last executing test programs: 6m33.954771368s ago: executing program 1 (id=599): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x3}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e20, 0x0, @mcast1}, 0x3, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b0050000366353fcf3f37f39845df70000001c6f1bd57bf53006315f789703b058f3b77494f5c49a0d8f8633422f7a7e584e3db835a67658edeb3b5d05897af6b49b3cea76586441d5a8e9c69252b5f838c9a8a742b51e8dde0b7fab15d9dd10bda0e84e52f100b181cba3b6071acdece750f57dd4d1881baaba32e3b89f2e490ed510d9ce68cc1240960e29ab78f6f8fc4cbab028719e0ab8ce64352b35265f87699a9c7cbdb4c623219cf5b098f6cb294636835240ccb5f957eac443094a6c7d1e22e074a1cbd8636ea26352ae0256a80f1764b43d52b021177490b491f3841a40bed1720d498725e5efbcc0a743107f6a93f9ad2dfb3d1c31218177667a6dbd30ca9cb680ec77cfe715d3d4"], 0x5b0}, 0x20000841) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000cc0)="dc63bf6dd1e51951e6c2c0e12dcc83e51e3487b2573824baf2498cf6eafde1b2419930549160be4e977491e27b48f0ef5d38b15fcee520f5361440b15159cbb533d70a34e29e0d591a2a278e3fb95505161c34da41f60e4209628697002a9f8c5240240f704eb05f0f0a6fd6f66fa5875a644d3e925dc905da4095ddbda763449928cb99c93663f960d92715f1fe6306b24a13e8761261de7e4e0f41d4512691b937f1e815bcc79c950896a771", 0xad}], 0x1) 6m32.953980243s ago: executing program 1 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="1c00000014006b030031a608299fb84210947e3d11629a41300c000a", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @empty, 0x4e20, 0x3, 'nq\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xae8, 0x863, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 6m32.560176983s ago: executing program 1 (id=604): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="8a9e40b660ba94eeb5be1d22c3fbc12235f1aef6e35d3b966adf2defc0e0166b2865d0621b329717a1cad269970c12339fb489dae6050a014c23b66166599be45c36ddb65a9db3d782b43f637bb067746e32e1cfbab598eb66140aeeb0c4f7d48a7ced8b0be683b0bbee2d2c29222791077f13db9f34f4b8db4eb082c46fd2ca45a696512c66813542f82ba2681c1c4ecba0376d18edc81b9362b25ce1f7d9e75e0e958e9cd434184b30a5415bdfe69af0704bc7137e9a6cc717180d7754d8d43983c730c840428207e08e7833", @ANYRES16], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0xfffffe61, &(0x7f0000000400)}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4c7, &(0x7f0000001340)="$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") chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f00000000c0)={0x70, 0xa, 0x3, 0x9}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r8, 0x0, 0x6, 0xa) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="339deccff46fb7f149d096ca1100000004000000040000002ef061120000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700), 0x12}, 0x20) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f00000002c0)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x6, 0x12) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 6m32.152108873s ago: executing program 1 (id=607): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x9, 0x10, 0x81, 0x3, 0x3, 0x2, 0x40, 0x12, 0x8d, 0x5, 0x4, 0x7, 0x6}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x277}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f", 0x16e}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYBLOB="010000000000000024001280090001"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 6m31.919090208s ago: executing program 1 (id=608): syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) mq_open(&(0x7f0000000340)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\x01\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960x0, 0x38, &(0x7f0000001a00)=[@in6={0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r6, 0x1, 0xfffb, 0x7, 0x1f0a, 0x1}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 6m31.432710391s ago: executing program 1 (id=609): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@security={'security\x00', 0xe, 0x8000000, 0x3a8, 0xffffffff, 0x1e0, 0x0, 0x1e0, 0xffffffff, 0xffffffff, 0x314, 0x314, 0x314, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast2, [0xffffff00, 0xff, 0xff000000], [0x0, 0xff, 0xff], 'wg1\x00', '\x00', {}, {}, 0x3c, 0x0, 0x4, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 'dvmrp0\x00', 'bridge0\x00', {0xff}, {}, 0x6, 0x1, 0x2, 0x24}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'macvlan0\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfff, 0x1, 0x0, 0x0, "8735711b7a6e60c2f1bcb5b86a0b4b84a82930d2c0038a33cbcf9a1b31236b1050ca1d3b8e36435fe82329a4cca16cb07ea0c4ad3cacb4d3b15656d92bbbb71d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 6m14.413241706s ago: executing program 32 (id=609): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@security={'security\x00', 0xe, 0x8000000, 0x3a8, 0xffffffff, 0x1e0, 0x0, 0x1e0, 0xffffffff, 0xffffffff, 0x314, 0x314, 0x314, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast2, [0xffffff00, 0xff, 0xff000000], [0x0, 0xff, 0xff], 'wg1\x00', '\x00', {}, {}, 0x3c, 0x0, 0x4, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 'dvmrp0\x00', 'bridge0\x00', {0xff}, {}, 0x6, 0x1, 0x2, 0x24}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'macvlan0\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfff, 0x1, 0x0, 0x0, "8735711b7a6e60c2f1bcb5b86a0b4b84a82930d2c0038a33cbcf9a1b31236b1050ca1d3b8e36435fe82329a4cca16cb07ea0c4ad3cacb4d3b15656d92bbbb71d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 13.015603692s ago: executing program 3 (id=2264): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xb4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000040d07d408612a41f16fb0102030109021b00010000"], 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendfile(r2, r3, 0x0, 0xffffffff004) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast1}}]}, 0x110) close(0x3) 10.456328534s ago: executing program 3 (id=2289): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000004c0)) 10.355322607s ago: executing program 3 (id=2292): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="660f38415b00660fd9fb67f30f01ea660f38823467260f01c9130d440f20c066350c000000440f22c0f26df30f01f4ba410066ed", 0x34}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.010291044s ago: executing program 3 (id=2308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x2cf}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 7.862357188s ago: executing program 3 (id=2309): r0 = fsopen(&(0x7f0000000400)='xfs\x00', 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect$midi(0x3, 0x38, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x0, 0x40, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x7, 0x4}], [{{0x9, 0x5, 0x5, 0x2, 0x820, 0x7, 0x4, 0x3, {0x5, 0x25, 0x1, 0x1, '\a'}}}]}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d0000000109022400010000"], 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB=' \t.'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r7, @ANYBLOB="063bbbb64679b5"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006dc0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x800) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000180)=[@nested_amd_vmsave={0x183, 0x18}, @cpuid={0x64, 0x18, {0x5, 0x10}}, @nested_amd_clgi={0x17f, 0x10}], 0x40}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f00000002c0)=@arm64={0x3, 0x6, 0x7, '\x00', 0x3}) 5.197234853s ago: executing program 2 (id=2324): r0 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(r0, 0x0, &(0x7f0000000240)={0x1, 0x56ec}, &(0x7f0000000280)) 4.987638048s ago: executing program 2 (id=2327): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) capget(&(0x7f0000000080)={0x19980330, r0}, &(0x7f00000000c0)={0xf, 0xf, 0x1000, 0xadd, 0x200, 0x4}) 4.786169053s ago: executing program 2 (id=2328): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3\x8b\x87\\\x15Hd~\xf9c\xcblo\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92E/\x9f\x93\xd7\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f/\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\xfb\xc34\x7f\x01\x1fi\xefD?\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\x1b\x19Co\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x05\x00\x00\x00\xfb\xff\xff\xff\xff\xff\xff\xfft\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f00000046c0)={0x2020}, 0x2071) 4.708742955s ago: executing program 2 (id=2330): socket$key(0xf, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x1c1, 0x4, @scatter={0x5, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000740)=""/205, 0xcd}, {&(0x7f0000000840)=""/81, 0x51}, {&(0x7f0000000b40)=""/227, 0xe3}, {&(0x7f0000000c40)=""/67, 0x43}]}, &(0x7f0000000940)="d95839027eb32eb1c65b6daef702bffeba43e38e69de94dc739a8754fcc2b526c12c960b8d45dbfd5d4dc786ca657615776d8dc8ce23be9db45aaad73898e3ee30bea15511a62ba20a0f1b59692bcccefe6c4be06244427d6660eff172d6ce257da6512894c8f2ec99edbd8eab84603c3a242fa5f75148502986f285549c2fee1f2ad82cdefb3bf90d1b7e1265e1521399943fee34205699af751f9624e1a4dfdf6be8b927ee65cd1d5671a3f9f53afe3125e9443ed7e3343ab0ed9fa90dbc061aeb15359a67eed03391daac387eaefc3a7da34e1e093fbcc9f1bec7a69a5b41eb244e0ba179bbf3bc34d4cf547767468fb8b6d98a194f0f77fdeb081ed06f23019266c5242bcf0e8114b618a8603b6c1af1cf3647876d9a1bd431186f1421e0032091a25226208e5270f29b9f377d43426c9a3dfb5476eaabc672458584984ffc6912e5cfc353297a0c14e5e8de2e3a1c16d135fb3c6c9ebf34f4aade3029e3ed929a8e63d617d8619332aa84680ff06fe8840756e869519b9f76e32f5eb1b84f0493c823c31c70e8659c475c74e9f758ad323311c10a95ca56033df37f99ff22f6521ccbfe6b51a802bf629d2b6b301373404f051835087bee1b3507f9d5665a", 0x0, 0x8000101, 0x12, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x2, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 4.327644564s ago: executing program 2 (id=2336): syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x4, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000280)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x48, 0x0, 0x0, 0x1, r1}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.10187487s ago: executing program 4 (id=2339): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_getparam(0x0, &(0x7f0000001400)) 3.642877961s ago: executing program 5 (id=2342): r0 = socket$inet_tcp(0x2, 0x1, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) fadvise64(0xffffffffffffffff, 0x100000000000, 0x7fffffffffffffff, 0x3) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[], 0x2ac}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) landlock_restrict_self(0xffffffffffffffff, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.25984263s ago: executing program 4 (id=2343): getpriority(0x1, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x5795, 0x109000) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000026c0)={{r0}, "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"}) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050116a7eb25ff0904a1f70901"], 0x0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027"], 0x50}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2.776135882s ago: executing program 3 (id=2346): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x6) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080032900010073797a300000008c387b94ee002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800c000100626974776973650014000280080003400000000408000140000000140900010073797a3000000000140000001100010000000000000000000000000a97607f63b96a881f349ffb406e0c72bd27162a3e8ce88a467b69295396a14a11a616174a4914190cee24ad9ff07c145fb67c520bda1daa45ec9f8497ffa4ded1ac", @ANYRES32=r1], 0xc4}}, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x800}], 0x2, 0x40000063, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r4, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xc4cd4021f5071976, 0x7}, {0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x2, 0x7ff, 0x3, 0x6}}}}]}, 0x48}}, 0x20048884) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r10, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r10, 0x0, 0x70) poll(&(0x7f00000001c0)=[{r10, 0xa}], 0x1, 0x9) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.681146844s ago: executing program 5 (id=2348): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000100)='f', 0x1}, {0x0}, {&(0x7f0000003a00)="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", 0xd00}], 0x3}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000240)='0x0}) connect$can_bcm(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 1.099150353s ago: executing program 0 (id=2360): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0xe, 0x1, 0x8, 0xfffffffffffffff8}], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 928.489407ms ago: executing program 0 (id=2361): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0xa, 0x7ff00003}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 774.510891ms ago: executing program 0 (id=2362): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d84a56bd0d001c00180081064e32e82331734c368cc79100", 0x18}], 0x1}, 0x804) readlinkat(r1, &(0x7f0000002000)='./bus\x00', &(0x7f0000004240)=""/147, 0x93) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r2, r1}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) r7 = accept$alg(r3, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000002040)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000021c0)=0x28) socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x800007fffffff, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x2, 0x9, 0x1, 0x4, 0x5, 0x8001, 0x8, 0x123, 0x3, 0xa000, 0x1, 0x0, r6, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f0000004540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r9}, 0x10) syz_fuse_handle_req(r4, &(0x7f0000002240)="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", 0x2000, &(0x7f0000009000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x78, 0x0, 0xd07, {0x0, 0x0, 0x0, {0x2, 0x7, 0xd, 0x4, 0x3, 0x80000001, 0xffffffff, 0x0, 0x2c68, 0xa000, 0xffffffff, r10, r6, 0x1ff, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, r10, &(0x7f0000000080)={0x2, 0x7, 0x1, 0x6}) syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103"], 0x0) 417.23885ms ago: executing program 2 (id=2363): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init() 232.915164ms ago: executing program 4 (id=2364): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000018c0)={{0xffffffffffffffff, &(0x7f0000000000)='choke\x00', 0x0, 0x0, 0x7fffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xb}, 0x3, &(0x7f0000001800)=[{0x2, 0x4, &(0x7f0000000300)='-!\x00', &(0x7f0000000340)="ba4f1e7f63fdb7c35dc76b5658d7750bea9b6bfda9b05dbfe6a979ab443b7548c75e21a2a802dfc1b4e29cfe9618ef9f3254652232fe0019430e", 0x3a, 0x10}, {0x2, 0x7b00, 0x0, 0x0, 0x0, 0x12}, {0x1, 0x8f8, &(0x7f0000001780)='!+\x00', &(0x7f00000017c0)="61f66ba7350d819ce0", 0x9, 0x32}]}) 0s ago: executing program 0 (id=2365): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): ice vlan0 entered promiscuous mode [ 157.229876][ T5553] team0: Device macvtap1 failed to register rx_handler [ 157.240709][ T5553] device vlan0 left promiscuous mode [ 157.279490][ T4646] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 157.358670][ T5565] ksmbd: Unknown IPC event: 10, ignore. [ 158.818614][ T4646] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 158.828346][ T4646] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 158.861479][ T4646] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 158.870672][ T4646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.961658][ T4646] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 159.082307][ T5596] FAULT_INJECTION: forcing a failure. [ 159.082307][ T5596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.126965][ T5589] device syzkaller0 entered promiscuous mode [ 159.154391][ T5596] CPU: 0 PID: 5596 Comm: syz.4.372 Not tainted syzkaller #0 [ 159.161760][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.171849][ T5596] Call Trace: [ 159.175157][ T5596] [ 159.178117][ T5596] dump_stack_lvl+0x188/0x250 [ 159.182837][ T5596] ? show_regs_print_info+0x20/0x20 [ 159.188075][ T5596] ? load_image+0x410/0x410 [ 159.192621][ T5596] ? __lock_acquire+0x7b50/0x7b50 [ 159.197695][ T5596] should_fail+0x383/0x4b0 [ 159.202157][ T5596] _copy_from_user+0x2e/0x170 [ 159.206883][ T5596] __copy_msghdr_from_user+0xc9/0x630 [ 159.212298][ T5596] ? verify_lock_unused+0x140/0x140 [ 159.217538][ T5596] ? mark_lock+0x94/0x320 [ 159.221907][ T5596] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 159.227227][ T5596] ? __lock_acquire+0x13dc/0x7b50 [ 159.232302][ T5596] ___sys_sendmsg+0x19a/0x2e0 [ 159.237032][ T5596] ? __sys_sendmsg+0x290/0x290 [ 159.241868][ T5596] __se_sys_sendmsg+0x1b7/0x2a0 [ 159.246764][ T5596] ? __x64_sys_sendmsg+0x80/0x80 [ 159.251743][ T5596] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.257777][ T5596] ? lockdep_hardirqs_on+0x94/0x140 [ 159.263018][ T5596] do_syscall_64+0x4c/0xa0 [ 159.267464][ T5596] ? clear_bhb_loop+0x30/0x80 [ 159.272177][ T5596] ? clear_bhb_loop+0x30/0x80 [ 159.276899][ T5596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.282836][ T5596] RIP: 0033:0x7fa83f25c0d9 [ 159.287289][ T5596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.306929][ T5596] RSP: 002b:00007fa83d472028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.306966][ T5601] block nbd3: NBD_DISCONNECT [ 159.315409][ T5596] RAX: ffffffffffffffda RBX: 00007fa83f4e4180 RCX: 00007fa83f25c0d9 [ 159.315430][ T5596] RDX: 0000000004048845 RSI: 0000200000000280 RDI: 0000000000000008 [ 159.315444][ T5596] RBP: 00007fa83d472090 R08: 0000000000000000 R09: 0000000000000000 [ 159.315459][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.315473][ T5596] R13: 00007fa83f4e4218 R14: 00007fa83f4e4180 R15: 00007ffcd0ec02b8 [ 159.315501][ T5596] [ 159.796192][ T5612] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 5612 comm: syz.1.368) [ 160.654494][ T4228] usb 3-1: USB disconnect, device number 8 [ 161.645898][ T5632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 162.836188][ T1110] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.067299][ T5662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.392'. [ 163.208182][ T1110] usb 5-1: device descriptor read/64, error -71 [ 163.586821][ T1110] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.816519][ T1110] usb 5-1: device descriptor read/64, error -71 [ 163.851291][ T5684] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.678625][ T1110] usb usb5-port1: attempt power cycle [ 164.781684][ T5690] tipc: Cannot configure node identity twice [ 165.288284][ T1110] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.548405][ T1110] usb 5-1: device descriptor read/8, error -71 [ 165.747389][ T5703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.401'. [ 165.756947][ T5703] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 166.490820][ T5705] device syzkaller0 entered promiscuous mode [ 166.539718][ T5709] netlink: 168 bytes leftover after parsing attributes in process `syz.2.407'. [ 167.109003][ T4646] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 167.558093][ T4646] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 167.575692][ T4646] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 167.599134][ T4646] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 167.636458][ T4646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.749980][ T4646] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 168.832252][ T4646] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 168.928125][ T5767] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.190076][ T4646] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 169.287650][ T4646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.302791][ T4646] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.406820][ T4646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.422345][ T4646] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.547739][ T4646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.564811][ T4646] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.656044][ T4646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.672988][ T4646] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.764607][ T5765] orangefs_mount: mount request failed with -4 [ 169.775459][ T4646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.792926][ T4646] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.900300][ T4646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.901669][ T5772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 169.915819][ T4646] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.984718][ T1110] usb 3-1: USB disconnect, device number 9 [ 170.046509][ T4646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.061303][ T4646] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.197878][ T4646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.200146][ T5783] netlink: 'syz.1.435': attribute type 5 has an invalid length. [ 170.224858][ T4646] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.244362][ T4646] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 170.264695][ T4646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.301788][ T4646] usb 5-1: config 0 descriptor?? [ 170.390267][ T5792] fuse: Bad value for 'fd' [ 170.447286][ T4292] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 170.634795][ T5802] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.772567][ T4292] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 170.902445][ T4292] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 170.910569][ T4292] usb 4-1: can't read configurations, error -61 [ 171.075730][ T4292] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 171.376073][ T5817] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 171.383176][ T5817] Unsupported pkey algo: 98 [ 171.390682][ T4292] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 171.476466][ T5801] orangefs_mount: mount request failed with -4 [ 171.531152][ T4292] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 171.549536][ T4292] usb 4-1: can't read configurations, error -61 [ 171.577304][ T4292] usb usb4-port1: attempt power cycle [ 171.805594][ T5825] netlink: 'syz.1.448': attribute type 15 has an invalid length. [ 171.817048][ T5819] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.446'. [ 172.083577][ T4292] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 172.113598][ T4228] usb 5-1: USB disconnect, device number 11 [ 172.168625][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 172.235480][ T4292] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 172.365650][ T4292] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 172.375922][ T4292] usb 4-1: can't read configurations, error -61 [ 172.549754][ T4292] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 172.820781][ T4292] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 172.956751][ T4292] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 172.983711][ T4292] usb 4-1: can't read configurations, error -61 [ 173.022111][ T4292] usb usb4-port1: unable to enumerate USB device [ 173.043770][ T5854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.457'. [ 176.667931][ T4941] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 176.862221][ T5916] netlink: 56 bytes leftover after parsing attributes in process `syz.1.479'. [ 177.134445][ T4941] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 177.150374][ T4941] usb 3-1: can't read configurations, error -71 [ 177.190541][ T4292] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 177.294211][ T5882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.469'. [ 177.337772][ T5882] netlink: 17 bytes leftover after parsing attributes in process `syz.3.469'. [ 177.350493][ T5896] IPVS: sh: FWM 3 0x00000003 - no destination available [ 177.379819][ T5882] tipc: Invalid UDP bearer configuration [ 177.379978][ T5882] tipc: Enabling of bearer rejected, failed to enable media [ 177.589375][ T4292] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.606275][ T4292] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 177.616618][ T4292] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 177.643348][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.731364][ T4292] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 178.622759][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.481'. [ 179.547355][ T5943] autofs4:pid:5943:autofs_fill_super: called with bogus options [ 180.160554][ T4648] usb 5-1: USB disconnect, device number 12 [ 181.567175][ T26] audit: type=1326 audit(1787320552.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.4.502" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83f25c0d9 code=0x0 [ 181.651829][ T5980] capability: warning: `syz.4.502' uses deprecated v2 capabilities in a way that may be insecure [ 181.696128][ T5984] autofs4:pid:5984:autofs_fill_super: called with bogus options [ 182.044235][ T4648] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.126803][ T4648] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.476945][ T4648] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 182.783679][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 182.799010][ T5974] netlink: 17 bytes leftover after parsing attributes in process `syz.0.500'. [ 182.810008][ T5974] tipc: Invalid UDP bearer configuration [ 182.810049][ T5974] tipc: Enabling of bearer rejected, failed to enable media [ 182.899575][ T4648] usb 4-1: Using ep0 maxpacket: 32 [ 182.918218][ T5993] device bond_slave_0 entered promiscuous mode [ 182.925035][ T5993] device bond_slave_1 entered promiscuous mode [ 182.939571][ T5993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.970132][ T5993] bond1: (slave macvlan2): making interface the new active one [ 182.987421][ T5993] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 183.008845][ T5997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.507'. [ 183.034621][ T5997] IPv6: sit1: Disabled Multicast RS [ 183.052785][ T4227] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 183.311449][ T4663] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 183.446200][ T4227] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.467748][ T4227] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 183.497771][ T4227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 183.518455][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.594237][ T4663] usb 3-1: Using ep0 maxpacket: 8 [ 183.608854][ T4227] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 183.886070][ T4663] usb 3-1: config index 0 descriptor too short (expected 56082, got 18) [ 183.894463][ T4663] usb 3-1: config 37 has too many interfaces: 223, using maximum allowed: 32 [ 183.910285][ T4663] usb 3-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 183.920905][ T4663] usb 3-1: config 37 has 0 interfaces, different from the descriptor's value: 223 [ 184.940032][ T4663] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 184.949884][ T4663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 184.958026][ T4663] usb 3-1: Product: syz [ 184.963563][ T4663] usb 3-1: Manufacturer: syz [ 184.968292][ T4663] usb 3-1: SerialNumber: syz [ 185.857797][ T4646] usb 3-1: USB disconnect, device number 12 [ 185.864326][ T4648] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.956133][ T4648] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 185.966893][ T4648] usb 4-1: can't read configurations, error -71 [ 186.034459][ T1110] usb 5-1: USB disconnect, device number 13 [ 188.177674][ T4648] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 190.150726][ T4648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.235686][ T4648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.335296][ T4648] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.418536][ T4648] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 190.480036][ T4648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.506880][ T6068] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.515861][ T6068] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.524642][ T6068] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.533778][ T6068] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.558316][ T4648] usb 4-1: config 0 descriptor?? [ 190.597584][ T6068] device syzkaller0 entered promiscuous mode [ 190.875483][ T6059] udc-core: couldn't find an available UDC or it's busy [ 190.896113][ T6059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.868857][ T4648] usbhid 4-1:0.0: can't add hid device: -71 [ 191.883593][ T4648] usbhid: probe of 4-1:0.0 failed with error -71 [ 191.895085][ T4648] usb 4-1: USB disconnect, device number 17 [ 192.321849][ T6108] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 192.343913][ T6110] FAULT_INJECTION: forcing a failure. [ 192.343913][ T6110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.409509][ T6110] CPU: 0 PID: 6110 Comm: syz.2.544 Not tainted syzkaller #0 [ 192.416856][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.426943][ T6110] Call Trace: [ 192.430260][ T6110] [ 192.433218][ T6110] dump_stack_lvl+0x188/0x250 [ 192.437976][ T6110] ? show_regs_print_info+0x20/0x20 [ 192.443233][ T6110] ? load_image+0x410/0x410 [ 192.447786][ T6110] ? __lock_acquire+0x7b50/0x7b50 [ 192.452847][ T6110] ? __alloc_pages+0x282/0x480 [ 192.457649][ T6110] should_fail+0x383/0x4b0 [ 192.462107][ T6110] copy_page_from_iter+0x33a/0x760 [ 192.467291][ T6110] tun_get_user+0x199c/0x3b60 [ 192.472018][ T6110] ? tun_ring_recv+0xc90/0xc90 [ 192.476822][ T6110] ? rcu_lock_release+0x5/0x20 [ 192.481619][ T6110] ? __lock_acquire+0x7b50/0x7b50 [ 192.486695][ T6110] tun_chr_write_iter+0x112/0x1e0 [ 192.491851][ T6110] vfs_write+0x748/0xd70 [ 192.496131][ T6110] ? file_end_write+0x250/0x250 [ 192.501014][ T6110] ? __fget_files+0x402/0x470 [ 192.505725][ T6110] ? __fdget_pos+0x1e2/0x370 [ 192.510345][ T6110] ? ksys_write+0x70/0x260 [ 192.514793][ T6110] ksys_write+0x153/0x260 [ 192.519157][ T6110] ? __ia32_sys_read+0x80/0x80 [ 192.523971][ T6110] ? lockdep_hardirqs_on+0x94/0x140 [ 192.529222][ T6110] do_syscall_64+0x4c/0xa0 [ 192.533680][ T6110] ? clear_bhb_loop+0x30/0x80 [ 192.538402][ T6110] ? clear_bhb_loop+0x30/0x80 [ 192.543126][ T6110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.549057][ T6110] RIP: 0033:0x7f584a67890e [ 192.553504][ T6110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 192.573153][ T6110] RSP: 002b:00007f584890ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.581613][ T6110] RAX: ffffffffffffffda RBX: 00007f58489106c0 RCX: 00007f584a67890e [ 192.589614][ T6110] RDX: 000000000000005e RSI: 0000200000002e40 RDI: 00000000000000c8 [ 192.597710][ T6110] RBP: 00007f5848910090 R08: 0000000000000000 R09: 0000000000000000 [ 192.605722][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.613725][ T6110] R13: 00007f584a940038 R14: 00007f584a93ffa0 R15: 00007fff4579b4b8 [ 192.621776][ T6110] [ 192.987869][ T6122] netlink: 44 bytes leftover after parsing attributes in process `syz.2.549'. [ 193.900191][ T4227] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 195.185834][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.197336][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.207570][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.220802][ T4227] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 195.230236][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.241098][ T4227] usb 4-1: config 0 descriptor?? [ 195.519362][ T6133] udc-core: couldn't find an available UDC or it's busy [ 195.551561][ T6133] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 195.771757][ T4227] usbhid 4-1:0.0: can't add hid device: -71 [ 195.777869][ T4227] usbhid: probe of 4-1:0.0 failed with error -71 [ 195.824201][ T4227] usb 4-1: USB disconnect, device number 18 [ 195.966292][ T6165] device syzkaller0 entered promiscuous mode [ 196.472166][ T4227] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 196.627267][ T6170] ksmbd: Unknown IPC event: 10, ignore. [ 197.584861][ T4227] usb 4-1: device not accepting address 19, error -71 [ 200.043541][ T6208] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 200.532658][ T1110] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 201.771128][ T1110] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 201.802991][ T1110] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 201.850680][ T1110] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 201.893382][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.936566][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.946127][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.986199][ T1110] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 202.259317][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.579'. [ 202.278882][ T6204] netlink: 17 bytes leftover after parsing attributes in process `syz.0.579'. [ 202.288053][ T6204] tipc: Invalid UDP bearer configuration [ 202.288098][ T6204] tipc: Enabling of bearer rejected, failed to enable media [ 202.667818][ T1110] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.814130][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'. [ 203.101404][ T1110] usb 5-1: config 11 has an invalid interface number: 109 but max is 0 [ 203.111638][ T1110] usb 5-1: config 11 has no interface number 0 [ 203.124702][ T1110] usb 5-1: config 11 interface 109 altsetting 119 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 203.169097][ T1110] usb 5-1: config 11 interface 109 has no altsetting 0 [ 203.324635][ T6257] ERROR: device name not specified. [ 203.383405][ T1110] usb 5-1: New USB device found, idVendor=0582, idProduct=63dc, bcdDevice=5f.b4 [ 203.454033][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.600730][ T1110] usb 5-1: Product: syz [ 203.640646][ T1110] usb 5-1: Manufacturer: syz [ 203.651254][ T1110] usb 5-1: SerialNumber: syz [ 203.706762][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.595'. [ 203.739853][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.595'. [ 203.943070][ T4646] usb 4-1: USB disconnect, device number 21 [ 204.196934][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 204.203957][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 204.214451][ T4292] Bluetooth: hci2: command 0x0406 tx timeout [ 204.225363][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 204.239621][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 204.437589][ T1110] usb 5-1: USB disconnect, device number 14 [ 204.478865][ T4341] udevd[4341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:11.109/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.455279][ T6283] netlink: 56 bytes leftover after parsing attributes in process `syz.1.604'. [ 205.720905][ T6291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'. [ 207.612901][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 207.737170][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.606'. [ 207.794428][ T6288] netlink: 17 bytes leftover after parsing attributes in process `syz.2.606'. [ 207.803347][ T6288] tipc: Invalid UDP bearer configuration [ 207.803389][ T6288] tipc: Enabling of bearer rejected, failed to enable media [ 208.606798][ T4236] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 208.888573][ T4236] usb 5-1: Using ep0 maxpacket: 32 [ 209.064175][ T4236] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.182394][ T4236] usb 5-1: config 212 has an invalid interface number: 244 but max is 0 [ 209.202239][ T4236] usb 5-1: config 212 has no interface number 0 [ 209.223911][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.619'. [ 209.235021][ T4236] usb 5-1: config 212 interface 244 has no altsetting 0 [ 209.430647][ T4236] usb 5-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=e5.0d [ 209.463570][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.471635][ T4236] usb 5-1: Product: syz [ 209.509048][ T4236] usb 5-1: Manufacturer: syz [ 209.514086][ T4236] usb 5-1: SerialNumber: syz [ 209.819399][ T6322] udc-core: couldn't find an available UDC or it's busy [ 209.826573][ T6322] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 209.931016][ T4236] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 209.960447][ T4236] dvb-usb: bulk message failed: -22 (3/0) [ 210.030145][ T4236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.092299][ T4236] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 210.123118][ T4236] usb 5-1: media controller created [ 210.380718][ T4236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.176534][ T6348] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6348 comm: syz.3.617) [ 211.539555][ T4236] dvb-usb: bulk message failed: -22 (6/0) [ 211.554759][ T4236] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 211.627463][ T4236] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 211.684178][ T4236] dvb-usb: schedule remote query interval to 150 msecs. [ 211.714399][ T4236] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 211.847516][ T4236] usb 5-1: USB disconnect, device number 15 [ 212.089317][ T4236] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 213.422771][ T6372] netlink: 'syz.3.630': attribute type 3 has an invalid length. [ 214.537448][ T4646] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 215.001788][ T4646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.024446][ T4646] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 215.068112][ T4646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.122505][ T4646] usb 4-1: config 0 descriptor?? [ 215.675058][ T4646] hid-multitouch 0003:1FD2:6007.0003: ignoring exceeding usage max [ 215.718928][ T4646] hid-multitouch 0003:1FD2:6007.0003: unbalanced delimiter at end of report description [ 215.751892][ T4646] hid-multitouch: probe of 0003:1FD2:6007.0003 failed with error -22 [ 216.108470][ T4227] usb 4-1: USB disconnect, device number 22 [ 216.350541][ T6385] netlink: 'syz.2.635': attribute type 11 has an invalid length. [ 216.546780][ T6386] netlink: 52 bytes leftover after parsing attributes in process `syz.4.633'. [ 216.575317][ T6386] futex_wake_op: syz.4.633 tries to shift op by 144; fix this program [ 216.629524][ T6386] futex_wake_op: syz.4.633 tries to shift op by 144; fix this program [ 217.505278][ T6398] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 219.212943][ T6427] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.440783][ T154] tipc: Subscription rejected, illegal request [ 224.091480][ T6493] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 224.638077][ T6501] comedi comedi2: fl512: I/O port conflict (0x7,16) [ 224.715709][ T6505] binder: 6497:6505 ioctl 890b 200000000140 returned -22 [ 224.771407][ T6501] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.673'. [ 227.455164][ T4227] Bluetooth: hci5: command 0x0409 tx timeout [ 227.701764][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 228.350900][ T6561] ksmbd: Unknown IPC event: 10, ignore. [ 228.432737][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.491813][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.681578][ T6495] device bridge_slave_0 entered promiscuous mode [ 228.764725][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.779664][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.847359][ T6495] device bridge_slave_1 entered promiscuous mode [ 228.986867][ T6564] netlink: 60 bytes leftover after parsing attributes in process `syz.3.691'. [ 229.043426][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.111987][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.392023][ T6495] team0: Port device team_slave_0 added [ 229.480596][ T6495] team0: Port device team_slave_1 added [ 229.850046][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 229.951929][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.008580][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.036557][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.076760][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.105717][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.192885][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.293062][ T6590] device syzkaller0 entered promiscuous mode [ 230.355444][ T6495] device hsr_slave_0 entered promiscuous mode [ 230.399834][ T6495] device hsr_slave_1 entered promiscuous mode [ 230.416362][ T6495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.430019][ T6495] Cannot create hsr debugfs directory [ 231.907031][ T6495] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.129557][ T6495] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.148174][ T4940] Bluetooth: hci5: command 0x040f tx timeout [ 232.194375][ T6495] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.504420][ T6495] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.379877][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.456532][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.471924][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.511640][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.525233][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.554731][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.581153][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.588297][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.666718][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.694914][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.738686][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.785624][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.792773][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.846578][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.889759][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.106069][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.168978][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.205654][ T6662] ksmbd: Unknown IPC event: 10, ignore. [ 234.756781][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.802642][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.835282][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.919235][ T6495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.996022][ T6495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.121056][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 235.127316][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.155192][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.225782][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.285790][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.378370][ T6669] netlink: 64 bytes leftover after parsing attributes in process `syz.0.721'. [ 235.545420][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.824093][ T6682] netlink: 156 bytes leftover after parsing attributes in process `syz.0.726'. [ 235.898303][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.906407][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.952995][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.961067][ T6682] tmpfs: Bad value for 'mpol' [ 236.644550][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.666806][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.740169][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.760838][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.786381][ T6495] device veth0_vlan entered promiscuous mode [ 236.805787][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.821604][ T6701] netlink: 32 bytes leftover after parsing attributes in process `syz.0.729'. [ 236.838861][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.879279][ T6495] device veth1_vlan entered promiscuous mode [ 236.978882][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.993343][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.007862][ T6693] orangefs_mount: mount request failed with -4 [ 237.037991][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.062959][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.117543][ T6495] device veth0_macvtap entered promiscuous mode [ 237.146113][ T6495] device veth1_macvtap entered promiscuous mode [ 237.290027][ T4439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.364976][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.428894][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.456903][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.477323][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.554511][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.580265][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.646488][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.678266][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.733716][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.769926][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.815719][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.825934][ T6709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.733'. [ 237.903386][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.919152][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.982565][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.021106][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.079774][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.133822][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.168101][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.215051][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.246701][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.299041][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.359448][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.438121][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.478485][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.528679][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.579122][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.796785][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.820011][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.493852][ T4439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.692704][ T6495] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.730826][ T6495] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.783801][ T6495] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.819459][ T6495] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.059931][ T4439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.235499][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.274974][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.305966][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.376141][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.387961][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.440073][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.726516][ T6764] netlink: 200 bytes leftover after parsing attributes in process `syz.5.668'. [ 240.745528][ T4439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.871220][ T4227] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 241.386596][ T4227] usb 4-1: config 4 has an invalid interface number: 201 but max is 0 [ 241.398389][ T4227] usb 4-1: config 4 has no interface number 0 [ 241.428939][ T4227] usb 4-1: config 4 interface 201 has no altsetting 0 [ 242.417929][ T4227] usb 4-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b [ 242.434028][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.477876][ T4227] usb 4-1: Product: syz [ 242.534354][ T4227] usb 4-1: Manufacturer: syz [ 242.553855][ T4227] usb 4-1: SerialNumber: syz [ 242.701685][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 243.110859][ T4227] usb-storage 4-1:4.201: USB Mass Storage device detected [ 243.344251][ T4227] usb-storage 4-1:4.201: Quirks match for vid 0781 pid 55e8: 800000 [ 244.723169][ T4227] usb 4-1: USB disconnect, device number 23 [ 245.009076][ T6817] orangefs_mount: mount request failed with -4 [ 246.203406][ T6870] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 249.188052][ T6937] netlink: 88 bytes leftover after parsing attributes in process `syz.4.789'. [ 250.173485][ T6962] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 250.458346][ T6972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.796'. [ 250.781425][ T6977] sctp: [Deprecated]: syz.2.797 (pid 6977) Use of int in max_burst socket option. [ 250.781425][ T6977] Use struct sctp_assoc_value instead [ 250.866175][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 250.900333][ T6916] comedi: valid board names for 8255 driver are: [ 250.965301][ T6916] 8255 [ 250.982879][ T6916] comedi: valid board names for vmk80xx driver are: [ 251.021052][ T6916] vmk80xx [ 251.024146][ T6916] comedi: valid board names for usbduxsigma driver are: [ 251.092757][ T6916] usbduxsigma [ 251.096218][ T6916] comedi: valid board names for usbduxfast driver are: [ 251.136997][ T6916] usbduxfast [ 251.156411][ T6916] comedi: valid board names for usbdux driver are: [ 251.174168][ T6916] usbdux [ 251.177178][ T6916] comedi: valid board names for ni6501 driver are: [ 251.200467][ T6916] ni6501 [ 251.214674][ T6916] comedi: valid board names for dt9812 driver are: [ 251.233260][ T6916] dt9812 [ 251.236278][ T6916] comedi: valid board names for ni_labpc_cs driver are: [ 251.274224][ T6916] ni_labpc_cs [ 251.288838][ T6916] comedi: valid board names for ni_daq_700 driver are: [ 251.310758][ T6916] ni_daq_700 [ 251.314105][ T6916] comedi: valid board names for labpc_pci driver are: [ 251.346608][ T6916] labpc_pci [ 251.349887][ T6916] comedi: valid board names for adl_pci9118 driver are: [ 251.386884][ T6916] pci9118dg [ 251.390150][ T6916] pci9118hg [ 251.393376][ T6916] pci9118hr [ 251.453516][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.799'. [ 251.462563][ T6916] comedi: valid board names for 8255_pci driver are: [ 251.469275][ T6916] 8255_pci [ 251.511746][ T6916] comedi: valid board names for s526 driver are: [ 251.519455][ T6989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.799'. [ 251.535221][ T6916] s526 [ 251.538046][ T6916] comedi: valid board names for multiq3 driver are: [ 251.544661][ T6916] multiq3 [ 251.585052][ T6916] comedi: valid board names for pcmuio driver are: [ 251.614356][ T6916] pcmuio48 [ 251.617537][ T6916] pcmuio96 [ 251.620775][ T6916] comedi: valid board names for pcmmio driver are: [ 251.697626][ T6916] pcmmio [ 251.739534][ T6916] comedi: valid board names for pcmda12 driver are: [ 251.775582][ T6998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.800'. [ 251.784504][ T6916] pcmda12 [ 251.784550][ T6916] comedi: valid board names for pcmad driver are: [ 251.784562][ T6916] pcmad12 [ 251.784571][ T6916] pcmad16 [ 251.784579][ T6916] comedi: valid board names for ni_labpc driver are: [ 251.945085][ T6916] lab-pc-1200 [ 251.976504][ T6916] lab-pc-1200ai [ 251.990244][ T6916] lab-pc+ [ 251.993336][ T6916] comedi: valid board names for atmio16 driver are: [ 251.999958][ T6916] atmio16 [ 252.044429][ T6916] atmio16d [ 252.050962][ T6916] comedi: valid board names for ni_at_ao driver are: [ 252.092027][ T6916] at-ao-6 [ 252.104996][ T6916] at-ao-10 [ 252.108167][ T6916] comedi: valid board names for ni_at_a2150 driver are: [ 252.159892][ T6916] ni_at_a2150 [ 252.163379][ T6916] comedi: valid board names for adq12b driver are: [ 252.211245][ T6916] adq12b [ 252.230972][ T6916] comedi: valid board names for mpc624 driver are: [ 252.256022][ T6916] mpc624 [ 252.259114][ T6916] comedi: valid board names for c6xdigio driver are: [ 252.276937][ T6916] c6xdigio [ 252.280181][ T6916] comedi: valid board names for aio_iiro_16 driver are: [ 252.330922][ T6916] aio_iiro_16 [ 252.334451][ T6916] comedi: valid board names for aio_aio12_8 driver are: [ 252.369635][ T6916] aio_aio12_8 [ 252.378469][ T6916] aio_ai12_8 [ 252.390241][ T6916] aio_ao12_4 [ 252.407329][ T6916] comedi: valid board names for fl512 driver are: [ 252.435975][ T6916] fl512 [ 252.438966][ T6916] comedi: valid board names for dmm32at driver are: [ 252.482431][ T6916] dmm32at [ 252.485646][ T6916] comedi: valid board names for dt282x driver are: [ 252.501896][ T6916] dt2821 [ 252.504978][ T6916] dt2821-f [ 252.509529][ T6916] dt2821-g [ 252.519007][ T6916] dt2823 [ 252.528177][ T6916] dt2824-pgh [ 252.544956][ T6916] dt2824-pgl [ 252.555786][ T6916] dt2825 [ 252.559150][ T6916] dt2827 [ 252.592782][ T6916] dt2828 [ 252.597335][ T6916] dt2829 [ 252.610592][ T6916] dt21-ez [ 252.621680][ T6916] dt23-ez [ 252.625711][ T6916] dt24-ez [ 252.642388][ T6916] dt24-ez-pgl [ 252.646408][ T6916] comedi: valid board names for dt2817 driver are: [ 252.681547][ T6916] dt2817 [ 252.705706][ T6916] comedi: valid board names for dt2815 driver are: [ 252.730359][ T6916] dt2815 [ 252.751570][ T6916] comedi: valid board names for dt2814 driver are: [ 252.784080][ T6916] dt2814 [ 252.800327][ T6916] comedi: valid board names for dt2811 driver are: [ 252.860608][ T6916] dt2811-pgh [ 252.890257][ T6916] dt2811-pgl [ 252.930792][ T6916] comedi: valid board names for dt2801 driver are: [ 252.981665][ T6916] dt2801 [ 253.004832][ T6916] comedi: valid board names for das6402 driver are: [ 253.053824][ T6916] das6402-12 [ 253.070646][ T6916] das6402-16 [ 253.088491][ T6916] comedi: valid board names for das1800 driver are: [ 253.099092][ T7026] device syzkaller0 entered promiscuous mode [ 253.129245][ T6916] das-1701st [ 253.132613][ T6916] das-1701st-da [ 253.136186][ T6916] das-1702st [ 253.218779][ T6916] das-1702st-da [ 253.222403][ T6916] das-1702hr [ 253.294298][ T6916] das-1702hr-da [ 253.297979][ T6916] das-1701ao [ 253.301304][ T6916] das-1702ao [ 253.348204][ T6916] das-1801st [ 253.351559][ T6916] das-1801st-da [ 253.384465][ T6916] das-1802st [ 253.387833][ T6916] das-1802st-da [ 253.440965][ T6916] das-1802hr [ 253.464175][ T6916] das-1802hr-da [ 253.486331][ T6916] das-1801hc [ 253.514062][ T6916] das-1802hc [ 253.527091][ T6916] das-1801ao [ 253.545182][ T6916] das-1802ao [ 253.563249][ T6916] comedi: valid board names for das800 driver are: [ 253.608729][ T6916] das-800 [ 253.618407][ T6916] cio-das800 [ 253.642093][ T6916] das-801 [ 253.659236][ T6916] cio-das801 [ 253.672337][ T6916] das-802 [ 253.679177][ T6916] cio-das802 [ 253.701523][ T6916] cio-das802/16 [ 253.715292][ T6916] comedi: valid board names for isa-das08 driver are: [ 253.741449][ T6916] isa-das08 [ 253.749643][ T6916] das08-pgm [ 253.762745][ T6916] das08-pgh [ 253.769685][ T6916] das08-pgl [ 253.783264][ T6916] das08-aoh [ 253.796441][ T6916] das08-aol [ 253.803419][ T6916] das08-aom [ 253.824744][ T6916] das08/jr-ao [ 253.836912][ T6916] das08jr-16-ao [ 253.850997][ T6916] pc104-das08 [ 253.859430][ T6916] das08jr/16 [ 253.889215][ T6916] comedi: valid board names for das16m1 driver are: [ 253.946969][ T6916] das16m1 [ 253.968370][ T6916] comedi: valid board names for dac02 driver are: [ 253.996766][ T6916] dac02 [ 254.007244][ T6916] comedi: valid board names for rti802 driver are: [ 254.081262][ T6916] rti802 [ 254.121263][ T6916] comedi: valid board names for rti800 driver are: [ 254.200712][ T6916] rti800 [ 254.235260][ T6916] rti815 [ 254.263203][ T6916] comedi: valid board names for pcm3724 driver are: [ 254.374814][ T6916] pcm3724 [ 254.433370][ T6916] comedi: valid board names for pcl818 driver are: [ 254.527460][ T6916] pcl818l [ 254.564872][ T6916] pcl818h [ 254.622885][ T6916] pcl818hd [ 254.671525][ T6916] pcl818hg [ 254.710872][ T6916] pcl818 [ 254.765436][ T6916] pcl718 [ 254.801684][ T6916] pcm3718 [ 254.893412][ T6916] comedi: valid board names for pcl816 driver are: [ 254.968647][ T6916] pcl816 [ 255.029808][ T6916] pcl814b [ 255.032903][ T6916] comedi: valid board names for pcl812 driver are: [ 255.075540][ T6916] pcl812 [ 255.078557][ T6916] pcl812pg [ 255.112885][ T6916] acl8112pg [ 255.116247][ T6916] acl8112dg [ 255.119465][ T6916] acl8112hg [ 255.330288][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.812'. [ 255.373270][ T6916] a821pgl [ 255.376448][ T6916] a821pglnda [ 255.379765][ T6916] a821pgh [ 255.389075][ T6916] a822pgl [ 255.405857][ T6916] a822pgh [ 255.415821][ T6916] a823pgl [ 255.440910][ T6916] a823pgh [ 255.450301][ T6916] pcl813 [ 255.473844][ T6916] pcl813b [ 255.484224][ T6916] acl8113 [ 255.502643][ T6916] iso813 [ 255.525161][ T6916] acl8216 [ 255.531745][ T6916] a826pg [ 255.545414][ T6916] comedi: valid board names for pcl730 driver are: [ 255.572070][ T6916] pcl730 [ 255.609410][ T6916] iso730 [ 255.612460][ T6916] acl7130 [ 255.615548][ T6916] pcm3730 [ 255.618599][ T6916] pcl725 [ 255.643632][ T6916] p8r8dio [ 255.646729][ T6916] acl7225b [ 255.649982][ T6916] p16r16dio [ 255.692879][ T6916] pcl733 [ 255.725422][ T6916] pcl734 [ 255.737601][ T6916] opmm-1616-xt [ 255.762947][ T6916] pearl-mm-p [ 255.779410][ T6916] ir104-pbf [ 255.800538][ T6916] comedi: valid board names for pcl726 driver are: [ 255.825827][ T6916] pcl726 [ 255.829113][ T6916] pcl727 [ 255.832189][ T6916] pcl728 [ 255.848640][ T6916] acl6126 [ 255.865221][ T6916] acl6128 [ 255.871791][ T6916] comedi: valid board names for pcl724 driver are: [ 255.901323][ T6916] pcl724 [ 255.922780][ T6916] pcl722 [ 255.929280][ T6916] pcl731 [ 255.948329][ T6916] acl7122 [ 255.953962][ T6916] acl7124 [ 255.995080][ T6916] pet48dio [ 256.108587][ T6916] pcmio48 [ 256.111699][ T6916] onyx-mm-dio [ 256.115098][ T6916] comedi: valid board names for pcl711 driver are: [ 256.217854][ T6916] pcl711 [ 256.220892][ T6916] pcl711b [ 256.269091][ T6916] acl8112hg [ 256.292707][ T6916] acl8112dg [ 256.326112][ T6916] comedi: valid board names for amplc_pc263 driver are: [ 256.333156][ T6916] pc263 [ 256.336054][ T6916] comedi: valid board names for amplc_pc236 driver are: [ 256.422360][ T6916] pc36at [ 256.601691][ T6916] comedi: valid board names for amplc_dio200 driver are: [ 256.612663][ T6916] pc212e [ 256.615756][ T6916] pc214e [ 256.644801][ T6916] pc215e [ 256.647802][ T6916] pc218e [ 256.672568][ T6916] pc272e [ 257.391989][ T6916] comedi: valid board names for comedi_parport driver are: [ 257.399300][ T6916] comedi_parport [ 257.410003][ T6916] comedi: valid board names for comedi_test driver are: [ 257.417033][ T6916] comedi_test [ 257.470878][ T6916] comedi: valid board names for comedi_bond driver are: [ 257.533154][ T6916] comedi_bond [ 257.943771][ T7099] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 261.287547][ T7121] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 7121 comm: syz.5.826) [ 261.825477][ T7173] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 261.964712][ T7174] 9pnet: Insufficient options for proto=fd [ 262.018976][ T7177] netlink: 'syz.2.839': attribute type 2 has an invalid length. [ 262.483166][ T7187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.841'. [ 262.546571][ T7190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.841'. [ 263.516131][ T7220] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 263.532497][ T4227] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 263.650435][ T7223] MTD: Couldn't look up './mnt': -15 [ 263.839545][ T7230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.851'. [ 263.939745][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 263.979245][ T4439] device hsr_slave_0 left promiscuous mode [ 264.018016][ T4439] device hsr_slave_1 left promiscuous mode [ 264.033371][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.078619][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.148238][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.156556][ T7242] netlink: 'syz.5.852': attribute type 16 has an invalid length. [ 264.164514][ T7242] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.852'. [ 264.180625][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.200352][ T4439] device bridge_slave_1 left promiscuous mode [ 264.209383][ T4439] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.357648][ T4439] device bridge_slave_0 left promiscuous mode [ 264.412390][ T4439] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.610340][ T4439] device veth1_macvtap left promiscuous mode [ 264.648201][ T4439] device veth0_macvtap left promiscuous mode [ 264.700269][ T4439] device veth1_vlan left promiscuous mode [ 264.739485][ T4439] device veth0_vlan left promiscuous mode [ 267.986159][ T4439] team0 (unregistering): Port device team_slave_1 removed [ 268.069129][ T4439] team0 (unregistering): Port device team_slave_0 removed [ 268.128866][ T4439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.171996][ T4439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.466709][ T4439] bond0 (unregistering): Released all slaves [ 268.536152][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.542536][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.492471][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 269.619417][ T4227] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 269.627081][ T4227] usb 4-1: chopping to 0 config(s) [ 269.632304][ T4227] usb 4-1: can't read configurations, error -32 [ 269.754050][ T7234] tipc: Started in network mode [ 269.759000][ T7234] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 269.766417][ T7234] tipc: Enabled bearer , priority 0 [ 269.791649][ T7205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'. [ 269.886874][ T4227] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 270.020094][ T7264] netlink: 'syz.5.859': attribute type 3 has an invalid length. [ 270.062457][ T7274] autofs4:pid:7274:autofs_fill_super: called with bogus options [ 270.075416][ T7264] netlink: 'syz.5.859': attribute type 3 has an invalid length. [ 270.524187][ T7267] ksmbd: Unknown IPC event: 10, ignore. [ 270.912474][ T1110] tipc: Node number set to 43690 [ 273.348709][ T7323] ksmbd: Unknown IPC event: 10, ignore. [ 273.511521][ T7337] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.878'. [ 275.344707][ T7363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.495438][ T7363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.564416][ T7425] netlink: 27 bytes leftover after parsing attributes in process `syz.0.891'. [ 280.787949][ T7363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.085396][ T7363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.496637][ T7363] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.567750][ T7363] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.603534][ T7363] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.644725][ T7363] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.703319][ T7394] ksmbd: Unknown IPC event: 10, ignore. [ 288.164541][ T7536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.200719][ T7536] bridge0: port 3(bond2) entered blocking state [ 288.222304][ T7536] bridge0: port 3(bond2) entered disabled state [ 288.230437][ T7536] device bond2 entered promiscuous mode [ 288.278188][ T7536] bridge0: port 3(bond2) entered blocking state [ 288.284865][ T7536] bridge0: port 3(bond2) entered forwarding state [ 288.340696][ T4301] bridge0: port 3(bond2) entered disabled state [ 288.905627][ T7554] xt_HMARK: spi-set and port-set can't be combined [ 290.154437][ T7567] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 7567 comm: syz.3.895) [ 291.193562][ T7571] orangefs_mount: mount request failed with -4 [ 291.553415][ T7590] Core dump to core aborted: cannot preserve file permissions [ 292.825201][ T7616] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20002 [ 294.711652][ T7638] netlink: 'syz.2.930': attribute type 4 has an invalid length. [ 294.840846][ T7640] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.239728][ T7725] FAULT_INJECTION: forcing a failure. [ 302.239728][ T7725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.278222][ T7725] CPU: 1 PID: 7725 Comm: syz.5.962 Not tainted syzkaller #0 [ 302.285582][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.295706][ T7725] Call Trace: [ 302.299022][ T7725] [ 302.301982][ T7725] dump_stack_lvl+0x188/0x250 [ 302.306702][ T7725] ? show_regs_print_info+0x20/0x20 [ 302.311940][ T7725] ? load_image+0x410/0x410 [ 302.316492][ T7725] ? __lock_acquire+0x7b50/0x7b50 [ 302.321563][ T7725] should_fail+0x383/0x4b0 [ 302.326021][ T7725] _copy_from_user+0x2e/0x170 [ 302.330744][ T7725] __sys_bpf+0x26d/0x6f0 [ 302.335026][ T7725] ? bpf_link_show_fdinfo+0x380/0x380 [ 302.340465][ T7725] __x64_sys_bpf+0x78/0x90 [ 302.345066][ T7725] do_syscall_64+0x4c/0xa0 [ 302.349524][ T7725] ? clear_bhb_loop+0x30/0x80 [ 302.354276][ T7725] ? clear_bhb_loop+0x30/0x80 [ 302.358997][ T7725] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.364932][ T7725] RIP: 0033:0x7fa78a7570d9 [ 302.369403][ T7725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.389050][ T7725] RSP: 002b:00007fa7889af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.397518][ T7725] RAX: ffffffffffffffda RBX: 00007fa78a9defa0 RCX: 00007fa78a7570d9 [ 302.405537][ T7725] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 302.413552][ T7725] RBP: 00007fa7889af090 R08: 0000000000000000 R09: 0000000000000000 [ 302.421558][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.429800][ T7725] R13: 00007fa78a9df038 R14: 00007fa78a9defa0 R15: 00007ffd7f5b1d38 [ 302.437828][ T7725] [ 304.261448][ T7714] block nbd3: shutting down sockets [ 305.050824][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 305.101086][ T7747] device bond2 left promiscuous mode [ 305.136445][ T7751] ksmbd: Unknown IPC event: 10, ignore. [ 305.147166][ T7747] bridge0: port 3(bond2) entered disabled state [ 305.205176][ T7747] device bridge_slave_1 left promiscuous mode [ 305.231296][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.283015][ T7747] device bridge_slave_0 left promiscuous mode [ 305.294010][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.143591][ T4228] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 307.499748][ T4646] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 307.693323][ T4228] usb 6-1: unable to get BOS descriptor or descriptor too short [ 307.815377][ T4228] usb 6-1: config 1 has an invalid interface number: 10 but max is 2 [ 307.826101][ T4228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.870067][ T4228] usb 6-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 307.891018][ T4228] usb 6-1: config 1 has no interface number 3 [ 307.925810][ T7755] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.954033][ T7755] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.029546][ T4646] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.052861][ T4646] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 308.069650][ T4646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.175443][ T4228] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 308.199191][ T4646] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 308.211957][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.238193][ T4228] usb 6-1: Product: syz [ 308.255968][ T4228] usb 6-1: Manufacturer: syz [ 308.264368][ T4228] usb 6-1: SerialNumber: syz [ 308.500401][ T4228] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 308.635002][ T4228] usb 6-1: USB disconnect, device number 2 [ 309.350571][ T4228] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 309.464932][ T7787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.982'. [ 309.905952][ T4228] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 309.935350][ T4228] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 309.955719][ T4228] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 309.992820][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.087389][ T4228] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 310.165889][ T7775] udevd[7775]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.437903][ T4228] usb 4-1: USB disconnect, device number 26 [ 310.458392][ T7804] ksmbd: Unknown IPC event: 10, ignore. [ 310.694288][ T7806] ceph: No path or : separator in source [ 310.868184][ T7811] binder: 7805:7811 ioctl 40046205 0 returned -22 [ 311.085085][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.980'. [ 312.313224][ T4649] usb 6-1: USB disconnect, device number 3 [ 313.025981][ T7847] autofs4:pid:7847:autofs_fill_super: called with bogus options [ 313.151082][ T4228] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 314.409811][ T4228] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 314.443834][ T4228] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 314.459058][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.572758][ T4228] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 314.582886][ T7873] overlayfs: failed to clone upperpath [ 314.788189][ T7874] Cannot find set identified by id 0 to match [ 315.125938][ T7855] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1005'. [ 315.166457][ T7855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1005'. [ 315.500929][ T7883] xt_ipcomp: unknown flags 12 [ 315.664431][ T7883] ip_tables: iptables: counters copy to user failed while replacing table [ 318.452824][ T4649] usb 6-1: USB disconnect, device number 4 [ 318.638067][ T7922] Cannot find del_set index 1 as target [ 318.771982][ T7930] jffs2: notice: (7930) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 318.789360][ T7925] autofs4:pid:7925:autofs_fill_super: called with bogus options [ 319.525590][ T7920] orangefs_mount: mount request failed with -4 [ 319.826478][ T7952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1036'. [ 319.882589][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1036'. [ 320.002683][ T1110] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 320.015504][ T7957] jffs2: notice: (7957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 320.843359][ T1110] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 320.880241][ T1110] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 320.940364][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.155055][ T1110] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 322.270770][ T7983] orangefs_mount: mount request failed with -4 [ 322.480035][ T7995] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1049'. [ 322.994697][ T7987] program syz.5.1047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.133795][ T4650] usb 4-1: USB disconnect, device number 27 [ 324.130174][ T8018] tipc: Enabled bearer , priority 0 [ 324.453937][ T7] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 325.096811][ T8020] orangefs_mount: mount request failed with -4 [ 325.254390][ T7] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 325.263567][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.270839][ T4646] tipc: Node number set to 2886997005 [ 325.306903][ T7] usb 6-1: Product: syz [ 325.332712][ T7] usb 6-1: Manufacturer: syz [ 325.337472][ T7] usb 6-1: SerialNumber: syz [ 325.380538][ T7] usb 6-1: config 0 descriptor?? [ 325.716221][ T7] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 327.601324][ T8054] orangefs_mount: mount request failed with -4 [ 327.694750][ T7] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 328.090500][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 328.110664][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 328.131614][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 328.148718][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 328.156612][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 328.173384][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 328.181353][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 328.197906][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 328.213989][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 328.870841][ T8082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1079'. [ 328.925111][ T8082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1079'. [ 329.336016][ T7] usb 6-1: USB disconnect, device number 5 [ 329.555825][ T8106] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.930381][ T4940] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 330.321801][ T4940] usb 4-1: Using ep0 maxpacket: 16 [ 330.410718][ T8105] orangefs_mount: mount request failed with -4 [ 330.560848][ T4940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 330.814242][ T4940] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 330.823369][ T4940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.880139][ T4940] usb 4-1: Product: syz [ 330.884365][ T4940] usb 4-1: Manufacturer: syz [ 330.889001][ T4940] usb 4-1: SerialNumber: syz [ 330.949571][ T4940] usb 4-1: config 0 descriptor?? [ 331.136132][ T4940] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 331.285608][ T8103] udc-core: couldn't find an available UDC or it's busy [ 331.312735][ T8103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 331.320633][ T8103] udc-core: couldn't find an available UDC or it's busy [ 331.402496][ T8103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 331.434139][ T8103] udc-core: couldn't find an available UDC or it's busy [ 331.441149][ T8103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 331.500508][ T8103] udc-core: couldn't find an available UDC or it's busy [ 331.538611][ T8103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 331.563840][ T8103] udc-core: couldn't find an available UDC or it's busy [ 332.072165][ T8103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 332.292215][ T4398] usb 4-1: Failed to submit usb control message: -110 [ 332.319876][ T4398] usb 4-1: unable to send the bmi data to the device: -110 [ 332.320027][ T4228] usb 4-1: USB disconnect, device number 28 [ 332.333881][ T4398] usb 4-1: unable to get target info from device [ 332.355398][ T4398] usb 4-1: could not get target info (-110) [ 332.410330][ T4398] usb 4-1: could not probe fw (-110) [ 333.310124][ T8138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1096'. [ 333.579767][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1099'. [ 335.119656][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.126021][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.149008][ T8176] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1106'. [ 336.127812][ T8177] netlink: 'syz.0.1104': attribute type 2 has an invalid length. [ 336.276120][ T8189] fuse: Bad value for 'user_id' [ 336.392451][ T8198] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.708426][ T3852] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.718234][ T3852] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.726468][ T3852] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.757096][ T3852] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.544843][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1125'. [ 341.098079][ T4228] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 341.668008][ T4228] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 341.677243][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.733090][ T4228] usb 4-1: config 0 descriptor?? [ 341.830708][ T4228] cp210x 4-1:0.0: cp210x converter detected [ 341.907954][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1132'. [ 342.318414][ T4228] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 342.678865][ T4228] usb 4-1: cp210x converter now attached to ttyUSB0 [ 344.149955][ T1110] usb 4-1: USB disconnect, device number 29 [ 344.159432][ T1110] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 344.214042][ T1110] cp210x 4-1:0.0: device disconnected [ 344.458895][ T8309] fuse: Bad value for 'fd' [ 344.680361][ T8307] Invalid ELF header magic: != ELF [ 344.844410][ T1110] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 344.972440][ T8317] autofs4:pid:8317:autofs_fill_super: called with bogus options [ 345.141027][ T1110] usb 4-1: device descriptor read/64, error -71 [ 345.510975][ T1110] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 345.807927][ T1110] usb 4-1: device descriptor read/64, error -71 [ 345.981042][ T1110] usb usb4-port1: attempt power cycle [ 346.569679][ T1110] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 346.744882][ T1110] usb 4-1: device descriptor read/8, error -71 [ 347.145931][ T1110] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 347.276098][ T1110] usb 4-1: device descriptor read/8, error -71 [ 347.752501][ T1110] usb usb4-port1: unable to enumerate USB device [ 348.414087][ T8332] capability: warning: `syz.2.1149' uses 32-bit capabilities (legacy support in use) [ 350.208938][ T4646] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 350.932962][ T4646] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 350.960975][ T4646] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 350.970083][ T4646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.149077][ T4646] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 351.696618][ T8391] syz.5.1163 (8391) used greatest stack depth: 17136 bytes left [ 353.064310][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1167'. [ 353.244720][ T4646] usb 4-1: USB disconnect, device number 34 [ 353.824357][ T8427] netlink: 'syz.0.1170': attribute type 1 has an invalid length. [ 354.086231][ T8427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.205310][ T8429] bond1: (slave gretap1): making interface the new active one [ 354.266416][ T8429] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 354.413838][ T8434] bond1 (unregistering): (slave gretap1): Releasing active interface [ 354.492455][ T8434] bond1 (unregistering): Released all slaves [ 356.988409][ T4653] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 357.220962][ T8465] 9pnet: Insufficient options for proto=fd [ 357.676514][ T4653] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.702709][ T4653] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 357.745047][ T4653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.848449][ T4653] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 357.970756][ T8475] bridge0: port 3(syz_tun) entered blocking state [ 358.005066][ T8475] bridge0: port 3(syz_tun) entered disabled state [ 358.063155][ T8475] device syz_tun entered promiscuous mode [ 358.094616][ T8475] bridge0: port 3(syz_tun) entered blocking state [ 358.101711][ T8475] bridge0: port 3(syz_tun) entered forwarding state [ 358.323923][ T8480] tipc: Resetting bearer [ 358.335849][ T8484] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 359.579338][ T4232] Bluetooth: hci5: command 0x0406 tx timeout [ 359.881121][ T4232] usb 4-1: USB disconnect, device number 35 [ 360.076612][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1189'. [ 360.127643][ T8501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1189'. [ 360.504945][ T8514] netlink: 'syz.0.1192': attribute type 1 has an invalid length. [ 362.421452][ T8538] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1198'. [ 362.813175][ T8551] overlayfs: failed to clone upperpath [ 362.826881][ T4650] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 363.241811][ T4650] usb 4-1: Using ep0 maxpacket: 8 [ 363.460751][ T4650] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.525388][ T4650] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 363.564927][ T4650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.609323][ T4650] usb 4-1: config 0 descriptor?? [ 363.692353][ T4650] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 363.938719][ T4650] gspca_vc032x: reg_r err -71 [ 363.976883][ T4650] vc032x: probe of 4-1:0.0 failed with error -71 [ 364.027039][ T4650] usb 4-1: USB disconnect, device number 36 [ 364.922296][ T8557] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 365.464291][ T4650] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 365.940739][ T8592] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1215'. [ 367.084700][ T4650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.146748][ T4650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.184786][ T4650] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.256727][ T4650] usb 6-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 367.303945][ T4650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.370110][ T4650] usb 6-1: config 0 descriptor?? [ 368.008000][ T8583] udc-core: couldn't find an available UDC or it's busy [ 368.089108][ T8583] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 368.541615][ T4650] usbhid 6-1:0.0: can't add hid device: -71 [ 368.551422][ T4650] usbhid: probe of 6-1:0.0 failed with error -71 [ 368.694637][ T4650] usb 6-1: USB disconnect, device number 6 [ 368.785890][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 369.333704][ T4650] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 370.352768][ T8630] ODEBUG: Out of memory. ODEBUG disabled [ 375.279049][ T8705] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4199] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8705] [ 375.331588][ T8705] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1251'. [ 375.342956][ T8705] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1251'. [ 375.352143][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 375.367376][ T4194] Bluetooth: Wrong link type (-22) [ 377.755256][ T4648] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 377.783822][ T8733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1265'. [ 377.941931][ T8719] device veth1_macvtap left promiscuous mode [ 378.343331][ T4648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.392399][ T4648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.447725][ T4648] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.484117][ T4648] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 378.522712][ T4648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.586829][ T4648] usb 4-1: config 0 descriptor?? [ 378.901947][ T8731] udc-core: couldn't find an available UDC or it's busy [ 378.908964][ T8731] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 379.238454][ T4648] usbhid 4-1:0.0: can't add hid device: -71 [ 379.282223][ T4648] usbhid: probe of 4-1:0.0 failed with error -71 [ 379.339540][ T4648] usb 4-1: USB disconnect, device number 37 [ 380.011083][ T8735] overlayfs: failed to clone upperpath [ 380.022992][ T4648] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 380.683414][ T4648] usb 4-1: unable to read config index 0 descriptor/all [ 380.692516][ T4648] usb 4-1: can't read configurations, error -71 [ 380.748963][ T8770] netlink: 'syz.4.1279': attribute type 11 has an invalid length. [ 380.784411][ T8770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1279'. [ 380.874846][ T4653] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 381.020811][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 381.432514][ T8787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1283'. [ 381.447394][ T4653] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 381.457095][ T4653] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 381.493691][ T4653] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 381.524647][ T4653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.641935][ T4653] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 382.485297][ T8797] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1277'. [ 383.702893][ T4649] usb 6-1: USB disconnect, device number 8 [ 384.088381][ T8819] ip_tables: iptables: counters copy to user failed while replacing table [ 384.814275][ T8834] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 385.232768][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 385.674415][ T8852] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1302'. [ 386.291712][ T4228] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 386.502362][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'. [ 387.413845][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.446910][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.533718][ T4228] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 387.610235][ T4228] usb 6-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 387.653390][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.707202][ T4228] usb 6-1: config 0 descriptor?? [ 388.011672][ T8857] udc-core: couldn't find an available UDC or it's busy [ 388.045896][ T8857] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 388.057352][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 388.296794][ T4228] usbhid 6-1:0.0: can't add hid device: -71 [ 388.302851][ T4228] usbhid: probe of 6-1:0.0 failed with error -71 [ 388.356723][ T4228] usb 6-1: USB disconnect, device number 9 [ 388.926170][ T4228] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 389.520487][ T4228] usb 6-1: device descriptor read/all, error -71 [ 389.617748][ T8907] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 389.908247][ T8904] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 389.944170][ T8904] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 390.780167][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 392.797786][ T8942] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1331'. [ 392.825803][ T8942] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 393.296854][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1334'. [ 393.319370][ T4301] wlan0: Trigger new scan to find an IBSS to join [ 393.370795][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1334'. [ 395.261006][ T8970] tmpfs: Bad value for 'mpol' [ 395.851502][ T8980] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 397.732275][ T4398] wlan0: Trigger new scan to find an IBSS to join [ 399.964161][ T4398] wlan0: Creating new IBSS network, BSSID fa:0f:94:58:fc:8f [ 400.325832][ T9050] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 401.700506][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.706930][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.732726][ T9058] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1367'. [ 401.825308][ T9062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1369'. [ 402.904269][ T9083] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1374'. [ 403.038001][ T9086] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 9086 comm: syz.2.1366) [ 404.797986][ T4653] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 405.026385][ T9104] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1380'. [ 405.395799][ T4653] usb 4-1: unable to get BOS descriptor or descriptor too short [ 405.495993][ T4653] usb 4-1: not running at top speed; connect to a high speed hub [ 405.639490][ T4653] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 405.647781][ T4653] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 405.684038][ T4653] usb 4-1: config 5 has no interface number 0 [ 405.690202][ T4653] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 405.734280][ T4653] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.807596][ T4653] usb 4-1: config 5 interface 246 has no altsetting 0 [ 406.093433][ T4653] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 406.102675][ T4653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.128144][ T9111] orangefs_mount: mount request failed with -4 [ 406.135840][ T4653] usb 4-1: Product: syz [ 406.140052][ T4653] usb 4-1: Manufacturer: syz [ 406.144675][ T4653] usb 4-1: SerialNumber: syz [ 407.680344][ T4653] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 407.743235][ T4337] usb 4-1: Failed to submit usb control message: -71 [ 407.779863][ T4337] usb 4-1: unable to send the bmi data to the device: -71 [ 407.794992][ T4653] usb 4-1: USB disconnect, device number 40 [ 407.871862][ T4337] usb 4-1: unable to get target info from device [ 407.878264][ T4337] usb 4-1: could not get target info (-71) [ 407.937840][ T4337] usb 4-1: could not probe fw (-71) [ 408.376473][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1392'. [ 410.056373][ T9172] netlink: 'syz.2.1400': attribute type 15 has an invalid length. [ 410.431283][ T9185] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1406'. [ 411.401394][ T9183] orangefs_mount: mount request failed with -4 [ 411.739112][ T9201] netlink: 'syz.5.1411': attribute type 2 has an invalid length. [ 412.358010][ T9212] netlink: 'syz.2.1413': attribute type 1 has an invalid length. [ 412.460780][ T9212] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1413'. [ 413.202616][ T9222] xt_hashlimit: invalid rate [ 414.827918][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1427'. [ 415.995599][ T9289] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 416.226251][ T9261] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1431'. [ 416.251946][ T9261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.267656][ T9261] openvswitch: netlink: Actions may not be safe on all matching packets [ 416.295155][ T4650] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 416.302948][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1431'. [ 416.889012][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1447'. [ 416.961132][ T4650] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 416.977615][ T4650] usb 4-1: can't read configurations, error -71 [ 419.096167][ T9320] IPv6: addrconf: prefix option has invalid lifetime [ 419.142441][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 419.583618][ T9337] 9pnet: Insufficient options for proto=fd [ 419.651073][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1458'. [ 422.511092][ T9388] autofs4:pid:9388:autofs_fill_super: called with bogus options [ 422.545100][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 422.581219][ T9394] openvswitch: netlink: Actions may not be safe on all matching packets [ 422.772145][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1476'. [ 422.805242][ T9401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1479'. [ 422.853085][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 424.231631][ T9423] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 424.671971][ T9442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1493'. [ 424.702794][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 424.746108][ T9444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1494'. [ 424.791619][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'. [ 425.187824][ T9452] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 425.214579][ T9452] CIFS: Attempting to mount \\127.0.0.1\share [ 425.221487][ T9452] CIFS: VFS: No username specified [ 428.320834][ T9466] netlink: 'syz.2.1502': attribute type 30 has an invalid length. [ 428.765690][ T9489] autofs4:pid:9489:autofs_fill_super: called with bogus options [ 430.896881][ T4661] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 431.678901][ T4661] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 431.688196][ T4661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.708922][ T4661] usb 4-1: Product: syz [ 431.720700][ T4661] usb 4-1: Manufacturer: syz [ 431.725850][ T4661] usb 4-1: SerialNumber: syz [ 433.763809][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 433.927942][ T4661] usb 4-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 433.998821][ T4661] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 434.095507][ T4661] usb 4-1: USB disconnect, device number 43 [ 434.462622][ T9508] udevd[9508]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.973651][ T9539] autofs4:pid:9539:autofs_fill_super: called with bogus options [ 435.005803][ T4337] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.355909][ T9544] bond1 (unregistering): Released all slaves [ 435.463543][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1527'. [ 435.481403][ T4661] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 435.747600][ T4661] usb 4-1: device descriptor read/64, error -71 [ 436.115982][ T4661] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 437.001564][ T4661] usb 4-1: device descriptor read/64, error -71 [ 437.171598][ T4661] usb usb4-port1: attempt power cycle [ 437.183479][ T9574] ip_tables: iptables: counters copy to user failed while replacing table [ 437.234571][ T9577] ip_tables: iptables: counters copy to user failed while replacing table [ 437.296349][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'. [ 437.750787][ T4661] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 437.861740][ T4661] usb 4-1: device descriptor read/8, error -71 [ 438.298727][ T4661] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 438.323744][ T9594] autofs4:pid:9594:autofs_fill_super: called with bogus options [ 438.486361][ T4661] usb 4-1: device descriptor read/8, error -71 [ 438.646686][ T4661] usb usb4-port1: unable to enumerate USB device [ 439.814990][ T4650] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 439.950508][ T9618] Error parsing options; rc = [-22] [ 439.960832][ T9617] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1554'. [ 440.159524][ T4650] usb 4-1: Using ep0 maxpacket: 16 [ 440.360904][ T4650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.391658][ T4650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.414107][ T4650] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 440.459151][ T4650] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 440.468251][ T4650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.535470][ T4650] usb 4-1: config 0 descriptor?? [ 440.818674][ T9641] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1562'. [ 441.515379][ T4650] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 441.524390][ T4650] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 441.620523][ T4650] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input9 [ 441.781474][ T4650] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 442.259649][ T9667] autofs4:pid:9667:autofs_fill_super: called with bogus options [ 443.066551][ T1110] usb 4-1: reset high-speed USB device number 48 using dummy_hcd [ 444.274009][ T4653] usb 4-1: USB disconnect, device number 48 [ 445.150210][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1585'. [ 446.498797][ T9742] 9pnet: Insufficient options for proto=fd [ 449.785153][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1601'. [ 450.842087][ T4940] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 450.922540][ T9803] tipc: Resetting bearer [ 451.197391][ T4940] usb 4-1: Using ep0 maxpacket: 32 [ 451.310053][ T9799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1606'. [ 451.344234][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'. [ 451.388622][ T9812] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.1610'. [ 451.426585][ T9812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1610'. [ 452.859294][ T9831] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1615'. [ 453.674015][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1624'. [ 453.753644][ T4940] usb 4-1: unable to get BOS descriptor or descriptor too short [ 453.877133][ T4940] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 453.884837][ T4940] usb 4-1: can't read configurations, error -71 [ 454.167056][ T9864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1630'. [ 455.464238][ T9887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1637'. [ 456.487908][ T9903] kAFS: unable to lookup cell '(/' [ 456.806228][ T9909] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1645'. [ 457.390585][ T9919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1647'. [ 459.287547][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'. [ 461.136632][ T9965] device veth1_virt_wifi entered promiscuous mode [ 461.716698][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1661'. [ 461.743994][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1663'. [ 461.808525][ T9975] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 463.228071][ T1110] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 463.726732][ T1110] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 463.748283][ T1110] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 463.788264][ T1110] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 463.822781][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.915015][ T1110] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 464.294685][T10008] netlink: 'syz.5.1675': attribute type 15 has an invalid length. [ 464.372481][T10009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.944937][T10012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1668'. [ 466.150188][ T4661] usb 4-1: USB disconnect, device number 51 [ 467.740555][T10016] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 10016 comm: syz.4.1678) [ 468.633079][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 468.639505][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 468.702852][T10052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1687'. [ 468.733519][T10052] IPv6: sit1: Disabled Multicast RS [ 469.304186][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 469.619605][T10065] xt_connbytes: Forcing CT accounting to be enabled [ 469.669629][ T4464] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 470.646168][T10080] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1700'. [ 470.722141][T10082] netlink: 'syz.2.1700': attribute type 10 has an invalid length. [ 470.741890][T10081] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1698'. [ 470.756086][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.763435][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.817090][T10081] unsupported nlmsg_type 40 [ 470.843938][T10082] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.851120][T10082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.858669][T10082] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.865774][T10082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.025152][T10082] device bridge0 entered promiscuous mode [ 471.081223][T10082] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 471.144347][T10080] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:5cd1:93ff:fe30:415a error=-28 [ 471.234984][T10080] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aaaa error=-28 [ 471.310278][T10092] netlink: 628 bytes leftover after parsing attributes in process `syz.5.1705'. [ 471.930628][T10080] infiniband syz0: set active [ 471.954764][T10080] infiniband syz0: added bridge_slave_1 [ 472.001139][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 472.063345][T10080] infiniband syz0: Couldn't open port 1 [ 472.089791][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 472.464539][T10080] RDS/IB: syz0: added [ 472.525400][T10080] smc: adding ib device syz0 with port count 1 [ 472.581559][T10080] smc: ib device syz0 port 1 has pnetid [ 474.785252][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1718'. [ 476.891253][ T4940] Bluetooth: hci5: command 0x0405 tx timeout [ 477.446625][T10186] serio: Serial port ptm0 [ 478.505160][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1739'. [ 479.311167][T10227] netlink: 'syz.5.1746': attribute type 1 has an invalid length. [ 479.389561][T10227] netlink: 'syz.5.1746': attribute type 1 has an invalid length. [ 479.434112][T10230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1748'. [ 479.477212][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1746'. [ 479.892089][T10234] ksmbd: Unknown IPC event: 10, ignore. [ 480.440720][T10237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1750'. [ 480.562400][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1751'. [ 480.901507][T10245] overlayfs: failed to resolve './file0': -2 [ 480.970649][T10245] SET target dimension over the limit! [ 481.848171][ T4661] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 481.944683][T10258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1759'. [ 482.408658][ T4661] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.432478][ T4661] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.455930][ T4661] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.494093][ T4661] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 482.517518][ T4661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.576327][ T4661] usb 4-1: config 0 descriptor?? [ 482.916426][T10251] udc-core: couldn't find an available UDC or it's busy [ 482.937938][T10266] fuse: Unknown parameter '0x0000000000000004' [ 482.962955][T10251] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 484.000300][ T4661] usbhid 4-1:0.0: can't add hid device: -71 [ 484.006656][ T4661] usbhid: probe of 4-1:0.0 failed with error -71 [ 484.085973][T10280] ksmbd: Unknown IPC event: 10, ignore. [ 484.149685][ T4661] usb 4-1: USB disconnect, device number 52 [ 485.630971][T10301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1772'. [ 485.707122][T10304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1773'. [ 485.793727][T10307] vcan0: tx drop: invalid da for name 0x00000000000000ec [ 486.375148][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 486.487948][T10335] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1786'. [ 489.654699][T10379] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1798'. [ 489.851945][T10387] fuse: Bad value for 'fd' [ 490.132355][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 490.688864][ T4648] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 490.960191][ T4648] usb 4-1: device descriptor read/64, error -71 [ 491.361822][ T4648] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 491.707002][ T4648] usb 4-1: device descriptor read/64, error -71 [ 492.542576][T10448] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 492.833856][ T4648] usb usb4-port1: attempt power cycle [ 493.488338][ T4648] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 493.664266][ T4648] usb 4-1: device descriptor read/8, error -71 [ 496.185624][T10486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1841'. [ 496.293543][T10489] ksmbd: Unknown IPC event: 10, ignore. [ 496.569553][T10498] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 496.723034][T10498] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 497.194657][T10519] tmpfs: Bad value for 'mpol' [ 498.259601][T10537] ohci-platform QEMU0001:00: IRQ index 0 not found [ 498.862877][T10541] ksmbd: Unknown IPC event: 10, ignore. [ 499.141105][T10513] CIFS: Attempting to mount \\127.0.0.1\test [ 499.186148][T10513] CIFS: VFS: Error connecting to socket. Aborting operation. [ 499.235852][T10513] CIFS: VFS: cifs_mount failed w/return code = -111 [ 499.450621][T10543] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1855'. [ 499.676283][ T4940] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 500.044768][ T4940] usb 4-1: Using ep0 maxpacket: 32 [ 500.265116][ T4940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.530626][ T4940] usb 4-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 500.557303][ T4940] usb 4-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 500.609180][ T4940] usb 4-1: Product: syz [ 500.638751][ T4940] usb 4-1: Manufacturer: syz [ 501.185989][ T4940] usb 4-1: config 0 descriptor?? [ 501.282722][T10562] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1862'. [ 501.806976][ T4940] usbhid 4-1:0.0: can't add hid device: -71 [ 501.835340][ T4940] usbhid: probe of 4-1:0.0 failed with error -71 [ 501.920616][ T4940] usb 4-1: USB disconnect, device number 57 [ 503.293546][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'. [ 503.874623][T10586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1869'. [ 503.952820][T10592] xt_l2tp: invalid flags combination: 0 [ 503.965417][T10589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1871'. [ 504.164754][T10591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1870'. [ 504.181001][T10592] 9pnet: Insufficient options for proto=fd [ 504.922244][ T4464] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 505.528641][T10624] sctp: [Deprecated]: syz.0.1880 (pid 10624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.528641][T10624] Use struct sctp_sack_info instead [ 505.837760][ T4940] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 506.136795][T10631] overlayfs: failed to clone upperpath [ 506.659811][ T4940] usb 4-1: device descriptor read/64, error -71 [ 506.732841][T10638] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1884'. [ 507.056890][ T4940] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 507.351414][ T4940] usb 4-1: device descriptor read/64, error -71 [ 507.590226][ T4940] usb usb4-port1: attempt power cycle [ 508.466963][T10649] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1888'. [ 509.053617][ T4940] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 509.334130][ T4940] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 510.406795][ T4940] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 511.157797][ T4940] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 511.198879][ T4940] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 511.286522][ T4940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.390566][ T4940] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 512.716277][T10687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1889'. [ 514.187917][ T4292] usb 4-1: USB disconnect, device number 61 [ 514.436759][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 514.691048][T10728] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1914'. [ 515.519766][T10699] x_tables: unsorted underflow at hook 2 [ 515.808263][T10742] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1918'. [ 516.125330][ T4646] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 516.637390][ T4646] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 516.650107][ T4646] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 516.678979][ T4646] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 516.701343][ T4646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.788744][ T4646] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 518.124265][T10766] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1926'. [ 518.306622][T10765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1920'. [ 518.751983][T10775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1930'. [ 519.288790][T10779] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1932'. [ 519.487914][ T4648] usb 4-1: USB disconnect, device number 62 [ 520.555358][T10798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1938'. [ 520.800006][ T26] audit: type=1326 audit(1787320868.984:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.3.1942" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4be5d50d9 code=0x0 [ 520.921906][T10817] syz.3.1942 (10817): attempted to duplicate a private mapping with mremap. This is not supported. [ 522.662440][T10829] xt_socket: unknown flags 0x50 [ 522.926030][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 522.955312][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 522.998064][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1945'. [ 523.133654][T10811] tmpfs: Unknown parameter 'noL' [ 523.172525][T10819] 9pnet: p9_fd_create_tcp (10819): problem connecting socket to 127.0.0.1 [ 523.303612][T10854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1956'. [ 524.328566][T10886] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1969'. [ 525.007957][T10896] 9pnet: Insufficient options for proto=fd [ 525.090344][T10899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1973'. [ 526.800171][T10878] fuse: Bad value for 'fd' [ 527.486281][T10939] xt_bpf: check failed: parse error [ 529.515269][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1998'. [ 529.801890][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1999'. [ 529.821896][ T4292] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 529.858363][ T26] audit: type=1326 audit(1787320877.334:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.5.2001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78a7570d9 code=0x7fc00000 [ 530.357954][ T4292] usb 4-1: config 2 has an invalid interface number: 79 but max is 0 [ 530.372419][ T4292] usb 4-1: config 2 has no interface number 0 [ 530.406817][ T4292] usb 4-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 530.451288][ T4292] usb 4-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 1023 [ 530.498856][ T4292] usb 4-1: config 2 interface 79 has no altsetting 0 [ 530.740418][ T4292] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 530.788684][ T4292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.823983][ T4292] usb 4-1: Product: syz [ 530.828251][ T4292] usb 4-1: Manufacturer: syz [ 530.899848][ T4292] usb 4-1: SerialNumber: syz [ 530.989462][T10970] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 531.010758][T10970] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 531.400550][ T4292] esd_usb2 4-1:2.79: sending version message failed [ 531.407280][ T4292] esd_usb2: probe of 4-1:2.79 failed with error -22 [ 531.489585][ T4292] usb 4-1: USB disconnect, device number 63 [ 531.945601][ T26] audit: type=1326 audit(1787320879.263:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.5.2001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa78a7570d9 code=0x7fc00000 [ 532.363098][ T4646] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 533.658977][ T4646] usb 4-1: Using ep0 maxpacket: 16 [ 533.937252][ T4646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.956082][ T4646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.023376][ T4646] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 534.064494][ T4646] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 534.102966][ T4646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.153259][ T4646] usb 4-1: config 0 descriptor?? [ 534.768004][ T4646] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 535.198794][ T4646] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 535.210321][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 535.216681][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.224221][ T4646] microsoft 0003:045E:07DA.0005: no inputs found [ 535.230607][ T4646] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 536.641043][ T4940] usb 4-1: USB disconnect, device number 64 [ 537.045431][T11056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2024'. [ 537.853738][T11068] device ipvlan2 entered promiscuous mode [ 539.729219][ T4398] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 541.915694][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2043'. [ 541.945540][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 543.625532][T11157] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2058'. [ 543.851691][ T4661] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 544.193938][ T4661] usb 4-1: Using ep0 maxpacket: 8 [ 544.359827][ T4661] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 544.382214][ T4661] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 544.392305][ T4661] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 544.444033][ T4661] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.482123][ T4661] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.505688][ T4661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.553519][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2054'. [ 544.830506][ T4661] usb 4-1: GET_CAPABILITIES returned 0 [ 544.861424][ T4661] usbtmc 4-1:16.0: can't read capabilities [ 545.141850][ T4661] usb 4-1: USB disconnect, device number 65 [ 546.138390][T11205] nfs4: Unknown parameter '$:ذ9' [ 550.612901][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2097'. [ 551.855234][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'. [ 554.989270][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 555.000417][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 562.400074][T11348] netlink: 'syz.0.2121': attribute type 1 has an invalid length. [ 562.444051][T11348] netlink: 'syz.0.2121': attribute type 1 has an invalid length. [ 562.493477][T11348] netlink: 'syz.0.2121': attribute type 2 has an invalid length. [ 562.574538][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2121'. [ 562.738730][T11364] jffs2: notice: (11364) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 566.162780][T11402] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2141'. [ 567.444479][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2142'. [ 567.510218][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2142'. [ 569.974557][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'. [ 571.927571][T11469] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2163'. [ 572.082393][ T4292] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 572.581759][ T4292] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 572.591659][ T4292] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 572.646895][ T4292] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 572.656002][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.785664][ T4292] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 573.654235][T11483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2169'. [ 573.682776][T11461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2162'. [ 574.412245][ T4439] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 575.527539][ T1110] usb 4-1: USB disconnect, device number 67 [ 576.670430][ C1] syz_tun: tun_net_xmit 90 [ 577.785610][ C1] syz_tun: tun_net_xmit 90 [ 578.365066][T11574] device syzkaller0 entered promiscuous mode [ 578.501371][T11585] tipc: Enabling of bearer rejected, failed to enable media [ 578.913232][ C1] syz_tun: tun_net_xmit 90 [ 579.136850][T11612] netlink: 'syz.2.2219': attribute type 22 has an invalid length. [ 579.172319][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'. [ 579.181246][T11612] bond0: option ad_select: unable to set because the bond device is up [ 579.585894][T11631] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2227'. [ 579.649922][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2227'. [ 579.693999][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2227'. [ 579.726426][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2227'. [ 579.887874][T11640] netlink: 'syz.0.2231': attribute type 30 has an invalid length. [ 579.917740][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2231'. [ 579.987743][T11640] bond0: option arp_missed_max: invalid value (0) [ 580.033845][T11640] bond0: option arp_missed_max: allowed values 1 - 255 [ 580.068105][ C1] syz_tun: tun_net_xmit 90 [ 581.205916][ C1] syz_tun: tun_net_xmit 90 [ 582.292991][ C1] syz_tun: tun_net_xmit 90 [ 582.900551][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2248'. [ 583.130030][T11754] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 583.170377][T11754] netlink: 'syz.4.2254': attribute type 2 has an invalid length. [ 583.390727][T11762] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2256'. [ 583.420503][ C1] syz_tun: tun_net_xmit 90 [ 584.562974][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 584.601689][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 584.617563][ C1] syz_tun: tun_net_xmit 90 [ 584.677629][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 584.727527][T11801] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 584.764660][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 584.784592][T11801] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 584.812189][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 584.828904][T11801] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 584.863540][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 584.880769][T11801] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 584.929754][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 584.985259][T11801] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 585.019674][T11808] netlink: 'syz.4.2265': attribute type 1 has an invalid length. [ 585.055398][T11801] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 585.129189][T11801] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 585.156452][T11801] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 585.188121][T11801] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 585.212557][T11801] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 585.312900][ T4232] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 585.761183][ C1] syz_tun: tun_net_xmit 90 [ 585.893698][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.934271][ T4232] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 585.996098][T11828] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2273'. [ 586.200513][ T4232] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 586.224896][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.254085][ T4232] usb 4-1: Product: syz [ 586.258334][ T4232] usb 4-1: Manufacturer: syz [ 586.286554][ T4232] usb 4-1: SerialNumber: syz [ 586.312933][ T4232] usb 4-1: config 0 descriptor?? [ 586.622401][ T4232] usb 4-1: USB disconnect, device number 68 [ 586.901812][ C1] syz_tun: tun_net_xmit 90 [ 587.801713][ T4232] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 588.027690][ C1] syz_tun: tun_net_xmit 90 [ 588.280574][ T4232] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 588.313080][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.372480][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 588.381534][ T4232] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.630207][ T4232] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 588.665077][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 588.673150][ T4232] usb 4-1: Product: syz [ 588.719369][ T4232] usb 4-1: Manufacturer: syz [ 588.815951][ T4232] cdc_wdm 4-1:1.0: skipping garbage [ 588.821304][ T4232] cdc_wdm 4-1:1.0: skipping garbage [ 588.875991][ T4232] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 588.882125][ T4232] cdc_wdm 4-1:1.0: Unknown control protocol [ 589.093259][ T4648] usb 4-1: USB disconnect, device number 69 [ 589.152875][ C1] syz_tun: tun_net_xmit 90 [ 590.273391][ C1] syz_tun: tun_net_xmit 90 [ 590.325264][ T4648] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 590.680052][ T4648] usb 4-1: Using ep0 maxpacket: 32 [ 590.916147][ T4648] usb 4-1: unable to get BOS descriptor or descriptor too short [ 591.014157][ T4648] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 591.037167][ T4648] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 591.263632][ T4648] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 591.286797][ T4648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.311861][ T4648] usb 4-1: Product: syz [ 591.322980][ T4648] usb 4-1: Manufacturer: syz [ 591.327946][ T4648] usb 4-1: SerialNumber: syz [ 591.375166][T11920] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 591.407031][ C1] syz_tun: tun_net_xmit 90 [ 591.647481][T11920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2309'. [ 591.726980][T11920] udc-core: couldn't find an available UDC or it's busy [ 591.775383][T11920] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 591.865162][T11920] udc-core: couldn't find an available UDC or it's busy [ 591.872185][T11920] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 591.988560][T11920] udc-core: couldn't find an available UDC or it's busy [ 592.019764][T11920] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 592.244511][ T4648] usb 4-1: MIDIStreaming interface descriptor not found [ 592.453438][ T4648] usb 4-1: USB disconnect, device number 70 [ 592.544478][ C1] syz_tun: tun_net_xmit 90 [ 592.754136][T11969] fuse: Bad value for 'fd' [ 593.231177][T11989] netlink: 'syz.4.2332': attribute type 1 has an invalid length. [ 593.276550][T11989] netlink: 'syz.4.2332': attribute type 2 has an invalid length. [ 593.656712][ C1] syz_tun: tun_net_xmit 90 [ 594.782802][ C1] syz_tun: tun_net_xmit 90 [ 595.361219][ T4648] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 595.543020][ T26] audit: type=1326 audit(1787320937.946:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.2355" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78a7570d9 code=0x7ffc0000 [ 595.623699][ T26] audit: type=1326 audit(1787320937.983:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.2355" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78a7570d9 code=0x7ffc0000 [ 595.661124][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805fbfdc00: rx timeout, send abort [ 595.693131][ T26] audit: type=1326 audit(1787320937.983:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.2355" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78a7570d9 code=0x7ffc0000 [ 595.729257][ T4648] usb 4-1: Using ep0 maxpacket: 32 [ 595.786199][ T26] audit: type=1326 audit(1787320937.983:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.2355" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa78a7570d9 code=0x7ffc0000 [ 595.880610][ T26] audit: type=1326 audit(1787320937.983:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.2355" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78a7570d9 code=0x7ffc0000 [ 595.923426][ C1] syz_tun: tun_net_xmit 90 [ 595.955302][ T26] audit: type=1326 audit(1787320937.983:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.2355" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78a7570d9 code=0x7ffc0000 [ 595.995858][ T4648] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 596.009147][ T4648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 596.045866][ T26] audit: type=1326 audit(1787320937.983:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.2355" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78a7570d9 code=0x7ffc0000 [ 596.066393][ T4648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 596.121739][ T26] audit: type=1326 audit(1787320937.983:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.2355" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa78a7570d9 code=0x7ffc0000 [ 596.194193][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807cc18800: rx timeout, send abort [ 596.206756][ T26] audit: type=1326 audit(1787320937.983:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.2355" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78a7570d9 code=0x7ffc0000 [ 596.237426][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805fbfdc00: abort rx timeout. Force session deactivation [ 596.269800][ T26] audit: type=1326 audit(1787320937.983:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.5.2355" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa78a7570d9 code=0x7ffc0000 [ 596.435738][ T4648] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 596.446560][ T4648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.483149][ T4648] usb 4-1: Product: syz [ 596.518993][ T4648] usb 4-1: Manufacturer: syz [ 596.547915][ T4648] usb 4-1: SerialNumber: syz [ 596.574957][ T4648] usb 4-1: config 0 descriptor?? [ 596.754150][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807cc18800: abort rx timeout. Force session deactivation [ 596.903211][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2346'. [ 597.053606][ C1] syz_tun: tun_net_xmit 90 [ 597.096479][T12066] netlink: 'syz.0.2362': attribute type 3 has an invalid length. [ 597.814516][T12075] [ 597.816906][T12075] ============================= [ 597.850078][ C1] syz_tun: tun_net_xmit 46 [ 597.880225][T12075] WARNING: suspicious RCU usage [ 597.912409][T12075] syzkaller #0 Not tainted [ 597.918167][T12075] ----------------------------- [ 597.978296][T12075] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 598.014395][T12075] [ 598.014395][T12075] other info that might help us debug this: [ 598.014395][T12075] [ 598.069670][T12075] [ 598.069670][T12075] rcu_scheduler_active = 2, debug_locks = 1 [ 598.105142][T12075] 1 lock held by syz.0.2365/12075: [ 598.121826][T12075] #0: ffffffff8d44d988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 598.153231][T12075] [ 598.153231][T12075] stack backtrace: [ 598.161694][ C1] syz_tun: tun_net_xmit 90 [ 598.181330][T12075] CPU: 1 PID: 12075 Comm: syz.0.2365 Not tainted syzkaller #0 [ 598.188969][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.199066][T12075] Call Trace: [ 598.202472][T12075] [ 598.205530][T12075] dump_stack_lvl+0x188/0x250 [ 598.210289][T12075] ? load_image+0x410/0x410 [ 598.214909][T12075] ? show_regs_print_info+0x20/0x20 [ 598.220165][T12075] ? lockdep_rcu_suspicious+0x110/0x180 [ 598.225757][T12075] ? local_bh_enable+0x20/0x20 [ 598.230560][T12075] rhltable_lookup+0x787/0x7a0 [ 598.235352][T12075] ? mark_lock+0x94/0x320 [ 598.239761][T12075] ? mr_mfc_find_parent+0x190/0x190 [ 598.244972][T12075] ? local_bh_enable+0x20/0x20 [ 598.249751][T12075] ? lock_chain_count+0x20/0x20 [ 598.254670][T12075] mr_mfc_find_any_parent+0xb7/0x1d0 [ 598.259970][T12075] ? local_bh_enable+0x20/0x20 [ 598.264752][T12075] ip_mr_forward+0x247/0xf60 [ 598.269362][T12075] ipmr_mfc_add+0x2273/0x2bd0 [ 598.274061][T12075] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 598.279022][T12075] ? __lock_acquire+0x7b50/0x7b50 [ 598.284072][T12075] ip_mroute_setsockopt+0xecd/0x1230 [ 598.289377][T12075] ? ipmr_rule_default+0x70/0x70 [ 598.294331][T12075] ? __might_sleep+0xf0/0xf0 [ 598.299013][T12075] ip_setsockopt+0x568/0x31e0 [ 598.303709][T12075] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 598.309088][T12075] ? aa_sk_perm+0x7dc/0x910 [ 598.313649][T12075] ? aa_af_perm+0x340/0x340 [ 598.318156][T12075] ? __fget_files+0x402/0x470 [ 598.322855][T12075] ? aa_sock_opt_perm+0x74/0x100 [ 598.327799][T12075] ? sock_common_setsockopt+0x32/0xb0 [ 598.333189][T12075] ? raw_setsockopt+0xc2/0x170 [ 598.337975][T12075] ? sock_common_recvmsg+0x1c0/0x1c0 [ 598.343265][T12075] __sys_setsockopt+0x2bf/0x3d0 [ 598.348174][T12075] __x64_sys_setsockopt+0xb1/0xc0 [ 598.353211][T12075] do_syscall_64+0x4c/0xa0 [ 598.357650][T12075] ? clear_bhb_loop+0x30/0x80 [ 598.362420][T12075] ? clear_bhb_loop+0x30/0x80 [ 598.367111][T12075] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 598.373016][T12075] RIP: 0033:0x7f95c17790d9 [ 598.377495][T12075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.397278][T12075] RSP: 002b:00007f95bf9d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 598.405761][T12075] RAX: ffffffffffffffda RBX: 00007f95c1a00fa0 RCX: 00007f95c17790d9 [ 598.413749][T12075] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 598.421815][T12075] RBP: 00007f95c1810024 R08: 000000000000003c R09: 0000000000000000 [ 598.429822][T12075] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 598.437818][T12075] R13: 00007f95c1a01038 R14: 00007f95c1a00fa0 R15: 00007ffcc9e3c978 [ 598.445811][T12075] [ 599.232044][T12075] [ 599.241191][T12075] ============================= [ 599.267915][T12075] WARNING: suspicious RCU usage [ 599.285657][T12075] syzkaller #0 Not tainted [ 599.290528][ C1] syz_tun: tun_net_xmit 90 [ 599.301602][T12075] ----------------------------- [ 599.315136][T12075] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 599.341709][T12075] [ 599.341709][T12075] other info that might help us debug this: [ 599.341709][T12075] [ 599.366438][T12075] [ 599.366438][T12075] rcu_scheduler_active = 2, debug_locks = 1 [ 599.400337][T12075] 1 lock held by syz.0.2365/12075: [ 599.412380][T12075] #0: ffffffff8d44d988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 599.437507][T12075] [ 599.437507][T12075] stack backtrace: [ 599.460377][T12075] CPU: 1 PID: 12075 Comm: syz.0.2365 Not tainted syzkaller #0 [ 599.467874][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.477947][T12075] Call Trace: [ 599.481278][T12075] [ 599.484243][T12075] dump_stack_lvl+0x188/0x250 [ 599.488969][T12075] ? load_image+0x410/0x410 [ 599.493518][T12075] ? show_regs_print_info+0x20/0x20 [ 599.498781][T12075] ? lockdep_rcu_suspicious+0x110/0x180 [ 599.504369][T12075] ? local_bh_enable+0x20/0x20 [ 599.509185][T12075] rhltable_lookup+0x512/0x7a0 [ 599.514002][T12075] ? local_bh_enable+0x20/0x20 [ 599.518806][T12075] ? mr_mfc_find_parent+0x190/0x190 [ 599.524041][T12075] ? local_bh_enable+0x20/0x20 [ 599.528843][T12075] ? lock_chain_count+0x20/0x20 [ 599.533814][T12075] mr_mfc_find_any_parent+0xb7/0x1d0 [ 599.539116][T12075] ? local_bh_enable+0x20/0x20 [ 599.543891][T12075] ip_mr_forward+0x247/0xf60 [ 599.548501][T12075] ipmr_mfc_add+0x2273/0x2bd0 [ 599.553220][T12075] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 599.558168][T12075] ? __lock_acquire+0x7b50/0x7b50 [ 599.563221][T12075] ip_mroute_setsockopt+0xecd/0x1230 [ 599.568519][T12075] ? ipmr_rule_default+0x70/0x70 [ 599.573489][T12075] ? __might_sleep+0xf0/0xf0 [ 599.578086][T12075] ip_setsockopt+0x568/0x31e0 [ 599.582775][T12075] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 599.588151][T12075] ? aa_sk_perm+0x7dc/0x910 [ 599.592678][T12075] ? aa_af_perm+0x340/0x340 [ 599.597189][T12075] ? __fget_files+0x402/0x470 [ 599.601868][T12075] ? aa_sock_opt_perm+0x74/0x100 [ 599.606839][T12075] ? sock_common_setsockopt+0x32/0xb0 [ 599.612241][T12075] ? raw_setsockopt+0xc2/0x170 [ 599.617039][T12075] ? sock_common_recvmsg+0x1c0/0x1c0 [ 599.622359][T12075] __sys_setsockopt+0x2bf/0x3d0 [ 599.627237][T12075] __x64_sys_setsockopt+0xb1/0xc0 [ 599.632276][T12075] do_syscall_64+0x4c/0xa0 [ 599.636700][T12075] ? clear_bhb_loop+0x30/0x80 [ 599.641389][T12075] ? clear_bhb_loop+0x30/0x80 [ 599.646075][T12075] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 599.651982][T12075] RIP: 0033:0x7f95c17790d9 [ 599.656407][T12075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.676025][T12075] RSP: 002b:00007f95bf9d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 599.684473][T12075] RAX: ffffffffffffffda RBX: 00007f95c1a00fa0 RCX: 00007f95c17790d9 [ 599.692452][T12075] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 599.700429][T12075] RBP: 00007f95c1810024 R08: 000000000000003c R09: 0000000000000000 [ 599.708407][T12075] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 599.716400][T12075] R13: 00007f95c1a01038 R14: 00007f95c1a00fa0 R15: 00007ffcc9e3c978 [ 599.724586][T12075] [ 599.762935][T12075] [ 599.765343][T12075] ============================= [ 599.770220][T12075] WARNING: suspicious RCU usage [ 599.817129][T12075] syzkaller #0 Not tainted [ 599.821634][T12075] ----------------------------- [ 599.826529][T12075] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 599.899526][T12075] [ 599.899526][T12075] other info that might help us debug this: [ 599.899526][T12075] [ 600.000925][T12075] [ 600.000925][T12075] rcu_scheduler_active = 2, debug_locks = 1 [ 600.059594][T12075] 1 lock held by syz.0.2365/12075: [ 600.064771][T12075] #0: ffffffff8d44d988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 600.160812][T12075] [ 600.160812][T12075] stack backtrace: [ 600.179686][T12075] CPU: 0 PID: 12075 Comm: syz.0.2365 Not tainted syzkaller #0 [ 600.187339][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.197440][T12075] Call Trace: [ 600.200750][T12075] [ 600.203712][T12075] dump_stack_lvl+0x188/0x250 [ 600.208435][T12075] ? load_image+0x410/0x410 [ 600.213013][T12075] ? show_regs_print_info+0x20/0x20 [ 600.218268][T12075] ? lockdep_rcu_suspicious+0x110/0x180 [ 600.223850][T12075] ? local_bh_enable+0x20/0x20 [ 600.228669][T12075] rhltable_lookup+0x5fc/0x7a0 [ 600.233480][T12075] ? local_bh_enable+0x20/0x20 [ 600.238386][T12075] ? mr_mfc_find_parent+0x190/0x190 [ 600.243628][T12075] ? local_bh_enable+0x20/0x20 [ 600.248447][T12075] ? lock_chain_count+0x20/0x20 [ 600.253350][T12075] mr_mfc_find_any_parent+0xb7/0x1d0 [ 600.258674][T12075] ? local_bh_enable+0x20/0x20 [ 600.263475][T12075] ip_mr_forward+0x247/0xf60 [ 600.268114][T12075] ipmr_mfc_add+0x2273/0x2bd0 [ 600.272835][T12075] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 600.277816][T12075] ? __lock_acquire+0x7b50/0x7b50 [ 600.282911][T12075] ip_mroute_setsockopt+0xecd/0x1230 [ 600.288248][T12075] ? ipmr_rule_default+0x70/0x70 [ 600.293239][T12075] ? __might_sleep+0xf0/0xf0 [ 600.297894][T12075] ip_setsockopt+0x568/0x31e0 [ 600.302623][T12075] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 600.308034][T12075] ? aa_sk_perm+0x7dc/0x910 [ 600.312681][T12075] ? aa_af_perm+0x340/0x340 [ 600.317224][T12075] ? __fget_files+0x402/0x470 [ 600.321939][T12075] ? aa_sock_opt_perm+0x74/0x100 [ 600.326917][T12075] ? sock_common_setsockopt+0x32/0xb0 [ 600.332324][T12075] ? raw_setsockopt+0xc2/0x170 [ 600.337124][T12075] ? sock_common_recvmsg+0x1c0/0x1c0 [ 600.342445][T12075] __sys_setsockopt+0x2bf/0x3d0 [ 600.347349][T12075] __x64_sys_setsockopt+0xb1/0xc0 [ 600.352416][T12075] do_syscall_64+0x4c/0xa0 [ 600.356864][T12075] ? clear_bhb_loop+0x30/0x80 [ 600.361579][T12075] ? clear_bhb_loop+0x30/0x80 [ 600.366302][T12075] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 600.372230][T12075] RIP: 0033:0x7f95c17790d9 [ 600.376683][T12075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.396328][T12075] RSP: 002b:00007f95bf9d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 600.404795][T12075] RAX: ffffffffffffffda RBX: 00007f95c1a00fa0 RCX: 00007f95c17790d9 [ 600.412806][T12075] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 600.420817][T12075] RBP: 00007f95c1810024 R08: 000000000000003c R09: 0000000000000000 [ 600.428831][T12075] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 600.436839][T12075] R13: 00007f95c1a01038 R14: 00007f95c1a00fa0 R15: 00007ffcc9e3c978 [ 600.444856][T12075] [ 600.492825][ C1] syz_tun: tun_net_xmit 90 [ 601.460187][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 601.466577][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 601.628022][ C1] syz_tun: tun_net_xmit 90 [ 601.708297][ T7] usb 4-1: USB disconnect, device number 71 [ 602.759233][ C1] syz_tun: tun_net_xmit 90 [ 603.892164][ C1] syz_tun: tun_net_xmit 90 [ 605.026214][ C1] syz_tun: tun_net_xmit 90 [ 606.137399][ C1] syz_tun: tun_net_xmit 90 [ 607.277525][ C1] syz_tun: tun_net_xmit 90