last executing test programs: 10.430226777s ago: executing program 3 (id=6831): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0xfa11, 0xffbffffb}, 0x0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000000c0)={0xe9, 0x9eee}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x0, 0x10000, 0x1000, &(0x7f0000471000/0x1000)=nil, 0x40, r4}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0/file3\x00', 0xd0000080) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 9.540144478s ago: executing program 3 (id=6835): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2000019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',grou', @ANYRESDEC], 0xfc, 0x0, 0x0) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@known='system.sockprotoname\x00') munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) msgsnd(0x0, 0x0, 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x42a) semop(r1, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 8.551512483s ago: executing program 3 (id=6842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x494c4afbdc4abfd0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x9, 0x3, 0x0, 0x0, {0xb, 0x0, 0xa}, [@NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x4004080) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0xd00, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000200)) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}}, 0x40020) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4084) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r9 = socket(0x18, 0x800, 0x0) sendfile(r9, r8, 0x0, 0x8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 8.254513007s ago: executing program 1 (id=6845): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0xfa11, 0xffbffffb}, 0x0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000000c0)={0xe9, 0x9eee}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x0, 0x10000, 0x1000, &(0x7f0000471000/0x1000)=nil, 0x40, r4}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0/file3\x00', 0xd0000080) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 6.942542187s ago: executing program 3 (id=6853): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x2020) preadv2(r0, &(0x7f0000000280)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x2, 0x2, 0x11a, 0x16) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20801, 0x4) io_setup(0x501, &(0x7f0000000100)=0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r6 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r6, 0x0) ftruncate(r6, 0x8000000) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r4, 0x400000000000007c) r8 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000f80)='G', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r5, 0x47) close_range(r3, 0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x8, r1, &(0x7f0000000000)='h', 0x1, 0x310d, 0x0, 0x0, r1}]) 6.941656601s ago: executing program 1 (id=6854): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000002a40)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x32, 0x6, 0x0, 0x6, 0x0, [@mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}}}, @hopopts_2292={{0x120, 0x29, 0x36, {0x0, 0x20, '\x00', [@generic={0x76, 0x69, "bb27f48ec6185c2b33b0fc1798589e53edc0b9f0f692d998bf1775fd2d92707046779de1b854465f04e8243e2ca533f4647d8606dbade54f5f626200581f090c907fe44aab0e231745732af7efd1be31d6d5f28e5affa58d8e4f9ce355129e288fb411146063d3af29"}, @pad1, @pad1, @generic={0x1, 0x6c, "f8ff53b95d4aff6e1ff3569d252a1b26271419421a9a9046d213e39a724783cf184d144b329d03d7ede22af0f7a27dad72ebfc54b1481b9d9387a8f6d2bd3fddd53466ea5964159ae4557a035d4645529394e39b2692ca6b35a7e4010a4a0d1812cb63b596ad6f9f4ecbced7"}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2f, 0xe, 0x2, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x18}, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private2]}}}, @hopopts={{0x28, 0x29, 0x36, {0x88, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x4}]}}}, @dstopts={{0x98, 0x29, 0x37, {0x16, 0x10, '\x00', [@ra={0x5, 0x2, 0xb}, @calipso={0x7, 0x40, {0x3, 0xe, 0x3, 0x9, [0x27e7, 0x2, 0x60000000000000, 0x0, 0x7, 0xe, 0x6]}}, @enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x18, {0x0, 0x4, 0xa, 0xd, [0x3, 0xa]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0xa0, 0x8001, [0x2, 0x7fffffffffffffff]}}]}}}], 0x2b0}}], 0x1, 0x20040000) 6.765130065s ago: executing program 1 (id=6855): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0xffffffff9673e35d]}}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004085}, 0x18) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000"], 0x0) 6.764309002s ago: executing program 3 (id=6856): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$loop(0x0, 0x9, 0x4000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="0600000000000000") 5.563770836s ago: executing program 4 (id=6859): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x8000000000000000, 0x6, 0x3, @scatter={0x0, 0x12, 0xfffffffffffffffd}, &(0x7f0000000240)="5db1caee61f2", 0x0, 0x80000001, 0x1, 0xffffffffffffffff, 0x0}) (fail_nth: 1) 5.382840515s ago: executing program 4 (id=6860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x17, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b8010009eac4fd901006f626a72656600000c0004"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.250499351s ago: executing program 4 (id=6861): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) close(0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x16, 0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x100007, 0x81, 0x2, 0xb, 0x12, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x150}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4021e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x459, 0x10, r8, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) 4.906706435s ago: executing program 0 (id=6862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='veth0_vlan\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="c238e13f7a82db34a08b76f196ef3e159cf40058c795dd25c8979cfa7878c24f8259ef0178a50857c20603ef4316344b8f258d93837df4a5586477c5d3041480c9b6e085228f820057caa6bbe5fa0637bfa1894264f10f6dc543c1edd748b3cc29dafe51aaba32117e", 0x69}, {&(0x7f0000000280)="dd20b3df84ce74fca1972e22cf0d833ac94925d283909f4c58bc885ee18a0478e7855b8414c60cc3cca4fc58b0c89fffa55f8248e3f46bcb65dc6a6ddd81dd4781ee01af41bb2ad91db88895fe072a00f8a17d960c067033ec45c05edc48c2697982f6a3a147fa0e24eefb78ced9f0293106d980a309e1fb097fd63bdfc4ea1c0366cea2ee2bd69cebd837e49f67c1fd5fc24a", 0x93}, {&(0x7f0000000340)="468b4d40fe36a4ccb092b2c2e59d674ea95cf7a731e448da9dcdfca2aca4c2e25b98745e35f53e7a2f08a293e586967756517fd0ed4a3a61737160e5ee3c0f5372a24ba28f15af965659cf2444626ca7f4a6c4feb2a8ef7a88ba846cb8d73e8155649dd9de467b64287ab1713c6897219c68e6be25802eef0c8536981a812d0a88d226fe9c3c661bfa419c8ca1d2a01c96fd1c91db183d0398456052f7f3384cdd", 0xa1}], 0x3, &(0x7f00000004c0)=[{0x38, 0x84, 0x5, "c4a47d6261fb7899f8cb312e1ecd856601e7695d01e33a6a8672515943968ea6454d49816e3814"}, {0x1010, 0x1, 0x29, "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"}, {0x1010, 0x11, 0x6, "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"}, {0x70, 0x84, 0x2, "2d3487f98052cb2506c2551b72c7317bbe591ae6e6d15e805738dff1bb906d49f84b17ac7350652de7b36b0105675d12d61d774972535d981387f460b932b935379925d21853ee2e77a7f4dae9760ba09b05c2a88da6e14e5b2cc074f187eb32"}, {0xa0, 0x103, 0x48ab, "54459f32778f891f1bf3df7bd37c6813b48da5299ff5e5fe455ccac91fe05121a83b49deae8cb3c377b7c3dd3ed0f28c032ee1b72e423ddd497f4bbe1a316feeadc9c5f68fba443c82dbb4e222780c1d8c72b9996b0341cd4795fc252ba2941185ab48496aeb2f203614b87502adeaa7904d04f3450ca3ed37eac0bd0c0a747d768c6a0c81c83f88c2"}, {0x60, 0x116, 0x4, "a2853652a3b79ebbaa764edc99dbf148f9955bc7385465217dbad4c3e9bd11caeb26c235eb697523f272c2b533c1efe1abaa09c520a1621620db1f2612e3db09fc7c9e09458078e92faf545ce1df2222"}, {0x90, 0x116, 0x6, "ff38a913b5efd450852ceaafe78500b28940b9ec436478d69701ba73546a07bc267d07154b1a014564849bbd13eedc47b36a611f61270469e71a064592dc81a6b9b268aa5cefd78ad3423be24e761aa239d0a4540d40dbe5401b1987a3e36523f00b3673d7126eded4efd412355c0ea0d5ccb3094fdc61c43b87d605ba6477"}, {0x78, 0x113, 0x2, "d75891066e654cbcd83f8f741d16d9d2b737dc135b4465bb69fd7bf8dcf506fe34ae73a046d3585db785e977aff7d335a73635c6147c5fda831cdaf7bcac36b91b83c55ba09bc92af83eaa1c015cc25475f9f362b60f70087d9bc1316781a367410c56"}], 0x22d0}}], 0x1, 0x0) 4.882869573s ago: executing program 3 (id=6863): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x9, 0x80000) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020b804020240000102030109021b00010106c040090101e30905010200020703030000000000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty, 0x0, 0xfffffffc}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b40)=ANY=[@ANYBLOB="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"], 0x5288}}, 0x0) 4.840584363s ago: executing program 0 (id=6864): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x8, 0x2, 0x2, 0x0, 0x0, 0x7, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80, 0x3}, 'port1\x00', 0x8, 0x100c75, 0x3, 0x4, 0x1fb, 0x3, 0xfffffffe, 0x0, 0x6}) 4.80629189s ago: executing program 0 (id=6865): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000002a40)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x32, 0x6, 0x0, 0x6, 0x0, [@mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}}}, @hopopts_2292={{0x120, 0x29, 0x36, {0x0, 0x20, '\x00', [@generic={0x76, 0x69, "bb27f48ec6185c2b33b0fc1798589e53edc0b9f0f692d998bf1775fd2d92707046779de1b854465f04e8243e2ca533f4647d8606dbade54f5f626200581f090c907fe44aab0e231745732af7efd1be31d6d5f28e5affa58d8e4f9ce355129e288fb411146063d3af29"}, @pad1, @pad1, @generic={0x1, 0x6c, "f8ff53b95d4aff6e1ff3569d252a1b26271419421a9a9046d213e39a724783cf184d144b329d03d7ede22af0f7a27dad72ebfc54b1481b9d9387a8f6d2bd3fddd53466ea5964159ae4557a035d4645529394e39b2692ca6b35a7e4010a4a0d1812cb63b596ad6f9f4ecbced7"}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2f, 0xe, 0x2, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x18}, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private2]}}}, @hopopts={{0x28, 0x29, 0x36, {0x88, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x4}]}}}, @dstopts={{0x98, 0x29, 0x37, {0x16, 0x10, '\x00', [@ra={0x5, 0x2, 0xb}, @calipso={0x7, 0x40, {0x3, 0xe, 0x3, 0x9, [0x27e7, 0x2, 0x60000000000000, 0x0, 0x7, 0xe, 0x6]}}, @enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x18, {0x0, 0x4, 0xa, 0xd, [0x3, 0xa]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0xa0, 0x8001, [0x2, 0x7fffffffffffffff]}}]}}}], 0x2b0}}], 0x1, 0x20040000) 4.7123245s ago: executing program 0 (id=6866): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400181, 0x0) getsockopt$MRT6(r7, 0x29, 0xcf, &(0x7f00000000c0), &(0x7f0000000140)=0x4) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000040), 0x0) 4.53441348s ago: executing program 2 (id=6867): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2000019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',grou', @ANYRESDEC], 0xfc, 0x0, 0x0) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@known='system.sockprotoname\x00') munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) msgsnd(0x0, &(0x7f0000000100)=ANY=[], 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x42a) semop(r1, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.781022654s ago: executing program 0 (id=6868): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f2601020301090212"], 0x0) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 3.755519267s ago: executing program 4 (id=6869): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000f00)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x15, 0x0, [{0x7, 0xf, "3332432bd3028cdf502ba5d40c"}]}]}}}}}}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) socket$unix(0x1, 0x1, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.617179407s ago: executing program 1 (id=6870): read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3.53593974s ago: executing program 2 (id=6871): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000002a40)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x32, 0x6, 0x0, 0x6, 0x0, [@mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}}}, @hopopts_2292={{0x120, 0x29, 0x36, {0x0, 0x20, '\x00', [@generic={0x76, 0x69, "bb27f48ec6185c2b33b0fc1798589e53edc0b9f0f692d998bf1775fd2d92707046779de1b854465f04e8243e2ca533f4647d8606dbade54f5f626200581f090c907fe44aab0e231745732af7efd1be31d6d5f28e5affa58d8e4f9ce355129e288fb411146063d3af29"}, @pad1, @pad1, @generic={0x1, 0x6c, "f8ff53b95d4aff6e1ff3569d252a1b26271419421a9a9046d213e39a724783cf184d144b329d03d7ede22af0f7a27dad72ebfc54b1481b9d9387a8f6d2bd3fddd53466ea5964159ae4557a035d4645529394e39b2692ca6b35a7e4010a4a0d1812cb63b596ad6f9f4ecbced7"}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2f, 0xe, 0x2, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x18}, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private2]}}}, @hopopts={{0x28, 0x29, 0x36, {0x88, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x4}]}}}, @dstopts={{0x98, 0x29, 0x37, {0x16, 0x10, '\x00', [@ra={0x5, 0x2, 0xb}, @calipso={0x7, 0x40, {0x3, 0xe, 0x3, 0x9, [0x27e7, 0x2, 0x60000000000000, 0x0, 0x7, 0xe, 0x6]}}, @enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x18, {0x0, 0x4, 0xa, 0xd, [0x3, 0xa]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0xa0, 0x8001, [0x2, 0x7fffffffffffffff]}}]}}}], 0x2b0}}], 0x1, 0x20040000) 3.063532132s ago: executing program 2 (id=6872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.929972024s ago: executing program 1 (id=6873): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x119) 2.596367226s ago: executing program 1 (id=6874): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x301880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x0, 0x36}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x2f8, 0x30, 0x1, 0x0, 0x0, {}, [{0x2e4, 0x1, [@m_xt={0xec, 0x20, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffffff}]}, {0xb3, 0x6, "7b9df7e8e8c70cdc1be120e40dad8e279550177c6d1528846c65820425bda0d7ad43a83370e1fadb51c50321d24a6ff82deb563488c1109311eb52f32da3db6739767c1f77fbbf5a9698935ae1e7f5fd4104f40bb407f3c32c8b85029d994b7ddd8ced1d37dac18a645efec7c30df89fa8b9a8a19bfa445fc9065d4a0d871127da681bd26f8b376809c072ab1937339231f3f379d7c29985fb2175c49b2dfe3fa3f6c1f73b25a800543187e90808ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x168, 0x11, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1001}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x10000}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x2fd, 0x4, 0x200, 0x20}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x8c, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xf9c}]}, {0x3e, 0x6, "cc252d2ed3c79146cfd8d842b2d247a03e3e37aecdca5185c9d04cdc3b9bb9c2b9e0ad504affdf9e5b91843e759b7b54756d86a36c162bfbad3f"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x2000}, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r4, 0x0, 0x4004) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000002c0)=0x6) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) 2.559153745s ago: executing program 4 (id=6875): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x80b, 0xed) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1, 0xc10}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@loopback, 0x4e20, 0x0, 0x4, 0xffff, 0x2}, {0x0, 0x800, 0x9141, 0x0, 0x0, 0xf41, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x3507, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000000020000080900020073797a30000000000500010007000000"], 0x28}}, 0x80) 1.925638354s ago: executing program 2 (id=6876): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000002a40)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x32, 0x6, 0x0, 0x6, 0x0, [@mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}}}, @hopopts_2292={{0x120, 0x29, 0x36, {0x0, 0x20, '\x00', [@generic={0x76, 0x69, "bb27f48ec6185c2b33b0fc1798589e53edc0b9f0f692d998bf1775fd2d92707046779de1b854465f04e8243e2ca533f4647d8606dbade54f5f626200581f090c907fe44aab0e231745732af7efd1be31d6d5f28e5affa58d8e4f9ce355129e288fb411146063d3af29"}, @pad1, @pad1, @generic={0x1, 0x6c, "f8ff53b95d4aff6e1ff3569d252a1b26271419421a9a9046d213e39a724783cf184d144b329d03d7ede22af0f7a27dad72ebfc54b1481b9d9387a8f6d2bd3fddd53466ea5964159ae4557a035d4645529394e39b2692ca6b35a7e4010a4a0d1812cb63b596ad6f9f4ecbced7"}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2f, 0xe, 0x2, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x18}, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private2]}}}, @hopopts={{0x28, 0x29, 0x36, {0x88, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x4}]}}}, @dstopts={{0x98, 0x29, 0x37, {0x16, 0x10, '\x00', [@ra={0x5, 0x2, 0xb}, @calipso={0x7, 0x40, {0x3, 0xe, 0x3, 0x9, [0x27e7, 0x2, 0x60000000000000, 0x0, 0x7, 0xe, 0x6]}}, @enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x18, {0x0, 0x4, 0xa, 0xd, [0x3, 0xa]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0xa0, 0x8001, [0x2, 0x7fffffffffffffff]}}]}}}], 0x2b0}}], 0x1, 0x20040000) 1.836874599s ago: executing program 2 (id=6877): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x48, 0x0, 0x8, 0x8001, 0xfffffffc, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x3f90, 0x1e) sendto$inet6(r3, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/163, 0xa3}, 0xd}], 0x1, 0x40032001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x100010, 0xffffffffffffffff, 0x96c01000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000040)) ioperm(0x4, 0x8, 0x5) prctl$PR_MCE_KILL(0x21, 0x2, 0x2) 1.29990681s ago: executing program 4 (id=6878): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d0020070000f0", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 447.923375ms ago: executing program 0 (id=6879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) close(0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x16, 0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x100007, 0x81, 0x2, 0xb, 0x12, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x150}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4021e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x459, 0x10, r8, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) 0s ago: executing program 2 (id=6880): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0xffffffff9673e35d]}}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004085}, 0x18) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000"], 0x0) kernel console output (not intermixed with test programs): ch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1771.929464][ T9689] debugfs: 'hsr0' already exists in 'hsr' [ 1771.962033][ T9689] Cannot create hsr debugfs directory [ 1771.978720][ T29] audit: type=1326 audit(1774217519.877:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.1.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1772.012973][ T29] audit: type=1326 audit(1774217519.877:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.1.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1772.103911][ T29] audit: type=1326 audit(1774217519.877:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.1.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1772.189498][ T29] audit: type=1326 audit(1774217519.877:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.1.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1772.342236][ T29] audit: type=1326 audit(1774217519.877:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.1.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1772.552440][ T29] audit: type=1326 audit(1774217519.877:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.1.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1772.594516][ T12] IPVS: stop unused estimator thread 0... [ 1772.627381][ T29] audit: type=1326 audit(1774217519.877:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.1.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1772.692754][ T29] audit: type=1326 audit(1774217519.877:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.1.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1772.901174][T11613] usb 5-1: USB disconnect, device number 60 [ 1774.195905][ T9689] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1774.371279][ T9689] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1774.384353][ T9689] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1774.447159][ T9689] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1775.792313][ T9689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1775.863353][ T9689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1775.898408][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.905562][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.044124][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.051305][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.205520][ T9689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1776.280467][ T5843] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1776.429911][ T9689] veth0_vlan: entered promiscuous mode [ 1776.471412][ T5843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.482458][ T9689] veth1_vlan: entered promiscuous mode [ 1776.535964][ T5843] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1776.657438][ T5843] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1776.668781][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.776235][ T5843] usb 5-1: Product: syz [ 1776.788918][ T5843] usb 5-1: Manufacturer: syz [ 1776.807729][ T5843] usb 5-1: SerialNumber: syz [ 1776.828312][ T9689] veth0_macvtap: entered promiscuous mode [ 1776.857488][ T5843] usb 5-1: config 0 descriptor?? [ 1776.910388][ T9689] veth1_macvtap: entered promiscuous mode [ 1776.987368][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1777.048840][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1777.175414][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.214038][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.259903][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.288394][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.894495][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1777.930183][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.030938][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.087553][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.725919][ T5843] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1778.918256][ T5843] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1778.935857][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.985777][ T5886] usb 5-1: USB disconnect, device number 61 [ 1779.039811][ T5843] usb 2-1: config 0 descriptor?? [ 1779.254115][T10309] No such timeout policy "syz0" [ 1779.334526][T23966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1779.350467][T23966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1779.359235][T23966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1779.367324][T23966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1779.374996][T23966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1779.562581][T24353] syz_tun (unregistering): left allmulticast mode [ 1779.574224][T24353] syz_tun (unregistering): left promiscuous mode [ 1779.601349][T24353] bridge0: port 4(syz_tun) entered disabled state [ 1781.125702][ T1149] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1781.501363][T13857] Bluetooth: hci2: command tx timeout [ 1781.717868][ T5843] usb 2-1: Cannot set autoneg [ 1781.722751][ T5843] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1781.842156][T10320] chnl_net:caif_netlink_parms(): no params data found [ 1782.109163][ T1149] vlan2: left promiscuous mode [ 1782.114043][ T1149] dummy0: left promiscuous mode [ 1782.124593][ T1149] bridge0: port 3(vlan2) entered disabled state [ 1782.156828][ T1149] bridge_slave_1: left allmulticast mode [ 1782.162784][ T1149] bridge_slave_1: left promiscuous mode [ 1782.170682][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.181214][ T1149] bridge_slave_0: left allmulticast mode [ 1782.188670][ T1149] bridge_slave_0: left promiscuous mode [ 1782.194589][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.371402][ T1149] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1782.450482][ T1149] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 1782.577986][ T1149] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1782.881549][T11081] usb 2-1: USB disconnect, device number 69 [ 1782.941898][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1783.053748][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1783.103229][ T1149] bond0 (unregistering): Released all slaves [ 1783.155289][ T1149] bond1 (unregistering): Released all slaves [ 1783.222144][ T1149] bond2 (unregistering): Released all slaves [ 1783.400586][ T1149] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1783.546151][T13857] Bluetooth: hci2: command tx timeout [ 1783.562471][ T1149] bond3 (unregistering): Released all slaves [ 1783.635230][ T1149] bond4 (unregistering): Released all slaves [ 1783.757096][ T1149] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1783.774606][ T1149] bond5 (unregistering): Released all slaves [ 1783.870094][ T1149] bond6 (unregistering): Released all slaves [ 1783.907293][ T1149] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1783.930598][ T1149] bond7 (unregistering): Released all slaves [ 1783.981853][ T1149] bond8 (unregistering): Released all slaves [ 1784.033210][ T1149] bond9 (unregistering): (slave bond10): Releasing backup interface [ 1784.052215][ T1149] bond9 (unregistering): Released all slaves [ 1784.191944][ T1149] bond10 (unregistering): Released all slaves [ 1784.273037][T10505] No such timeout policy "syz0" [ 1784.279675][ T1149] bond11 (unregistering): (slave bond12): Releasing backup interface [ 1784.300172][ T1149] bond11 (unregistering): Released all slaves [ 1784.317347][ T1149] bond12 (unregistering): Released all slaves [ 1784.369754][T10320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.386500][T10320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.400115][T10320] bridge_slave_0: entered allmulticast mode [ 1784.457025][T10320] bridge_slave_0: entered promiscuous mode [ 1784.602911][T10475] geneve2: entered allmulticast mode [ 1784.649444][T10320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.675464][T10320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.717122][T10320] bridge_slave_1: entered allmulticast mode [ 1784.746545][T10320] bridge_slave_1: entered promiscuous mode [ 1784.989915][ T1149] tipc: Disabling bearer [ 1785.013155][ T1149] tipc: Left network mode [ 1785.041693][T10320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1785.091833][T10320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1785.354115][T10320] team0: Port device team_slave_0 added [ 1785.462035][T10320] team0: Port device team_slave_1 added [ 1785.628949][T13857] Bluetooth: hci2: command tx timeout [ 1785.925987][T10592] No such timeout policy "syz0" [ 1786.220379][T10320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1786.233354][T10320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1786.376899][T10320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1786.421832][T10320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1786.449783][T10320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1786.488926][T10320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1786.609875][T10320] hsr_slave_0: entered promiscuous mode [ 1786.616402][T10320] hsr_slave_1: entered promiscuous mode [ 1786.636999][T10320] debugfs: 'hsr0' already exists in 'hsr' [ 1786.642778][T10320] Cannot create hsr debugfs directory [ 1786.682024][ T1149] hsr_slave_0: left promiscuous mode [ 1786.700541][ T1149] hsr_slave_1: left promiscuous mode [ 1786.707422][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.116205][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 1787.144669][T10640] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1787.159857][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 1787.386798][T11613] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 1787.441917][T11613] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1787.627600][ T1149] team0 (unregistering): Port device dummy0 removed [ 1787.705923][T13857] Bluetooth: hci2: command tx timeout [ 1787.833458][T10659] tipc: Enabling of bearer rejected, failed to enable media [ 1787.850276][T10668] syzkaller0: entered promiscuous mode [ 1787.856742][T10668] syzkaller0: entered allmulticast mode [ 1788.241077][ T1149] IPVS: stop unused estimator thread 0... [ 1788.867990][T21134] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1789.036461][T21134] usb 5-1: Using ep0 maxpacket: 8 [ 1789.054352][T21134] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.082168][T10320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1789.089088][T11613] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1789.099304][T21134] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1789.108942][T21134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.122869][T21134] usb 5-1: Product: syz [ 1789.131767][T10320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1789.163697][T21134] usb 5-1: Manufacturer: syz [ 1789.171911][T21134] usb 5-1: SerialNumber: syz [ 1789.184724][T21134] usb 5-1: config 0 descriptor?? [ 1789.197112][T21134] usb 5-1: bad CDC descriptors [ 1789.204489][T21134] usb 5-1: unsupported MDLM descriptors [ 1789.215183][T10320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1789.373723][T11613] usb 4-1: Using ep0 maxpacket: 16 [ 1789.401429][T11613] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1789.413703][T10320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1789.421176][T11613] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.425934][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.447090][T21134] cdc_acm 5-1:0.0: Zero length descriptor references [ 1789.469317][T21134] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 1789.472595][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.480129][T11613] usb 4-1: config 0 has no interface number 0 [ 1789.531030][T11613] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1789.557009][T11613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.585553][T11613] usb 4-1: Product: syz [ 1789.590594][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.615990][T11613] usb 4-1: Manufacturer: syz [ 1789.623357][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.641122][T11613] usb 4-1: SerialNumber: syz [ 1789.659278][ T5886] usb 5-1: USB disconnect, device number 62 [ 1789.679163][T11613] usb 4-1: config 0 descriptor?? [ 1789.872462][T10320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1789.945692][T10320] 8021q: adding VLAN 0 to HW filter on device team0 [ 1790.028738][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1790.035932][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1790.064281][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.071516][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1790.875008][T10320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1791.036967][T10320] veth0_vlan: entered promiscuous mode [ 1791.076223][T10320] veth1_vlan: entered promiscuous mode [ 1791.238020][T10320] veth0_macvtap: entered promiscuous mode [ 1791.312614][T10320] veth1_macvtap: entered promiscuous mode [ 1791.424431][T10320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1791.469476][T10320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1791.579081][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.614363][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.646202][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.652669][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.665783][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.669098][ T9973] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1791.700495][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.726855][ T9973] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1791.999748][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.068872][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.165731][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.189796][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.386018][ T9973] usb 4-1: USB disconnect, device number 77 [ 1792.977979][T10896] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1794.590362][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1794.590380][ T29] audit: type=1326 audit(1774217542.737:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1794.619795][ T29] audit: type=1326 audit(1774217542.737:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1794.674813][ T29] audit: type=1326 audit(1774217542.747:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1794.716300][T11613] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1794.875160][ T29] audit: type=1326 audit(1774217542.747:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1794.925902][T11613] usb 4-1: Using ep0 maxpacket: 8 [ 1794.932719][T11613] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.946676][T11613] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1794.955985][T11613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.964396][T11613] usb 4-1: Product: syz [ 1794.977136][T11613] usb 4-1: Manufacturer: syz [ 1794.981885][T11613] usb 4-1: SerialNumber: syz [ 1794.993759][T10929] tipc: Started in network mode [ 1794.999015][T10929] tipc: Node identity fe3d12398ee9, cluster identity 4711 [ 1795.017285][T11613] usb 4-1: config 0 descriptor?? [ 1795.031333][T11613] usb 4-1: bad CDC descriptors [ 1795.036963][ T29] audit: type=1326 audit(1774217542.747:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1795.037637][T11613] usb 4-1: unsupported MDLM descriptors [ 1795.067344][T10929] tipc: Enabled bearer , priority 0 [ 1795.086215][T11613] cdc_acm 4-1:0.0: Zero length descriptor references [ 1795.101818][T10935] syzkaller0: entered promiscuous mode [ 1795.108152][T11613] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 1795.114023][ T29] audit: type=1326 audit(1774217542.747:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1795.116235][T10935] syzkaller0: entered allmulticast mode [ 1795.195944][T11081] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1795.213689][ T29] audit: type=1326 audit(1774217542.747:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1795.216875][T10929] tipc: Resetting bearer [ 1795.382293][T10928] tipc: Resetting bearer [ 1795.392210][ T29] audit: type=1326 audit(1774217542.747:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1795.427259][T11081] usb 2-1: Using ep0 maxpacket: 32 [ 1795.446976][T10928] tipc: Disabling bearer [ 1795.452755][T10944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.456003][T11081] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.464802][T10944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.525971][T11081] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1795.532292][T10944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.547331][T10944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.566220][ T29] audit: type=1326 audit(1774217542.747:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1795.607563][T11081] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1795.609190][T21134] usb 4-1: USB disconnect, device number 78 [ 1795.617290][T11081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.645879][ T29] audit: type=1326 audit(1774217542.747:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1795.668899][T11081] usb 2-1: Product: syz [ 1795.673203][T11081] usb 2-1: Manufacturer: syz [ 1795.689987][T11081] usb 2-1: SerialNumber: syz [ 1795.867037][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.871173][T11081] usb 2-1: config 0 descriptor?? [ 1795.874811][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.204112][T21134] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1796.233881][T21134] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1796.567251][T10971] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1797.755373][T11008] netlink: 'syz.4.6470': attribute type 4 has an invalid length. [ 1798.145262][T11081] usb 2-1: USB disconnect, device number 70 [ 1798.905890][T11081] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1799.020667][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6474'. [ 1799.070673][T11081] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.081535][T11081] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1799.108273][T11081] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1799.155938][T11081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.179898][T11081] usb 2-1: Product: syz [ 1799.197119][T11081] usb 2-1: Manufacturer: syz [ 1799.215103][T11081] usb 2-1: SerialNumber: syz [ 1799.249762][T11081] usb 2-1: config 0 descriptor?? [ 1799.342863][T11038] fuse: Invalid rootmode [ 1799.408593][T11040] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1799.683340][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1799.683358][ T29] audit: type=1326 audit(1774217547.797:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad47b9c799 code=0x7ffc0000 [ 1799.763822][ T29] audit: type=1326 audit(1774217547.797:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad47b9c799 code=0x7ffc0000 [ 1799.825970][ T29] audit: type=1326 audit(1774217547.797:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fad47b9c799 code=0x7ffc0000 [ 1799.859714][ T29] audit: type=1326 audit(1774217547.797:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad47b9c799 code=0x7ffc0000 [ 1800.063071][ T29] audit: type=1326 audit(1774217547.797:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad47b9c799 code=0x7ffc0000 [ 1800.126572][ T29] audit: type=1326 audit(1774217547.797:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fad47b9c799 code=0x7ffc0000 [ 1800.182837][ T29] audit: type=1326 audit(1774217547.797:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad47b9c799 code=0x7ffc0000 [ 1800.556054][ T29] audit: type=1326 audit(1774217547.797:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad47b9c799 code=0x7ffc0000 [ 1800.646860][ T29] audit: type=1326 audit(1774217547.797:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fad47b9c799 code=0x7ffc0000 [ 1800.832928][T11064] No such timeout policy "syz0" [ 1800.949830][ T29] audit: type=1326 audit(1774217547.797:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad47b9c799 code=0x7ffc0000 [ 1801.055093][T11062] No such timeout policy "syz0" [ 1802.067925][ T5843] usb 2-1: USB disconnect, device number 71 [ 1802.255988][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6485'. [ 1802.614620][T11090] fuse: Bad value for 'rootmode' [ 1802.914463][T11100] syzkaller0: entered promiscuous mode [ 1802.920389][T11100] syzkaller0: entered allmulticast mode [ 1804.739364][T11136] fuse: Bad value for 'rootmode' [ 1804.746454][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6498'. [ 1805.260506][T11159] No such timeout policy "syz0" [ 1805.640948][T11174] fuse: Bad value for 'fd' [ 1805.677293][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1805.677311][ T29] audit: type=1326 audit(1774217553.807:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.2.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1805.715972][ T29] audit: type=1326 audit(1774217553.807:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.2.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1805.739564][ T29] audit: type=1326 audit(1774217553.807:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.2.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1805.787892][ T29] audit: type=1326 audit(1774217553.807:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.2.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1805.846040][T11081] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1805.855167][ T29] audit: type=1326 audit(1774217553.807:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.2.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1806.061413][ T29] audit: type=1326 audit(1774217553.807:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.2.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1806.483470][ T29] audit: type=1326 audit(1774217553.807:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.2.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1806.519988][T11081] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.533905][T11081] usb 4-1: config 0 has no interfaces? [ 1806.539987][ T29] audit: type=1326 audit(1774217553.807:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.2.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1806.565766][T11081] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1806.575212][T11081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.592807][T11081] usb 4-1: Product: syz [ 1806.606235][T11081] usb 4-1: Manufacturer: syz [ 1806.645391][ T29] audit: type=1326 audit(1774217553.807:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.2.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1806.687298][T11081] usb 4-1: SerialNumber: syz [ 1806.927063][T11081] usb 4-1: config 0 descriptor?? [ 1806.962857][ T29] audit: type=1326 audit(1774217553.807:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.2.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f9f8159c799 code=0x7ffc0000 [ 1807.058815][T11187] fuse: Bad value for 'rootmode' [ 1807.175656][ T9973] usb 4-1: USB disconnect, device number 79 [ 1808.277950][ T9973] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1808.513021][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6518'. [ 1808.615717][ T9973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.666035][ T9973] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1808.900421][ T9973] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1808.910126][ T9973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.007862][ T9973] usb 4-1: Product: syz [ 1809.012088][ T9973] usb 4-1: Manufacturer: syz [ 1809.035929][ T9973] usb 4-1: SerialNumber: syz [ 1809.054206][ T9973] usb 4-1: config 0 descriptor?? [ 1809.090368][T13857] Bluetooth: hci3: command 0x0406 tx timeout [ 1809.765145][T11249] fuse: Unknown parameter 'use00000000000000000000' [ 1810.061293][T11263] loop5: detected capacity change from 0 to 7 [ 1810.069332][T11263] Dev loop5: unable to read RDB block 7 [ 1810.075007][T11263] loop5: unable to read partition table [ 1810.081108][T11263] loop5: partition table beyond EOD, truncated [ 1810.097848][T11263] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1810.267074][T21134] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1810.435911][T21134] usb 3-1: Using ep0 maxpacket: 16 [ 1810.443219][T21134] usb 3-1: config 1 has an invalid interface number: 19 but max is 0 [ 1810.452405][T21134] usb 3-1: config 1 has no interface number 0 [ 1810.461755][T21134] usb 3-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.494281][T21134] usb 3-1: config 1 interface 19 has no altsetting 0 [ 1810.511265][T21134] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 1810.521509][T21134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.535101][T21134] usb 3-1: Product: syz [ 1810.542436][T21134] usb 3-1: Manufacturer: syz [ 1810.551999][T21134] usb 3-1: SerialNumber: syz [ 1810.681152][T21134] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1810.822551][T11257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.835430][T11257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.847651][ T35] usb 3-1: Failed to submit usb control message: -71 [ 1810.848076][T21134] usb 3-1: USB disconnect, device number 80 [ 1810.878278][ T35] usb 3-1: unable to send the bmi data to the device: -71 [ 1810.902305][ T35] usb 3-1: unable to get target info from device [ 1810.919057][ T35] usb 3-1: could not get target info (-71) [ 1810.934842][ T35] usb 3-1: could not probe fw (-71) [ 1811.754051][T11613] usb 4-1: USB disconnect, device number 80 [ 1813.253859][T11323] fuse: Unknown parameter 'use00000000000000000000' [ 1813.520588][T11329] netlink: 'syz.4.6536': attribute type 1 has an invalid length. [ 1813.571382][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6536'. [ 1813.975885][T21134] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1814.590487][T21134] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.669154][T21134] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1814.717105][T21134] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1814.789663][T21134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.842217][T21134] usb 4-1: Product: syz [ 1814.862233][T21134] usb 4-1: Manufacturer: syz [ 1814.871979][T21134] usb 4-1: SerialNumber: syz [ 1815.017275][T21134] usb 4-1: config 0 descriptor?? [ 1815.079963][T11397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.087662][T11397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.661068][T21134] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1815.849375][T21134] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.861966][T21134] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1815.932780][T21134] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1815.941969][T21134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.950293][T21134] usb 2-1: Product: syz [ 1815.956023][T21134] usb 2-1: Manufacturer: syz [ 1815.960876][T21134] usb 2-1: SerialNumber: syz [ 1815.980066][T11400] No such timeout policy "syz0" [ 1816.000787][T21134] usb 2-1: config 0 descriptor?? [ 1816.657097][T11410] fuse: Unknown parameter 'use00000000000000000000' [ 1817.051405][T21134] usb 4-1: USB disconnect, device number 81 [ 1817.199949][T11419] netlink: 'syz.3.6548': attribute type 1 has an invalid length. [ 1817.255491][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6548'. [ 1817.375583][T11429] bond1: (slave gretap1): making interface the new active one [ 1817.413845][T11429] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1817.600519][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1817.600536][ T29] audit: type=1326 audit(1774217565.777:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.0.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1817.706656][ T29] audit: type=1326 audit(1774217565.777:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.0.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1817.804687][ T29] audit: type=1326 audit(1774217565.777:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.0.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1817.862955][ T29] audit: type=1326 audit(1774217565.777:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.0.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1817.943251][T21134] usb 2-1: USB disconnect, device number 72 [ 1817.966592][ T29] audit: type=1326 audit(1774217565.777:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.0.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1818.046001][ T29] audit: type=1326 audit(1774217565.777:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.0.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1818.085197][ T29] audit: type=1326 audit(1774217565.777:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.0.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1818.121652][ T29] audit: type=1326 audit(1774217565.777:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.0.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1818.267202][ T29] audit: type=1326 audit(1774217565.777:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.0.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1818.295643][ T29] audit: type=1326 audit(1774217565.777:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.0.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1818.479446][T11484] geneve2: entered allmulticast mode [ 1819.549737][T11496] fuse: Unknown parameter 'user_i00000000000000000000' [ 1819.731738][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6556'. [ 1819.741869][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6556'. [ 1819.984493][T11507] netlink: 'syz.2.6560': attribute type 1 has an invalid length. [ 1820.073224][T13857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1820.085231][T13857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1820.093802][T13857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1820.101875][T13857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1820.110011][T13857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1820.255911][T11081] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1820.309393][T11514] bond1: (slave gretap1): making interface the new active one [ 1820.326973][T11514] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1820.567102][T11081] usb 2-1: Using ep0 maxpacket: 8 [ 1820.575646][T11081] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.652487][T11081] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1820.692180][T11081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.721147][T11081] usb 2-1: Product: syz [ 1820.741399][T11081] usb 2-1: Manufacturer: syz [ 1820.748259][T11081] usb 2-1: SerialNumber: syz [ 1820.790739][T11081] usb 2-1: config 0 descriptor?? [ 1820.823204][T11081] usb 2-1: bad CDC descriptors [ 1820.836762][T11081] usb 2-1: unsupported MDLM descriptors [ 1820.844143][T26395] syz_tun (unregistering): left allmulticast mode [ 1820.851825][T11081] cdc_acm 2-1:0.0: Zero length descriptor references [ 1820.860092][T26395] syz_tun (unregistering): left promiscuous mode [ 1820.868082][T11081] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 1820.876806][T26395] bridge0: port 3(syz_tun) entered disabled state [ 1821.070366][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.102467][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.144449][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.167276][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.194075][T12751] usb 2-1: USB disconnect, device number 73 [ 1821.217538][T11081] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1821.372069][T11545] chnl_net:caif_netlink_parms(): no params data found [ 1821.379606][T11081] usb 3-1: Using ep0 maxpacket: 16 [ 1821.391340][T11081] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.412291][T11081] usb 3-1: config 0 has no interfaces? [ 1821.422427][T11081] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1821.442467][T11081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.495464][T11081] usb 3-1: config 0 descriptor?? [ 1821.702637][T11545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.712208][T11545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.719760][T11545] bridge_slave_0: entered allmulticast mode [ 1821.728139][T11545] bridge_slave_0: entered promiscuous mode [ 1821.745565][T11545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.755856][T11545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.763909][T11545] bridge_slave_1: entered allmulticast mode [ 1821.772211][T11545] bridge_slave_1: entered promiscuous mode [ 1821.779457][T11565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.799148][T11565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.857491][T11545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1821.874198][T11545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1821.888566][T21134] usb 3-1: USB disconnect, device number 81 [ 1821.994646][T11545] team0: Port device team_slave_0 added [ 1822.188324][T13857] Bluetooth: hci4: command tx timeout [ 1822.261232][T11545] team0: Port device team_slave_1 added [ 1822.367009][T11545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1822.390511][T11545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1822.447474][T11545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1822.489738][T11545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1822.502013][T11545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1822.544321][T11545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.530244][T12751] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1823.700023][T12751] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1823.710682][T12751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.719281][T12751] usb 4-1: Product: syz [ 1823.723484][T12751] usb 4-1: Manufacturer: syz [ 1823.731218][T12751] usb 4-1: SerialNumber: syz [ 1823.747529][T12751] usb 4-1: config 0 descriptor?? [ 1823.758067][T12751] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1823.772906][T12751] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1823.783238][T12751] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1823.793103][T12751] usb 4-1: media controller created [ 1823.810326][T12751] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1823.887681][T12751] DVB: Unable to find symbol mt352_attach() [ 1823.929160][T12751] DVB: Unable to find symbol nxt6000_attach() [ 1823.935513][T12751] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1823.951841][T12751] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 1823.978922][T12751] dvb-usb: schedule remote query interval to 1000 msecs. [ 1823.980998][T11780] dvb-usb: bulk message failed: -22 (7/0) [ 1823.993750][T12751] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1824.013677][T12751] dvb-usb: bulk message failed: -22 (7/0) [ 1824.020291][T12751] dvb-usb: bulk message failed: -22 (7/0) [ 1824.029198][T12751] usb 4-1: USB disconnect, device number 82 [ 1824.128308][T12751] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1824.267085][T13857] Bluetooth: hci4: command tx timeout [ 1825.335495][T11824] netlink: 'syz.1.6570': attribute type 1 has an invalid length. [ 1825.366127][T11545] hsr_slave_0: entered promiscuous mode [ 1825.374208][T11842] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 1825.374347][T11545] hsr_slave_1: entered promiscuous mode [ 1825.390996][T11545] debugfs: 'hsr0' already exists in 'hsr' [ 1825.396937][T11545] Cannot create hsr debugfs directory [ 1825.569173][T11843] bond1: (slave gretap1): making interface the new active one [ 1825.597913][T11843] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1825.776895][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 1825.776912][ T29] audit: type=1326 audit(1774217573.957:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.0.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1825.939005][T21134] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1826.004477][ T29] audit: type=1326 audit(1774217573.957:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.0.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1826.120301][T21134] usb 3-1: Using ep0 maxpacket: 8 [ 1826.140853][T21134] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.158073][ T29] audit: type=1326 audit(1774217573.957:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.0.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1826.211369][T21134] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1826.244910][T21134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.254979][ T29] audit: type=1326 audit(1774217573.957:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.0.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1826.287532][T21134] usb 3-1: Product: syz [ 1826.291782][T21134] usb 3-1: Manufacturer: syz [ 1826.304066][T21134] usb 3-1: SerialNumber: syz [ 1826.317832][ T29] audit: type=1326 audit(1774217573.957:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.0.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1826.352735][T13857] Bluetooth: hci4: command tx timeout [ 1826.366607][T21134] usb 3-1: config 0 descriptor?? [ 1826.388096][T21134] usb 3-1: bad CDC descriptors [ 1826.396985][T21134] usb 3-1: unsupported MDLM descriptors [ 1826.403363][ T29] audit: type=1326 audit(1774217573.957:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.0.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1826.427122][T21134] cdc_acm 3-1:0.0: Zero length descriptor references [ 1826.450646][T21134] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1826.479748][ T29] audit: type=1326 audit(1774217573.957:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.0.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1826.636153][T11891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.642035][ T29] audit: type=1326 audit(1774217573.957:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.0.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1826.648137][T11891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.851574][T11891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.874833][T11891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.875090][ T29] audit: type=1326 audit(1774217573.957:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.0.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1827.046720][ T29] audit: type=1326 audit(1774217573.957:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.0.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1827.049462][T11081] usb 3-1: USB disconnect, device number 82 [ 1827.116381][T11545] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1827.153866][T11545] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1827.201473][T11545] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1827.246974][T11545] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1827.582595][T11545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.618221][T11545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.631776][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.639025][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1827.700063][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.707327][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1828.049523][T11545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1828.061739][T11545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1828.422180][T11545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1828.431273][T13857] Bluetooth: hci4: command tx timeout [ 1828.528540][T11545] veth0_vlan: entered promiscuous mode [ 1828.560070][T11545] veth1_vlan: entered promiscuous mode [ 1828.632224][T11545] veth0_macvtap: entered promiscuous mode [ 1828.936076][ T9973] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1828.963394][T11545] veth1_macvtap: entered promiscuous mode [ 1829.064123][T12038] geneve2: entered allmulticast mode [ 1829.091715][T11545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1829.108450][T11545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1829.125353][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.152120][ T9973] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1829.164264][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.173474][ T9973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.204297][ T9973] usb 2-1: config 0 descriptor?? [ 1829.215461][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.289263][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.436727][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.468413][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1829.574801][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.586397][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.565364][T12076] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1831.739512][T21134] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1831.906081][T21134] usb 5-1: Using ep0 maxpacket: 8 [ 1831.921262][T21134] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.177017][ T9973] usb 2-1: Cannot set autoneg [ 1832.181955][ T9973] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1832.254895][ T9973] usb 2-1: USB disconnect, device number 74 [ 1832.268159][T21134] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1832.278903][T21134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.315334][T21134] usb 5-1: Product: syz [ 1832.319776][T21134] usb 5-1: Manufacturer: syz [ 1832.324925][T21134] usb 5-1: SerialNumber: syz [ 1832.338128][T21134] usb 5-1: config 0 descriptor?? [ 1832.350191][T21134] usb 5-1: bad CDC descriptors [ 1832.365076][T21134] usb 5-1: unsupported MDLM descriptors [ 1832.374265][T21134] cdc_acm 5-1:0.0: Zero length descriptor references [ 1832.382356][T21134] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 1832.689738][T12081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.698923][T12081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.733517][T12081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.746964][T12081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.767808][ T5886] usb 5-1: USB disconnect, device number 63 [ 1835.229922][T12159] netlink: 'syz.4.6598': attribute type 10 has an invalid length. [ 1835.270181][T12159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.277668][T12159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.425648][T12154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1835.584170][T12159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.591406][T12159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.600026][T12159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.607161][T12159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1835.760344][T12159] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1836.074073][T12176] syzkaller0: entered promiscuous mode [ 1836.079820][T12176] syzkaller0: entered allmulticast mode [ 1836.141068][T12183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6603'. [ 1836.690717][ T9973] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1836.760377][T12209] netlink: 'syz.3.6607': attribute type 4 has an invalid length. [ 1836.856605][ T9973] usb 3-1: Using ep0 maxpacket: 8 [ 1836.867381][ T9973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.894251][ T9973] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1836.903564][ T9973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.912768][ T9973] usb 3-1: Product: syz [ 1836.917336][ T9973] usb 3-1: Manufacturer: syz [ 1836.969757][ T9973] usb 3-1: SerialNumber: syz [ 1836.998885][ T9973] usb 3-1: config 0 descriptor?? [ 1837.072493][ T9973] usb 3-1: bad CDC descriptors [ 1837.095525][ T9973] usb 3-1: unsupported MDLM descriptors [ 1837.113302][ T9973] cdc_acm 3-1:0.0: Zero length descriptor references [ 1837.135064][ T9973] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1837.503137][T12191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.514172][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 1837.514186][ T29] audit: type=1326 audit(1774217585.537:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.1.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1837.625144][ T29] audit: type=1326 audit(1774217585.537:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.1.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1837.721126][ T29] audit: type=1326 audit(1774217585.537:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.1.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1837.736287][T12191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.751586][ T29] audit: type=1326 audit(1774217585.537:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.1.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1837.814857][ T29] audit: type=1326 audit(1774217585.557:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.1.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1837.895858][T12191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.973030][ T29] audit: type=1326 audit(1774217585.557:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.1.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1838.106289][T12191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.155961][ T29] audit: type=1326 audit(1774217585.577:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.1.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1838.189708][T11613] usb 3-1: USB disconnect, device number 83 [ 1838.217639][ T29] audit: type=1326 audit(1774217585.577:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.1.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1838.256110][ T29] audit: type=1326 audit(1774217585.597:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.1.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1838.288734][ T29] audit: type=1326 audit(1774217585.597:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.1.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1838.459331][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6610'. [ 1838.647427][T12241] netlink: 'syz.1.6612': attribute type 10 has an invalid length. [ 1840.920730][ T5886] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1841.302186][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 1841.322782][ T5886] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1841.341296][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.366246][ T5886] usb 5-1: config 0 has no interface number 0 [ 1841.532807][T12287] No such timeout policy "syz0" [ 1841.537890][ T5886] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1841.551161][ T5886] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1841.572011][T12285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1841.670104][ T5886] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1841.684320][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6622'. [ 1841.706363][ T5886] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1841.720951][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.740690][ T5886] usb 5-1: Product: syz [ 1841.748812][ T5886] usb 5-1: Manufacturer: syz [ 1841.759721][ T5886] usb 5-1: SerialNumber: syz [ 1841.779702][ T5886] usb 5-1: config 0 descriptor?? [ 1841.795002][T12267] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1841.845335][T12295] netlink: 'syz.3.6623': attribute type 10 has an invalid length. [ 1841.856344][T12295] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1842.086515][ T5886] ipheth 5-1:0.196: Unable to find endpoints [ 1843.726057][T11613] usb 5-1: USB disconnect, device number 64 [ 1844.113892][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6633'. [ 1844.767640][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 1844.771901][ T29] audit: type=1326 audit(1774217592.827:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1844.875600][ T29] audit: type=1326 audit(1774217592.827:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1844.925637][T23966] Bluetooth: hci5: command 0x0406 tx timeout [ 1845.082709][ T29] audit: type=1326 audit(1774217592.897:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1845.792633][ T29] audit: type=1326 audit(1774217592.897:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1845.833183][ T29] audit: type=1326 audit(1774217592.897:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1845.889097][ T29] audit: type=1326 audit(1774217592.947:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1845.955885][ T29] audit: type=1326 audit(1774217592.947:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1846.039971][ T29] audit: type=1326 audit(1774217592.947:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1846.133960][ T29] audit: type=1326 audit(1774217592.947:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1846.201364][ T29] audit: type=1326 audit(1774217592.947:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1846.345916][ T5886] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1846.554195][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 1846.564220][ T5886] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1846.573703][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.653812][ T5886] usb 4-1: config 0 descriptor?? [ 1846.683278][ T5886] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1846.712822][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1846.914936][ T12] syzkaller0: tun_net_xmit 76 [ 1846.920046][ T12] syzkaller0: tun_net_xmit 48 [ 1846.936441][T11613] syzkaller0: tun_net_xmit 76 [ 1847.200972][ T9973] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1847.224648][T11613] syzkaller0: tun_net_xmit 76 [ 1847.405889][ T9973] usb 5-1: Using ep0 maxpacket: 16 [ 1847.415610][ T9973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1847.451531][ T9973] usb 5-1: config 0 has no interfaces? [ 1847.466219][ T9973] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1847.485661][ T9973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.515189][ T9973] usb 5-1: config 0 descriptor?? [ 1847.602762][ T5886] gspca_sunplus: reg_r err -110 [ 1847.615916][ T5886] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 1847.736583][T12396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.786424][T12396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.818641][ T5886] usb 5-1: USB disconnect, device number 65 [ 1847.866830][ T9973] syzkaller0: tun_net_xmit 76 [ 1847.901072][ T5843] usb 4-1: USB disconnect, device number 83 [ 1848.108369][T12435] netlink: 'syz.0.6651': attribute type 10 has an invalid length. [ 1848.132538][T12436] No such timeout policy "syz0" [ 1848.221463][T12435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.228645][T12435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1848.236145][T12435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.243293][T12435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1848.264076][T12435] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1849.021908][T12445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1849.890628][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6658'. [ 1851.627618][T12491] netlink: 'syz.0.6662': attribute type 10 has an invalid length. [ 1852.597857][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 1852.597875][ T29] audit: type=1326 audit(1774217600.737:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1852.655138][ T29] audit: type=1326 audit(1774217600.737:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1852.686620][ T5886] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1852.703502][ T29] audit: type=1326 audit(1774217600.737:6865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1852.750461][ T29] audit: type=1326 audit(1774217600.737:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1852.799806][ T29] audit: type=1326 audit(1774217600.737:6867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1852.866876][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 1852.872988][ T29] audit: type=1326 audit(1774217600.737:6868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1852.923485][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.958688][ T29] audit: type=1326 audit(1774217600.737:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1852.981327][ T5886] usb 3-1: config 0 has no interfaces? [ 1852.987418][ T5886] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1852.997279][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.036739][ T29] audit: type=1326 audit(1774217600.737:6870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1853.061170][ T5886] usb 3-1: config 0 descriptor?? [ 1853.070361][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.076788][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.090312][ T29] audit: type=1326 audit(1774217600.737:6871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1853.129516][ T29] audit: type=1326 audit(1774217600.747:6872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.1.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c9b9c799 code=0x7ffc0000 [ 1853.327692][T12501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.336633][T12501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.869775][T12475] geneve2: entered allmulticast mode [ 1853.883301][T12491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.890563][T12491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.944936][T11613] usb 3-1: USB disconnect, device number 84 [ 1854.101371][T12530] No such timeout policy "syz0" [ 1858.481984][T12571] netlink: 'syz.3.6673': attribute type 89 has an invalid length. [ 1859.175635][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6678'. [ 1859.219553][T12592] fuse: Bad value for 'user_id' [ 1859.229193][T12592] fuse: Bad value for 'user_id' [ 1859.253495][T12596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6680'. [ 1859.294992][T12596] @: renamed from vlan0 [ 1859.800606][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6685'. [ 1859.810294][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6685'. [ 1859.819315][T12621] netlink: 'syz.3.6685': attribute type 6 has an invalid length. [ 1860.565887][T10788] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1860.643621][T12639] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6688'. [ 1860.661476][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6688'. [ 1860.715927][T10788] usb 4-1: Using ep0 maxpacket: 16 [ 1860.733115][T10788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.758895][T10788] usb 4-1: config 0 has no interfaces? [ 1860.774713][T10788] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1860.794980][T10788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.819225][T10788] usb 4-1: config 0 descriptor?? [ 1860.866818][T10264] syzkaller0: tun_net_xmit 76 [ 1860.871709][T10264] syzkaller0: tun_net_xmit 48 [ 1860.896418][ T5843] syzkaller0: tun_net_xmit 76 [ 1860.959649][T11081] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1861.028630][T12632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.041749][T12632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.056367][T10788] usb 4-1: USB disconnect, device number 84 [ 1861.117493][T11081] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1861.125994][T11081] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1861.136500][T11081] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.148026][T11081] usb 3-1: config 220 has no interface number 2 [ 1861.154379][T11081] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1861.167754][T11081] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1861.174543][T11081] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1861.181599][T11081] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1861.190261][T11081] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1861.199537][T11081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.207780][ T5886] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1861.215545][T11081] usb 3-1: Product: syz [ 1861.219778][T11081] usb 3-1: Manufacturer: syz [ 1861.224372][T11081] usb 3-1: SerialNumber: syz [ 1861.326142][ T5843] syzkaller0: tun_net_xmit 76 [ 1861.389962][ T5886] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1861.398901][ T5886] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1861.409406][ T5886] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1861.418554][ T5886] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1861.429894][ T5886] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1861.445324][ T5886] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1861.456326][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1861.464367][ T5886] usb 2-1: Product: syz [ 1861.469105][ T5886] usb 2-1: Manufacturer: syz [ 1861.476359][T11081] usb 3-1: selecting invalid altsetting 0 [ 1861.482657][T11081] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1861.494746][T11081] uvcvideo 3-1:220.0: No valid video chain found. [ 1861.502454][ T5886] cdc_wdm 2-1:1.0: skipping garbage [ 1861.512644][ T5886] cdc_wdm 2-1:1.0: skipping garbage [ 1861.523048][T11081] usb 3-1: selecting invalid altsetting 0 [ 1861.530280][T11081] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1861.538764][ T5886] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1861.546158][ T5886] cdc_wdm 2-1:1.0: Unknown control protocol [ 1861.570294][T11081] usb 3-1: USB disconnect, device number 85 [ 1861.865910][T10788] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1862.025890][T10788] usb 5-1: Using ep0 maxpacket: 32 [ 1862.034900][T10788] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1862.060936][T10788] usb 5-1: config 0 has no interface number 0 [ 1862.074900][T10788] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1862.085448][T10788] usb 5-1: config 0 interface 196 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1862.096831][T10788] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1862.106984][T10788] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1862.137732][T10788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.145913][T10788] usb 5-1: Product: syz [ 1862.152541][T10788] usb 5-1: Manufacturer: syz [ 1862.161338][T10788] usb 5-1: SerialNumber: syz [ 1862.185029][T10788] usb 5-1: config 0 descriptor?? [ 1862.205487][T12685] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1862.421366][T10788] ipheth 5-1:0.196: Unable to find endpoints [ 1863.904135][T10788] usb 2-1: USB disconnect, device number 75 [ 1864.625578][T11081] usb 5-1: USB disconnect, device number 66 [ 1864.805932][T10788] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1864.864239][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 1864.864258][ T29] audit: type=1326 audit(1774217613.027:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.4.6697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1864.996852][T10788] usb 4-1: Using ep0 maxpacket: 16 [ 1864.999060][ T29] audit: type=1326 audit(1774217613.097:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.4.6697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1865.106117][T10788] usb 4-1: config 0 has no interfaces? [ 1865.120434][ T29] audit: type=1326 audit(1774217613.097:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.4.6697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1865.260980][T10788] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1865.323466][T10788] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1865.343024][T10788] usb 4-1: Manufacturer: syz [ 1865.361561][ T29] audit: type=1326 audit(1774217613.097:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.4.6697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1865.660815][T10788] usb 4-1: config 0 descriptor?? [ 1865.663305][ T29] audit: type=1326 audit(1774217613.097:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.4.6697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1865.778553][ T29] audit: type=1326 audit(1774217613.097:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.4.6697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1865.883882][ T29] audit: type=1326 audit(1774217613.097:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.4.6697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1865.955887][ T29] audit: type=1326 audit(1774217613.097:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.4.6697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1865.985949][ T29] audit: type=1326 audit(1774217613.097:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.4.6697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1866.027639][ T29] audit: type=1326 audit(1774217613.097:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.4.6697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34d059c799 code=0x7ffc0000 [ 1866.355210][T12730] Set syz1 is full, maxelem 6117 reached [ 1866.931836][T12801] FAULT_INJECTION: forcing a failure. [ 1866.931836][T12801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1866.958790][T12801] CPU: 1 UID: 0 PID: 12801 Comm: syz.4.6704 Tainted: G L syzkaller #0 PREEMPT(full) [ 1866.958812][T12801] Tainted: [L]=SOFTLOCKUP [ 1866.958816][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1866.958823][T12801] Call Trace: [ 1866.958828][T12801] [ 1866.958834][T12801] dump_stack_lvl+0xe8/0x150 [ 1866.958855][T12801] should_fail_ex+0x412/0x560 [ 1866.958874][T12801] _copy_to_user+0x31/0xb0 [ 1866.958888][T12801] simple_read_from_buffer+0xe1/0x170 [ 1866.958907][T12801] proc_fail_nth_read+0x1bb/0x230 [ 1866.958924][T12801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1866.958941][T12801] ? rw_verify_area+0x2a6/0x4d0 [ 1866.958952][T12801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1866.958967][T12801] vfs_read+0x20c/0xa70 [ 1866.958978][T12801] ? fdget_pos+0x246/0x320 [ 1866.958986][T12801] ? __pfx___mutex_lock+0x10/0x10 [ 1866.959002][T12801] ? __pfx___mutex_lock+0x10/0x10 [ 1866.959014][T12801] ? __pfx_vfs_read+0x10/0x10 [ 1866.959026][T12801] ? __fget_files+0x2a/0x420 [ 1866.959044][T12801] ? __fget_files+0x3a0/0x420 [ 1866.959059][T12801] ? __fget_files+0x2a/0x420 [ 1866.959077][T12801] ksys_read+0x150/0x270 [ 1866.959090][T12801] ? __pfx_ksys_read+0x10/0x10 [ 1866.959107][T12801] do_syscall_64+0x14d/0xf80 [ 1866.959119][T12801] ? trace_irq_disable+0x3b/0x150 [ 1866.959133][T12801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.959144][T12801] ? clear_bhb_loop+0x40/0x90 [ 1866.959169][T12801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.959180][T12801] RIP: 0033:0x7f34d055cfce [ 1866.959191][T12801] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1866.959201][T12801] RSP: 002b:00007f34d1389fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1866.959214][T12801] RAX: ffffffffffffffda RBX: 00007f34d138a6c0 RCX: 00007f34d055cfce [ 1866.959223][T12801] RDX: 000000000000000f RSI: 00007f34d138a0a0 RDI: 0000000000000004 [ 1866.959229][T12801] RBP: 00007f34d138a090 R08: 0000000000000000 R09: 0000000000000000 [ 1866.959236][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.959242][T12801] R13: 00007f34d0816038 R14: 00007f34d0815fa0 R15: 00007f34d093fa48 [ 1866.959258][T12801] [ 1867.539336][T11081] usb 4-1: USB disconnect, device number 85 [ 1867.575878][ T5886] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1867.716486][ T5843] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1867.757459][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 1867.810817][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.838167][ T5886] usb 5-1: config 0 has no interfaces? [ 1867.850817][ T5886] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1867.877098][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.901153][ T5886] usb 5-1: config 0 descriptor?? [ 1867.966772][ T5843] usb 2-1: device descriptor read/64, error -71 [ 1868.128514][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.137176][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.158645][ T5886] usb 5-1: USB disconnect, device number 67 [ 1868.215380][T12845] No such timeout policy "syz0" [ 1868.246297][ T5843] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1868.406242][ T5843] usb 2-1: device descriptor read/64, error -71 [ 1868.468120][ T78] bridge_slave_1: left allmulticast mode [ 1868.473780][ T78] bridge_slave_1: left promiscuous mode [ 1868.489835][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.511340][ T78] bridge_slave_0: left allmulticast mode [ 1868.520269][ T78] bridge_slave_0: left promiscuous mode [ 1868.526301][ T5843] usb usb2-port1: attempt power cycle [ 1868.527646][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.909195][ T5843] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1868.937686][ T5843] usb 2-1: device descriptor read/8, error -71 [ 1868.964293][ T78] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1869.039912][ T78] dvmrp8 (unregistering): left allmulticast mode [ 1869.081834][ T78] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1869.123967][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1869.140633][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1869.157615][ T78] bond0 (unregistering): Released all slaves [ 1869.176075][ T5843] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1869.178287][T12877] netlink: 'syz.3.6720': attribute type 1 has an invalid length. [ 1869.210306][ T78] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1869.219293][ T5843] usb 2-1: device descriptor read/8, error -71 [ 1869.227988][ T78] bond1 (unregistering): Released all slaves [ 1869.233111][T12877] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6720'. [ 1869.251605][ T78] bond2 (unregistering): Released all slaves [ 1869.318416][ T78] bond3 (unregistering): Released all slaves [ 1869.333311][ T78] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1869.342712][ T5843] usb usb2-port1: unable to enumerate USB device [ 1869.353535][ T78] bond4 (unregistering): Released all slaves [ 1869.367015][ T78] bond5 (unregistering): Released all slaves [ 1869.379990][ T78] bond6 (unregistering): Released all slaves [ 1869.392482][ T78] bond7 (unregistering): Released all slaves [ 1870.905894][T21134] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1871.079792][T21134] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1871.095227][T21134] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1871.110496][T21134] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1871.120287][T21134] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1871.131837][T21134] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1871.146495][T21134] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1871.156062][T21134] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1871.209517][T21134] usb 2-1: Product: syz [ 1871.214048][T21134] usb 2-1: Manufacturer: syz [ 1871.236315][T21134] cdc_wdm 2-1:1.0: skipping garbage [ 1871.242547][T21134] cdc_wdm 2-1:1.0: skipping garbage [ 1871.252782][T21134] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1871.259388][T21134] cdc_wdm 2-1:1.0: Unknown control protocol [ 1871.309917][ T78] tipc: Left network mode [ 1871.512845][T12907] binder: 12906:12907 ioctl 5441 fffffffffffffff9 returned -22 [ 1871.669253][T21134] usb 2-1: USB disconnect, device number 80 [ 1872.091211][ T78] hsr_slave_0: left promiscuous mode [ 1872.103452][ T78] hsr_slave_1: left promiscuous mode [ 1872.983265][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1873.055858][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1873.078978][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1873.215981][ T10] usb 2-1: device descriptor read/64, error -71 [ 1873.488020][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1873.738318][ T10] usb 2-1: device descriptor read/64, error -71 [ 1873.864063][ T10] usb usb2-port1: attempt power cycle [ 1874.012684][ T78] IPVS: stop unused estimator thread 0... [ 1874.065959][T12954] No such timeout policy "syz0" [ 1874.377188][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1874.407129][ T10] usb 2-1: device descriptor read/8, error -71 [ 1874.471884][T12964] input: syz0 as /devices/virtual/input/input49 [ 1874.648795][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1874.676442][ T10] usb 2-1: device descriptor read/8, error -71 [ 1874.786632][ T10] usb usb2-port1: unable to enumerate USB device [ 1875.015946][ T10] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1875.177318][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.189403][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1875.202853][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.301936][ T10] usb 3-1: config 0 descriptor?? [ 1875.511540][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1875.517940][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1875.531713][ T10] usb 3-1: USB disconnect, device number 86 [ 1875.955990][ T5843] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1876.105982][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 1876.114357][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.126707][ T5843] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1876.138045][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.160814][ T5843] usb 3-1: config 0 descriptor?? [ 1876.174238][ T5843] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1876.203331][ T5843] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1876.459766][T13020] netlink: 'syz.3.6744': attribute type 10 has an invalid length. [ 1877.642439][ T5843] usb 3-1: USB disconnect, device number 87 [ 1877.655088][ T5843] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1877.851109][T13041] FAULT_INJECTION: forcing a failure. [ 1877.851109][T13041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1877.896075][T13041] CPU: 1 UID: 0 PID: 13041 Comm: syz.4.6747 Tainted: G L syzkaller #0 PREEMPT(full) [ 1877.896106][T13041] Tainted: [L]=SOFTLOCKUP [ 1877.896113][T13041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1877.896123][T13041] Call Trace: [ 1877.896131][T13041] [ 1877.896140][T13041] dump_stack_lvl+0xe8/0x150 [ 1877.896170][T13041] should_fail_ex+0x412/0x560 [ 1877.896199][T13041] _copy_from_user+0x2d/0xb0 [ 1877.896222][T13041] do_sock_getsockopt+0x165/0x3f0 [ 1877.896246][T13041] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1877.896276][T13041] ? __fget_files+0x3a0/0x420 [ 1877.896302][T13041] ? __fget_files+0x2a/0x420 [ 1877.896335][T13041] __x64_sys_getsockopt+0x1a4/0x240 [ 1877.896364][T13041] do_syscall_64+0x14d/0xf80 [ 1877.896385][T13041] ? trace_irq_disable+0x3b/0x150 [ 1877.896410][T13041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.896429][T13041] ? clear_bhb_loop+0x40/0x90 [ 1877.896451][T13041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.896469][T13041] RIP: 0033:0x7f34d059c799 [ 1877.896488][T13041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1877.896503][T13041] RSP: 002b:00007f34ce7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1877.896524][T13041] RAX: ffffffffffffffda RBX: 00007f34d0816090 RCX: 00007f34d059c799 [ 1877.896537][T13041] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 1877.896550][T13041] RBP: 00007f34ce7f6090 R08: 0000200000000100 R09: 0000000000000000 [ 1877.896562][T13041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1877.896574][T13041] R13: 00007f34d0816128 R14: 00007f34d0816090 R15: 00007f34d093fa48 [ 1877.896603][T13041] [ 1878.466022][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1878.476320][T13080] FAULT_INJECTION: forcing a failure. [ 1878.476320][T13080] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.492829][T13080] CPU: 0 UID: 0 PID: 13080 Comm: syz.3.6760 Tainted: G L syzkaller #0 PREEMPT(full) [ 1878.492864][T13080] Tainted: [L]=SOFTLOCKUP [ 1878.492872][T13080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1878.492884][T13080] Call Trace: [ 1878.492892][T13080] [ 1878.492900][T13080] dump_stack_lvl+0xe8/0x150 [ 1878.492932][T13080] should_fail_ex+0x412/0x560 [ 1878.492964][T13080] should_failslab+0xa8/0x100 [ 1878.492990][T13080] __kmalloc_noprof+0xe8/0x760 [ 1878.493011][T13080] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1878.493047][T13080] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1878.493084][T13080] ? tomoyo_path_number_perm+0x219/0x630 [ 1878.493109][T13080] tomoyo_path_number_perm+0x246/0x630 [ 1878.493135][T13080] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1878.493162][T13080] ? __lock_acquire+0x6b5/0x2cf0 [ 1878.493195][T13080] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1878.493236][T13080] ? __fget_files+0x2a/0x420 [ 1878.493266][T13080] ? __fget_files+0x2a/0x420 [ 1878.493291][T13080] ? __fget_files+0x3a0/0x420 [ 1878.493317][T13080] ? __fget_files+0x2a/0x420 [ 1878.493346][T13080] security_file_ioctl+0xc3/0x2a0 [ 1878.493372][T13080] __se_sys_ioctl+0x47/0x170 [ 1878.493397][T13080] do_syscall_64+0x14d/0xf80 [ 1878.493418][T13080] ? trace_irq_disable+0x3b/0x150 [ 1878.493452][T13080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.493471][T13080] ? clear_bhb_loop+0x40/0x90 [ 1878.493494][T13080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.493513][T13080] RIP: 0033:0x7fd92059c799 [ 1878.493531][T13080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1878.493548][T13080] RSP: 002b:00007fd9214f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1878.493569][T13080] RAX: ffffffffffffffda RBX: 00007fd920815fa0 RCX: 00007fd92059c799 [ 1878.493583][T13080] RDX: 0000000000000000 RSI: 0000000080184560 RDI: 0000000000000003 [ 1878.493595][T13080] RBP: 00007fd9214f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1878.493608][T13080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1878.493620][T13080] R13: 00007fd920816038 R14: 00007fd920815fa0 R15: 00007fd92093fa48 [ 1878.493649][T13080] [ 1878.494243][T13080] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1878.795869][ T10] usb 3-1: device descriptor read/64, error -71 [ 1879.036025][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1879.075336][T13090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1879.113438][T13090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1879.176036][ T10] usb 3-1: device descriptor read/64, error -71 [ 1879.231922][T10264] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.245962][T10264] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.289737][ T10] usb usb3-port1: attempt power cycle [ 1879.305981][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6767'. [ 1879.316596][T10264] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.339660][T10264] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.446448][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1879.446468][ T29] audit: type=1326 audit(1774217627.567:6952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.0.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1879.486497][ T29] audit: type=1326 audit(1774217627.567:6953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.0.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1879.509013][ T29] audit: type=1326 audit(1774217627.567:6954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.0.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1879.532411][ T29] audit: type=1326 audit(1774217627.567:6955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.0.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1879.566464][ T29] audit: type=1326 audit(1774217627.567:6956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.0.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1879.589918][ T29] audit: type=1326 audit(1774217627.567:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.0.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1879.664517][ T29] audit: type=1326 audit(1774217627.567:6958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.0.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1879.712765][ T29] audit: type=1326 audit(1774217627.567:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.0.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1879.735439][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1879.756798][ T29] audit: type=1326 audit(1774217627.567:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.0.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1879.756901][ T10] usb 3-1: device descriptor read/8, error -71 [ 1879.780325][ T29] audit: type=1326 audit(1774217627.577:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.0.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f233b39c799 code=0x7ffc0000 [ 1879.976320][T13109] binder: 13108:13109 ioctl c018620c 200000000240 returned -22 [ 1880.086199][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1880.246862][ T10] usb 3-1: device descriptor read/8, error -71 [ 1880.248672][T13116] netlink: 'syz.3.6766': attribute type 9 has an invalid length. [ 1880.367006][ T10] usb usb3-port1: unable to enumerate USB device [ 1880.367978][T10788] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1880.393937][T13119] FAULT_INJECTION: forcing a failure. [ 1880.393937][T13119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.409374][T13119] CPU: 0 UID: 0 PID: 13119 Comm: syz.4.6772 Tainted: G L syzkaller #0 PREEMPT(full) [ 1880.409402][T13119] Tainted: [L]=SOFTLOCKUP [ 1880.409408][T13119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1880.409419][T13119] Call Trace: [ 1880.409426][T13119] [ 1880.409433][T13119] dump_stack_lvl+0xe8/0x150 [ 1880.409463][T13119] should_fail_ex+0x412/0x560 [ 1880.409494][T13119] _copy_from_user+0x2d/0xb0 [ 1880.409515][T13119] __sys_sendto+0x2b0/0x710 [ 1880.409537][T13119] ? __pfx___sys_sendto+0x10/0x10 [ 1880.409554][T13119] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1880.409586][T13119] ? __fget_files+0x3a0/0x420 [ 1880.409621][T13119] ? ksys_write+0x242/0x270 [ 1880.409642][T13119] ? __pfx_ksys_write+0x10/0x10 [ 1880.409665][T13119] __x64_sys_sendto+0xde/0x100 [ 1880.409684][T13119] do_syscall_64+0x14d/0xf80 [ 1880.409704][T13119] ? trace_irq_disable+0x3b/0x150 [ 1880.409730][T13119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.409747][T13119] ? clear_bhb_loop+0x40/0x90 [ 1880.409770][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.409788][T13119] RIP: 0033:0x7f34d059c799 [ 1880.409806][T13119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1880.409821][T13119] RSP: 002b:00007f34d138a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1880.409840][T13119] RAX: ffffffffffffffda RBX: 00007f34d0815fa0 RCX: 00007f34d059c799 [ 1880.409853][T13119] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 1880.409865][T13119] RBP: 00007f34d138a090 R08: 0000200000000200 R09: 0000000000000014 [ 1880.409878][T13119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1880.409888][T13119] R13: 00007f34d0816038 R14: 00007f34d0815fa0 R15: 00007f34d093fa48 [ 1880.409917][T13119] [ 1880.411321][T13099] netlink: 'syz.3.6766': attribute type 10 has an invalid length. [ 1880.569586][T10788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.643904][T10788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1880.657064][T10788] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1880.670446][T10788] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1880.682295][T10788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.705488][T10788] usb 2-1: config 0 descriptor?? [ 1880.835499][T13138] FAULT_INJECTION: forcing a failure. [ 1880.835499][T13138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.848785][T13138] CPU: 0 UID: 0 PID: 13138 Comm: syz.3.6778 Tainted: G L syzkaller #0 PREEMPT(full) [ 1880.848816][T13138] Tainted: [L]=SOFTLOCKUP [ 1880.848823][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1880.848835][T13138] Call Trace: [ 1880.848843][T13138] [ 1880.848852][T13138] dump_stack_lvl+0xe8/0x150 [ 1880.848885][T13138] should_fail_ex+0x412/0x560 [ 1880.848917][T13138] _copy_from_user+0x2d/0xb0 [ 1880.848939][T13138] core_sys_select+0x578/0xc30 [ 1880.848988][T13138] ? __pfx_core_sys_select+0x10/0x10 [ 1880.849034][T13138] ? __pfx_set_user_sigmask+0x10/0x10 [ 1880.849059][T13138] ? kmem_cache_free+0x187/0x630 [ 1880.849079][T13138] ? fd_install+0x94/0x3d0 [ 1880.849103][T13138] ? do_sys_openat2+0x14c/0x200 [ 1880.849137][T13138] __se_sys_pselect6+0x267/0x320 [ 1880.849168][T13138] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1880.849195][T13138] ? __pfx_ksys_write+0x10/0x10 [ 1880.849219][T13138] ? __x64_sys_pselect6+0x21/0xf0 [ 1880.849247][T13138] do_syscall_64+0x14d/0xf80 [ 1880.849269][T13138] ? trace_irq_disable+0x3b/0x150 [ 1880.849295][T13138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.849314][T13138] ? clear_bhb_loop+0x40/0x90 [ 1880.849337][T13138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.849356][T13138] RIP: 0033:0x7fd92059c799 [ 1880.849374][T13138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1880.849391][T13138] RSP: 002b:00007fd9214f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1880.849411][T13138] RAX: ffffffffffffffda RBX: 00007fd920815fa0 RCX: 00007fd92059c799 [ 1880.849426][T13138] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 1880.849438][T13138] RBP: 00007fd9214f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1880.849450][T13138] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1880.849462][T13138] R13: 00007fd920816038 R14: 00007fd920815fa0 R15: 00007fd92093fa48 [ 1880.849489][T13138] [ 1881.335291][T10788] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1882.755104][T13172] FAULT_INJECTION: forcing a failure. [ 1882.755104][T13172] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.769345][T13172] CPU: 0 UID: 0 PID: 13172 Comm: syz.3.6785 Tainted: G L syzkaller #0 PREEMPT(full) [ 1882.769373][T13172] Tainted: [L]=SOFTLOCKUP [ 1882.769380][T13172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1882.769390][T13172] Call Trace: [ 1882.769397][T13172] [ 1882.769405][T13172] dump_stack_lvl+0xe8/0x150 [ 1882.769435][T13172] should_fail_ex+0x412/0x560 [ 1882.769466][T13172] should_failslab+0xa8/0x100 [ 1882.769492][T13172] __kmalloc_noprof+0xe8/0x760 [ 1882.769514][T13172] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1882.769547][T13172] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1882.769581][T13172] ? tomoyo_path_number_perm+0x219/0x630 [ 1882.769595][T13172] tomoyo_path_number_perm+0x246/0x630 [ 1882.769610][T13172] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1882.769626][T13172] ? __lock_acquire+0x6b5/0x2cf0 [ 1882.769645][T13172] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1882.769668][T13172] ? __fget_files+0x2a/0x420 [ 1882.769685][T13172] ? __fget_files+0x2a/0x420 [ 1882.769700][T13172] ? __fget_files+0x3a0/0x420 [ 1882.769715][T13172] ? __fget_files+0x2a/0x420 [ 1882.769732][T13172] security_file_ioctl+0xc3/0x2a0 [ 1882.769746][T13172] __se_sys_ioctl+0x47/0x170 [ 1882.769760][T13172] do_syscall_64+0x14d/0xf80 [ 1882.769772][T13172] ? trace_irq_disable+0x3b/0x150 [ 1882.769794][T13172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.769805][T13172] ? clear_bhb_loop+0x40/0x90 [ 1882.769818][T13172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.769828][T13172] RIP: 0033:0x7fd92059c799 [ 1882.769839][T13172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1882.769848][T13172] RSP: 002b:00007fd9214f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1882.769860][T13172] RAX: ffffffffffffffda RBX: 00007fd920815fa0 RCX: 00007fd92059c799 [ 1882.769868][T13172] RDX: 0000200000000080 RSI: 00000000c02c5638 RDI: 0000000000000003 [ 1882.769876][T13172] RBP: 00007fd9214f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1882.769882][T13172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1882.769889][T13172] R13: 00007fd920816038 R14: 00007fd920815fa0 R15: 00007fd92093fa48 [ 1882.769905][T13172] [ 1882.769988][T13172] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1883.016817][T21134] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1883.125045][ T13] 0: reclassify loop, rule prio 0, protocol 700 [ 1883.187689][T21134] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1883.201684][T21134] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1883.220093][T21134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.228551][T21134] usb 5-1: Product: syz [ 1883.232714][T21134] usb 5-1: Manufacturer: syz [ 1883.237842][T21134] usb 5-1: SerialNumber: syz [ 1883.395890][ T10] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1883.486047][T11613] usb 2-1: reset high-speed USB device number 85 using dummy_hcd [ 1883.550491][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 1883.565187][ T10] usb 3-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1883.587600][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1883.602464][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1883.619813][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.633205][ T10] usb 3-1: Product: syz [ 1883.640084][ T10] usb 3-1: Manufacturer: syz [ 1883.646167][T11613] usb 2-1: device descriptor read/64, error -71 [ 1883.661753][ T10] usb 3-1: SerialNumber: syz [ 1883.907374][ T10] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 92 if 0 alt 64 proto 1 vid 0x0525 pid 0xA4A8 [ 1883.923871][T11613] usb 2-1: reset high-speed USB device number 85 using dummy_hcd [ 1883.935852][ T10] usb 3-1: USB disconnect, device number 92 [ 1883.977996][ T10] usblp1: removed [ 1884.085927][T11613] usb 2-1: device descriptor read/64, error -71 [ 1884.345946][T11613] usb 2-1: reset high-speed USB device number 85 using dummy_hcd [ 1884.386635][T11613] usb 2-1: device descriptor read/8, error -71 [ 1884.461524][T21134] usb 5-1: failed to read current rate; disabling the check [ 1884.607062][T13244] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1884.613078][T13244] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1884.648805][T11613] usb 2-1: reset high-speed USB device number 85 using dummy_hcd [ 1884.700006][T11613] usb 2-1: device descriptor read/8, error -71 [ 1884.726177][T13244] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1884.741665][T13244] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1884.780287][T13244] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1884.787277][T13244] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1884.812150][T13244] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1884.826524][T10788] usb 2-1: USB disconnect, device number 85 [ 1884.831065][T13244] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1884.942272][T13244] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1884.953187][T13244] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1884.969956][T13244] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1884.984802][T13244] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1884.996941][T13171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.023915][T13171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1885.059877][ T5886] usb 5-1: USB disconnect, device number 68 [ 1885.106509][T10788] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1885.247563][T10788] usb 2-1: device descriptor read/64, error -71 [ 1885.256022][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1885.407800][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.425930][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.445893][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1885.475160][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1885.486001][T10788] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1885.494847][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.513114][ T10] usb 4-1: config 0 descriptor?? [ 1885.615882][T10788] usb 2-1: device descriptor read/64, error -71 [ 1885.726412][T10788] usb usb2-port1: attempt power cycle [ 1885.916584][ T5886] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1885.945187][ T10] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1886.065865][T10788] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1886.075885][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 1886.082817][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.086551][T10788] usb 2-1: device descriptor read/8, error -71 [ 1886.093303][ T5886] usb 5-1: config 0 has no interfaces? [ 1886.104693][ T5886] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1886.113792][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.124375][ T5886] usb 5-1: config 0 descriptor?? [ 1886.349949][T13308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.359064][T13308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.391017][T11613] usb 5-1: USB disconnect, device number 69 [ 1886.445369][T13343] FAULT_INJECTION: forcing a failure. [ 1886.445369][T13343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.458925][T13343] CPU: 1 UID: 0 PID: 13343 Comm: syz.2.6806 Tainted: G L syzkaller #0 PREEMPT(full) [ 1886.458944][T13343] Tainted: [L]=SOFTLOCKUP [ 1886.458948][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1886.458955][T13343] Call Trace: [ 1886.458960][T13343] [ 1886.458967][T13343] dump_stack_lvl+0xe8/0x150 [ 1886.459000][T13343] should_fail_ex+0x412/0x560 [ 1886.459030][T13343] _copy_from_user+0x2d/0xb0 [ 1886.459051][T13343] __sys_connect+0x156/0x450 [ 1886.459064][T13343] ? __pfx___sys_connect+0x10/0x10 [ 1886.459080][T13343] ? __pfx_ksys_write+0x10/0x10 [ 1886.459095][T13343] __x64_sys_connect+0x7a/0x90 [ 1886.459106][T13343] do_syscall_64+0x14d/0xf80 [ 1886.459125][T13343] ? trace_irq_disable+0x3b/0x150 [ 1886.459152][T13343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.459171][T13343] ? clear_bhb_loop+0x40/0x90 [ 1886.459194][T13343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.459207][T13343] RIP: 0033:0x7f9f8159c799 [ 1886.459218][T13343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1886.459227][T13343] RSP: 002b:00007f9f82530028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1886.459239][T13343] RAX: ffffffffffffffda RBX: 00007f9f81815fa0 RCX: 00007f9f8159c799 [ 1886.459246][T13343] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000004 [ 1886.459253][T13343] RBP: 00007f9f82530090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.459262][T13343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.459273][T13343] R13: 00007f9f81816038 R14: 00007f9f81815fa0 R15: 00007f9f8193fa48 [ 1886.459299][T13343] [ 1886.666088][T23966] Bluetooth: hci3: command 0x0406 tx timeout [ 1886.685908][T10788] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1886.708261][T10788] usb 2-1: Using ep0 maxpacket: 8 [ 1886.714753][T10788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.725104][T10788] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1886.734216][T10788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.745279][T10788] usb 2-1: config 0 descriptor?? [ 1886.756102][T23966] Bluetooth: hci5: command 0x0406 tx timeout [ 1886.760348][T10788] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1886.826114][T13857] Bluetooth: hci0: command 0x0406 tx timeout [ 1886.828937][T23966] Bluetooth: hci2: command 0x0c1a tx timeout [ 1886.915970][ T5886] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1886.959582][T13329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.968988][T13329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.988287][T23966] Bluetooth: hci4: command 0x0c1a tx timeout [ 1887.086525][ T5886] usb 3-1: not running at top speed; connect to a high speed hub [ 1887.096069][ T5886] usb 3-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1887.109154][ T5886] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1887.119139][ T5886] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1887.128411][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.136693][ T5886] usb 3-1: Product: syz [ 1887.140978][ T5886] usb 3-1: Manufacturer: syz [ 1887.150878][ T5886] usb 3-1: SerialNumber: syz [ 1887.392609][ T5886] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 93 if 0 alt 64 proto 1 vid 0x0525 pid 0xA4A8 [ 1887.418819][ T5886] usb 3-1: USB disconnect, device number 93 [ 1887.433827][ T5886] usblp1: removed [ 1887.953370][T11613] usb 4-1: USB disconnect, device number 86 [ 1887.992526][T10788] gspca_vc032x: reg_w err -71 [ 1888.026275][T10788] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1888.058362][T10788] usb 2-1: USB disconnect, device number 89 [ 1888.747670][T23966] Bluetooth: hci3: command 0x0406 tx timeout [ 1888.825870][T23966] Bluetooth: hci5: command 0x0406 tx timeout [ 1888.927050][T23966] Bluetooth: hci2: command 0x0c1a tx timeout [ 1888.933142][T23966] Bluetooth: hci0: command 0x0406 tx timeout [ 1889.066158][T23966] Bluetooth: hci4: command 0x0c1a tx timeout [ 1890.117537][T13422] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 1890.124260][T13423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1890.133904][T13423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.355869][T11613] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1890.496031][T11613] usb 5-1: device descriptor read/64, error -71 [ 1890.558164][ T10] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1890.718944][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1890.730343][ T10] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1890.743539][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1890.753070][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1890.756622][T11613] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1890.762547][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.778230][ T10] usb 4-1: Product: syz [ 1890.782400][ T10] usb 4-1: Manufacturer: syz [ 1890.787147][ T10] usb 4-1: SerialNumber: syz [ 1890.806051][ T5886] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1890.849218][T13496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1890.897263][T11613] usb 5-1: device descriptor read/64, error -71 [ 1890.966717][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 1890.977812][ T5886] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1890.986356][T23966] Bluetooth: hci2: command 0x0c1a tx timeout [ 1890.992663][ T5886] usb 3-1: config 0 has no interface number 0 [ 1891.009167][ T5886] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1891.012243][T11613] usb usb5-port1: attempt power cycle [ 1891.020830][ T5886] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1891.037783][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 64 proto 1 vid 0x0525 pid 0xA4A8 [ 1891.051307][ T10] usb 4-1: USB disconnect, device number 87 [ 1891.062021][ T5886] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1891.089617][ T10] usblp0: removed [ 1891.094462][ T5886] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1891.113631][ T5886] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1891.133251][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.146148][T23966] Bluetooth: hci4: command 0x0c1a tx timeout [ 1891.155487][ T5886] usb 3-1: Product: syz [ 1891.163094][ T5886] usb 3-1: Manufacturer: syz [ 1891.172118][ T5886] usb 3-1: SerialNumber: syz [ 1891.181115][ T5886] usb 3-1: config 0 descriptor?? [ 1891.189913][T13483] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1891.365892][T10788] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1891.395904][T11613] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1891.421052][ T5886] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1891.433804][ T5886] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 1891.447449][T11613] usb 5-1: device descriptor read/8, error -71 [ 1891.452586][ T5886] usb 3-1: USB disconnect, device number 94 [ 1891.537687][T10788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1891.555698][T10788] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1891.571803][T10788] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1891.583918][T10788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.592182][T10788] usb 2-1: Product: syz [ 1891.596411][T10788] usb 2-1: Manufacturer: syz [ 1891.601013][T10788] usb 2-1: SerialNumber: syz [ 1891.613669][T10788] usb 2-1: config 0 descriptor?? [ 1891.706868][T11613] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1891.736560][T11613] usb 5-1: device descriptor read/8, error -71 [ 1891.870858][T11613] usb usb5-port1: unable to enumerate USB device [ 1893.044299][T13573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1893.164934][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6837'. [ 1893.200437][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6837'. [ 1894.030020][T10788] usb 2-1: USB disconnect, device number 90 [ 1894.420689][T13616] netlink: 'syz.4.6847': attribute type 30 has an invalid length. [ 1894.765274][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6848'. [ 1894.805406][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6848'. [ 1894.977162][T13630] No such timeout policy "syz0" [ 1895.505891][ T5886] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1895.687956][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.703722][ T5886] usb 5-1: config 0 has no interfaces? [ 1895.733101][ T5886] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1895.743922][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.764994][ T5886] usb 5-1: Product: syz [ 1895.775198][ T5886] usb 5-1: Manufacturer: syz [ 1895.782774][ T5886] usb 5-1: SerialNumber: syz [ 1895.796162][ T5886] usb 5-1: config 0 descriptor?? [ 1895.875890][T10788] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1896.013384][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6850'. [ 1896.027421][ T6035] usb 5-1: USB disconnect, device number 74 [ 1896.028154][T10788] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1896.046505][T10788] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1896.069577][T10788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1896.084495][T10788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1896.106150][T21134] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1896.299975][T10788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1896.316370][T21134] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.326701][T21134] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1896.348267][T10788] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1896.358154][T10788] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1896.367243][T10788] usb 4-1: Product: syz [ 1896.371888][T10788] usb 4-1: Manufacturer: syz [ 1896.401536][T10788] cdc_wdm 4-1:1.0: skipping garbage [ 1896.408313][T10788] cdc_wdm 4-1:1.0: skipping garbage [ 1896.426762][T10788] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1896.434303][T21134] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1896.445840][T10788] cdc_wdm 4-1:1.0: Unknown control protocol [ 1896.456209][T21134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.464457][T21134] usb 2-1: Product: syz [ 1896.492641][T21134] usb 2-1: Manufacturer: syz [ 1896.502603][T21134] usb 2-1: SerialNumber: syz [ 1896.518773][T21134] usb 2-1: config 0 descriptor?? [ 1896.781517][T13682] FAULT_INJECTION: forcing a failure. [ 1896.781517][T13682] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.796093][T13682] CPU: 1 UID: 0 PID: 13682 Comm: syz.4.6859 Tainted: G L syzkaller #0 PREEMPT(full) [ 1896.796124][T13682] Tainted: [L]=SOFTLOCKUP [ 1896.796131][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1896.796142][T13682] Call Trace: [ 1896.796150][T13682] [ 1896.796158][T13682] dump_stack_lvl+0xe8/0x150 [ 1896.796188][T13682] should_fail_ex+0x412/0x560 [ 1896.796220][T13682] should_failslab+0xa8/0x100 [ 1896.796246][T13682] __kmalloc_noprof+0xe8/0x760 [ 1896.796284][T13682] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1896.796317][T13682] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1896.796354][T13682] ? tomoyo_path_number_perm+0x219/0x630 [ 1896.796377][T13682] tomoyo_path_number_perm+0x246/0x630 [ 1896.796404][T13682] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1896.796438][T13682] ? __lock_acquire+0x6b5/0x2cf0 [ 1896.796473][T13682] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1896.796507][T13682] ? __fget_files+0x2a/0x420 [ 1896.796536][T13682] ? __fget_files+0x2a/0x420 [ 1896.796562][T13682] ? __fget_files+0x3a0/0x420 [ 1896.796587][T13682] ? __fget_files+0x2a/0x420 [ 1896.796613][T13682] security_file_ioctl+0xc3/0x2a0 [ 1896.796638][T13682] __se_sys_ioctl+0x47/0x170 [ 1896.796663][T13682] do_syscall_64+0x14d/0xf80 [ 1896.796683][T13682] ? trace_irq_disable+0x3b/0x150 [ 1896.796709][T13682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.796729][T13682] ? clear_bhb_loop+0x40/0x90 [ 1896.796751][T13682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.796769][T13682] RIP: 0033:0x7f34d059c799 [ 1896.796787][T13682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1896.796805][T13682] RSP: 002b:00007f34d138a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1896.796824][T13682] RAX: ffffffffffffffda RBX: 00007f34d0815fa0 RCX: 00007f34d059c799 [ 1896.796837][T13682] RDX: 0000200000000100 RSI: 0000000000002285 RDI: 0000000000000003 [ 1896.796849][T13682] RBP: 00007f34d138a090 R08: 0000000000000000 R09: 0000000000000000 [ 1896.796859][T13682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1896.796870][T13682] R13: 00007f34d0816038 R14: 00007f34d0815fa0 R15: 00007f34d093fa48 [ 1896.796897][T13682] [ 1896.796912][T13682] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1896.803405][ T6035] usb 4-1: USB disconnect, device number 88 [ 1896.929386][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1897.042231][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1897.702700][T13711] netlink: 'syz.0.6866': attribute type 4 has an invalid length. [ 1897.818150][T21134] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1898.105865][T21134] usb 4-1: Using ep0 maxpacket: 32 [ 1898.142886][T21134] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1898.151381][T21134] usb 4-1: config 0 has no interface number 0 [ 1898.157749][T21134] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1898.167968][T21134] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1898.183899][T21134] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1898.205197][T21134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.220064][T21134] usb 4-1: Product: syz [ 1898.227831][T21134] usb 4-1: Manufacturer: syz [ 1898.235279][T21134] usb 4-1: SerialNumber: syz [ 1898.252083][T21134] usb 4-1: config 0 descriptor?? [ 1898.338802][T21134] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1898.570988][T21134] em28xx 4-1:0.89: Video interface 89 found: [ 1898.672267][T10788] usb 2-1: USB disconnect, device number 91 [ 1898.904224][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.921764][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.435412][T21134] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1900.144082][T13751] kvm: kvm [13750]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 1900.156029][T13751] kvm: kvm [13750]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 1900.173973][T13751] kvm: kvm [13750]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 1900.185609][T13751] kvm: kvm [13750]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 1900.202658][T13751] kvm: kvm [13750]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 1900.218446][T13751] kvm: kvm [13750]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 1900.248256][T13751] kvm: kvm [13750]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 1900.268442][T13751] kvm: kvm [13750]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 1900.310740][T13751] kvm: kvm [13750]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 1900.350385][T13751] kvm: kvm [13750]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 1900.626300][T21134] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 1900.636169][T21134] em28xx 4-1:0.89: board has no eeprom [ 1901.815891][T21134] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1901.843651][T21134] em28xx 4-1:0.89: analog set to bulk mode. [ 1901.857641][T10788] em28xx 4-1:0.89: Registering V4L2 extension [ 1902.041330][T10788] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1902.068260][T10788] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1902.104440][T10788] em28xx 4-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1902.135279][T10788] em28xx 4-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 1902.241454][T10788] em28xx 4-1:0.89: Config register raw data: 0xfffffffb [ 1902.285933][T10788] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1902.293007][T10788] em28xx 4-1:0.89: No AC97 audio processor [ 1902.374962][T10788] usb 4-1: Decoder not found [ 1902.400383][T10788] em28xx 4-1:0.89: failed to create media graph [ 1902.435842][T10788] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1902.554638][T10788] em28xx 4-1:0.89: Registering snapshot button... [ 1902.555078][T13789] ================================================================== [ 1902.569232][T13789] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1902.576683][T13789] Read of size 8 at addr ffff88804be74790 by task v4l_id/13789 [ 1902.584211][T13789] [ 1902.586541][T13789] CPU: 0 UID: 0 PID: 13789 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1902.586570][T13789] Tainted: [L]=SOFTLOCKUP [ 1902.586577][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1902.586590][T13789] Call Trace: [ 1902.586598][T13789] [ 1902.586606][T13789] dump_stack_lvl+0xe8/0x150 [ 1902.586636][T13789] print_report+0xba/0x230 [ 1902.586658][T13789] ? v4l2_fh_open+0xac/0x420 [ 1902.586681][T13789] kasan_report+0x117/0x150 [ 1902.586705][T13789] ? v4l2_fh_open+0xac/0x420 [ 1902.586730][T13789] v4l2_fh_open+0xac/0x420 [ 1902.586753][T13789] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1902.586778][T13789] em28xx_v4l2_open+0x157/0x9a0 [ 1902.586798][T13789] ? do_raw_spin_lock+0x12b/0x2f0 [ 1902.586821][T13789] v4l2_open+0x1bf/0x3a0 [ 1902.586848][T13789] chrdev_open+0x4cd/0x5e0 [ 1902.586872][T13789] ? __pfx_chrdev_open+0x10/0x10 [ 1902.586894][T13789] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1902.586917][T13789] ? __pfx_chrdev_open+0x10/0x10 [ 1902.586945][T13789] do_dentry_open+0x785/0x14e0 [ 1902.586976][T13789] vfs_open+0x3b/0x340 [ 1902.587000][T13789] ? path_openat+0x2df0/0x3860 [ 1902.587021][T13789] path_openat+0x2e08/0x3860 [ 1902.587045][T13789] ? __pfx_stack_trace_save+0x10/0x10 [ 1902.587066][T13789] ? stack_depot_save_flags+0x33/0x810 [ 1902.587095][T13789] ? __pfx_path_openat+0x10/0x10 [ 1902.587115][T13789] ? __x64_sys_openat+0x138/0x170 [ 1902.587140][T13789] ? do_syscall_64+0x14d/0xf80 [ 1902.587160][T13789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.587181][T13789] ? __lock_acquire+0x6b5/0x2cf0 [ 1902.587208][T13789] do_file_open+0x23e/0x4a0 [ 1902.587229][T13789] ? __pfx_do_file_open+0x10/0x10 [ 1902.587258][T13789] ? _raw_spin_unlock+0x28/0x50 [ 1902.587275][T13789] ? alloc_fd+0x64b/0x6c0 [ 1902.587305][T13789] do_sys_openat2+0x113/0x200 [ 1902.587332][T13789] ? __pfx_do_sys_openat2+0x10/0x10 [ 1902.587357][T13789] ? exc_page_fault+0x6a/0xc0 [ 1902.587377][T13789] ? do_user_addr_fault+0xc6f/0x1340 [ 1902.587402][T13789] __x64_sys_openat+0x138/0x170 [ 1902.587431][T13789] do_syscall_64+0x14d/0xf80 [ 1902.587451][T13789] ? trace_irq_disable+0x3b/0x150 [ 1902.587477][T13789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.587496][T13789] ? clear_bhb_loop+0x40/0x90 [ 1902.587517][T13789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.587536][T13789] RIP: 0033:0x7f2beb0a7407 [ 1902.587553][T13789] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1902.587570][T13789] RSP: 002b:00007ffd5457c0f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1902.587591][T13789] RAX: ffffffffffffffda RBX: 00007f2beb859880 RCX: 00007f2beb0a7407 [ 1902.587606][T13789] RDX: 0000000000000000 RSI: 00007ffd5457df1c RDI: ffffffffffffff9c [ 1902.587619][T13789] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1902.587631][T13789] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1902.587642][T13789] R13: 00007ffd5457c340 R14: 00007f2beb9c0000 R15: 000055c5c43a94d8 [ 1902.587663][T13789] [ 1902.587670][T13789] [ 1902.618631][T10788] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input50 [ 1902.618770][T13789] Allocated by task 10788: [ 1902.903020][T13789] kasan_save_track+0x3e/0x80 [ 1902.907706][T13789] __kasan_kmalloc+0x93/0xb0 [ 1902.912287][T13789] __kmalloc_cache_noprof+0x31c/0x660 [ 1902.917640][T13789] em28xx_v4l2_init+0x10b/0x2e70 [ 1902.922566][T13789] em28xx_init_extension+0x120/0x1c0 [ 1902.927838][T13789] process_scheduled_works+0xb6e/0x18c0 [ 1902.933370][T13789] worker_thread+0xa53/0xfc0 [ 1902.937943][T13789] kthread+0x388/0x470 [ 1902.941993][T13789] ret_from_fork+0x51e/0xb90 [ 1902.946568][T13789] ret_from_fork_asm+0x1a/0x30 [ 1902.951317][T13789] [ 1902.953621][T13789] Freed by task 10788: [ 1902.957663][T13789] kasan_save_track+0x3e/0x80 [ 1902.962315][T13789] kasan_save_free_info+0x46/0x50 [ 1902.967319][T13789] __kasan_slab_free+0x5c/0x80 [ 1902.972059][T13789] kfree+0x1c1/0x630 [ 1902.975926][T13789] em28xx_v4l2_init+0x1683/0x2e70 [ 1902.980928][T13789] em28xx_init_extension+0x120/0x1c0 [ 1902.986188][T13789] process_scheduled_works+0xb6e/0x18c0 [ 1902.991708][T13789] worker_thread+0xa53/0xfc0 [ 1902.996279][T13789] kthread+0x388/0x470 [ 1903.000325][T13789] ret_from_fork+0x51e/0xb90 [ 1903.004892][T13789] ret_from_fork_asm+0x1a/0x30 [ 1903.009636][T13789] [ 1903.011934][T13789] The buggy address belongs to the object at ffff88804be74000 [ 1903.011934][T13789] which belongs to the cache kmalloc-8k of size 8192 [ 1903.025964][T13789] The buggy address is located 1936 bytes inside of [ 1903.025964][T13789] freed 8192-byte region [ffff88804be74000, ffff88804be76000) [ 1903.039917][T13789] [ 1903.042218][T13789] The buggy address belongs to the physical page: [ 1903.048610][T13789] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4be70 [ 1903.057346][T13789] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1903.065817][T13789] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1903.073344][T13789] page_type: f5(slab) [ 1903.077299][T13789] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 1903.085861][T13789] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1903.094418][T13789] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 1903.103062][T13789] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1903.111707][T13789] head: 00fff00000000003 ffffea00012f9c01 00000000ffffffff 00000000ffffffff [ 1903.120353][T13789] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1903.128993][T13789] page dumped because: kasan: bad access detected [ 1903.135378][T13789] page_owner tracks the page as allocated [ 1903.141064][T13789] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12012, tgid 12003 (syz.1.6576), ts 1827577322813, free_ts 1827478887654 [ 1903.162741][T13789] post_alloc_hook+0x231/0x280 [ 1903.167485][T13789] get_page_from_freelist+0x24dc/0x2580 [ 1903.173011][T13789] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1903.178789][T13789] allocate_slab+0x77/0x660 [ 1903.183269][T13789] refill_objects+0x331/0x3c0 [ 1903.187920][T13789] __pcs_replace_empty_main+0x2e6/0x730 [ 1903.193440][T13789] __kmalloc_cache_noprof+0x392/0x660 [ 1903.198787][T13789] audit_log_d_path+0xb8/0x1a0 [ 1903.203528][T13789] audit_log_d_path_exe+0x42/0x70 [ 1903.208528][T13789] audit_log_task+0x2c3/0x3d0 [ 1903.213185][T13789] audit_seccomp+0x85/0x190 [ 1903.217662][T13789] __seccomp_filter+0xd48/0x1ef0 [ 1903.222579][T13789] do_syscall_64+0xf4/0xf80 [ 1903.227061][T13789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.232926][T13789] page last free pid 11941 tgid 11888 stack trace: [ 1903.239397][T13789] __free_frozen_pages+0xc2b/0xdb0 [ 1903.244482][T13789] __folio_put+0x414/0x4f0 [ 1903.248875][T13789] skb_release_data+0x4cb/0x940 [ 1903.253701][T13789] __kfree_skb+0x5d/0x210 [ 1903.258003][T13789] tcp_ack+0x2826/0x7da0 [ 1903.262221][T13789] tcp_rcv_established+0x1478/0x2740 [ 1903.267479][T13789] tcp_v4_do_rcv+0xa90/0x1430 [ 1903.272134][T13789] tcp_v4_rcv+0x2825/0x31f0 [ 1903.276613][T13789] ip_protocol_deliver_rcu+0x221/0x440 [ 1903.282062][T13789] ip_local_deliver_finish+0x3bb/0x6f0 [ 1903.287496][T13789] NF_HOOK+0x336/0x3c0 [ 1903.291541][T13789] ip_sublist_rcv_finish+0x1f0/0x240 [ 1903.296805][T13789] ip_sublist_rcv+0x761/0xa70 [ 1903.301464][T13789] ip_list_rcv+0x3f1/0x450 [ 1903.305856][T13789] __netif_receive_skb_list_core+0x7e5/0x810 [ 1903.311814][T13789] netif_receive_skb_list_internal+0x995/0xcf0 [ 1903.317959][T13789] [ 1903.320260][T13789] Memory state around the buggy address: [ 1903.325869][T13789] ffff88804be74680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1903.333903][T13789] ffff88804be74700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1903.341939][T13789] >ffff88804be74780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1903.349973][T13789] ^ [ 1903.354533][T13789] ffff88804be74800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1903.362997][T13789] ffff88804be74880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1903.371027][T13789] ================================================================== [ 1903.561307][ T10] usb 4-1: USB disconnect, device number 89 [ 1903.568263][ T10] em28xx 4-1:0.89: Disconnecting em28xx [ 1903.667043][T13789] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1903.674291][T13789] CPU: 0 UID: 0 PID: 13789 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1903.684884][T13789] Tainted: [L]=SOFTLOCKUP [ 1903.689193][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1903.699224][T13789] Call Trace: [ 1903.702481][T13789] [ 1903.705388][T13789] vpanic+0x56c/0xa60 [ 1903.709361][T13789] ? __pfx_vpanic+0x10/0x10 [ 1903.713843][T13789] ? irqentry_exit+0x59e/0x620 [ 1903.718596][T13789] panic+0xc5/0xd0 [ 1903.722324][T13789] ? __pfx_panic+0x10/0x10 [ 1903.726725][T13789] ? __pfx_panic+0x10/0x10 [ 1903.731119][T13789] ? v4l2_fh_open+0xac/0x420 [ 1903.735689][T13789] check_panic_on_warn+0x89/0xb0 [ 1903.740604][T13789] ? v4l2_fh_open+0xac/0x420 [ 1903.745172][T13789] end_report+0x73/0x180 [ 1903.749390][T13789] ? v4l2_fh_open+0xac/0x420 [ 1903.753956][T13789] kasan_report+0x128/0x150 [ 1903.758478][T13789] ? v4l2_fh_open+0xac/0x420 [ 1903.763049][T13789] v4l2_fh_open+0xac/0x420 [ 1903.767540][T13789] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1903.773532][T13789] em28xx_v4l2_open+0x157/0x9a0 [ 1903.778468][T13789] ? do_raw_spin_lock+0x12b/0x2f0 [ 1903.783498][T13789] v4l2_open+0x1bf/0x3a0 [ 1903.787751][T13789] chrdev_open+0x4cd/0x5e0 [ 1903.792173][T13789] ? __pfx_chrdev_open+0x10/0x10 [ 1903.797094][T13789] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1903.803399][T13789] ? __pfx_chrdev_open+0x10/0x10 [ 1903.808313][T13789] do_dentry_open+0x785/0x14e0 [ 1903.813058][T13789] vfs_open+0x3b/0x340 [ 1903.817111][T13789] ? path_openat+0x2df0/0x3860 [ 1903.821883][T13789] path_openat+0x2e08/0x3860 [ 1903.826456][T13789] ? __pfx_stack_trace_save+0x10/0x10 [ 1903.831803][T13789] ? stack_depot_save_flags+0x33/0x810 [ 1903.837245][T13789] ? __pfx_path_openat+0x10/0x10 [ 1903.842168][T13789] ? __x64_sys_openat+0x138/0x170 [ 1903.847184][T13789] ? do_syscall_64+0x14d/0xf80 [ 1903.851924][T13789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.857970][T13789] ? __lock_acquire+0x6b5/0x2cf0 [ 1903.862894][T13789] do_file_open+0x23e/0x4a0 [ 1903.867382][T13789] ? __pfx_do_file_open+0x10/0x10 [ 1903.872410][T13789] ? _raw_spin_unlock+0x28/0x50 [ 1903.877239][T13789] ? alloc_fd+0x64b/0x6c0 [ 1903.881549][T13789] do_sys_openat2+0x113/0x200 [ 1903.886338][T13789] ? __pfx_do_sys_openat2+0x10/0x10 [ 1903.891528][T13789] ? exc_page_fault+0x6a/0xc0 [ 1903.896193][T13789] ? do_user_addr_fault+0xc6f/0x1340 [ 1903.901471][T13789] __x64_sys_openat+0x138/0x170 [ 1903.906315][T13789] do_syscall_64+0x14d/0xf80 [ 1903.910885][T13789] ? trace_irq_disable+0x3b/0x150 [ 1903.915895][T13789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.921963][T13789] ? clear_bhb_loop+0x40/0x90 [ 1903.926642][T13789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.932512][T13789] RIP: 0033:0x7f2beb0a7407 [ 1903.936903][T13789] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1903.956510][T13789] RSP: 002b:00007ffd5457c0f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1903.964914][T13789] RAX: ffffffffffffffda RBX: 00007f2beb859880 RCX: 00007f2beb0a7407 [ 1903.972870][T13789] RDX: 0000000000000000 RSI: 00007ffd5457df1c RDI: ffffffffffffff9c [ 1903.980837][T13789] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1903.988796][T13789] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1903.996892][T13789] R13: 00007ffd5457c340 R14: 00007f2beb9c0000 R15: 000055c5c43a94d8 [ 1904.004850][T13789] [ 1904.007995][T13789] Kernel Offset: disabled [ 1904.012302][T13789] Rebooting in 86400 seconds..