333758][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.346938][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.360219][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.384765][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.391791][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.418301][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.431042][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.438025][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.464549][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.491947][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.516956][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.526298][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.552598][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.572355][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.579947][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.606149][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.645179][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.652545][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.678681][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.691768][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.699480][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.725936][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.778543][ T5819] team0: Port device team_slave_0 added [ 88.813287][ T5818] hsr_slave_0: entered promiscuous mode [ 88.820149][ T5818] hsr_slave_1: entered promiscuous mode [ 88.844588][ T5819] team0: Port device team_slave_1 added [ 88.853502][ T5817] team0: Port device team_slave_0 added [ 88.932627][ T5817] team0: Port device team_slave_1 added [ 88.960328][ T5816] hsr_slave_0: entered promiscuous mode [ 88.966808][ T5816] hsr_slave_1: entered promiscuous mode [ 88.973520][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.981634][ T5816] Cannot create hsr debugfs directory [ 88.993910][ T5830] hsr_slave_0: entered promiscuous mode [ 89.000739][ T5830] hsr_slave_1: entered promiscuous mode [ 89.006917][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.014565][ T5830] Cannot create hsr debugfs directory [ 89.088025][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.095169][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.121799][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.135637][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.142778][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.168983][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.194527][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.201817][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.227953][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.298884][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.305871][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.333188][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.467658][ T5819] hsr_slave_0: entered promiscuous mode [ 89.474212][ T5819] hsr_slave_1: entered promiscuous mode [ 89.481298][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.488958][ T5819] Cannot create hsr debugfs directory [ 89.637400][ T5817] hsr_slave_0: entered promiscuous mode [ 89.644186][ T5817] hsr_slave_1: entered promiscuous mode [ 89.651653][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.659326][ T5817] Cannot create hsr debugfs directory [ 89.981578][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.994955][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.013483][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.025496][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.140102][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.164205][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.175748][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.202069][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.259078][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.292571][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.306990][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.341376][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.379074][ T5825] Bluetooth: hci3: command tx timeout [ 90.389497][ T5825] Bluetooth: hci4: command tx timeout [ 90.393278][ T5826] Bluetooth: hci2: command tx timeout [ 90.394953][ T5825] Bluetooth: hci0: command tx timeout [ 90.401087][ T5835] Bluetooth: hci1: command tx timeout [ 90.451219][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.485101][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.518626][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.545554][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.572482][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.650546][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.662843][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.685654][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.700180][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.713077][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.744749][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.752222][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.781413][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.789052][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.837322][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.909927][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.937265][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.974275][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.981611][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.032407][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.055032][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.064574][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.071747][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.089593][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.096827][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.156048][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.163290][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.215176][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.290458][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.297665][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.357692][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.364980][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.387036][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.457993][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.517989][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.538400][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.545607][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.582987][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.590203][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.885385][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.921771][ T9] cfg80211: failed to load regulatory.db [ 91.962447][ T5818] veth0_vlan: entered promiscuous mode [ 92.095478][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.142028][ T5818] veth1_vlan: entered promiscuous mode [ 92.237306][ T5830] veth0_vlan: entered promiscuous mode [ 92.263297][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.302298][ T5830] veth1_vlan: entered promiscuous mode [ 92.377556][ T5818] veth0_macvtap: entered promiscuous mode [ 92.405553][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.453092][ T5818] veth1_macvtap: entered promiscuous mode [ 92.460212][ T5835] Bluetooth: hci1: command tx timeout [ 92.465685][ T5835] Bluetooth: hci2: command tx timeout [ 92.470462][ T5826] Bluetooth: hci0: command tx timeout [ 92.472389][ T5835] Bluetooth: hci4: command tx timeout [ 92.476477][ T5826] Bluetooth: hci3: command tx timeout [ 92.499858][ T5830] veth0_macvtap: entered promiscuous mode [ 92.512633][ T5816] veth0_vlan: entered promiscuous mode [ 92.524293][ T5830] veth1_macvtap: entered promiscuous mode [ 92.575280][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.606753][ T5816] veth1_vlan: entered promiscuous mode [ 92.638184][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.680424][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.696135][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.712001][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.721706][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.730906][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.739902][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.794002][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.803375][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.813044][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.821961][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.861734][ T5817] veth0_vlan: entered promiscuous mode [ 92.871049][ T5819] veth0_vlan: entered promiscuous mode [ 92.924274][ T5816] veth0_macvtap: entered promiscuous mode [ 92.951505][ T5816] veth1_macvtap: entered promiscuous mode [ 92.965676][ T5817] veth1_vlan: entered promiscuous mode [ 92.977786][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.987836][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.001523][ T5819] veth1_vlan: entered promiscuous mode [ 93.044844][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.081599][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.093263][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.094183][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.112075][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.114343][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.130048][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.138953][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.263553][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.277305][ T5819] veth0_macvtap: entered promiscuous mode [ 93.326190][ T5819] veth1_macvtap: entered promiscuous mode [ 93.356110][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.365764][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.391763][ T5817] veth0_macvtap: entered promiscuous mode [ 93.484309][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.492201][ T5817] veth1_macvtap: entered promiscuous mode [ 93.545192][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.575322][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.593199][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.606881][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.617955][ T5819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.626113][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.632675][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.642933][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.656429][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.702004][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.772435][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.805991][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 93.845247][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.865703][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.887905][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.906620][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.942883][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.959959][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.060708][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.096279][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.104645][ T5922] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.157967][ T5925] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.169763][ T5883] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.189412][ T5925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.225306][ T5925] team0: entered promiscuous mode [ 94.231412][ T5925] team_slave_0: entered promiscuous mode [ 94.257412][ T5925] team_slave_1: entered promiscuous mode [ 94.281358][ T5925] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.293861][ T5925] team0: left promiscuous mode [ 94.303221][ T5925] team_slave_0: left promiscuous mode [ 94.312406][ T5925] team_slave_1: left promiscuous mode [ 94.319967][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 94.336493][ T5883] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 94.353172][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.365266][ T5883] usb 4-1: config 0 has no interface number 0 [ 94.422726][ T5928] ipvlan2: entered promiscuous mode [ 94.433589][ T5928] bridge0: port 3(ipvlan2) entered blocking state [ 94.443527][ T5928] bridge0: port 3(ipvlan2) entered disabled state [ 94.455788][ T5928] ipvlan2: entered allmulticast mode [ 94.466146][ T5928] bridge0: entered allmulticast mode [ 94.482664][ T5928] ipvlan2: left allmulticast mode [ 94.487959][ T5928] bridge0: left allmulticast mode [ 94.523663][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.544877][ T5826] Bluetooth: hci3: command tx timeout [ 94.551566][ T5825] Bluetooth: hci4: command tx timeout [ 94.557372][ T5825] Bluetooth: hci1: command tx timeout [ 94.563447][ T5835] Bluetooth: hci0: command tx timeout [ 94.569203][ T5826] Bluetooth: hci2: command tx timeout [ 94.587340][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.595831][ T5883] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 94.605222][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.613349][ T5883] usb 4-1: Product: syz [ 94.617554][ T5883] usb 4-1: Manufacturer: syz [ 94.622788][ T5883] usb 4-1: SerialNumber: syz [ 95.349263][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.411748][ T5883] usb 4-1: config 0 descriptor?? [ 95.413823][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.432574][ T5883] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 95.439597][ T5883] usb 4-1: No valid video chain found. [ 95.536176][ T5937] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10'. [ 95.695932][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.715095][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.797550][ T5942] FAULT_INJECTION: forcing a failure. [ 95.797550][ T5942] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.811056][ T5942] CPU: 1 UID: 0 PID: 5942 Comm: syz.2.9 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 95.811084][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.811100][ T5942] Call Trace: [ 95.811112][ T5942] [ 95.811122][ T5942] dump_stack_lvl+0x189/0x250 [ 95.811164][ T5942] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.811191][ T5942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.811239][ T5942] should_fail_ex+0x414/0x560 [ 95.811270][ T5942] _copy_to_user+0x31/0xb0 [ 95.811294][ T5942] simple_read_from_buffer+0xe1/0x170 [ 95.811328][ T5942] proc_fail_nth_read+0x1df/0x250 [ 95.811358][ T5942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.811388][ T5942] ? rw_verify_area+0x258/0x650 [ 95.811406][ T5942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.811434][ T5942] vfs_read+0x1fd/0x980 [ 95.811459][ T5942] ? __pfx___mutex_lock+0x10/0x10 [ 95.811485][ T5942] ? __pfx_vfs_read+0x10/0x10 [ 95.811506][ T5942] ? __fget_files+0x2a/0x420 [ 95.811534][ T5942] ? __fget_files+0x3a0/0x420 [ 95.811556][ T5942] ? __fget_files+0x2a/0x420 [ 95.811589][ T5942] ksys_read+0x145/0x250 [ 95.811612][ T5942] ? __pfx_ksys_read+0x10/0x10 [ 95.811637][ T5942] ? do_syscall_64+0xbe/0x3b0 [ 95.811667][ T5942] do_syscall_64+0xfa/0x3b0 [ 95.811693][ T5942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.811712][ T5942] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 95.811732][ T5942] ? clear_bhb_loop+0x60/0xb0 [ 95.811756][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.811776][ T5942] RIP: 0033:0x7f9a3af8d37c [ 95.811800][ T5942] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.811816][ T5942] RSP: 002b:00007f9a3be64030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.811838][ T5942] RAX: ffffffffffffffda RBX: 00007f9a3b1b6160 RCX: 00007f9a3af8d37c [ 95.811853][ T5942] RDX: 000000000000000f RSI: 00007f9a3be640a0 RDI: 0000000000000005 [ 95.811866][ T5942] RBP: 00007f9a3be64090 R08: 0000000000000000 R09: 0000000000000000 [ 95.811878][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.811890][ T5942] R13: 0000000000000000 R14: 00007f9a3b1b6160 R15: 00007ffcaf30b498 [ 95.811922][ T5942] [ 96.203445][ T5943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.214715][ T980] usb 4-1: USB disconnect, device number 2 [ 96.341420][ T5945] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 96.349786][ T5945] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11'. [ 96.818884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.827461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.839628][ T5960] xt_NFQUEUE: number of total queues is 0 [ 97.048881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.078826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.118688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.209705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.219577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 97.288116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.312111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.414651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.616459][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.840386][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.919763][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 97.950745][ T5968] netlink: 'syz.2.17': attribute type 10 has an invalid length. [ 98.029992][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 98.127818][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.136989][ T24] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 98.139619][ T5875] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.582291][ T24] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 98.604052][ T5875] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 98.624910][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.650756][ T24] usb 1-1: config 6 has no interface number 0 [ 98.660959][ T5875] usb 5-1: Product: syz [ 98.686167][ T24] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 98.686478][ T5875] usb 5-1: Manufacturer: syz [ 98.733647][ T24] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 98.758209][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.760405][ T5875] usb 5-1: SerialNumber: syz [ 98.811754][ T24] usb 1-1: Product: syz [ 98.816002][ T24] usb 1-1: Manufacturer: syz [ 98.825842][ T5875] usb 5-1: config 0 descriptor?? [ 98.826401][ T24] usb 1-1: SerialNumber: syz [ 98.900359][ T24] hso 1-1:6.2: Failed to find INT IN ep [ 99.094261][ T5952] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 99.117444][ T5952] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.12'. [ 100.044548][ T5988] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.136568][ T5975] delete_channel: no stack [ 101.055680][ T5875] usb 5-1: USB disconnect, device number 2 [ 101.325822][ T6003] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 101.396477][ T6003] netlink: 224 bytes leftover after parsing attributes in process `syz.3.24'. [ 102.001076][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.009675][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.029794][ T9] usb 1-1: USB disconnect, device number 2 [ 102.118441][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.225882][ T6024] sctp: [Deprecated]: syz.0.31 (pid 6024) Use of int in max_burst socket option deprecated. [ 102.225882][ T6024] Use struct sctp_assoc_value instead [ 102.242787][ T6019] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 102.249534][ T6019] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.279863][ T6019] vhci_hcd vhci_hcd.0: Device attached [ 102.299546][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 102.307061][ T6027] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 102.309760][ T5883] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.313627][ T6027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.329220][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.337181][ T5883] usb 3-1: config 0 has no interface number 0 [ 102.353232][ T6019] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.379066][ T6027] vhci_hcd vhci_hcd.0: Device attached [ 102.468741][ T980] vhci_hcd: vhci_device speed not set [ 102.503919][ T6019] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 102.510507][ T6019] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.523946][ T6027] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.536012][ T6019] vhci_hcd vhci_hcd.0: Device attached [ 102.542281][ T980] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 102.621066][ T6037] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(17) [ 102.627734][ T6037] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.648012][ T6037] vhci_hcd vhci_hcd.0: Device attached [ 102.676415][ T6019] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.707539][ T6019] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(19) [ 102.714224][ T6019] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 102.753737][ T6019] vhci_hcd vhci_hcd.0: Device attached [ 102.764082][ T5883] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 102.777998][ T5883] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 102.793576][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.801707][ T5883] usb 3-1: Product: syz [ 102.806605][ T5883] usb 3-1: Manufacturer: syz [ 102.812563][ T5883] usb 3-1: SerialNumber: syz [ 102.825230][ T6036] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.829938][ T5883] usb 3-1: config 0 descriptor?? [ 102.910640][ T5883] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.054351][ T6044] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.896115][ T5883] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 103.998106][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.009381][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.242216][ T24] usb 5-1: device descriptor read/64, error -71 [ 104.524301][ T6048] delete_channel: no stack [ 104.598611][ T5875] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.656990][ T6059] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 104.688629][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.723809][ T6059] netlink: 224 bytes leftover after parsing attributes in process `syz.0.39'. [ 104.775815][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.827727][ T5875] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 104.827930][ T5883] usb 3-1: USB disconnect, device number 2 [ 104.850115][ T24] usb 5-1: device descriptor read/64, error -71 [ 104.906332][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.926547][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 104.958424][ T5875] usb 4-1: Product: syz [ 104.959331][ T24] usb usb5-port1: attempt power cycle [ 104.968882][ T6064] syz.1.41 (6064) used greatest stack depth: 17992 bytes left [ 104.985729][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 105.015212][ T5875] usb 4-1: Manufacturer: syz [ 105.032706][ T5875] usb 4-1: SerialNumber: syz [ 105.093034][ T5875] usb 4-1: config 0 descriptor?? [ 105.194754][ T6040] vhci_hcd: connection closed [ 105.197901][ T6038] vhci_hcd: connection closed [ 105.198785][ T6029] vhci_hcd: connection closed [ 105.209624][ T6032] vhci_hcd: connection closed [ 105.218608][ T3560] vhci_hcd: stop threads [ 105.243860][ T6022] vhci_hcd: connection reset by peer [ 105.271565][ T3560] vhci_hcd: release socket [ 105.300198][ T3560] vhci_hcd: disconnect device [ 105.310351][ T3560] vhci_hcd: stop threads [ 105.314693][ T3560] vhci_hcd: release socket [ 105.334378][ T3560] vhci_hcd: disconnect device [ 105.365680][ T3560] vhci_hcd: stop threads [ 105.371475][ T3560] vhci_hcd: release socket [ 105.376172][ T3560] vhci_hcd: disconnect device [ 105.383834][ T6075] capability: warning: `syz.2.44' uses deprecated v2 capabilities in a way that may be insecure [ 105.389863][ T5918] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.407823][ T3560] vhci_hcd: stop threads [ 105.427108][ T3560] vhci_hcd: release socket [ 105.448780][ T3560] vhci_hcd: disconnect device [ 105.454951][ T3560] vhci_hcd: stop threads [ 105.461859][ T3560] vhci_hcd: release socket [ 105.467380][ T3560] vhci_hcd: disconnect device [ 105.468917][ T6079] loop6: detected capacity change from 0 to 524287999 [ 105.535126][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.543692][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.554795][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.565883][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.577664][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.587062][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.596821][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.598514][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 105.630072][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.639043][ T5875] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 105.650522][ T5875] usb 4-1: Firmware version (0.0) predates our first public release. [ 105.660212][ T6079] ldm_validate_partition_table(): Disk read failed. [ 105.668318][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.677845][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.688704][ T6079] Dev loop6: unable to read RDB block 0 [ 105.709949][ T6079] loop6: unable to read partition table [ 105.717173][ T6079] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 105.944193][ T5918] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 105.980646][ T5875] usb 4-1: Please update to version 0.2 or newer [ 105.982275][ T6050] overlay: Unknown parameter 'uid<00000000000000000000' [ 106.109495][ T5918] usb 2-1: config 1 interface 0 has no altsetting 0 [ 106.143252][ T5918] usb 2-1: string descriptor 0 read error: -22 [ 106.148918][ T5875] usb 4-1: Firmware: build c [ 106.163908][ T5918] usb 2-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.40 [ 106.188589][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.375136][ T5875] usb 4-1: USB disconnect, device number 3 [ 106.415726][ T6070] syz.1.43(6070): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 106.524100][ T5918] usbhid 2-1:1.0: can't add hid device: -71 [ 106.567695][ T5918] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 106.581638][ T6092] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 106.607723][ T5918] usb 2-1: USB disconnect, device number 2 [ 106.679127][ T6094] netlink: 452 bytes leftover after parsing attributes in process `syz.2.51'. [ 106.704594][ T6094] team_slave_0: entered promiscuous mode [ 106.712290][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 106.750992][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.824827][ T6098] trusted_key: syz.4.52 sent an empty control message without MSG_MORE. [ 106.881745][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.081817][ T6093] team_slave_0: left promiscuous mode [ 107.298555][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.516618][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.615651][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 107.684434][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.739159][ T6125] Zero length message leads to an empty skb [ 107.915470][ T980] vhci_hcd: vhci_device speed not set [ 107.941195][ T5918] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.999274][ T5825] block nbd4: Receive control failed (result -32) [ 108.174350][ T24] usb 4-1: config 0 descriptor?? [ 108.208281][ T6110] block nbd4: shutting down sockets [ 108.315870][ T5918] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.376196][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.474846][ T5918] usb 3-1: config 0 descriptor?? [ 108.553399][ T5918] cp210x 3-1:0.0: cp210x converter detected [ 108.746503][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 108.758949][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 108.770773][ T5883] kernel write not supported for file /32/loginuid (pid: 5883 comm: kworker/1:4) [ 108.795459][ T24] usb 4-1: USB disconnect, device number 4 [ 108.956356][ T5918] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 108.999425][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.025689][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.075660][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.108986][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.218219][ T5918] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 109.232987][ T5883] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 109.242391][ T5918] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 109.509700][ T6145] batadv1: entered promiscuous mode [ 109.999333][ T5918] usb 3-1: cp210x converter now attached to ttyUSB0 [ 110.012467][ T5918] usb 3-1: USB disconnect, device number 3 [ 110.022756][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 110.049314][ T5918] cp210x 3-1:0.0: device disconnected [ 110.110357][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.159112][ T5883] usb 5-1: not running at top speed; connect to a high speed hub [ 110.207489][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.251080][ T5883] usb 5-1: config 1 interface 0 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.266514][ T5883] usb 5-1: config 1 interface 0 has no altsetting 0 [ 110.279179][ T5883] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 110.300812][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.326417][ T5883] usb 5-1: Product: syz [ 110.335748][ T5883] usb 5-1: Manufacturer: syz [ 110.341239][ T9] usb usb42-port8: attempt power cycle [ 110.353931][ T5883] usb 5-1: SerialNumber: syz [ 110.429367][ T5918] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.491952][ T5871] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.592667][ T6134] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 110.605515][ T6160] mmap: syz.0.72 (6160): VmData 37523456 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 110.621711][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.642940][ T5918] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 110.652533][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.672536][ T5871] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 110.690307][ T5883] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 110.705123][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.709953][ T5918] usb 3-1: Product: syz [ 110.718600][ T5918] usb 3-1: Manufacturer: syz [ 110.729716][ T5918] usb 3-1: SerialNumber: syz [ 110.733213][ T5871] usb 2-1: Product: syz [ 110.745848][ T5871] usb 2-1: Manufacturer: syz [ 110.774646][ T5883] usb 5-1: USB disconnect, device number 6 [ 110.802590][ T5918] usb 3-1: config 0 descriptor?? [ 110.929845][ T9] usb usb42-port8: unable to enumerate USB device [ 111.601295][ T5918] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 111.673077][ T5918] usb 3-1: Firmware version (0.0) predates our first public release. [ 111.761467][ T5918] usb 3-1: Please update to version 0.2 or newer [ 111.977145][ T6148] overlay: Unknown parameter 'uid<00000000000000000000' [ 112.361181][ T5918] usb 3-1: Firmware: build c [ 112.414089][ T5871] usb 2-1: SerialNumber: syz [ 112.462578][ T5871] r8152-cfgselector 2-1: Unknown version 0x0000 [ 112.472171][ T5871] r8152-cfgselector 2-1: config 0 descriptor?? [ 113.040285][ T6177] batadv1: entered promiscuous mode [ 113.738563][ T5918] usb 3-1: USB disconnect, device number 4 [ 114.433863][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.469612][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.523169][ T5871] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 114.722387][ T6200] netlink: 2 bytes leftover after parsing attributes in process `syz.2.82'. [ 115.694737][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.714876][ T6211] Cannot find del_set index 1 as target [ 115.878602][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 115.904187][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.909519][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 115.969840][ T5918] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 115.990439][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.072561][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 116.078464][ T24] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 116.138314][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.184140][ T5918] usb 2-1: too many configurations: 14, using maximum allowed: 8 [ 116.241737][ T5918] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 116.289142][ T24] usb 5-1: config 0 descriptor?? [ 116.310368][ T5918] usb 2-1: can't read configurations, error -61 [ 116.553257][ T5918] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 116.728480][ T5883] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.747203][ T5918] usb 2-1: too many configurations: 14, using maximum allowed: 8 [ 116.761026][ T5918] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 116.774517][ T5918] usb 2-1: can't read configurations, error -61 [ 116.784229][ T5918] usb usb2-port1: attempt power cycle [ 116.795719][ T6225] syz.2.93 uses obsolete (PF_INET,SOCK_PACKET) [ 116.820841][ T24] aquacomputer_d5next 0003:0C70:F0B6.0001: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 116.880995][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.905554][ T5883] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 116.915786][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.924014][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.939044][ T5883] usb 1-1: Product: syz [ 116.946138][ T5883] usb 1-1: Manufacturer: syz [ 116.951623][ T5883] usb 1-1: SerialNumber: syz [ 116.965645][ T5883] usb 1-1: config 0 descriptor?? [ 117.036448][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.054620][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.096417][ T5871] usb 5-1: USB disconnect, device number 7 [ 117.096411][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.096445][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.136082][ T5899] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 117.145616][ T5918] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 117.154428][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.167072][ T5899] usb 4-1: config 0 descriptor?? [ 117.194282][ T5918] usb 2-1: too many configurations: 14, using maximum allowed: 8 [ 117.214089][ T5918] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 117.226628][ T5918] usb 2-1: can't read configurations, error -61 [ 117.593017][ T5918] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 117.601150][ T5883] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 117.610083][ T5883] usb 1-1: Firmware version (0.0) predates our first public release. [ 117.618720][ T5883] usb 1-1: Please update to version 0.2 or newer [ 117.649699][ T5918] usb 2-1: too many configurations: 14, using maximum allowed: 8 [ 117.851464][ T5918] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 117.878129][ T6236] Bluetooth: MGMT ver 1.23 [ 118.158106][ T5918] usb 2-1: can't read configurations, error -61 [ 118.208532][ T5899] cypress 0003:04B4:DE61.0002: item fetching failed at offset 5/7 [ 118.220113][ T6217] overlay: Unknown parameter 'uid<00000000000000000000' [ 118.250692][ T5918] usb usb2-port1: unable to enumerate USB device [ 118.258106][ T5899] cypress 0003:04B4:DE61.0002: parse failed [ 118.275242][ T5883] usb 1-1: Firmware: build c [ 118.283969][ T6237] orangefs_mount: mount request failed with -4 [ 118.419058][ T5899] cypress 0003:04B4:DE61.0002: probe with driver cypress failed with error -22 [ 118.889856][ T5883] usb 1-1: USB disconnect, device number 3 [ 119.533146][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 122.054910][ T5871] usb 4-1: USB disconnect, device number 5 [ 122.218728][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.103'. [ 123.553494][ T6281] netlink: 'syz.4.109': attribute type 25 has an invalid length. [ 123.573988][ T6281] netlink: 'syz.4.109': attribute type 7 has an invalid length. [ 123.633775][ T6283] FAULT_INJECTION: forcing a failure. [ 123.633775][ T6283] name failslab, interval 1, probability 0, space 0, times 1 [ 123.664575][ T5917] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.673833][ T6283] CPU: 0 UID: 0 PID: 6283 Comm: syz.0.112 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 123.673862][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.673874][ T6283] Call Trace: [ 123.673882][ T6283] [ 123.673891][ T6283] dump_stack_lvl+0x189/0x250 [ 123.673928][ T6283] ? __pfx____ratelimit+0x10/0x10 [ 123.673952][ T6283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.673980][ T6283] ? __pfx__printk+0x10/0x10 [ 123.674007][ T6283] ? __pfx___might_resched+0x10/0x10 [ 123.674031][ T6283] ? fs_reclaim_acquire+0x7d/0x100 [ 123.674061][ T6283] should_fail_ex+0x414/0x560 [ 123.674092][ T6283] should_failslab+0xa8/0x100 [ 123.674117][ T6283] __kmalloc_cache_noprof+0x70/0x3d0 [ 123.674137][ T6283] ? vhost_task_create+0xf6/0x290 [ 123.674169][ T6283] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 123.674195][ T6283] vhost_task_create+0xf6/0x290 [ 123.674224][ T6283] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 123.674251][ T6283] ? __pfx_vhost_task_create+0x10/0x10 [ 123.674288][ T6283] ? __pfx_vhost_task_fn+0x10/0x10 [ 123.674328][ T6283] ? kasan_save_track+0x4f/0x80 [ 123.674344][ T6283] ? kasan_save_track+0x3e/0x80 [ 123.674367][ T6283] kvm_mmu_post_init_vm+0x147/0x2b0 [ 123.674400][ T6283] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 123.674428][ T6283] ? __mutex_trylock_common+0x153/0x260 [ 123.674459][ T6283] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 123.674484][ T6283] ? rcu_is_watching+0x15/0xb0 [ 123.674508][ T6283] ? look_up_lock_class+0x74/0x170 [ 123.674535][ T6283] ? register_lock_class+0x51/0x320 [ 123.674563][ T6283] ? __lock_acquire+0xab9/0xd20 [ 123.674617][ T6283] kvm_vcpu_ioctl+0x95a/0xe90 [ 123.674656][ T6283] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.674683][ T6283] ? __lock_acquire+0xab9/0xd20 [ 123.674715][ T6283] ? __asan_memset+0x22/0x50 [ 123.674744][ T6283] ? smack_file_ioctl+0x302/0x340 [ 123.674771][ T6283] ? __pfx_smack_file_ioctl+0x10/0x10 [ 123.674806][ T6283] ? __fget_files+0x2a/0x420 [ 123.674828][ T6283] ? __fget_files+0x3a0/0x420 [ 123.674849][ T6283] ? __fget_files+0x2a/0x420 [ 123.674875][ T6283] ? bpf_lsm_file_ioctl+0x9/0x20 [ 123.674900][ T6283] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.674931][ T6283] __se_sys_ioctl+0xf9/0x170 [ 123.674965][ T6283] do_syscall_64+0xfa/0x3b0 [ 123.674988][ T6283] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.675010][ T6283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.675030][ T6283] ? clear_bhb_loop+0x60/0xb0 [ 123.675054][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.675073][ T6283] RIP: 0033:0x7f88b9d8e969 [ 123.675092][ T6283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.675108][ T6283] RSP: 002b:00007f88bab22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.675130][ T6283] RAX: ffffffffffffffda RBX: 00007f88b9fb5fa0 RCX: 00007f88b9d8e969 [ 123.675144][ T6283] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 123.675156][ T6283] RBP: 00007f88bab22090 R08: 0000000000000000 R09: 0000000000000000 [ 123.675168][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.675180][ T6283] R13: 0000000000000000 R14: 00007f88b9fb5fa0 R15: 00007ffeae0c8128 [ 123.675212][ T6283] [ 124.103658][ T6289] Bluetooth: MGMT ver 1.23 [ 124.166433][ T5917] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 124.175968][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.263762][ T5917] usb 4-1: Product: syz [ 124.268203][ T5917] usb 4-1: Manufacturer: syz [ 124.349421][ T5917] usb 4-1: SerialNumber: syz [ 124.378518][ T5883] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.430142][ T5917] usb 4-1: config 0 descriptor?? [ 124.449882][ T6298] netlink: 'syz.4.119': attribute type 1 has an invalid length. [ 124.497657][ T6298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.119'. [ 124.571663][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 124.590239][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.604104][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.613998][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.625324][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 124.636290][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.663039][ T5883] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 124.679483][ T5871] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.682521][ T5883] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.702081][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.713980][ T5883] usb 2-1: SerialNumber: syz [ 124.748829][ T5883] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 124.853943][ T5917] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 124.861083][ T5871] usb 3-1: config 1 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 124.866006][ T5917] usb 4-1: Firmware version (0.0) predates our first public release. [ 124.884554][ T5917] usb 4-1: Please update to version 0.2 or newer [ 124.901061][ T6313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.938135][ T5871] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 124.961256][ T6290] input: syz0 as /devices/virtual/input/input5 [ 124.997656][ T5871] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.019429][ T5871] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 125.031961][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.072888][ T5871] usb-storage 3-1:1.0: USB Mass Storage device detected [ 125.094891][ T5871] usb-storage 3-1:1.0: Quirks match for vid 1908 pid 1315: 20000 [ 125.158222][ T5917] usb 4-1: USB disconnect, device number 6 [ 125.926012][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 126.266268][ T5871] usb 3-1: USB disconnect, device number 5 [ 126.820252][ T6332] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.719981][ T6336] syzkaller0: entered promiscuous mode [ 127.727467][ T6336] syzkaller0: entered allmulticast mode [ 127.762693][ T9] usb 2-1: USB disconnect, device number 8 [ 129.964961][ T6344] xt_NFQUEUE: number of total queues is 0 [ 130.825852][ T6368] netlink: 'syz.1.137': attribute type 1 has an invalid length. [ 130.855424][ T6368] netlink: 224 bytes leftover after parsing attributes in process `syz.1.137'. [ 131.059611][ T5871] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.159988][ T6365] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.248425][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 131.270035][ T5871] usb 4-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 131.298739][ T5871] usb 4-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 131.326958][ T5871] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.341424][ T5871] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 131.357574][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.368468][ T980] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.376243][ T5871] usb 4-1: Product: syz [ 131.389142][ T5871] usb 4-1: Manufacturer: syz [ 131.393796][ T5871] usb 4-1: SerialNumber: syz [ 131.430655][ T5871] usb 4-1: config 0 descriptor?? [ 131.541784][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.599060][ T6380] ubi31: attaching mtd0 [ 131.606079][ T6380] ubi31: scanning is finished [ 131.611232][ T6380] ubi31: empty MTD device detected [ 131.626696][ T980] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 131.636532][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.666029][ T980] usb 2-1: Product: syz [ 131.736915][ T980] usb 2-1: Manufacturer: syz [ 131.748605][ T980] usb 2-1: SerialNumber: syz [ 131.763639][ T6380] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 131.771974][ T6380] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 131.779699][ T6380] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 131.786774][ T6380] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 131.794283][ T6380] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 131.801199][ T6380] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 131.809311][ T6380] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3688297059 [ 131.819437][ T6380] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 131.839227][ T6384] ubi31: background thread "ubi_bgt31d" started, PID 6384 [ 131.861282][ T980] usb 2-1: config 0 descriptor?? [ 131.880602][ T6370] syz.3.138: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 131.929073][ T6370] CPU: 1 UID: 0 PID: 6370 Comm: syz.3.138 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 131.929105][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.929118][ T6370] Call Trace: [ 131.929127][ T6370] [ 131.929145][ T6370] dump_stack_lvl+0x189/0x250 [ 131.929187][ T6370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.929219][ T6370] ? __pfx__printk+0x10/0x10 [ 131.929240][ T6370] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 131.929270][ T6370] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 131.929302][ T6370] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 131.929335][ T6370] warn_alloc+0x214/0x310 [ 131.929368][ T6370] ? __pfx_warn_alloc+0x10/0x10 [ 131.929403][ T6370] ? __get_vm_area_node+0x28f/0x300 [ 131.929426][ T6370] ? htable_create+0xfc/0x7a0 [ 131.929454][ T6370] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 131.929511][ T6370] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.929534][ T6370] ? __kasan_kmalloc_large+0x1c/0xa0 [ 131.929560][ T6370] ? rcu_is_watching+0x15/0xb0 [ 131.929587][ T6370] ? htable_create+0xfc/0x7a0 [ 131.929609][ T6370] ? htable_create+0xfc/0x7a0 [ 131.929629][ T6370] __kvmalloc_node_noprof+0x3bf/0x600 [ 131.929653][ T6370] ? htable_create+0xfc/0x7a0 [ 131.929673][ T6370] ? hashlimit_pernet+0x23/0x240 [ 131.929704][ T6370] htable_create+0xfc/0x7a0 [ 131.929735][ T6370] hashlimit_mt_check_common+0x719/0xa10 [ 131.929770][ T6370] hashlimit_mt_check_v1+0x221/0x360 [ 131.929797][ T6370] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 131.929828][ T6370] ? xt_find_match+0x1f7/0x250 [ 131.929855][ T6370] xt_check_match+0x3ce/0xab0 [ 131.929876][ T6370] ? __pfx___mutex_lock+0x10/0x10 [ 131.929907][ T6370] ? __pfx_xt_check_match+0x10/0x10 [ 131.929932][ T6370] ? pcpu_alloc_noprof+0xfdb/0x16b0 [ 131.929965][ T6370] ? xt_find_match+0x1f7/0x250 [ 131.929995][ T6370] translate_table+0x150b/0x2000 [ 131.930052][ T6370] ? __pfx_translate_table+0x10/0x10 [ 131.930085][ T6370] ? __might_fault+0xb0/0x130 [ 131.930127][ T6370] ? _copy_from_user+0x94/0xb0 [ 131.930162][ T6370] do_ipt_set_ctl+0x967/0xcd0 [ 131.930202][ T6370] ? rcu_is_watching+0x15/0xb0 [ 131.930226][ T6370] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 131.930280][ T6370] ? __pfx___mutex_lock+0x10/0x10 [ 131.930306][ T6370] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.930355][ T6370] nf_setsockopt+0x26c/0x290 [ 131.930378][ T6370] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 131.930410][ T6370] do_sock_setsockopt+0x25a/0x3e0 [ 131.930445][ T6370] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 131.930483][ T6370] ? __fget_files+0x2a/0x420 [ 131.930516][ T6370] __x64_sys_setsockopt+0x18b/0x220 [ 131.930555][ T6370] do_syscall_64+0xfa/0x3b0 [ 131.930580][ T6370] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.930604][ T6370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.930625][ T6370] ? clear_bhb_loop+0x60/0xb0 [ 131.930650][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.930669][ T6370] RIP: 0033:0x7f8cf9f8e969 [ 131.930711][ T6370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.930728][ T6370] RSP: 002b:00007f8cfaeb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 131.930751][ T6370] RAX: ffffffffffffffda RBX: 00007f8cfa1b5fa0 RCX: 00007f8cf9f8e969 [ 131.930766][ T6370] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000009 [ 131.930779][ T6370] RBP: 00007f8cfa010ab1 R08: 0000000000000448 R09: 0000000000000000 [ 131.930792][ T6370] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 131.930804][ T6370] R13: 0000000000000000 R14: 00007f8cfa1b5fa0 R15: 00007fffb2884e48 [ 131.930836][ T6370] [ 131.931824][ T6370] Mem-Info: [ 132.363232][ T6370] active_anon:262 inactive_anon:8488 isolated_anon:0 [ 132.363232][ T6370] active_file:5312 inactive_file:36053 isolated_file:0 [ 132.363232][ T6370] unevictable:768 dirty:236 writeback:0 [ 132.363232][ T6370] slab_reclaimable:10141 slab_unreclaimable:97861 [ 132.363232][ T6370] mapped:32904 shmem:4238 pagetables:1258 [ 132.363232][ T6370] sec_pagetables:0 bounce:0 [ 132.363232][ T6370] kernel_misc_reclaimable:0 [ 132.363232][ T6370] free:1319702 free_pcp:15489 free_cma:0 [ 132.468478][ T5917] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.528688][ T6370] Node 0 active_anon:1048kB inactive_anon:33752kB active_file:21048kB inactive_file:144212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131616kB dirty:940kB writeback:0kB shmem:15416kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11520kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.529472][ T980] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 132.610779][ T980] usb 2-1: Firmware version (0.0) predates our first public release. [ 132.620911][ T980] usb 2-1: Please update to version 0.2 or newer [ 132.627514][ T6370] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.690051][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 132.725858][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 132.820209][ T6377] overlay: Unknown parameter 'uid<00000000000000000000' [ 132.830236][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.871870][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877643][ T5917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.878291][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.894358][ T6370] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.901008][ T980] usb 2-1: Firmware: build c [ 132.938734][ T6370] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 132.946001][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 132.946101][ T6370] Node 0 DMA32 free:1358108kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1044kB inactive_anon:33852kB active_file:19292kB inactive_file:144144kB unevictable:1536kB writepending:960kB present:3129332kB managed:2561644kB mlocked:0kB bounce:0kB free_pcp:43008kB local_pcp:25280kB free_cma:0kB [ 132.988390][ T5917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 133.028693][ T5917] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 133.038119][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.116120][ T980] usb 2-1: USB disconnect, device number 9 [ 133.117225][ T6370] lowmem_reserve[]: 0 0 1 1 1 [ 133.146771][ T5917] usb 5-1: config 0 descriptor?? [ 133.274370][ T6387] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 133.308430][ T6370] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1756kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 133.426221][ T6370] lowmem_reserve[]: 0 0 0 0 0 [ 133.441358][ T6370] Node 1 Normal free:3905320kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:6560kB free_cma:0kB [ 133.576557][ T6370] lowmem_reserve[]: 0 0 0 0 0 [ 133.597206][ T6370] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 133.651702][ T6370] Node 0 DMA32: 620*4kB (M) 142*8kB (M) 112*16kB (UM) 97*32kB (UM) 22*64kB (UM) 18*128kB (M) 7*256kB (UME) 3*512kB (UM) 10*1024kB (UME) 3*2048kB (UM) 325*4096kB (M) = 1363136kB [ 133.706985][ T6396] xt_NFQUEUE: number of total queues is 0 [ 133.737751][ T6370] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 133.798738][ T980] usb 5-1: USB disconnect, device number 8 [ 133.805843][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 133.812176][ T6370] Node 1 Normal: 188*4kB (UME) 35*8kB (UME) 36*16kB (UME) 85*32kB (UME) 29*64kB (UME) 10*128kB (UME) 4*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3905320kB [ 133.831115][ T6370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.840934][ T6370] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.850447][ T6370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.860378][ T6370] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.871958][ T6370] 42774 total pagecache pages [ 133.918578][ T6370] 0 pages in swap cache [ 133.967982][ T6370] Free swap = 124996kB [ 134.019483][ T6370] Total swap = 124996kB [ 134.068885][ T6370] 2097051 pages RAM [ 134.122969][ T6370] 0 pages HighMem/MovableOnly [ 134.168484][ T6370] 424533 pages reserved [ 134.216326][ T6370] 0 pages cma reserved [ 134.621950][ T5918] usb 4-1: USB disconnect, device number 7 [ 134.953718][ T6410] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 134.995347][ T6410] netlink: 224 bytes leftover after parsing attributes in process `syz.3.150'. [ 135.899220][ T6422] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.128786][ T5871] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.525289][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 136.552678][ T5871] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 136.618810][ T5871] usb 2-1: config 0 has an invalid interface number: 112 but max is 0 [ 136.627176][ T5871] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 136.749034][ T5871] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 136.784304][ T5871] usb 2-1: config 0 has no interface number 0 [ 136.792808][ T5871] usb 2-1: config 0 has no interface number 1 [ 136.799667][ T5871] usb 2-1: config 0 has no interface number 2 [ 136.806173][ T5871] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.835421][ T5871] usb 2-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 136.860802][ T5871] usb 2-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 137.266712][ T5871] usb 2-1: config 0 interface 150 has no altsetting 0 [ 137.414577][ T5871] usb 2-1: config 0 interface 112 has no altsetting 0 [ 137.454094][ T5871] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 137.509117][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.563519][ T5871] usb 2-1: config 0 descriptor?? [ 139.173028][ T6449] xt_NFQUEUE: number of total queues is 0 [ 139.226628][ T5871] usb 2-1: string descriptor 0 read error: -71 [ 139.491681][ T6453] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.966732][ T5871] usb 2-1: USB disconnect, device number 10 [ 140.967204][ T6466] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 141.003816][ T6466] netlink: 224 bytes leftover after parsing attributes in process `syz.4.165'. [ 141.646329][ T6475] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.797334][ T6466] workqueue: Failed to create a rescuer kthread for wq "phy13-mac-cmds": -EINTR [ 144.296619][ T6488] delete_channel: no stack [ 144.953875][ T6504] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.688909][ T5871] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 147.245392][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.278553][ T5871] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 147.328683][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.644307][ T6528] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.139613][ T5871] usb 5-1: config 0 descriptor?? [ 148.169616][ T5871] option 5-1:0.0: GSM modem (1-port) converter detected [ 148.289005][ T6526] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 148.343594][ T6526] netlink: 224 bytes leftover after parsing attributes in process `syz.2.180'. [ 148.360344][ T6510] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.176'. [ 148.522804][ T10] usb 5-1: USB disconnect, device number 9 [ 148.558651][ T10] option 5-1:0.0: device disconnected [ 149.918792][ T6537] ubi: mtd0 is already attached to ubi31 [ 150.368586][ T6552] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.272282][ T6560] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.344503][ T6560] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.354186][ T6560] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.365017][ T6560] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.375054][ T6560] geneve2: entered promiscuous mode [ 151.385438][ T6560] geneve2: entered allmulticast mode [ 151.467069][ T6565] loop6: detected capacity change from 0 to 64 [ 151.538992][ T6567] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.911576][ T6570] overlay: Unknown parameter 'fscontext' [ 151.988095][ T6571] ======================================================= [ 151.988095][ T6571] WARNING: The mand mount option has been deprecated and [ 151.988095][ T6571] and is ignored by this kernel. Remove the mand [ 151.988095][ T6571] option from the mount to silence this warning. [ 151.988095][ T6571] ======================================================= [ 152.778589][ T6573] netlink: 324 bytes leftover after parsing attributes in process `syz.2.194'. [ 152.969493][ T6578] ubi: mtd0 is already attached to ubi31 [ 153.080328][ T6586] netlink: 140 bytes leftover after parsing attributes in process `syz.2.199'. [ 153.170318][ T5918] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.188236][ T5899] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 153.341684][ T6592] FAULT_INJECTION: forcing a failure. [ 153.341684][ T6592] name failslab, interval 1, probability 0, space 0, times 0 [ 153.355806][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.1.203 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 153.355834][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.355846][ T6592] Call Trace: [ 153.355854][ T6592] [ 153.355863][ T6592] dump_stack_lvl+0x189/0x250 [ 153.355902][ T6592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.355952][ T6592] should_fail_ex+0x414/0x560 [ 153.355984][ T6592] should_failslab+0xa8/0x100 [ 153.356010][ T6592] __kmalloc_noprof+0xcb/0x4f0 [ 153.356028][ T6592] ? kfree+0x4d/0x440 [ 153.356043][ T6592] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 153.356088][ T6592] tomoyo_realpath_from_path+0xe3/0x5d0 [ 153.356120][ T6592] ? tomoyo_domain+0xda/0x130 [ 153.356145][ T6592] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 153.356170][ T6592] tomoyo_path_number_perm+0x1e8/0x5a0 [ 153.356198][ T6592] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 153.356241][ T6592] ? __lock_acquire+0xab9/0xd20 [ 153.356284][ T6592] ? __fget_files+0x2a/0x420 [ 153.356309][ T6592] ? __fget_files+0x2a/0x420 [ 153.356330][ T6592] ? __fget_files+0x3a0/0x420 [ 153.356351][ T6592] ? __fget_files+0x2a/0x420 [ 153.356378][ T6592] security_file_ioctl+0xcb/0x2d0 [ 153.356407][ T6592] __se_sys_ioctl+0x47/0x170 [ 153.356441][ T6592] do_syscall_64+0xfa/0x3b0 [ 153.356468][ T6592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.356488][ T6592] ? asm_sysvec_call_function_single+0x1a/0x20 [ 153.356508][ T6592] ? clear_bhb_loop+0x60/0xb0 [ 153.356532][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.356551][ T6592] RIP: 0033:0x7f1c0678e969 [ 153.356570][ T6592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.356585][ T6592] RSP: 002b:00007f1c045f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.356606][ T6592] RAX: ffffffffffffffda RBX: 00007f1c069b6080 RCX: 00007f1c0678e969 [ 153.356620][ T6592] RDX: 0000200000000080 RSI: 00000000c0306201 RDI: 0000000000000009 [ 153.356632][ T6592] RBP: 00007f1c045f6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.356644][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.356655][ T6592] R13: 0000000000000000 R14: 00007f1c069b6080 R15: 00007fff5ca04bf8 [ 153.356684][ T6592] [ 153.357739][ T6592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.391137][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.623467][ T5918] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 153.634709][ T5899] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 153.643902][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.654062][ T5899] usb 5-1: Product: syz [ 153.658272][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.666425][ T5899] usb 5-1: Manufacturer: syz [ 153.671749][ T5899] usb 5-1: SerialNumber: syz [ 153.692364][ T5918] usb 1-1: config 0 descriptor?? [ 153.701732][ T5918] option 1-1:0.0: GSM modem (1-port) converter detected [ 153.711071][ T5899] usb 5-1: config 0 descriptor?? [ 154.141952][ T6579] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.197'. [ 154.353018][ T5899] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 154.380776][ T9] usb 1-1: USB disconnect, device number 4 [ 154.388820][ T5899] usb 5-1: Firmware version (0.0) predates our first public release. [ 154.396961][ T5899] usb 5-1: Please update to version 0.2 or newer [ 154.412322][ T9] option 1-1:0.0: device disconnected [ 154.936887][ T6610] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.146373][ T5899] usb 5-1: USB disconnect, device number 10 [ 155.389971][ T6600] delete_channel: no stack [ 155.712928][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 156.182483][ T6627] netlink: 140 bytes leftover after parsing attributes in process `syz.0.211'. [ 156.472062][ T6629] fuse: Bad value for 'group_id' [ 156.494640][ T6629] fuse: Bad value for 'group_id' [ 156.998610][ T5918] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 157.227513][ T5899] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.371722][ T6644] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.418282][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 157.450984][ T5899] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 157.527915][ T5918] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 157.561209][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.622952][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.652899][ T5899] usb 3-1: Product: syz [ 157.702713][ T5899] usb 3-1: Manufacturer: syz [ 157.750408][ T5899] usb 3-1: SerialNumber: syz [ 157.764712][ T5918] usb 2-1: Product: syz [ 157.807841][ T5918] usb 2-1: Manufacturer: syz [ 157.993104][ T5899] usb 3-1: config 0 descriptor?? [ 157.999051][ T5918] usb 2-1: SerialNumber: syz [ 158.010021][ T5918] usb 2-1: config 0 descriptor?? [ 158.061002][ T6651] netlink: 100 bytes leftover after parsing attributes in process `syz.4.220'. [ 158.218592][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 158.777462][ T5899] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 158.793485][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.797903][ T5899] usb 3-1: Firmware version (0.0) predates our first public release. [ 158.813467][ T5899] usb 3-1: Please update to version 0.2 or newer [ 158.816276][ T10] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 158.826537][ T6634] tmpfs: Unknown parameter 'grpquota_block_hardlimiv' [ 158.845916][ T6634] netlink: 'syz.1.214': attribute type 64 has an invalid length. [ 158.866581][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.911436][ T6634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.214'. [ 158.949649][ T10] usb 1-1: config 0 descriptor?? [ 158.981720][ T10] option 1-1:0.0: GSM modem (1-port) converter detected [ 159.084220][ T5899] usb 3-1: USB disconnect, device number 6 [ 159.184903][ T6646] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.219'. [ 159.317436][ T5917] usb 1-1: USB disconnect, device number 5 [ 159.354153][ T5917] option 1-1:0.0: device disconnected [ 159.426782][ T6665] fuse: Bad value for 'group_id' [ 159.433188][ T6665] fuse: Bad value for 'group_id' [ 159.505321][ T6667] fuse: Bad value for 'group_id' [ 159.512782][ T6667] fuse: Bad value for 'group_id' [ 159.521591][ T6667] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.639051][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.817061][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 159.830828][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.857795][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 159.882658][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.228'. [ 159.892015][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 159.908927][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.228'. [ 159.926824][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 159.942396][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.966745][ T10] usb 5-1: Product: syz [ 159.977772][ T10] usb 5-1: Manufacturer: syz [ 159.994875][ T10] usb 5-1: SerialNumber: syz [ 160.019651][ T10] usb 5-1: config 0 descriptor?? [ 160.041840][ T10] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 160.052799][ T10] gspca_stv06xx: st6422 sensor detected [ 160.738656][ T10] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 160.748180][ T6681] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.770937][ T10] usb 5-1: USB disconnect, device number 11 [ 160.833699][ T6683] tmpfs: Unknown parameter 'grpquota_inode' [ 160.887248][ T6683] 9pnet_fd: Insufficient options for proto=fd [ 161.401495][ T6692] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.082060][ T6697] fuse: Bad value for 'group_id' [ 162.087124][ T6697] fuse: Bad value for 'group_id' [ 163.031090][ T6707] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 163.037684][ T6707] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.125433][ T6707] vhci_hcd vhci_hcd.0: Device attached [ 163.137330][ T5918] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 163.238933][ T6709] binder: 6706:6709 ioctl c00c620f 2000000001c0 returned -22 [ 163.398199][ T5871] vhci_hcd: vhci_device speed not set [ 164.273847][ T6710] vhci_hcd: connection closed [ 164.274744][ T5871] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 164.311539][ T1161] vhci_hcd: stop threads [ 164.315874][ T1161] vhci_hcd: release socket [ 164.321934][ T1161] vhci_hcd: disconnect device [ 164.912688][ T6737] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.560987][ T6745] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 166.560987][ T6745] The task syz.4.245 (6745) triggered the difference, watch for misbehavior. [ 166.606558][ T6745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.245'. [ 167.008109][ T6760] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.849178][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.978501][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.987379][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.046259][ T6768] netlink: 64 bytes leftover after parsing attributes in process `syz.0.252'. [ 168.079085][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 168.108586][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.116646][ T9] usb 3-1: Product: syz [ 168.121127][ T9] usb 3-1: Manufacturer: syz [ 168.125757][ T9] usb 3-1: SerialNumber: syz [ 168.169539][ T9] usb 3-1: config 0 descriptor?? [ 168.710197][ T9] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 168.905648][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 168.920402][ T9] usb 3-1: Please update to version 0.2 or newer [ 169.584269][ T6782] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.040175][ T5871] vhci_hcd: vhci_device speed not set [ 170.074790][ T9] usb 3-1: USB disconnect, device number 7 [ 171.070054][ T6800] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.604895][ T6801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.261'. [ 172.328553][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.516244][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 172.750342][ T5918] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 172.819098][ T9] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 172.827159][ T9] usb 1-1: Product: syz [ 172.832121][ T9] usb 1-1: SerialNumber: syz [ 172.849872][ T9] usb 1-1: config 0 descriptor?? [ 172.928533][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 172.992283][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.058918][ T6821] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.386374][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 173.386865][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 173.519280][ T5918] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 173.519388][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.519706][ T5918] usb 4-1: Product: syz [ 173.520534][ T5918] usb 4-1: Manufacturer: syz [ 173.521422][ T5918] usb 4-1: SerialNumber: syz [ 173.634283][ T5918] usb 4-1: config 0 descriptor?? [ 173.644890][ T5918] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 173.644978][ T5918] gspca_stv06xx: st6422 sensor detected [ 173.675825][ T9] hso 1-1:0.0: Failed to find BULK IN ep [ 173.905261][ T5918] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 173.915223][ T5918] usb 4-1: USB disconnect, device number 8 [ 173.977305][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.977746][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.688610][ T5918] usb 1-1: USB disconnect, device number 6 [ 175.060759][ T6843] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.914769][ T6849] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 175.921370][ T6849] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 176.038636][ T6849] vhci_hcd vhci_hcd.0: Device attached [ 176.102589][ T6855] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 176.158715][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'. [ 176.179464][ T6857] xt_NFQUEUE: number of total queues is 0 [ 176.224662][ T10] vhci_hcd: vhci_device speed not set [ 176.230489][ T6851] usbip_core: unknown command [ 176.247110][ T6858] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.250582][ T6851] vhci_hcd: unknown pdu 3594899866 [ 176.266206][ T6851] usbip_core: unknown command [ 176.272821][ T5933] vhci_hcd: stop threads [ 176.278280][ T5933] vhci_hcd: release socket [ 176.285727][ T5933] vhci_hcd: disconnect device [ 176.318494][ T10] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 176.341438][ T10] usb 39-1: enqueue for inactive port 0 [ 176.418489][ T6860] binder: 6847:6860 ioctl c00c620f 2000000001c0 returned -22 [ 176.456304][ T10] vhci_hcd: vhci_device speed not set [ 178.412556][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 178.513234][ T6880] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.540593][ T6878] FAULT_INJECTION: forcing a failure. [ 178.540593][ T6878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.553729][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.3.285 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 178.553749][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.553758][ T6878] Call Trace: [ 178.553764][ T6878] [ 178.553771][ T6878] dump_stack_lvl+0x189/0x250 [ 178.553799][ T6878] ? __pfx____ratelimit+0x10/0x10 [ 178.553824][ T6878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.553853][ T6878] ? __pfx__printk+0x10/0x10 [ 178.553886][ T6878] should_fail_ex+0x414/0x560 [ 178.553918][ T6878] strncpy_from_user+0x36/0x290 [ 178.553947][ T6878] getname_flags+0xf3/0x540 [ 178.553972][ T6878] ? _copy_from_user+0x94/0xb0 [ 178.553995][ T6878] user_path_at+0x24/0x60 [ 178.554025][ T6878] __se_sys_mount+0x2d3/0x410 [ 178.554056][ T6878] ? __pfx___se_sys_mount+0x10/0x10 [ 178.554077][ T6878] ? rcu_is_watching+0x15/0xb0 [ 178.554109][ T6878] ? do_syscall_64+0xbe/0x3b0 [ 178.554132][ T6878] ? __x64_sys_mount+0x20/0xc0 [ 178.554158][ T6878] do_syscall_64+0xfa/0x3b0 [ 178.554182][ T6878] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.554205][ T6878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.554225][ T6878] ? clear_bhb_loop+0x60/0xb0 [ 178.554250][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.554269][ T6878] RIP: 0033:0x7f8cf9f8e969 [ 178.554288][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.554305][ T6878] RSP: 002b:00007f8cfaeb3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.554325][ T6878] RAX: ffffffffffffffda RBX: 00007f8cfa1b5fa0 RCX: 00007f8cf9f8e969 [ 178.554340][ T6878] RDX: 0000200000000380 RSI: 00002000000000c0 RDI: 0000200000000000 [ 178.554354][ T6878] RBP: 00007f8cfaeb3090 R08: 0000000000000000 R09: 0000000000000000 [ 178.554366][ T6878] R10: 0000000000018642 R11: 0000000000000246 R12: 0000000000000001 [ 178.554378][ T6878] R13: 0000000000000000 R14: 00007f8cfa1b5fa0 R15: 00007fffb2884e48 [ 178.554411][ T6878] [ 178.819378][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 178.829385][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.837404][ T9] usb 1-1: Product: syz [ 178.841700][ T9] usb 1-1: Manufacturer: syz [ 178.846316][ T9] usb 1-1: SerialNumber: syz [ 178.853933][ T9] usb 1-1: config 0 descriptor?? [ 179.408939][ T9] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 179.417098][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 179.450692][ T9] usb 1-1: Please update to version 0.2 or newer [ 179.648534][ T5883] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.703471][ T9] usb 1-1: USB disconnect, device number 7 [ 179.828562][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 179.843374][ T5883] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 179.887444][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.927505][ T5883] usb 3-1: Product: syz [ 179.943049][ T5883] usb 3-1: Manufacturer: syz [ 179.962491][ T5883] usb 3-1: SerialNumber: syz [ 179.972728][ T6897] xt_NFQUEUE: number of total queues is 0 [ 180.047813][ T6899] FAULT_INJECTION: forcing a failure. [ 180.047813][ T6899] name failslab, interval 1, probability 0, space 0, times 0 [ 180.062930][ T5883] usb 3-1: config 0 descriptor?? [ 180.090916][ T5883] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 180.168137][ T6899] CPU: 0 UID: 0 PID: 6899 Comm: syz.4.291 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 180.168169][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.168181][ T6899] Call Trace: [ 180.168190][ T6899] [ 180.168200][ T6899] dump_stack_lvl+0x189/0x250 [ 180.168253][ T6899] ? __pfx____ratelimit+0x10/0x10 [ 180.168278][ T6899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.168312][ T6899] ? __pfx__printk+0x10/0x10 [ 180.168338][ T6899] ? __pfx___might_resched+0x10/0x10 [ 180.168368][ T6899] should_fail_ex+0x414/0x560 [ 180.168400][ T6899] should_failslab+0xa8/0x100 [ 180.168425][ T6899] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 180.168448][ T6899] ? __alloc_skb+0x112/0x2d0 [ 180.168481][ T6899] __alloc_skb+0x112/0x2d0 [ 180.168516][ T6899] netlink_sendmsg+0x5c6/0xb30 [ 180.168557][ T6899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.168593][ T6899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.168613][ T6899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.168645][ T6899] __sock_sendmsg+0x219/0x270 [ 180.168675][ T6899] ____sys_sendmsg+0x505/0x830 [ 180.168701][ T6899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.168732][ T6899] ? import_iovec+0x74/0xa0 [ 180.168757][ T6899] ___sys_sendmsg+0x21f/0x2a0 [ 180.168780][ T6899] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.168841][ T6899] ? __fget_files+0x2a/0x420 [ 180.168864][ T6899] ? __fget_files+0x3a0/0x420 [ 180.168899][ T6899] __x64_sys_sendmsg+0x19b/0x260 [ 180.168922][ T6899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.168954][ T6899] ? __pfx_ksys_write+0x10/0x10 [ 180.168971][ T6899] ? rcu_is_watching+0x15/0xb0 [ 180.169002][ T6899] ? do_syscall_64+0xbe/0x3b0 [ 180.169032][ T6899] do_syscall_64+0xfa/0x3b0 [ 180.169056][ T6899] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.169080][ T6899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.169100][ T6899] ? clear_bhb_loop+0x60/0xb0 [ 180.169125][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.169144][ T6899] RIP: 0033:0x7f17ae78e969 [ 180.169170][ T6899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.169187][ T6899] RSP: 002b:00007f17ac5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.169212][ T6899] RAX: ffffffffffffffda RBX: 00007f17ae9b5fa0 RCX: 00007f17ae78e969 [ 180.169227][ T6899] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 180.169247][ T6899] RBP: 00007f17ac5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 180.169259][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.169271][ T6899] R13: 0000000000000000 R14: 00007f17ae9b5fa0 R15: 00007ffd3d281a48 [ 180.169304][ T6899] [ 180.318473][ T5883] usb 3-1: setting power ON [ 180.546852][ T6904] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.863405][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 180.880857][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.891150][ T5883] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 180.913738][ T5883] usb 3-1: media controller created [ 181.090057][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.198445][ T5918] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 181.719573][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.731541][ T5883] usb 3-1: selecting invalid altsetting 6 [ 181.962929][ T5883] usb 3-1: digital interface selection failed (-22) [ 181.977573][ T5918] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 182.018488][ T5883] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 182.041089][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.054706][ T5883] usb 3-1: setting power OFF [ 182.071513][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 182.077565][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 182.196953][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.279410][ T5918] usb 5-1: config 0 descriptor?? [ 182.382851][ T5883] (NULL device *): no alternate interface [ 182.603477][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.614946][ T5918] option 5-1:0.0: GSM modem (1-port) converter detected [ 182.722538][ T6923] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.729039][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.299'. [ 182.800853][ T6911] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.295'. [ 182.827415][ T6927] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 182.844904][ T6928] sctp: [Deprecated]: syz.2.299 (pid 6928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.844904][ T6928] Use struct sctp_sack_info instead [ 182.854355][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 182.862617][ T6927] syzkaller1: linktype set to 32 [ 182.908201][ T5883] usb 3-1: USB disconnect, device number 8 [ 183.148673][ T10] usb 5-1: USB disconnect, device number 12 [ 183.185063][ T10] option 5-1:0.0: device disconnected [ 183.405777][ T6936] xt_NFQUEUE: number of total queues is 0 [ 183.808613][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.994762][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 184.012683][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.041141][ T9] usb 1-1: Product: syz [ 184.055327][ T9] usb 1-1: Manufacturer: syz [ 184.081576][ T9] usb 1-1: SerialNumber: syz [ 184.113343][ T9] usb 1-1: config 0 descriptor?? [ 184.307237][ T6948] vlan3: entered promiscuous mode [ 184.321119][ T6948] vlan2: entered promiscuous mode [ 184.370664][ T6948] gretap0: entered promiscuous mode [ 184.548502][ T9] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 184.591020][ T6953] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.606794][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 184.668496][ T9] usb 1-1: Please update to version 0.2 or newer [ 184.808728][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 184.829460][ T9] usb 1-1: USB disconnect, device number 8 [ 184.956840][ T6955] smc: net device bond0 applied user defined pnetid S [ 185.003479][ T6960] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 185.023212][ T6960] netlink: 224 bytes leftover after parsing attributes in process `syz.4.309'. [ 185.929340][ T6976] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.701423][ T6978] process 'syz.0.312' launched './file0' with NULL argv: empty string added [ 186.786805][ T6978] affs: No valid root block on device nbd0 [ 187.804451][ T5825] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 187.813447][ T5825] Bluetooth: hci1: Injecting HCI hardware error event [ 187.823011][ T5825] Bluetooth: hci1: hardware error 0x00 [ 187.940515][ T6987] input: syz1 as /devices/virtual/input/input6 [ 188.708434][ T5875] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 188.918444][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 188.938852][ T5875] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.964777][ T5875] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 189.028394][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.035111][ T5875] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 189.061107][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.096680][ T5875] usb 1-1: config 0 descriptor?? [ 189.248939][ T5918] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 189.429234][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 189.447023][ T5918] usb 4-1: config 64 has an invalid interface number: 241 but max is 1 [ 189.478546][ T5918] usb 4-1: config 64 has an invalid interface number: 186 but max is 1 [ 189.486868][ T5918] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 189.709910][ T5918] usb 4-1: config 64 has no interface number 0 [ 189.716703][ T5918] usb 4-1: config 64 has no interface number 1 [ 189.723030][ T5918] usb 4-1: config 64 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.744461][ T5875] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x1 [ 189.744511][ T5918] usb 4-1: config 64 interface 241 has no altsetting 0 [ 189.761293][ T5918] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 189.772681][ T5875] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x3 [ 189.868587][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.962717][ T7009] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.980041][ T5825] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 190.448064][ T5875] corsair-cpro 0003:1B1C:0C10.0003: item fetching failed at offset 3/5 [ 190.453398][ T5918] usb 4-1: Product: syz [ 190.473679][ T5918] usb 4-1: Manufacturer: syz [ 190.481339][ T5918] usb 4-1: SerialNumber: syz [ 190.509771][ T5918] go7007 4-1:64.241: probe with driver go7007 failed with error -12 [ 190.522053][ T5918] go7007 4-1:64.186: probe with driver go7007 failed with error -12 [ 190.522519][ T5875] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -22 [ 190.585141][ T5875] usb 1-1: USB disconnect, device number 9 [ 190.856975][ T5875] usb 4-1: USB disconnect, device number 9 [ 190.970307][ T7013] input: syz0 as /devices/virtual/input/input7 [ 192.874802][ T7025] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.399357][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.405819][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.375805][ T7047] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.626553][ T7058] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 197.668470][ T7058] netlink: 224 bytes leftover after parsing attributes in process `syz.1.337'. [ 197.688789][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 197.868877][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 197.892734][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 197.921342][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 197.949305][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 197.974254][ T9] usb 4-1: config 1 has no interface number 0 [ 198.005843][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.033128][ T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 198.073572][ T30] audit: type=1326 audit(1748889989.085:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7066 comm="syz.1.339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c0678e969 code=0x0 [ 198.147407][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 198.186307][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.338124][ T7074] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.865699][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.869859][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 198.901844][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.918442][ T7077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.927325][ T7077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.028515][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 200.382710][ T9] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 200.676934][ T24] usb 4-1: USB disconnect, device number 10 [ 200.725512][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 201.468356][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 201.670738][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.698127][ T24] usb 4-1: config 0 has no interface number 0 [ 201.721821][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 201.750239][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.776345][ T24] usb 4-1: Product: syz [ 201.795576][ T24] usb 4-1: Manufacturer: syz [ 201.810321][ T24] usb 4-1: SerialNumber: syz [ 201.836534][ T24] usb 4-1: config 0 descriptor?? [ 202.089550][ T24] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 202.165561][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 202.213810][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 202.233729][ T24] usb 4-1: media controller created [ 202.277808][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.603952][ T9] usb 4-1: USB disconnect, device number 11 [ 202.697172][ T7128] tipc: Started in network mode [ 202.704775][ T7128] tipc: Node identity 2, cluster identity 4711 [ 202.716479][ T7128] tipc: Node number set to 2 [ 203.184871][ T7131] input: syz0 as /devices/virtual/input/input8 [ 203.350230][ T7140] trusted_key: encrypted_key: key user:syz not found [ 205.526972][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.599493][ T7158] pimreg: entered allmulticast mode [ 205.640373][ T7158] pimreg: left allmulticast mode [ 205.698060][ T7161] netlink: 'syz.0.369': attribute type 1 has an invalid length. [ 205.758947][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 205.790102][ T5871] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.872444][ T7161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.028354][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 206.316651][ T5871] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 206.460005][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.492626][ T5871] usb 4-1: config 0 descriptor?? [ 206.719465][ T5871] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 206.736932][ T7164] bond1 (unregistering): Released all slaves [ 206.744891][ T7174] mmap: syz.2.371 (7174) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 206.745125][ T5871] asix 4-1:0.0: probe with driver asix failed with error -32 [ 207.679757][ T7200] netlink: 'syz.4.383': attribute type 1 has an invalid length. [ 207.687832][ T7200] netlink: 224 bytes leftover after parsing attributes in process `syz.4.383'. [ 209.042077][ T5871] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 209.189653][ T5918] usb 4-1: USB disconnect, device number 12 [ 209.228570][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 209.242365][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.266614][ T5871] usb 1-1: config 0 has no interface number 0 [ 209.276049][ T5871] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.309464][ T5871] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 209.327753][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.366936][ T5871] usb 1-1: Product: syz [ 209.371685][ T5871] usb 1-1: Manufacturer: syz [ 209.376310][ T5871] usb 1-1: SerialNumber: syz [ 209.397523][ T5871] usb 1-1: config 0 descriptor?? [ 209.448824][ T5871] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.576596][ T7219] fuse: Unknown parameter 'group_i00000000000000000000' [ 209.604589][ T5871] snd-usb-audio 1-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 209.832738][ T6287] udevd[6287]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.963672][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.386'. [ 210.533021][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 210.574626][ T7229] xt_NFQUEUE: number of total queues is 0 [ 210.745593][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.804866][ T10] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 210.853127][ T5917] usb 1-1: USB disconnect, device number 10 [ 210.855143][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.883976][ T10] usb 3-1: config 0 descriptor?? [ 210.899394][ T10] option 3-1:0.0: GSM modem (1-port) converter detected [ 211.674617][ T5871] usb 3-1: USB disconnect, device number 9 [ 211.703875][ T5871] option 3-1:0.0: device disconnected [ 211.741984][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 211.750430][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 211.750480][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 211.757754][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 211.779976][ T7242] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 211.786553][ T7242] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.795019][ T7247] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 211.830851][ T7242] vhci_hcd vhci_hcd.0: Device attached [ 211.885650][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 211.969405][ T7244] usbip_core: unknown command [ 211.988382][ T7244] vhci_hcd: unknown pdu 3594899866 [ 211.993576][ T7244] usbip_core: unknown command [ 212.012184][ T5917] vhci_hcd: vhci_device speed not set [ 212.030533][ T59] vhci_hcd: stop threads [ 212.034852][ T59] vhci_hcd: release socket [ 212.053324][ T59] vhci_hcd: disconnect device [ 212.098717][ T5917] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 212.108139][ T5917] usb 39-1: enqueue for inactive port 0 [ 212.218592][ T5917] vhci_hcd: vhci_device speed not set [ 212.808570][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 212.847347][ T7264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.401'. [ 212.968421][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 212.975529][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 212.986975][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 212.997459][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 213.061303][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 213.978515][ T10] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 214.052614][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.093056][ T10] usb 3-1: Product: syz [ 214.112792][ T10] usb 3-1: Manufacturer: syz [ 214.122579][ T10] usb 3-1: SerialNumber: syz [ 214.137714][ T10] usb 3-1: config 0 descriptor?? [ 214.168726][ T10] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 214.193876][ T10] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 219.118908][ T9] usb 3-1: USB disconnect, device number 10 [ 219.199651][ T9] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 219.218999][ T9] omninet 3-1:0.0: device disconnected [ 220.061780][ T7295] netlink: 'syz.0.412': attribute type 10 has an invalid length. [ 221.119300][ T7300] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.568635][ T5871] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 222.598111][ T7316] xt_NFQUEUE: number of total queues is 0 [ 222.993044][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.299364][ T7319] ubi: mtd0 is already attached to ubi31 [ 223.348479][ T5871] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 223.373094][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.398427][ T5871] usb 1-1: Product: syz [ 223.450836][ T5871] usb 1-1: Manufacturer: syz [ 223.909096][ T5871] usb 1-1: SerialNumber: syz [ 223.931629][ T5871] usb 1-1: config 0 descriptor?? [ 224.020111][ T5917] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 224.443004][ T5871] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 224.558028][ T5871] usb 1-1: Firmware version (0.0) predates our first public release. [ 224.566253][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 224.713895][ T5917] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 185, changing to 11 [ 224.742732][ T5871] usb 1-1: Please update to version 0.2 or newer [ 224.839502][ T5871] usb 1-1: Firmware: build c [ 225.252492][ T5917] usb 5-1: config 1 interface 0 has no altsetting 0 [ 225.261920][ T5917] usb 5-1: New USB device found, idVendor=18d1, idProduct=502d, bcdDevice= 0.40 [ 225.271239][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.279437][ T5917] usb 5-1: Product: 匤꧲㜪凹쪄趚펗ےྋ؃嚋蹯覩㤕蹋ꦛ繻ং呬酖䖦摆쓍蘓痳쮙縲栣食屪爻⌻蔅뼪쯜已钪꺌㌆욼ꥴ嗏ﰥ曪贼鷧✓ [ 225.296334][ T5917] usb 5-1: Manufacturer: 㐁 [ 225.301108][ T5917] usb 5-1: SerialNumber: 鐜翝琓팸죖摞ᱝ쿮爝澳㌛നಶ┤셹஧⛢萝츢㰰ම髏剫꘠俺喎띲톰㨘䂚哠潴వ̺硱麟﫰⴨థ폅墀끍㚝ꥋꈝ멣ꯏꔩ錺Ꭰ롵捐툴⡨䆪饉ⴏศ㹬理퀠∲뵦ᒝ쌣鐙⶘䥵쒝䉝눯圭἟。컷⏀笤꺚Ҷ鶚悘䣡 [ 225.393149][ T5871] usb 1-1: USB disconnect, device number 11 [ 226.509442][ T5917] usbhid 5-1:1.0: can't add hid device: -71 [ 226.515538][ T5917] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 226.559671][ T5917] usb 5-1: USB disconnect, device number 13 [ 226.925586][ T7353] netlink: 'syz.0.426': attribute type 10 has an invalid length. [ 229.553711][ T7359] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.968965][ T7365] xt_NFQUEUE: number of total queues is 0 [ 233.708934][ T980] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 235.023167][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 235.098896][ T980] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.114212][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.351761][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.434456][ T980] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.630254][ T980] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.668506][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.249096][ T7400] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 236.255703][ T7400] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.325095][ T7400] vhci_hcd vhci_hcd.0: Device attached [ 236.367534][ T7403] netlink: 'syz.4.440': attribute type 1 has an invalid length. [ 236.377383][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.440'. [ 236.403857][ T980] usb 1-1: usb_control_msg returned -71 [ 236.409876][ T980] usbtmc 1-1:16.0: can't read capabilities [ 236.423751][ T7401] usbip_core: unknown command [ 236.468116][ T7401] vhci_hcd: unknown pdu 3594899866 [ 236.509177][ T10] vhci_hcd: vhci_device speed not set [ 236.524771][ T980] usb 1-1: USB disconnect, device number 12 [ 236.531877][ T7401] usbip_core: unknown command [ 236.558848][ T59] vhci_hcd: stop threads [ 236.563156][ T59] vhci_hcd: release socket [ 236.589475][ T10] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 236.608488][ T59] vhci_hcd: disconnect device [ 236.633254][ T10] usb 41-1: enqueue for inactive port 0 [ 236.740178][ T10] vhci_hcd: vhci_device speed not set [ 240.043318][ T7441] Malformed UNC in devname [ 240.043318][ T7441] [ 240.050548][ T7441] CIFS: VFS: Malformed UNC in devname [ 240.118687][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 240.268419][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 240.306569][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 240.332214][ T10] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 240.345307][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.372542][ T10] usb 5-1: Product: syz [ 240.414506][ T10] usb 5-1: Manufacturer: syz [ 240.437678][ T10] usb 5-1: SerialNumber: syz [ 240.485205][ T10] usb 5-1: config 0 descriptor?? [ 240.532939][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 240.580830][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 240.711244][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 240.783552][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.820395][ T10] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 240.917238][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.030863][ T10] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 241.465963][ T10] usb 5-1: USB disconnect, device number 14 [ 245.681205][ T7473] xt_NFQUEUE: number of total queues is 0 [ 246.152174][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.229744][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.258761][ T7479] input: syz1 as /devices/virtual/input/input10 [ 254.063574][ T7541] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 254.087776][ T7541] netlink: 224 bytes leftover after parsing attributes in process `syz.2.484'. [ 254.210319][ T5871] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 254.508391][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 254.529255][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.589403][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.610828][ T7548] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.647539][ T5871] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 254.672997][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.695308][ T5871] usb 1-1: config 0 descriptor?? [ 255.150635][ T5871] saitek 0003:06A3:0CCB.0004: unknown main item tag 0x0 [ 255.206229][ T5871] saitek 0003:06A3:0CCB.0004: hidraw0: USB HID v0.00 Device [HID 06a3:0ccb] on usb-dummy_hcd.0-1/input0 [ 255.339692][ T5899] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 255.495443][ T5825] Bluetooth: hci0: unexpected event for opcode 0x0007 [ 255.538493][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 255.539711][ T5825] Bluetooth: hci0: unexpected event for opcode 0x0003 [ 255.546282][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.868144][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.874509][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.472909][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 256.485212][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 256.531934][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 256.559799][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.578816][ T5899] usb 3-1: Product: syz [ 256.603857][ T5899] usb 3-1: Manufacturer: syz [ 256.628412][ T5899] usb 3-1: SerialNumber: syz [ 256.674740][ T5899] usb 3-1: config 0 descriptor?? [ 256.764780][ T5899] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 256.791807][ T5899] gspca_stv06xx: st6422 sensor detected [ 257.760320][ T5871] usb 1-1: USB disconnect, device number 13 [ 257.837153][ T5899] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 257.948775][ T5899] usb 3-1: USB disconnect, device number 11 [ 258.512509][ T5826] non-paged memory [ 258.517205][ T5826] list_del corruption, ffff888031c57080->next is LIST_POISON1 (dead000000000100) [ 258.527194][ T5826] ------------[ cut here ]------------ [ 258.532829][ T5826] kernel BUG at lib/list_debug.c:58! [ 258.567213][ T5826] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 258.573523][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: kworker/u9:4 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 258.585336][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.595420][ T5826] Workqueue: hci4 hci_conn_timeout [ 258.600558][ T5826] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 258.607598][ T5826] Code: 00 9f e1 8b 48 89 de e8 10 8b 68 fc 90 0f 0b 4c 89 e7 e8 25 01 42 fd 48 c7 c7 60 9f e1 8b 48 89 de 4c 89 e2 e8 f3 8a 68 fc 90 <0f> 0b 4c 89 e7 e8 08 01 42 fd 48 c7 c7 c0 9f e1 8b 48 89 de 4c 89 [ 258.627218][ T5826] RSP: 0018:ffffc900049ef980 EFLAGS: 00010246 [ 258.633297][ T5826] RAX: 000000000000004e RBX: ffff888031c57080 RCX: 370f9efb87489a00 [ 258.641274][ T5826] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 258.649248][ T5826] RBP: ffffffff8a6c9920 R08: 0000000000000003 R09: 0000000000000004 [ 258.657226][ T5826] R10: dffffc0000000000 R11: fffffbfff1bfa644 R12: dead000000000100 [ 258.665204][ T5826] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 258.673354][ T5826] FS: 0000000000000000(0000) GS:ffff888125d95000(0000) knlGS:0000000000000000 [ 258.682291][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.688875][ T5826] CR2: 0000200000001000 CR3: 0000000032198000 CR4: 00000000003526f0 [ 258.696859][ T5826] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 258.704840][ T5826] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.712862][ T5826] Call Trace: [ 258.716146][ T5826] [ 258.719084][ T5826] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 258.724732][ T5826] hci_cancel_connect_sync+0xc8/0x120 [ 258.730110][ T5826] hci_abort_conn+0x191/0x330 [ 258.734797][ T5826] ? process_scheduled_works+0x9ef/0x17b0 [ 258.740536][ T5826] process_scheduled_works+0xae1/0x17b0 [ 258.746100][ T5826] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.752091][ T5826] worker_thread+0x8a0/0xda0 [ 258.756701][ T5826] kthread+0x711/0x8a0 [ 258.760783][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 258.765901][ T5826] ? __pfx_kthread+0x10/0x10 [ 258.770506][ T5826] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.775708][ T5826] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.780912][ T5826] ? __pfx_kthread+0x10/0x10 [ 258.785604][ T5826] ret_from_fork+0x3fc/0x770 [ 258.790200][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 258.795325][ T5826] ? __switch_to_asm+0x39/0x70 [ 258.800104][ T5826] ? __switch_to_asm+0x33/0x70 [ 258.804875][ T5826] ? __pfx_kthread+0x10/0x10 [ 258.809482][ T5826] ret_from_fork_asm+0x1a/0x30 [ 258.814256][ T5826] [ 258.817275][ T5826] Modules linked in: [ 258.823683][ T5826] ---[ end trace 0000000000000000 ]--- [ 259.091190][ T5826] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 259.098899][ T5826] Code: 00 9f e1 8b 48 89 de e8 10 8b 68 fc 90 0f 0b 4c 89 e7 e8 25 01 42 fd 48 c7 c7 60 9f e1 8b 48 89 de 4c 89 e2 e8 f3 8a 68 fc 90 <0f> 0b 4c 89 e7 e8 08 01 42 fd 48 c7 c7 c0 9f e1 8b 48 89 de 4c 89 [ 259.121309][ T5826] RSP: 0018:ffffc900049ef980 EFLAGS: 00010246 [ 259.127728][ T5826] RAX: 000000000000004e RBX: ffff888031c57080 RCX: 370f9efb87489a00 [ 259.136625][ T5826] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 259.145948][ T5826] RBP: ffffffff8a6c9920 R08: 0000000000000003 R09: 0000000000000004 [ 259.154724][ T5826] R10: dffffc0000000000 R11: fffffbfff1bfa644 R12: dead000000000100 [ 259.164930][ T5826] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 259.174294][ T5826] FS: 0000000000000000(0000) GS:ffff888125c95000(0000) knlGS:0000000000000000 [ 259.183683][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.190968][ T5826] CR2: 00007f17ae97e678 CR3: 000000003399a000 CR4: 00000000003526f0 [ 259.202618][ T5826] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 259.211345][ T5826] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.219816][ T5826] Kernel panic - not syncing: Fatal exception [ 259.226089][ T5826] Kernel Offset: disabled [ 259.230415][ T5826] Rebooting in 86400 seconds..