last executing test programs: 17.237957722s ago: executing program 2 (id=862): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000180)={0x2, {0x4, 0x900, 0x11, 0xdb2a}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xf, &(0x7f0000001840)=@ringbuf={{}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x4000}, {}, {0x85, 0x0, 0x0, 0x88}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000140)=0x4) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r6, &(0x7f00000012c0)="a5287683", 0x4) read$dsp(r7, &(0x7f0000000180)=""/222, 0xde) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24000090}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix={0x9, 0x4, 0x33524742, 0x7, 0x1, 0x200, 0x2, 0x4, 0x1, 0x3, 0x2, 0x7}}) 14.694175058s ago: executing program 3 (id=869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000000180)) sendto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000090a010400000000000000000100000008000a40000000000900020073797a32000200000900010073797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCSETD(r8, 0x5412, &(0x7f00000000c0)=0xdb) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000), 0x0) 14.059335187s ago: executing program 3 (id=871): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpgrp(0x0) capset(&(0x7f0000000040)={0x19980330, r1}, 0x0) capget(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000100)={0x100, 0xfffffff1, 0xf9, 0x1, 0x1, 0xaff}) capget(0x0, &(0x7f0000000180)={0x5, 0xe05, 0x358, 0x915c, 0x7, 0x10}) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0xc) capset(&(0x7f0000000200)={0x19980330, r1}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$fuse(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) setsockopt(r2, 0x3, 0x5147, &(0x7f0000001700)="538f00f8d806e340043e24d85e0edd617f60b9c51ff2ecde57d81131c3fca4e7505fd8f0a1a9f49e6fab9140eab343bfc70c15b7efb95ece6fafaf11abbde845d5454ec3154b2741d1fc4923f7cf67d696703947a56df7b3dc410b65f5d64e19ff38b1b410d5ce643be287c1a107cee2eb3c68bc9717776d2b5ab0b61148a4967a0bd46a811344ebf8697e483d83a2b3f6efc17241f8f5ef86b27b9c0bfaa9", 0x9f) readv(r3, &(0x7f0000001800)=[{&(0x7f00000017c0)=""/37, 0x25}], 0x1) futex(0x0, 0xd, 0x0, &(0x7f0000001880), &(0x7f00000018c0)=0x2, 0x2) umount2(&(0x7f0000001900)='./file0\x00', 0x6) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 12.953767429s ago: executing program 2 (id=872): creat(&(0x7f0000000100)='./file0\x00', 0x27a) r0 = open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x105, 0x80080) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000240)={0x0, 0x4, 0x1, 0x1}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x8, 0x0, 0x0}}, 0x10) 12.876220858s ago: executing program 3 (id=875): rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x11, 0x800000003, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53) sendmsg$rds(r3, 0x0, 0x0) 11.693519219s ago: executing program 0 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000000040004"], 0x408100) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0xfffffffc, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r3, 0x2) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 9.876634455s ago: executing program 0 (id=879): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x18) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) (async) clock_gettime(0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/24], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (rerun: 32) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000040)={0x6, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb088045000038000000000e019078ac1e0001ac1414aa03049092ccffad9cb2ccd40990f82da8781200183f250009000000000035880000ac1414bb0200000000186371aebb1c031e38d9cdc7569f2f5145823ff50e5c00c6dc87806e33efa32c7c33f0e8363ab9e7679a43d90928176e20c59c"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=[0x2, 0x4]}}, 0x40) (async, rerun: 64) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004b00), r1) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1ce20000e2898133a52871378b4a72e6699aaddf7395070b5eb604e0a3af8efa35e23efb1f4771ae84fcc2536205d51634c1a016ba186c8bc62cc2fa95be33", @ANYRES16=0x0, @ANYBLOB="010800000000ffffffff0b00000008000300", @ANYRES32=0x0, @ANYBLOB="2000508011000100ab0000000000000000000000000000000500020000000000"], 0x3c}}, 0x4c080) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004c80)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250c0000004000058008000100657468000700010069620000240002c008"], 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x20000) 9.425875079s ago: executing program 0 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000072012c000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x15, 0x1, 0x20000, 0xfffffffc, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf1fb0e1"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 9.290930559s ago: executing program 3 (id=881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) timer_create(0x0, 0x0, &(0x7f0000044000)=0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x2, 0xc0, 0x300, &(0x7f0000000680)=[0x14, 0x9c, 0x4, 0x8000000000000001, 0x1, 0x8, 0x4, 0x5, 0x10000, 0x17f62000, 0x7aef, 0x6afa, 0xa9d, 0x3, 0x0, 0xbe7, 0x1ff, 0x2e3, 0x10000, 0x6, 0x6, 0x7fffffffffffffff, 0x9, 0x6, 0x9, 0x85b4, 0xf7, 0x3ff, 0x7fff, 0x7f, 0x800, 0xffffffff, 0x8, 0x7, 0xffffffff, 0x3, 0x7, 0x7, 0xb, 0x282380000000000, 0x7, 0x6, 0x4, 0x400, 0x4, 0xc4c, 0x4, 0xfffffffffffffff8, 0x7, 0x1ff, 0xffffffffffffffff, 0x5, 0x101, 0x5, 0x6, 0x0, 0x1, 0x9, 0xf94, 0x4, 0x7, 0x4, 0x3, 0x5, 0x400, 0x6, 0x1, 0x81, 0x89, 0x1000, 0x0, 0xfbf, 0x401, 0x7, 0xc9c, 0x100000000, 0x5, 0x9, 0x0, 0x7fff, 0x8, 0x3, 0x4, 0x2, 0x9, 0x2, 0xfffffffffffffff7, 0x7, 0x1000, 0x260c7c0f, 0xe1, 0x9, 0x7fffffffffffffff, 0x8000000000000000, 0x1, 0x9, 0x7, 0x10001, 0xea, 0x4, 0x80000000, 0xa, 0xee, 0x4, 0x3, 0xfffffffffffffffa, 0xe, 0x7, 0x3, 0x6, 0x1, 0x5, 0x0, 0x0, 0x3, 0x6, 0xfffffffffffffe01, 0x3, 0x7fffffff, 0x10001, 0x200, 0x1, 0x3, 0x8000, 0x1, 0x7fffffff, 0x8, 0x1]}) timer_settime(r2, 0x0, &(0x7f0000040fe0)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2a}]}, 0x2c}}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="8fc978e3e8b8002800000f23c00f21f835000003000f23f8f20f1295375b0000c4c2a9ab13c4c1f817b14c4400009ae33da17bb80066ba2100b807000000ef0f0960660f79d0", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.217584942s ago: executing program 4 (id=882): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x40e, &(0x7f0000000400)={0x0, 0x8d55, 0x4000, 0x0, 0x33e}, &(0x7f0000000480), &(0x7f00000004c0)) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3609, 0x0, &(0x7f0000000340), &(0x7f00000005c0)) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r6 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x2, 0x10a5, 0x3, 0x0, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000f060102000000000000000007000000050001000700000006000b000000000035eb9d9bbf691e799a75c30e7f00e009ada5bc01c4c8b2dcbffb71b3fd7d7cd3cc96e061406218e19a04d81edae6072e68ed38c0d84754b2409851b5ca1b1880c38d4aa4772999caa7e8e5464659e747f706e085b9cd67cf8481516189e35af6b67a14cf03fb7b8a75385563edf584fa6bbc8e79dcb88d9376abb92d47f461"], 0x24}, 0x1, 0x0, 0x0, 0x4040008}, 0x60) 8.055505092s ago: executing program 0 (id=883): r0 = socket(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x10) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x8208200) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x3, r0, 0x23, {0x3b4, 0x7}, 0x6}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = io_uring_setup(0x5937, 0x0) io_uring_setup(0x4d12, &(0x7f0000000380)={0x0, 0xf0bc, 0x200, 0x1, 0x36c, 0x0, r7}) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000940), 0x0, 0xc050) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.050832261s ago: executing program 1 (id=884): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x294ef98252e47195, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x31, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x28, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000970f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000003343499f782c9a74b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b700000000000000"], 0x0, 0x101, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1e, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000013c0)={'team0\x00', &(0x7f00000012c0)=@ethtool_drvinfo={0x3, "b1015904849180e9a33bba5c09d84bcfaaf125ea71d525c3ca8d29f38ca7de3d", "3e905dc5345719d6c26ae7d6869eafe1308fbe9ec3937a088353ecc234c1b270", "e27209058368b97e07c6a36bd71bf50faaaa4cc459b461563d96fcf43cef9556", "cb2da74058cb8d204d1fcfe681724ba1c43f448a6dd17bc66b6ca749694f6aba", "942b254fd347c27ba8eac26cb159a5d6fca9f2ebd5f690c7d1aae8c50669cfb9", "5fc03157508709b83ecd0a7b"}}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) capset(&(0x7f0000002ffa)={0x19980330}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x102000, 0x8, 0x5}) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000280)=0x800392) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffce5}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x40, 0x80, 0x0, 0x8, {{0x36, 0x4, 0x1, 0x11, 0xd8, 0x66, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x44, 0x3c, 0xe1, 0x3, 0xe, [{@remote, 0xa}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffd}, {@multicast1, 0x60}, {@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010101, 0xe5f9}]}, @timestamp={0x44, 0xc, 0xc4, 0x0, 0x4, [0x7f, 0x6]}, @end, @timestamp_prespec={0x44, 0xc, 0x52, 0x3, 0x6, [{@multicast1, 0x8e}]}, @timestamp_prespec={0x44, 0xc, 0x3d, 0x3, 0xc, [{@local, 0x1}]}, @rr={0x7, 0x13, 0x8e, [@empty, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x41, 0x3, 0x7, [{@rand_addr=0x64010100, 0x3}, {@empty, 0x9}]}, @timestamp_prespec={0x44, 0x14, 0xa9, 0x3, 0x6, [{@local, 0x9}, {@local, 0x3}]}, @rr={0x7, 0x23, 0xad, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}]}}}}}) setsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f00000001c0)={@remote, @empty, r10}, 0xc) ioctl$sock_netdev_private(r8, 0x89fb, &(0x7f0000000000)="c729b757cebbfeaad63e85a5610d202bb121c70abb5e2f1c4ae2020478ce9d30ebcb1f85ed013604c975210540fb7ed23308b3590be4ac84669b272da7a4ceb05fee0886619df014df416058671edd09904e00e0b1ff34dffd63acf2bab0b13b4577260ab1a6b531ad9056596dc60bd85b443a6a98563a4f8d95e40a214b661a") ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x10001, 0x1, 0xdddd1000, 0x1000, &(0x7f0000002000/0x1000)=nil}) 7.713177183s ago: executing program 4 (id=885): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpgrp(0x0) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000080)={0x6, 0x608f8c74, 0x0, 0x7, 0x3a4, 0x100}) capget(0x0, &(0x7f0000000100)={0x100, 0xfffffff1, 0xf9, 0x1, 0x1, 0xaff}) capget(0x0, &(0x7f0000000180)={0x5, 0xe05, 0x358, 0x915c, 0x7, 0x10}) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0xc) capset(&(0x7f0000000200)={0x19980330, r1}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$fuse(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) setsockopt(r2, 0x3, 0x5147, &(0x7f0000001700)="538f00f8d806e340043e24d85e0edd617f60b9c51ff2ecde57d81131c3fca4e7505fd8f0a1a9f49e6fab9140eab343bfc70c15b7efb95ece6fafaf11abbde845d5454ec3154b2741d1fc4923f7cf67d696703947a56df7b3dc410b65f5d64e19ff38b1b410d5ce643be287c1a107cee2eb3c68bc9717776d2b5ab0b61148a4967a0bd46a811344ebf8697e483d83a2b3f6efc17241f8f5ef86b27b9c0bfaa9", 0x9f) readv(r3, &(0x7f0000001800)=[{&(0x7f00000017c0)=""/37, 0x25}], 0x1) futex(0x0, 0xd, 0x0, &(0x7f0000001880), &(0x7f00000018c0)=0x2, 0x2) umount2(&(0x7f0000001900)='./file0\x00', 0x6) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 7.115509025s ago: executing program 2 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0xf3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace(0x11, r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b2010203010902220001"], 0x0) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1a"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x41, 0x2004, @fd_index=0xa, 0x1, 0x0, 0x0, 0x2, 0x0, {0x3}}) io_uring_enter(r3, 0xd41, 0xffff7ffe, 0x21, 0x0, 0xfffffe29) syz_open_dev$usbmon(&(0x7f00000005c0), 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x4b4d, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000500)=""/165, 0xa5, 0x0, &(0x7f0000002640)=""/177, 0xb1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x840) readv(r9, &(0x7f0000000300)=[{&(0x7f0000000400)=""/198, 0xc6}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) 7.115186797s ago: executing program 3 (id=887): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x6, @remote}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000200)={'syzkaller0\x00'}) 7.094925249s ago: executing program 0 (id=888): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x2) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="4d0000002af9000008002f0500350a0ed5d9397f5725fa6da4fcef5200000000000c0005000027b8d30613d191a0f303ebad6f283d8e44826fa8fdfbb30006000000000000", @ANYRES32=r9, @ANYBLOB], 0x38}, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r7, r10], 0x2, 0x41000}) 5.955280318s ago: executing program 0 (id=889): syz_open_dev$ndb(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5b43, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x80000000}) mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002200)='/sys/kernel/address_bits', 0x0, 0x0) fchmodat(r1, &(0x7f0000001000)='.\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffff9c, &(0x7f0000000000), 0x40100, 0x0) syz_open_dev$vcsu(0x0, 0x9, 0x2000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x5}]}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0xc0182101, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x1, @remote, 'veth0_to_bond\x00'}}, 0x80, 0x0}, 0x4000881) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x50) 5.8897387s ago: executing program 1 (id=890): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x2) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="4d0000002af9000008002f0500350a0ed5d9397f5725fa6da4fcef5200000000000c0005000027b8d30613d191a0f303ebad6f283d8e44826fa8fdfbb30006000000000000", @ANYRES32=r9, @ANYBLOB], 0x38}, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r7, r10], 0x2, 0x41000}) 5.838552216s ago: executing program 4 (id=891): rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x11, 0x800000003, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53) sendmsg$rds(r3, 0x0, 0x0) 3.897727425s ago: executing program 1 (id=892): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x30, 0xffffffffffffffe6) connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed}, 0x8) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x40000cf, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) sendto$inet(r3, &(0x7f0000000180)="72afc48d1cf5bc33156dc086271fe22c1f8af5c1e3589bd0767d2bd945ef2ad3835eb4da8037f89ad9bd998f351fb750cb3275841e99ffd1185184904d808b386ed285632a0967f827fcd6a7909653a58529920c56c2d6d33ffb2a884948f976245cacebccd5c1eb14bb8475e5f4db7c384cb76a", 0x74, 0x40000, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x1, 0xc0, 0x9, @local}, 0x80, 0x0}}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, 0x80, 0x0}}], 0x2, 0x4000000) 3.101866244s ago: executing program 3 (id=893): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4008032, 0xffffffffffffffff, 0x2ee85000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffa}, 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000100), 0xb6dda55e3c323ec2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) close(r0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a3a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006461a0000000905810300020000000904010000020d000009040101"], 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0xfffffffd}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCNXCL(r3, 0x80045440) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) sendmsg$tipc(r6, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xfd, 0x10000012}}, 0x10, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1}}], 0x1, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000100), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r8, &(0x7f0000000100), &(0x7f0000000240)=@tcp6=r9}, 0x98) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 3.048193131s ago: executing program 4 (id=894): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) unshare(0x28000600) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$inet_int(r1, 0x0, 0x22, 0x0, 0x0) 2.952933383s ago: executing program 1 (id=895): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x40e, &(0x7f0000000400)={0x0, 0x8d55, 0x4000, 0x0, 0x33e}, &(0x7f0000000480), &(0x7f00000004c0)) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3609, 0x0, &(0x7f0000000340), &(0x7f00000005c0)) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r6 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x2, 0x10a5, 0x3, 0x0, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000f060102000000000000000007000000050001000700000006000b000000000035eb9d9bbf691e799a75c30e7f00e009ada5bc01c4c8b2dcbffb71b3fd7d7cd3cc96e061406218e19a04d81edae6072e68ed38c0d84754b2409851b5ca1b1880c38d4aa4772999caa7e8e5464659e747f706e085b9cd67cf8481516189e35af6b67a14cf03fb7b8a75385563edf584fa6bbc8e79dcb88d9376abb92d47f461"], 0x24}, 0x1, 0x0, 0x0, 0x4040008}, 0x60) 2.841811201s ago: executing program 4 (id=896): creat(&(0x7f0000000100)='./file0\x00', 0x27a) r0 = open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x105, 0x80080) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000240)={0x0, 0x4, 0x1, 0x1}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x8, 0x0, 0x0}}, 0x10) 1.854724938s ago: executing program 2 (id=897): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x10}], 0x10}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r4, 0xd81, 0xf5ffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.53504791s ago: executing program 1 (id=898): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x3c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3450, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='K', 0x1, 0x4, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0xf3066200, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024094, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000000000000044d564b"]) madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x59}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 284.86299ms ago: executing program 2 (id=899): userfaultfd(0x80001) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x2254, 0x14, 0x511, 0x70bd27, 0x25dfdbfd, {0x20, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "91a59152c7da740424292d451d32d5540ac76d3b9517f9080f51b1b747e697fc2d6e8ebd16733de07ccb5744cc394b255cec21c925c3174dc26c3c8ff78cb70514c8162dfb99174ee05c9daed386493e53e37eda2d92c7a6ac4f941bacb013f0b4ef8797b34c6f4e5897e1b72c7cf06184f87283d6243c5c5f24b4af0b09ef7edcb6121a2477de07a99ba44e3e4fe5b37fd698a8507186aca744b1670dc70abc23fc885761a1bd25c51a9891065baec9ea4a427409c1860a545d96fb212536b7c691d520b5d62d7fcab6c2295c7a9fd8debdf95ce964aa8e307cf79c181588856c135993967cd3645a937582748ca615210754e80b4196a2a847ce5b91096a5232980a5e3bbada3ce7ef4b22918fa79de554248e5259adabb344e3fadcfb6d03e55fca4bcb1108c64a6e378856b7cff8d2dbbc919ae5c23ac46d4deed55eb8c1a64a4a542d5470d189cf6ead0cc8fdcecb85922ac4ed2a49fdda23275ce5302242a146a4baaf8a5b9f1acaece7b9cb925a7792543673c074a6a96d2d6086532bd65c1c673a6901e22a502d72cd286e41cbbc8150e0d2809275da54428a3be2a8086c5d21d1facf83c8b33492519fd82b55d533db7a3f76ed6cd8dc53cb2916a34cbaeba60fa22c155fc8ea6b90dd006c9b39ce7d28842e1c14a315194d5fe67745e6ec48584595449ab96576839a30c3cc43632a05973310640c6e0c589d77c3cf00091026e58afb7a40b84a69055135a3ffddedb631dc35335916ffea86889bd5ad1c763a4ea1804f98bb12a80737bfd3947cdddfac61036be68146be2aa14200ecf3abc3533e7deb52a9b3c7dcd5c844961c1700b3d77821ef025b22468d8e735dd75a0439f14e732a20415a31393be9afdddbbcb3b79aad51d112d27fb5f801e934a9c774533d40fded3a67abacaf17f825412a51b7c34e67e024ff852e8309e2ea7ce9f82161ee138927c9d379358c87478ab399a17bd35ccee14265908c1add6ce728ea8dcf854d9008d0bb8a9a9bbe3ec2cb4bfe8c3a1377f574805bdd23ad53f3f4078cd8b8b8f254693212664ddd8f3cb9dff13d894b20733e8e5754bf559ac5cbc2bcf92bfc9e74670666620d117413d1acf0de59113bda709fbc18c6791f92c3e3b1a7ebf683727a8a5f6759ce0905dbe4dcd1fd4735d328318ca4d22c271259b210bb96e068f6d2643fc34a54d4ffed5af5e6c4baad3abc312e07614ff557d2daefbf676d1293ebcae473e397eb2ab3b2e4a4935624fd3cc8351e9ab4faa9edc47a0208e4d927c9a27787d3be7bce8f89ae17aa8eecc3991f6c53fa614c53969b234193bd14ececfd53f9089c0cae6914421e3b123be50df9f6bcd7d22b02393ef440969d49b69a0ef7ea03ad31a25ae85f3378f37af08f23e661f7b826782ccc2e29dd6785451ee3c22799a4fd34c6759901b20dfa7d904bdb1ad3aaff61368962b9f0bdde711216b9ac29f331150442b028d10850699d7ea9b21cf9b884b5fdc24fa7437cccb7710b575195f64816f200c64a010fd0d26101a44e4516624b7129778a62beb86d58f459e736562da98dc374c704edc0934a280ec35364fae4775670267c04163f0e67d2073e3cab89af0f22187e6dfd1a7466ba20ff0e25795432343d4e69cd04748808b31791d9554ec8e5e88a2b97526be57774c7693e21cd06996a5441b39f6ee8b1e916794c066e134431951937337a8bc657e0f711e85b63b5485b5395174734df6cb4ade7b5f0d9a19167af1b355006f8d43757f916ad269f30662de29c3cd3fe591dfa50cae4907d90bd8c85cb4c67cb098321e72ce7d688153b35c4510a8068a21b35b3fbd8043515bf9f21d6a3a2d48995db59009112367662112025281845715abc83d0b38afc621f39f14d134e2f05a589ea4fa3cab97e3d567803e4c74e82dd81d0413caeb3c3abd6fc46c5acb4af82fb22ef6686ee71657854c6faac3520386736a7d556af81625675b6fc262d4b26d1008f3b56fb199cf1e78779dcbf882a05ea0a5526307b722191fe90185b35da29ea8c65095ec65180fdfc912e2fcb48c6569917b3cb53178efee5ce764900de6e4c27f62d7bb24429040218ed6f5e420baac3cdfff60c6d588f5e4d66cf94675d9aac2ff2e1866b8f79beacd8dab74f06e683c5c5d12e1c29c601098fcd60a67190ebed26233ba4aa78821e46706816328afb6e05129a502142bd47c6583acd1d6ef2ef189ad35f763a30ce8ea681bb3835415fc48a29f052a1440c890ffd97d3e950fedd6764e86457d50f3ae7d403d94f5fe9a57cc679bbe6c4dfff9af9823eb859a3f59f70a11ce8130071d6a8e0970065a08e58f7c1cf16d270acc92fd8bc1c346924fef2fe2f0de6c15477c3416fe8f29001a1fc296cc348881e2a049f8c505b34cdb093392a8feaf3ea00928b08d3774fdad163b311134824a0f2833043abceef87da47582ece0c4ca07d883d8af7fb371846f91f41437868d20e6f6d6884fff6013d45753a5c03e75519e62541b3e87415db6bb103e2e5a4244ca1218d28b4895e2f256fcfc935eaba79e3daf377ffff3257b854dcddf30ee59d515f271be65f244e6eede63889f127330ce7b5d25fcb91aa02837bac8b36c762ddd9b44fe368fff5f157d2eedd180be32df7e89dcde07c6d24f06e30a43cdb446bf5eb05363671bab8fb3d0cf04547a1b52e3539905ed90b5f10c3f38cb5d4fb6c8339989177d604ba09e1f43febb51e24ec5c8cd0be66861d2bef7d2034f15a1c4d2cbf8bbc4a80de52a270a70fd7a107856fcd8d09e7905b6936715497a899828daef839fe3e4b37dc08d80df45ac12bea66eb80259e093d9dcde4cb337aeca4593d1a33513232e2ea07c8bd54275a38745773da25267daf670739ed1c428af41010cd18f2d3db2cebafff7413d3ef956878273f6855b147b36db597ab34bb5851261a6d2c7ae59be258def6e07d44e05c0aeae8e65630bbc67d4485efc1bb9a6a82620252ac181692fd395963117eb1e4c03714a9392d111a1dd4f76de56b899e88d48bf403b712cf69f04eeaad445a9e80e7743c480b0bd93efb54b79d816fd29c2729a8f8ad6ad54af3c21a5c56b7a4b97bf7560200f50caa2601c9fbb3b6f7d5ac8bad25cb6f8283c58c5b1cc55df69c8ca8303911fa9a39664fa7aad023463ec97183a9583178514972c66d507a198d1398c856350c06f3da49babd8a99e7069a55a42391076cabb3a61fab3d2e134130ab34f22f5b4eae4f50db7e2cfac4c5b3a8a7d6bab6d9f6f22dd81cd416fce3881cf2c3378e3efff72414065620d9134716c7429c0976827a013829bcf9e349225286727404dc25d147c8efecb249e009e1e9239ba6f623812bdb09a8e1db1d6bd6182d18ca1974e2dd7db0b39f3f0c74c172d85e9de1e353bfb2e6c9467d1687d3be4bbc0beead5cfe3488fea381b96646988ab6f9f112c8ed7beaa96924a5fcf3bb53fa30e582d52a897c3a2f6bf39ce3f74bf357c8fb873e0cac28ab9e95a38d071a4abbddb22701689f87bb48fbd3c319ebf20d38a629ab964860fe597fce284a8f0869f56cdeff46c1dad4b3b11f8b6fcd103feefb32c6fed9e276f674d659bb2b41bdf7e9cce8987ac88a5bd2ccedf5b5d181fdbe555f277c86b26a9152bd90373123ed4b4a89d5729e62c5f41d865b3dfa1396170dec7ed6314186c4936cb5d07f3ad75a4dad7b24cd1536fd7c7485b9545f0ca5e3266f23276109bdba2f0866d202ae2f119d6e66fdb8f1a8365daaf35a047a19e8f6b16d461b17664bdc162420120a977bfef36e3e1b6d9884b44ea3e79e63cda33d7c79695aad6ca14c9cc9467d763698b8ae378414ec86a84e9fd4698c2d1fdc393b082e1eefa308451c255d0e759df3f5247836c63372219791be2c1925cd0112aeacf9263b2f700f0b25f6cb4b34fbe14818b7339b81a97720f7fadeb3e82ef85b9c787e8d2fa9758e6fc31de914fcfcc1b28fda4ba200847e869ac341bc7627045dd7be27e77bfd2607b06bbb630efd0af7a0ccf03402d666e868aa7536bd10f726ecb8f0d98de5dc914a01077160c8aa087019482119389047d7ece68b016d58b952e15766a9b166b414a30d5bf5bea59b1eeb26bd656105c21dacf9a05deaba427dfa9c79c52920e1829804723dfdfc088e1f2f5e7d121eb32e96948598b327af6721648fea0b26c2a8c4c435146c2c692bb33bb74d8b6f386f3ca1f76174c156186032575dc07cb89e83010ffd5ae9efa86d2a63657b1e7bc23ff2c85ca6dbedbeb4ddbb46dfe34dc91bc782cc359aad507adfa176089ac11ee7de132177cbf281dcd8977465ca1b28e0608912b87595cce4722a12a1c181c78c19715209a9ea5d2d6fef30079ec942777568bedfc68c1820b9fbaa95e91914e812e40fa4456af6f94cbe5c4d656e515d16533604d2d1faa06a0f64fcb3edd038fd3a385ea18c7e668d1f7ad563d105cfd5b27399e72044adb424539f673836126263bb1d3b2b4d887d797af59937e50bf7442a325c59a542eeb9ff20671bf519af115ebbd32e4915e4c2cb33e39eee06f1e13214d8f5c59d1fe1036fc47b21b469a75b839054ca3570f6e756f2423b1d6cb395d0dabf0f090868b408b3d6bd199ce906aec72f0bc0d475407c9f3e8dcdd66dc74f141a082b4c616f9483caec2de86bbf49af0407fee681ee12d1e03f951d76cbd0ae50076d6381e6143934a856ff3dc24ec1a3b3bb887b6f2fc61e8f3c290c667781e0b190a09086c1c5cbe36845767a6d8bbfb3544f290ab6badfe45f1c0dc658bcfd9d917af6357c455f4d0546454b91a14b5087cf1485f26c760ab94dfa36fa103066ca098ea3f95cfd94468c4cda78f7bfde6c952f227aa617a3f1767060c514dbf83dbc804fe1de01e15b41b55422584911951b7c9fdcb1b11dfc8a0fda08c443479136fdfa5c7abb8ad491f24f8bcd2ad61d04c9936a24d81f2f105e66011eae3ff0f2d657ec180fee34bec99d4f1258b9ab82ce92d5e9366fc18bdae602b7564f3a1f51885f30ced521526e21efff7b3c6dbb366c96562b8fb162fdd7ecb2dab743b6340c5d4b411ce08c7fea8d27c6b039c5c14162ccd7b8a965fd97ac3e6910de1feef68eaa885e810586b3426440948e4ce670690f8fe6aaea12ac151adc3a92f5c632a478d9c7c3733e84924b3eda7629ef5b00986d3fae8f59fdc1276d2fc3b1e1b547743302232ba003e0e46d5ed6b9399541c29f740aae4a2ba00510df986740c40b93baffb5d68515a62f0ad545fb18cdb44f305ff7ae78b927f453e97ca5807853c982ea1a37c36e7b9543a9d5b0b1d35d2e7f8a6087058c36ab11d78a415868faa25aea8192cb7ca12c6c36bc6a6dccf024fe1ae678e8fcfaa8b89aa86582eef9f0df4f1fd3ea95b931006b33fceb846bfd1ed4c6038582f9e4c4195b4fbfa6301178e0f858be8068407c0f28399d8bfea0865f8993214fc54c36d0b9a279c9f53989f155936cac5fdc4929e554606b95cd375634efccd6c75c6d6ce0efbb7af334fbbdce15aa5b5b1922da2113e3d80485b76ee5393f0e32e252ac3ef70f03943540c33feb52a7be64db29b83e21117b6504702c30921785c095feff6640fa5b0da607ba8029b7b760b8642fc271f67feb781a1cc39cded1a4cc9c503b319513139d36a63cfa095b7244dab8902b73e5c9d33c38146ebd7facfc0db26353ab2f5bc3c516ad617d83f58a7d6db963d30e12464b60f2f390907d25a9f33cb94eabf205595c9bcd0a5543ba4db624045ea0ab0ddcda2fadf35afc7892"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "88f365b952105023bbe21e25e22aca0930a7f057bebf9f16806d02ff918aa30e8ebb1d533071"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "344eb32ba94a7c2f796f63b52c834936dcbf9b64a259a8a310bcd54398da27175c52d11fc3ac20cbed970d35d165915620412446a297fb6424cc35f9938c71ff3872cf6cedea293c82ffe52875b949a634b0bc04c38575b3e3d47bc554244ae5d7aa09ebf351f2cc2d3ed2949b4b5af5f5166e58b23b8d5a472e29107e42c53f96312d81534bc5"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "088c9a4572e718ccf767d8184ea1ed0bd2c7ecf9956dced0cd7461d8018393d523e4ad7e6f67c812fb22e60799c09b536aa50b0a6e9edb52fc08d455f4fea82c36f3379c5727229528139d9d29889da64e42540455757eb1e97a6a4589bc62fb4523778dddcc24f4b23abcd360ec0c4d3dd86fcb81aea2297434054f2b1a1ab8ae46d5762e3f927ac81e67c533a063205f7f34bb48bdba38685c2e2609a09a5df42a"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "4fbc519a02b597ef5cb86c2b5938ab5a114304b73ef62894c3d44a984e9a638024c31c6502008b7c31ac01b18872840e9e0df8a8aaedeed2373e5815746f81c90f2eff5952bb8db805dcfe1f979dfd13cba5f7ba0f5e558112cf9cab4b08cc55473af5ff7538ed363c59abed4f5549191e882b0632ed25cd7e1e9643e1b7e419e0367b3b1d243d9428c3a80ac4220c7278fdfbbd49d9c661e5189003577826ea9d95317df3551ba627077aacc295f135b0e3b7bd63baa840f9923595cd83668ded094bfeb152552ff356a83fdd107a3b96ee6f69"}]}, 0x2254}, 0x1, 0x0, 0x0, 0x40}, 0x24048894) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={{0x2000000000000000}, {0x0, 0x7fff}, 0x0, 0x6}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00f50100000004"], 0x0, 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x51}}) close(r8) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00'}) (async) splice(r7, 0x0, r8, 0x0, 0x10500, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000080)={0x0, 0x0, [0x10, 0x2, 0x1, 0x6, 0x2, 0x7, 0xffff, 0x54]}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001f0f00000004d940ff67abc03e0508b1e6b5"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r10, 0xc0106407, &(0x7f0000000000)={0x1, 0x21, 0xfffffffe, 0x2100}) 284.382597ms ago: executing program 4 (id=900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) io_setup(0x80, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3b5e}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (fail_nth: 1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) socket$pppoe(0x18, 0x1, 0x0) 113.890901ms ago: executing program 1 (id=901): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpgrp(0x0) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000080)={0x6, 0x608f8c74, 0x0, 0x7, 0x3a4, 0x100}) capget(0x0, &(0x7f0000000100)={0x100, 0xfffffff1, 0xf9, 0x1, 0x1, 0xaff}) capget(0x0, &(0x7f0000000180)={0x5, 0xe05, 0x358, 0x915c, 0x7, 0x10}) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0xc) capset(&(0x7f0000000200)={0x19980330, r1}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$fuse(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) setsockopt(r2, 0x3, 0x5147, &(0x7f0000001700)="538f00f8d806e340043e24d85e0edd617f60b9c51ff2ecde57d81131c3fca4e7505fd8f0a1a9f49e6fab9140eab343bfc70c15b7efb95ece6fafaf11abbde845d5454ec3154b2741d1fc4923f7cf67d696703947a56df7b3dc410b65f5d64e19ff38b1b410d5ce643be287c1a107cee2eb3c68bc9717776d2b5ab0b61148a4967a0bd46a811344ebf8697e483d83a2b3f6efc17241f8f5ef86b27b9c0bfaa9", 0x9f) readv(r3, &(0x7f0000001800)=[{&(0x7f00000017c0)=""/37, 0x25}], 0x1) futex(0x0, 0xd, 0x0, &(0x7f0000001880), &(0x7f00000018c0)=0x2, 0x2) umount2(&(0x7f0000001900)='./file0\x00', 0x6) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 0s ago: executing program 2 (id=902): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) close_range(r1, r1, 0x2) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b00)) ioctl$VHOST_NET_SET_BACKEND(r2, 0x8008af00, &(0x7f00000003c0)={0x1, r1}) kernel console output (not intermixed with test programs): 0003:054C:05C4.0005: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 128.740795][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.747562][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.757414][ T5911] usb 5-1: USB disconnect, device number 13 [ 128.767156][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.774208][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.789810][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.801988][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.827681][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.860826][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.870388][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 128.880019][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.892980][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.901392][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.908097][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.916699][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.923478][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.954210][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 128.993896][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.008623][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.028627][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 129.034276][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.044080][ T46] usb 2-1: config 4 interface 0 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 129.082316][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.104686][ T46] usb 2-1: config 4 interface 0 altsetting 253 endpoint 0x8 has invalid maxpacket 1088, setting to 64 [ 129.117865][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.137053][ T46] usb 2-1: config 4 interface 0 has no altsetting 0 [ 129.147204][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.189015][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.195785][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.205235][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.216730][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.232797][ T46] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=37.1a [ 129.242712][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.251805][ T46] usb 2-1: Manufacturer: ␁ [ 129.256434][ T46] usb 2-1: SerialNumber: syz [ 129.261463][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.269421][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.277091][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.284552][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.292669][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.299751][ T5870] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 129.317042][ T5870] nti 0003:0757:0A00.0006: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.0-1/input0 [ 129.340249][ T5870] usb 1-1: USB disconnect, device number 8 [ 129.390390][ T5911] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 129.418411][ T973] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.506829][ T46] snd_usb_toneport 2-1:4.0: Line 6 TonePort UX2 found [ 129.514706][ T46] usb 2-1: selecting invalid altsetting 2 [ 129.520795][ T46] snd_usb_toneport 2-1:4.0: set_interface failed [ 129.532967][ T46] snd_usb_toneport 2-1:4.0: Line 6 TonePort UX2 now disconnected [ 129.541242][ T46] snd_usb_toneport 2-1:4.0: probe with driver snd_usb_toneport failed with error -22 [ 129.552543][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.565132][ T46] usb 2-1: USB disconnect, device number 11 [ 129.573630][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.586456][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.588322][ T973] usb 3-1: Using ep0 maxpacket: 8 [ 129.597559][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 129.614013][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.630411][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 129.636434][ T5911] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 129.640923][ T973] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.647925][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.655570][ T973] usb 3-1: config 0 has no interface number 0 [ 129.668407][ T5870] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 129.670401][ T973] usb 3-1: config 0 interface 1 has no altsetting 0 [ 129.686773][ T5911] usb 4-1: Product: syz [ 129.689534][ T973] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 129.691010][ T5911] usb 4-1: Manufacturer: syz [ 129.700704][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.708463][ T5911] usb 4-1: SerialNumber: syz [ 129.715000][ T973] usb 3-1: Product: syz [ 129.724795][ T973] usb 3-1: Manufacturer: syz [ 129.729122][ T5911] usb 4-1: config 0 descriptor?? [ 129.732635][ T973] usb 3-1: SerialNumber: syz [ 129.737861][ T6598] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 129.747349][ T973] usb 3-1: config 0 descriptor?? [ 129.750950][ T5911] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 129.810362][ T8] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 129.819731][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.828388][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 129.831125][ T8] usb 5-1: config 0 descriptor?? [ 129.844636][ T5870] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.855805][ T5870] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.865884][ T5870] usb 1-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 129.878932][ T5870] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 129.888032][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.964995][ T973] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 130.187638][ T25] usb 3-1: USB disconnect, device number 5 [ 130.338534][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 130.367550][ T5870] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/0003:0458:5011.0007/input/input9 [ 130.460495][ T5870] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/0003:0458:5011.0007/input/input10 [ 130.486573][ T5870] kye 0003:0458:5011.0007: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 130.502634][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.516842][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.527268][ T46] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 130.539394][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.576762][ T5911] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 130.587663][ T46] usb 2-1: config 0 descriptor?? [ 130.639147][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.646099][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.653401][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.660907][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.667794][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.674730][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.681774][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.688682][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.695589][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.708337][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.715249][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.723064][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.729980][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.736848][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.743706][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.750606][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.758415][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.765313][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.772713][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.779788][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.786787][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.793773][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.800730][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.807618][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.814527][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.821418][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.828351][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.835496][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.842732][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.849682][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.857210][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.864142][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.871008][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.877891][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.887195][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.894127][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.901010][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.907914][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.918282][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.927177][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.936549][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.943641][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.950577][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.958435][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.966301][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.973227][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.980253][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.987147][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 130.994118][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.001041][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.007928][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.014878][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.021938][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.028825][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.035930][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.042932][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.044379][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.049819][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.049996][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.074089][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.081470][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.088373][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.096888][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.103790][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.110853][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.117726][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.124683][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.131552][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.138412][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.146476][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.153565][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.160482][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.168102][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.174986][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.181882][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.189894][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.196743][ T5911] usb 4-1: USB disconnect, device number 8 [ 131.202631][ C1] gspca_pac7302 4-1:0.0: URB error -71, resubmitting [ 131.202649][ C1] gspca_main: Resubmit URB failed with error -19 [ 131.263189][ T46] ntrig 0003:1B96:0012.0008: hidraw1: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.1-1/input0 [ 131.532110][ C1] kye 0003:0458:5011.0007: usb_submit_urb(ctrl) failed: -1 [ 131.669707][ T973] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 132.091583][ T46] usb 2-1: USB disconnect, device number 12 [ 132.364217][ T8] pegasus 5-1:0.0: setup Pegasus II specific registers [ 133.194625][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.201214][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.375602][ T5868] usb 1-1: USB disconnect, device number 9 [ 133.465880][ T8] pegasus 5-1:0.0: can't locate MII phy, using default [ 133.505412][ T8] pegasus 5-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 46:b5:3a:4d:89:70 [ 133.551360][ T8] usb 5-1: USB disconnect, device number 14 [ 135.176841][ T6653] bond_slave_0: entered promiscuous mode [ 135.182972][ T6653] bond_slave_1: entered promiscuous mode [ 135.265548][ T6653] macvlan2: entered promiscuous mode [ 135.272073][ T6653] bond0: entered promiscuous mode [ 135.295823][ T6653] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.559330][ T6659] pim6reg1: entered promiscuous mode [ 135.597019][ T6659] pim6reg1: entered allmulticast mode [ 137.993847][ T5911] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 138.958330][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 139.058703][ T5911] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 139.066976][ T5911] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.136345][ T5911] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.197803][ T5911] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.228436][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 139.228457][ T29] audit: type=1326 audit(1736749330.178:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.4.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6995185d29 code=0x7ffc0000 [ 139.296227][ T5911] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.324503][ T29] audit: type=1326 audit(1736749330.178:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.4.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6995185d29 code=0x7ffc0000 [ 139.345903][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.364326][ T5911] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.377087][ T6699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.417526][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.585393][ T29] audit: type=1326 audit(1736749330.178:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.4.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6995185d29 code=0x7ffc0000 [ 139.608108][ T29] audit: type=1326 audit(1736749330.178:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.4.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6995185d29 code=0x7ffc0000 [ 139.631330][ T29] audit: type=1326 audit(1736749330.178:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.4.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6995185d29 code=0x7ffc0000 [ 139.652843][ T29] audit: type=1326 audit(1736749330.228:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.4.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6995185d29 code=0x7ffc0000 [ 139.654190][ T6699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.674500][ T29] audit: type=1326 audit(1736749330.228:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.4.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6995185d29 code=0x7ffc0000 [ 139.674542][ T29] audit: type=1326 audit(1736749330.228:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.4.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6995185d29 code=0x7ffc0000 [ 139.674573][ T29] audit: type=1326 audit(1736749330.228:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.4.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f6995185d29 code=0x7ffc0000 [ 139.674603][ T29] audit: type=1326 audit(1736749330.228:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.4.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6995185d29 code=0x7ffc0000 [ 139.746533][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.797453][ T5911] usb 2-1: GET_CAPABILITIES returned 0 [ 139.803340][ T5911] usbtmc 2-1:16.0: can't read capabilities [ 139.952443][ T6708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.214'. [ 139.961523][ T8] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 140.131893][ T8] usb 4-1: config 0 has an invalid interface number: 226 but max is 0 [ 140.142853][ T8] usb 4-1: config 0 has no interface number 0 [ 140.150281][ T8] usb 4-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=8f.82 [ 140.159753][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.174102][ T8] usb 4-1: config 0 descriptor?? [ 140.242313][ T8] usb 2-1: USB disconnect, device number 13 [ 140.242526][ T6682] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 140.289446][ T6714] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -19 [ 142.085305][ T6741] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 142.359327][ T6746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.419658][ T6746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.212243][ T5868] usb 4-1: USB disconnect, device number 9 [ 144.025208][ T6759] binder: 6758:6759 ioctl c0184800 20000380 returned -22 [ 144.034286][ T6759] binder: BINDER_SET_CONTEXT_MGR already set [ 144.040591][ T6759] binder: 6758:6759 ioctl 4018620d 20004a80 returned -16 [ 144.049149][ T6759] binder: 6758:6759 unknown command 0 [ 144.054602][ T6759] binder: 6758:6759 ioctl c0306201 20004a40 returned -22 [ 144.678336][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.838362][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 144.856412][ T46] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 144.868308][ T46] usb 1-1: can't read configurations, error -61 [ 144.999667][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 144.999689][ T29] audit: type=1800 audit(1736749335.928:120): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.233" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 145.088461][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 145.248342][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 145.273736][ T46] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 145.285012][ T46] usb 1-1: can't read configurations, error -61 [ 145.343761][ T46] usb usb1-port1: attempt power cycle [ 145.848315][ T5911] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 145.868506][ T5870] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 145.888497][ T46] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.910071][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 145.918044][ T46] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 145.926778][ T46] usb 1-1: can't read configurations, error -61 [ 145.998592][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 146.008482][ T5870] usb 2-1: device descriptor read/64, error -71 [ 146.020234][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 146.037853][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 146.060325][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.079003][ T46] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.089912][ T5911] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.118356][ T5911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.135050][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 146.146601][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.157687][ T46] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 146.165769][ T46] usb 1-1: can't read configurations, error -61 [ 146.179818][ T46] usb usb1-port1: unable to enumerate USB device [ 146.258346][ T5870] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 146.387302][ T5911] usb 4-1: GET_CAPABILITIES returned 0 [ 146.395229][ T5911] usbtmc 4-1:16.0: can't read capabilities [ 146.408562][ T5870] usb 2-1: device descriptor read/64, error -71 [ 146.538737][ T5870] usb usb2-port1: attempt power cycle [ 146.660145][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 146.674584][ T6779] usbtmc 4-1:16.0: Unable to send data, error -71 [ 146.707790][ T46] usb 4-1: USB disconnect, device number 10 [ 146.898604][ T5870] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 146.929076][ T5870] usb 2-1: device descriptor read/8, error -71 [ 147.178618][ T5870] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 147.216748][ T5870] usb 2-1: device descriptor read/8, error -71 [ 147.352589][ T5870] usb usb2-port1: unable to enumerate USB device [ 147.810054][ T6805] tipc: Started in network mode [ 147.859828][ T6805] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 147.874256][ T6805] tipc: Enabled bearer , priority 0 [ 148.870696][ T8] tipc: Node number set to 11578026 [ 149.220483][ T6813] FAULT_INJECTION: forcing a failure. [ 149.220483][ T6813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.263462][ T6813] CPU: 0 UID: 0 PID: 6813 Comm: syz.3.244 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 149.274111][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.284194][ T6813] Call Trace: [ 149.287488][ T6813] [ 149.290444][ T6813] dump_stack_lvl+0x241/0x360 [ 149.295153][ T6813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.300376][ T6813] ? __pfx__printk+0x10/0x10 [ 149.304996][ T6813] ? __pfx_lock_release+0x10/0x10 [ 149.310046][ T6813] should_fail_ex+0x3b0/0x4e0 [ 149.314746][ T6813] _copy_from_iter+0x1e9/0x1c20 [ 149.319619][ T6813] ? __virt_addr_valid+0x183/0x530 [ 149.324762][ T6813] ? __pfx__copy_from_iter+0x10/0x10 [ 149.330072][ T6813] ? __virt_addr_valid+0x183/0x530 [ 149.335200][ T6813] ? __virt_addr_valid+0x183/0x530 [ 149.340325][ T6813] ? __virt_addr_valid+0x45f/0x530 [ 149.345456][ T6813] ? __phys_addr_symbol+0x2f/0x70 [ 149.350497][ T6813] ? __check_object_size+0x47a/0x730 [ 149.355805][ T6813] hci_sock_sendmsg+0x4f1/0x11c0 [ 149.360758][ T6813] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 149.367583][ T6813] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 149.372978][ T6813] ? get_pid_task+0x23/0x1f0 [ 149.377595][ T6813] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 149.382985][ T6813] __sock_sendmsg+0x221/0x270 [ 149.387684][ T6813] sock_write_iter+0x2d7/0x3f0 [ 149.392475][ T6813] ? __pfx_sock_write_iter+0x10/0x10 [ 149.397791][ T6813] ? bpf_lsm_file_permission+0x9/0x10 [ 149.403185][ T6813] ? security_file_permission+0x74/0x280 [ 149.408840][ T6813] vfs_write+0xaeb/0xd30 [ 149.413103][ T6813] ? __pfx_sock_write_iter+0x10/0x10 [ 149.418416][ T6813] ? __pfx_vfs_write+0x10/0x10 [ 149.423199][ T6813] ? __fget_files+0x2a/0x410 [ 149.427789][ T6813] ? __fget_files+0x2a/0x410 [ 149.432378][ T6813] ksys_write+0x18f/0x2b0 [ 149.436754][ T6813] ? __pfx_ksys_write+0x10/0x10 [ 149.441614][ T6813] ? do_syscall_64+0x100/0x230 [ 149.446382][ T6813] ? do_syscall_64+0xb6/0x230 [ 149.451063][ T6813] do_syscall_64+0xf3/0x230 [ 149.455564][ T6813] ? clear_bhb_loop+0x35/0x90 [ 149.460237][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.466130][ T6813] RIP: 0033:0x7f681e385d29 [ 149.470590][ T6813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.490190][ T6813] RSP: 002b:00007f681f222038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.498611][ T6813] RAX: ffffffffffffffda RBX: 00007f681e575fa0 RCX: 00007f681e385d29 [ 149.506579][ T6813] RDX: 0000000000000006 RSI: 0000000020000100 RDI: 0000000000000004 [ 149.514547][ T6813] RBP: 00007f681f222090 R08: 0000000000000000 R09: 0000000000000000 [ 149.522513][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.530488][ T6813] R13: 0000000000000000 R14: 00007f681e575fa0 R15: 00007fffe3c494a8 [ 149.538465][ T6813] [ 149.676163][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 155.058343][ T5872] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 155.266503][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.301479][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 155.328291][ T5872] usb 2-1: can't read configurations, error -71 [ 155.509507][ T6897] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 155.648961][ T6904] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 155.655869][ T6904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.798380][ T6904] vhci_hcd vhci_hcd.0: Device attached [ 155.958309][ T46] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 156.168439][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.333935][ T8] usb 3-1: New USB device found, idVendor=0af0, idProduct=7201, bcdDevice=ad.9d [ 156.367427][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.502562][ T8] usb 3-1: config 0 descriptor?? [ 156.540452][ T6922] netlink: 536 bytes leftover after parsing attributes in process `syz.0.271'. [ 156.785848][ T6905] vhci_hcd: cannot find a urb of seqnum 891991554 max seqnum 1 [ 156.858479][ T5911] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 156.901697][ T5980] vhci_hcd: stop threads [ 156.918389][ T5980] vhci_hcd: release socket [ 157.920119][ T5980] vhci_hcd: disconnect device [ 158.226503][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.237768][ T5911] usb 1-1: too many endpoints for config 0 interface 0 altsetting 77: 231, using maximum allowed: 30 [ 158.251191][ T5911] usb 1-1: config 0 interface 0 altsetting 77 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 158.274756][ T5911] usb 1-1: config 0 interface 0 altsetting 77 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 158.367019][ T5911] usb 1-1: config 0 interface 0 altsetting 77 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 158.697222][ T6943] fuse: Bad value for 'fd' [ 158.727151][ T5911] usb 1-1: config 0 interface 0 altsetting 77 has an endpoint descriptor with address 0x56, changing to 0x6 [ 158.742208][ T5911] usb 1-1: config 0 interface 0 altsetting 77 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 158.799099][ T5911] usb 1-1: config 0 interface 0 altsetting 77 endpoint 0x6 has invalid wMaxPacketSize 0 [ 158.829800][ T5911] usb 1-1: config 0 interface 0 altsetting 77 has 2 endpoint descriptors, different from the interface descriptor's value: 231 [ 158.843695][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 158.864216][ T5911] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 158.931151][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.034062][ T5911] usb 1-1: Product: syz [ 159.076033][ T5911] usb 1-1: Manufacturer: syz [ 159.087346][ T5870] usb 3-1: USB disconnect, device number 6 [ 159.102322][ T5911] usb 1-1: SerialNumber: syz [ 159.146216][ T5911] usb 1-1: config 0 descriptor?? [ 159.331846][ T5911] usb 1-1: can't set config #0, error -71 [ 159.365211][ T5911] usb 1-1: USB disconnect, device number 14 [ 160.460731][ T5872] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.987792][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 161.100169][ T46] vhci_hcd: vhci_device speed not set [ 161.259283][ T5872] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 161.267666][ T5872] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 161.310545][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 161.339614][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.357023][ T5872] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.368177][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 161.387766][ T5872] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 161.400331][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.423795][ T5872] usb 3-1: config 0 descriptor?? [ 161.656747][ T5872] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 161.887400][ T5872] usb 3-1: USB disconnect, device number 7 [ 161.918889][ T5872] usblp0: removed [ 162.444279][ T6975] trusted_key: syz.4.284 sent an empty control message without MSG_MORE. [ 163.644455][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 163.803848][ T6978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.810339][ T6978] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 163.827738][ T6978] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 163.853784][ T6978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.859934][ T6978] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.704200][ T6990] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 164.911410][ T6978] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 165.251770][ T6978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 165.257781][ T6978] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 165.287630][ T6978] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 165.295714][ T6978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 165.302024][ T6978] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 165.313362][ T6978] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 165.819242][ T46] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 165.838716][ T5133] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.909212][ T5133] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.028394][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 166.052686][ T46] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 166.068316][ T5869] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 166.096204][ T46] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 166.153753][ T46] usb 4-1: config 6 has no interface number 0 [ 166.188306][ T46] usb 4-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.238453][ T46] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.261275][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.274998][ T5869] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 166.287590][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.294270][ T46] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 166.306012][ T5869] usb 3-1: config 0 descriptor?? [ 166.316671][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.336043][ T46] usb 4-1: Product: syz [ 166.340431][ T46] usb 4-1: Manufacturer: syz [ 166.345088][ T46] usb 4-1: SerialNumber: syz [ 166.361138][ T46] hso 4-1:6.2: Failed to find INT IN ep [ 166.569552][ T5869] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 166.614133][ T5869] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input13 [ 166.640025][ T5870] usb 4-1: USB disconnect, device number 11 [ 166.689103][ T46] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 166.776948][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.797362][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.896102][ T5869] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 166.896756][ T46] usb 5-1: config 0 has an invalid interface number: 226 but max is 0 [ 166.918664][ T46] usb 5-1: config 0 has no interface number 0 [ 166.924804][ T46] usb 5-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=8f.82 [ 166.925596][ T5869] usb 3-1: USB disconnect, device number 8 [ 166.934131][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.943527][ T46] usb 5-1: config 0 descriptor?? [ 167.286577][ T5133] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.368258][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.910370][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.988580][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.688298][ T5869] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.247532][ T7039] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 169.610171][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.616340][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.702510][ T46] usb 5-1: USB disconnect, device number 15 [ 169.783345][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.794607][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.805146][ T5869] usb 3-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 169.831512][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.860895][ T5869] usb 3-1: config 0 descriptor?? [ 170.038050][ T7047] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 170.048465][ T5133] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.068356][ T46] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 170.068457][ T5133] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.278528][ T46] usb 5-1: config 0 has an invalid interface number: 226 but max is 0 [ 170.400679][ T46] usb 5-1: config 0 has no interface number 0 [ 170.482214][ T46] usb 5-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=8f.82 [ 170.534162][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.665400][ T46] usb 5-1: config 0 descriptor?? [ 170.912402][ T5869] usbhid 3-1:0.0: can't add hid device: -71 [ 170.918480][ T5869] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 170.931367][ T5869] usb 3-1: USB disconnect, device number 9 [ 171.709221][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout [ 171.716598][ T5133] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.835308][ T7058] netlink: 48 bytes leftover after parsing attributes in process `syz.2.307'. [ 172.187933][ T7064] Bluetooth: MGMT ver 1.23 [ 172.375449][ T7070] warning: `syz.0.309' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 173.817174][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.818322][ T5869] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 174.976633][ T7081] pim6reg: entered allmulticast mode [ 174.986693][ T5869] usb 1-1: config 0 has an invalid interface number: 226 but max is 0 [ 175.001859][ T5869] usb 1-1: config 0 has no interface number 0 [ 175.008121][ T5869] usb 1-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=8f.82 [ 175.019091][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.032303][ T5869] usb 1-1: config 0 descriptor?? [ 175.168487][ T7078] pim6reg: left allmulticast mode [ 176.476325][ T46] usb 5-1: USB disconnect, device number 16 [ 176.992699][ T7114] fuse: Unknown parameter 'group_i00000000000000000000' [ 177.070605][ T7118] cgroup: Invalid name [ 177.524121][ T5911] usb 1-1: USB disconnect, device number 15 [ 178.577628][ T7134] netlink: 11 bytes leftover after parsing attributes in process `syz.4.325'. [ 178.914039][ T7135] overlayfs: failed to resolve './file0': -2 [ 180.215160][ T7154] netlink: 'syz.1.331': attribute type 4 has an invalid length. [ 180.941779][ T7163] netlink: 11 bytes leftover after parsing attributes in process `syz.2.333'. [ 181.718533][ T5870] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 181.869980][ T5870] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 181.885053][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.893295][ T5911] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 181.918047][ T5870] usb 2-1: config 0 descriptor?? [ 181.929874][ T5870] cp210x 2-1:0.0: cp210x converter detected [ 182.058363][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 182.066604][ T5911] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 182.081735][ T5911] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.094791][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.392870][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.403612][ T5911] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.416888][ T5911] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.437936][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.687229][ T7187] dccp_invalid_packet: P.Data Offset(0) too small [ 182.717201][ T7187] Bluetooth: Invalid byte 02 after esc byte [ 182.790226][ T5911] usb 3-1: usb_control_msg returned -71 [ 182.796725][ T5911] usbtmc 3-1:16.0: can't read capabilities [ 182.799068][ T5868] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 182.833158][ T5911] usb 3-1: USB disconnect, device number 10 [ 182.991348][ T5990] Bluetooth: Error in BCSP hdr checksum [ 183.218305][ T5868] usb 4-1: config 0 has an invalid interface number: 226 but max is 0 [ 183.228844][ T5868] usb 4-1: config 0 has no interface number 0 [ 183.237251][ T5868] usb 4-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=8f.82 [ 183.249762][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.250931][ T5973] Bluetooth: Error in BCSP hdr checksum [ 183.379929][ T5868] usb 4-1: config 0 descriptor?? [ 183.892179][ T5868] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 184.243018][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.446751][ T5868] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 184.458354][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.466591][ T5868] usb 5-1: Product: syz [ 184.477865][ T5868] usb 5-1: Manufacturer: syz [ 184.482895][ T5868] usb 5-1: SerialNumber: syz [ 184.492393][ T5868] usb 5-1: config 0 descriptor?? [ 184.500475][ T5868] ims_pcu 5-1:0.0: Zero length descriptor [ 184.506259][ T5868] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 184.590236][ T5870] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 184.602063][ T5870] cp210x 2-1:0.0: querying part number failed [ 184.619882][ T5870] usb 2-1: cp210x converter now attached to ttyUSB0 [ 184.630481][ T5870] usb 2-1: USB disconnect, device number 20 [ 184.639091][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.648923][ T5870] cp210x 2-1:0.0: device disconnected [ 184.707060][ T5868] usb 5-1: USB disconnect, device number 17 [ 184.788434][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 185.471926][ T7217] FAULT_INJECTION: forcing a failure. [ 185.471926][ T7217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.498362][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: syz.2.347 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 185.508993][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.519059][ T7217] Call Trace: [ 185.522339][ T7217] [ 185.525278][ T7217] dump_stack_lvl+0x241/0x360 [ 185.529982][ T7217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.535199][ T7217] ? __pfx__printk+0x10/0x10 [ 185.539815][ T7217] ? __pfx_lock_release+0x10/0x10 [ 185.544871][ T7217] should_fail_ex+0x3b0/0x4e0 [ 185.549574][ T7217] _copy_from_user+0x2f/0xc0 [ 185.554195][ T7217] memdup_user+0x64/0xc0 [ 185.558449][ T7217] snd_ctl_ioctl+0x5b7/0x1880 [ 185.563127][ T7217] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 185.568254][ T7217] ? kasan_save_track+0x51/0x80 [ 185.573131][ T7217] ? kasan_save_track+0x3f/0x80 [ 185.577985][ T7217] ? kasan_save_free_info+0x40/0x50 [ 185.583178][ T7217] ? __kasan_slab_free+0x59/0x70 [ 185.588113][ T7217] ? kfree+0x196/0x430 [ 185.592186][ T7217] ? tomoyo_path_number_perm+0x679/0x860 [ 185.597812][ T7217] ? security_file_ioctl+0xc6/0x2a0 [ 185.603009][ T7217] ? __se_sys_ioctl+0x46/0x170 [ 185.607766][ T7217] ? do_syscall_64+0xf3/0x230 [ 185.612440][ T7217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.618512][ T7217] ? do_vfs_ioctl+0xf07/0x2e40 [ 185.623275][ T7217] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 185.628294][ T7217] ? mark_lock+0x9a/0x360 [ 185.632628][ T7217] ? tomoyo_path_number_perm+0x206/0x860 [ 185.638253][ T7217] ? __pfx_lock_release+0x10/0x10 [ 185.643286][ T7217] ? tomoyo_path_number_perm+0x679/0x860 [ 185.648946][ T7217] ? tomoyo_path_number_perm+0x679/0x860 [ 185.654573][ T7217] ? tomoyo_path_number_perm+0x6f9/0x860 [ 185.660198][ T7217] ? __lock_acquire+0x1397/0x2100 [ 185.665215][ T7217] ? tomoyo_path_number_perm+0x206/0x860 [ 185.670839][ T7217] ? smack_log+0x123/0x540 [ 185.675250][ T7217] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 185.681226][ T7217] ? __pfx_smack_log+0x10/0x10 [ 185.685986][ T7217] ? smk_access+0x4ab/0x4e0 [ 185.690490][ T7217] ? smk_tskacc+0x300/0x370 [ 185.694993][ T7217] ? smack_file_ioctl+0x2f7/0x3a0 [ 185.700011][ T7217] ? __pfx_smack_file_ioctl+0x10/0x10 [ 185.705386][ T7217] ? __fget_files+0x2a/0x410 [ 185.709973][ T7217] ? __fget_files+0x2a/0x410 [ 185.714558][ T7217] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 185.719669][ T7217] __se_sys_ioctl+0xf5/0x170 [ 185.724257][ T7217] do_syscall_64+0xf3/0x230 [ 185.728759][ T7217] ? clear_bhb_loop+0x35/0x90 [ 185.733429][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.739317][ T7217] RIP: 0033:0x7efd3d385d29 [ 185.743729][ T7217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.763330][ T7217] RSP: 002b:00007efd3e1bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.771767][ T7217] RAX: ffffffffffffffda RBX: 00007efd3d575fa0 RCX: 00007efd3d385d29 [ 185.779731][ T7217] RDX: 0000000020000700 RSI: 00000000c4c85513 RDI: 0000000000000004 [ 185.787694][ T7217] RBP: 00007efd3e1bf090 R08: 0000000000000000 R09: 0000000000000000 [ 185.795658][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.803621][ T7217] R13: 0000000000000000 R14: 00007efd3d575fa0 R15: 00007fff5af631b8 [ 185.811596][ T7217] [ 185.977608][ T5870] usb 4-1: USB disconnect, device number 12 [ 186.133345][ T7226] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 187.178298][ T5872] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 187.235058][ T7232] vlan2: entered promiscuous mode [ 187.984634][ T5872] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 187.995966][ T5872] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.018260][ T5872] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 188.028122][ T5872] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.071637][ T5872] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.106754][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.333164][ T5872] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.340782][ T5872] usb 3-1: invalid MIDI out EP 0 [ 190.091212][ T5872] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 190.147946][ T7258] fuse: Unknown parameter 'group_id00000000000000000000' [ 190.176903][ T5872] usb 3-1: USB disconnect, device number 11 [ 190.709180][ T7266] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 191.468304][ T5870] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 191.585915][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.051913][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 192.060699][ T5870] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 192.070268][ T5870] usb 1-1: config 0 has no interface number 0 [ 192.084565][ T5870] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 192.095904][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.104225][ T5870] usb 1-1: Product: syz [ 192.108716][ T5870] usb 1-1: Manufacturer: syz [ 192.113426][ T5870] usb 1-1: SerialNumber: syz [ 192.674496][ T5872] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 192.854627][ T5870] usb 1-1: config 0 descriptor?? [ 192.870527][ T5870] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 193.078571][ T5870] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 193.084689][ T5870] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 193.194158][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.196807][ T5872] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 193.196848][ T5872] usb 4-1: can't read configurations, error -71 [ 193.238425][ T46] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 193.388331][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 193.395391][ T46] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 193.404125][ T46] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 193.413641][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 193.425275][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.435113][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 193.445636][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.459439][ T46] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 193.468797][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.479183][ T46] usb 2-1: config 0 descriptor?? [ 193.487967][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 193.496815][ T5870] usb 1-1: USB disconnect, device number 16 [ 193.506191][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 193.545585][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 193.573323][ T5870] quatech2 1-1:0.51: device disconnected [ 193.759212][ T46] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 193.896656][ T46] usb 2-1: USB disconnect, device number 21 [ 193.910774][ T46] usblp0: removed [ 194.709970][ T7309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.273291][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.279709][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.165686][ T7357] capability: warning: `syz.2.388' uses deprecated v2 capabilities in a way that may be insecure [ 201.315061][ T7388] loop7: detected capacity change from 0 to 16384 [ 201.367460][ T7395] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 201.377646][ T7395] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.387078][ T7395] Buffer I/O error on dev loop7, logical block 0, async page read [ 202.021344][ T7394] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.397'. [ 202.032455][ T7394] netlink: zone id is out of range [ 202.037643][ T7394] netlink: zone id is out of range [ 202.042933][ T7394] netlink: get zone limit has 8 unknown bytes [ 202.737567][ T7409] fuse: Bad value for 'user_id' [ 202.752433][ T7409] fuse: Bad value for 'user_id' [ 203.937622][ T7411] xt_TCPMSS: Only works on TCP SYN packets [ 204.811523][ T46] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 205.315470][ T46] usb 5-1: config 0 has an invalid interface number: 226 but max is 0 [ 205.337715][ T7444] netlink: 32 bytes leftover after parsing attributes in process `syz.0.412'. [ 205.346767][ T46] usb 5-1: config 0 has no interface number 0 [ 205.356882][ T46] usb 5-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=8f.82 [ 205.377506][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.439445][ T46] usb 5-1: config 0 descriptor?? [ 205.668409][ T5870] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.841739][ T5870] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 205.851167][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.859704][ T5870] usb 4-1: Product: syz [ 205.864125][ T5870] usb 4-1: Manufacturer: syz [ 205.868867][ T5870] usb 4-1: SerialNumber: syz [ 205.880530][ T5870] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 205.902144][ T46] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 206.194979][ T5870] usb 4-1: USB disconnect, device number 15 [ 206.585395][ T7463] loop2: detected capacity change from 0 to 7 [ 207.545435][ T7463] Dev loop2: unable to read RDB block 7 [ 207.558434][ T7463] loop2: AHDI p2 p3 p4 [ 207.566990][ T46] usb 4-1: Service connection timeout for: 257 [ 207.571991][ T7463] loop2: partition table partially beyond EOD, truncated [ 207.573297][ T46] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 207.589280][ T46] ath9k_htc: Failed to initialize the device [ 207.611812][ T5870] usb 4-1: ath9k_htc: USB layer deinitialized [ 207.624878][ T7463] loop2: p2 start 131072 is beyond EOD, truncated [ 207.711941][ T7470] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 207.720360][ T7463] loop2: p3 size 150995200 extends beyond EOD, truncated [ 207.926517][ T7470] netlink: 224 bytes leftover after parsing attributes in process `syz.0.418'. [ 208.179009][ T5870] usb 5-1: USB disconnect, device number 18 [ 213.088351][ T5871] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 214.907810][ T5871] usb 2-1: device not accepting address 22, error -71 [ 216.018450][ T5872] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 216.179162][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 216.190407][ T5869] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 216.218398][ T5872] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 216.248774][ T5872] usb 1-1: config 0 has no interface number 0 [ 216.340185][ T5872] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 216.374268][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.410011][ T5872] usb 1-1: Product: syz [ 216.464589][ T5872] usb 1-1: Manufacturer: syz [ 216.469463][ T5869] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 216.488621][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.510636][ T5872] usb 1-1: SerialNumber: syz [ 216.523102][ T5869] usb 4-1: config 0 descriptor?? [ 216.544172][ T5872] usb 1-1: config 0 descriptor?? [ 216.553049][ T5869] cp210x 4-1:0.0: cp210x converter detected [ 216.561449][ T5872] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 216.621266][ T7552] program syz.1.442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.761585][ T5872] usb 1-1: qt2_attach - failed to power on unit: -71 [ 216.955380][ T5872] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 217.085453][ T5872] usb 1-1: USB disconnect, device number 17 [ 217.203839][ T5869] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 217.212620][ T5869] cp210x 4-1:0.0: querying part number failed [ 217.233959][ T5869] usb 4-1: cp210x converter now attached to ttyUSB0 [ 217.247235][ T5869] usb 4-1: USB disconnect, device number 16 [ 217.256909][ T5869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.334989][ T7560] tmpfs: Unknown parameter 'qu' [ 217.965349][ T5869] cp210x 4-1:0.0: device disconnected [ 218.987790][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 218.997277][ T7576] bridge_slave_1: left allmulticast mode [ 219.003183][ T7576] bridge_slave_1: left promiscuous mode [ 219.011276][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.154378][ T7570] loop2: detected capacity change from 0 to 7 [ 219.167384][ T7570] Dev loop2: unable to read RDB block 7 [ 219.173118][ T7570] loop2: AHDI p2 p3 p4 [ 219.177632][ T7570] loop2: partition table partially beyond EOD, truncated [ 219.185729][ T7576] bridge_slave_0: left allmulticast mode [ 219.191591][ T7576] bridge_slave_0: left promiscuous mode [ 219.197353][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.256806][ T7570] loop2: p2 start 131072 is beyond EOD, truncated [ 219.263729][ T7570] loop2: p3 size 150995200 extends beyond EOD, truncated [ 219.281619][ T7578] netlink: 'syz.2.446': attribute type 1 has an invalid length. [ 219.308763][ T7578] netlink: 224 bytes leftover after parsing attributes in process `syz.2.446'. [ 219.769970][ T7585] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 219.778430][ T7585] netlink: 224 bytes leftover after parsing attributes in process `syz.3.452'. [ 220.496620][ T7604] openvswitch: netlink: Flow key attr not present in new flow. [ 220.875823][ T7611] o2cb: This node has not been configured. [ 220.882344][ T7611] o2cb: Cluster check failed. Fix errors before retrying. [ 220.892291][ T7611] (syz.2.459,7611,0):user_dlm_register:674 ERROR: status = -22 [ 220.900350][ T7611] (syz.2.459,7611,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 222.362765][ T7620] fuse: Unknown parameter 'group_id00000000000000000000' [ 224.322455][ T7646] fuse: Bad value for 'fd' [ 224.431479][ T7652] FAULT_INJECTION: forcing a failure. [ 224.431479][ T7652] name failslab, interval 1, probability 0, space 0, times 0 [ 224.444631][ T7652] CPU: 1 UID: 0 PID: 7652 Comm: syz.3.472 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 224.455252][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 224.465330][ T7652] Call Trace: [ 224.468631][ T7652] [ 224.471581][ T7652] dump_stack_lvl+0x241/0x360 [ 224.476282][ T7652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.481499][ T7652] ? __pfx__printk+0x10/0x10 [ 224.486107][ T7652] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 224.492627][ T7652] ? __pfx___might_resched+0x10/0x10 [ 224.497941][ T7652] should_fail_ex+0x3b0/0x4e0 [ 224.502643][ T7652] should_failslab+0xac/0x100 [ 224.507349][ T7652] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 224.513699][ T7652] ? dh_data_from_key+0x169/0x280 [ 224.518749][ T7652] kmemdup_noprof+0x2a/0x60 [ 224.523269][ T7652] dh_data_from_key+0x169/0x280 [ 224.528141][ T7652] __keyctl_dh_compute+0x41f/0xf50 [ 224.533289][ T7652] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 224.538967][ T7652] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 224.544971][ T7652] keyctl_dh_compute+0x107/0x160 [ 224.549931][ T7652] ? irqentry_exit+0x63/0x90 [ 224.554549][ T7652] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 224.560032][ T7652] ? __se_sys_keyctl+0xb6/0x910 [ 224.564897][ T7652] ? __se_sys_keyctl+0x3de/0x910 [ 224.569856][ T7652] __se_sys_keyctl+0x3f3/0x910 [ 224.574634][ T7652] ? __pfx___se_sys_keyctl+0x10/0x10 [ 224.579936][ T7652] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.585932][ T7652] ? __fget_files+0x2a/0x410 [ 224.590539][ T7652] ? __fget_files+0x2a/0x410 [ 224.595152][ T7652] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 224.601150][ T7652] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.607490][ T7652] ? do_syscall_64+0x100/0x230 [ 224.612277][ T7652] ? __x64_sys_keyctl+0x20/0xc0 [ 224.617147][ T7652] do_syscall_64+0xf3/0x230 [ 224.621673][ T7652] ? clear_bhb_loop+0x35/0x90 [ 224.626373][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.632284][ T7652] RIP: 0033:0x7f681e385d29 [ 224.638177][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.638211][ T7652] RSP: 002b:00007f681f201038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 224.638234][ T7652] RAX: ffffffffffffffda RBX: 00007f681e576080 RCX: 00007f681e385d29 [ 224.638248][ T7652] RDX: 0000000020003f00 RSI: 0000000020001340 RDI: 0000000000000017 [ 224.682203][ T7652] RBP: 00007f681f201090 R08: 0000000000000000 R09: 0000000000000000 [ 224.690198][ T7652] R10: 0000000000001005 R11: 0000000000000246 R12: 0000000000000001 [ 224.698188][ T7652] R13: 0000000000000000 R14: 00007f681e576080 R15: 00007fffe3c494a8 [ 224.706189][ T7652] [ 224.709276][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.776135][ T7665] fuse: Unknown parameter 'group_id00000000000000000000' [ 226.037861][ T7654] o2cb: This node has not been configured. [ 226.043743][ T7654] o2cb: Cluster check failed. Fix errors before retrying. [ 226.050903][ T7654] (syz.2.473,7654,0):user_dlm_register:674 ERROR: status = -22 [ 226.058474][ T7654] (syz.2.473,7654,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 226.334650][ T7671] loop2: detected capacity change from 0 to 7 [ 226.349182][ T7671] Dev loop2: unable to read RDB block 7 [ 226.354840][ T7671] loop2: AHDI p2 p3 p4 [ 226.368568][ T7671] loop2: partition table partially beyond EOD, truncated [ 226.385984][ T7671] loop2: p2 start 131072 is beyond EOD, truncated [ 226.406523][ T7671] loop2: p3 size 150995200 extends beyond EOD, truncated [ 226.532588][ T7669] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 229.507745][ T7713] dccp_invalid_packet: P.Data Offset(0) too small [ 229.558555][ T46] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 230.108271][ T5869] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 230.122525][ T5978] Bluetooth: Invalid byte 5e after esc byte [ 230.345014][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 230.352973][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 230.371501][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.384762][ T46] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 230.395950][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.406190][ T46] usb 5-1: config 0 descriptor?? [ 230.524876][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 231.310258][ T5869] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 231.336247][ T5869] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 231.349054][ T5869] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 231.358590][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.368565][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.378668][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.391801][ T5869] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 231.400932][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.424341][ T5869] usb 1-1: config 0 descriptor?? [ 231.470848][ T46] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 231.654740][ T5869] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 231.668340][ T5133] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 231.909622][ T46] usb 1-1: USB disconnect, device number 18 [ 231.931915][ T46] usblp0: removed [ 233.098363][ T8] usb 5-1: USB disconnect, device number 19 [ 233.836619][ T7746] block device autoloading is deprecated and will be removed. [ 233.848509][ T7746] syz.2.496: attempt to access beyond end of device [ 233.848509][ T7746] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 234.351738][ T7745] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 235.453511][ T7766] netlink: 48 bytes leftover after parsing attributes in process `syz.2.500'. [ 235.568384][ T46] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 235.664784][ T7771] loop2: detected capacity change from 0 to 7 [ 235.676221][ T7771] Dev loop2: unable to read RDB block 7 [ 235.682192][ T7771] loop2: AHDI p2 p3 p4 [ 235.686550][ T7771] loop2: partition table partially beyond EOD, truncated [ 235.696018][ T7771] loop2: p2 start 131072 is beyond EOD, truncated [ 235.705223][ T7771] loop2: p3 size 150995200 extends beyond EOD, truncated [ 235.728693][ T7776] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 235.736958][ T7776] netlink: 224 bytes leftover after parsing attributes in process `syz.1.502'. [ 236.355869][ T7771] mkiss: ax0: crc mode is auto. [ 236.538348][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 236.609356][ T46] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 236.618728][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.645437][ T46] usb 4-1: Product: syz [ 236.650305][ T46] usb 4-1: Manufacturer: syz [ 236.654912][ T46] usb 4-1: SerialNumber: syz [ 236.664348][ T46] usb 4-1: config 0 descriptor?? [ 236.753575][ T7782] dccp_invalid_packet: P.Data Offset(0) too small [ 236.830064][ T5966] Bluetooth: Invalid byte 5e after esc byte [ 237.738578][ T46] usb 4-1: USB disconnect, device number 17 [ 237.993335][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.009455][ T5869] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 238.793868][ T5869] usb 5-1: config 0 has an invalid interface number: 226 but max is 0 [ 238.805689][ T5869] usb 5-1: config 0 has no interface number 0 [ 238.888639][ T5133] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 238.900134][ T5869] usb 5-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=8f.82 [ 238.909487][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.977155][ T5869] usb 5-1: config 0 descriptor?? [ 241.728781][ T7821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.094555][ T7821] syzkaller0: entered promiscuous mode [ 242.131174][ T7821] syzkaller0: entered allmulticast mode [ 242.541802][ T7831] loop2: detected capacity change from 0 to 7 [ 242.572002][ T7831] Dev loop2: unable to read RDB block 7 [ 242.583371][ T7831] loop2: AHDI p2 p3 p4 [ 242.598650][ T7831] loop2: partition table partially beyond EOD, truncated [ 242.625983][ T7833] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 242.649837][ T7831] loop2: p2 start 131072 is beyond EOD, truncated [ 242.668014][ T7833] netlink: 224 bytes leftover after parsing attributes in process `syz.2.517'. [ 242.693747][ T7831] loop2: p3 size 150995200 extends beyond EOD, truncated [ 243.178370][ T5869] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 243.218027][ T7838] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 243.371808][ T5869] usb 2-1: device descriptor read/64, error -71 [ 243.462435][ T7831] Falling back ldisc for ptm0. [ 243.668828][ T5869] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 243.822452][ T5194] Dev loop2: unable to read RDB block 7 [ 243.828442][ T5869] usb 2-1: device descriptor read/64, error -71 [ 243.834831][ T5194] loop2: AHDI p2 p3 p4 [ 243.841083][ T5194] loop2: partition table partially beyond EOD, truncated [ 243.852292][ T5194] loop2: p2 start 131072 is beyond EOD, truncated [ 243.859524][ T5194] loop2: p3 size 150995200 extends beyond EOD, truncated [ 243.959463][ T5869] usb usb2-port1: attempt power cycle [ 244.598436][ T5869] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 244.634460][ T5869] usb 2-1: device descriptor read/8, error -71 [ 244.833631][ T46] usb 5-1: USB disconnect, device number 20 [ 244.908717][ T5869] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 244.929098][ T5869] usb 2-1: device descriptor read/8, error -71 [ 244.969162][ T7850] fuse: Bad value for 'user_id' [ 244.974064][ T7850] fuse: Bad value for 'user_id' [ 245.038595][ T5869] usb usb2-port1: unable to enumerate USB device [ 246.755508][ T29] audit: type=1326 audit(1736749437.714:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7860 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 246.776902][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.872026][ T29] audit: type=1326 audit(1736749437.794:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7860 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 246.893430][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.918394][ T29] audit: type=1326 audit(1736749437.794:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7860 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 246.939781][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.968386][ T29] audit: type=1326 audit(1736749437.794:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7860 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 246.989805][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.007587][ T7865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.043223][ T29] audit: type=1326 audit(1736749437.794:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7860 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 247.133807][ T7865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.138297][ T29] audit: type=1326 audit(1736749437.794:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7860 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 247.220099][ T29] audit: type=1326 audit(1736749437.794:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7860 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 247.318266][ T29] audit: type=1326 audit(1736749437.794:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7860 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 247.397316][ T29] audit: type=1326 audit(1736749437.794:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7860 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 247.516367][ T7877] binder: 7873:7877 ioctl 4018620d 0 returned -22 [ 248.205541][ T29] audit: type=1326 audit(1736749437.794:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7860 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 249.838991][ T7889] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 249.997732][ T7894] fuse: Bad value for 'user_id' [ 250.020824][ T7894] fuse: Bad value for 'user_id' [ 250.159267][ T7900] loop2: detected capacity change from 0 to 7 [ 250.177729][ T7900] Dev loop2: unable to read RDB block 7 [ 250.201998][ T7900] loop2: AHDI p2 p3 p4 [ 250.214782][ T7900] loop2: partition table partially beyond EOD, truncated [ 250.246420][ T7904] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 250.268395][ T7900] loop2: p2 start 131072 is beyond EOD, truncated [ 250.288274][ T7904] netlink: 224 bytes leftover after parsing attributes in process `syz.3.534'. [ 250.307715][ T7900] loop2: p3 size 150995200 extends beyond EOD, truncated [ 250.316070][ T7907] mkiss: ax0: crc mode is auto. [ 250.468803][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout [ 250.518315][ T5869] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 250.648342][ T5869] usb 1-1: device descriptor read/64, error -71 [ 251.072943][ T5868] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 251.158561][ T5869] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 251.279843][ T5868] usb 4-1: config 0 has an invalid interface number: 226 but max is 0 [ 251.295624][ T5868] usb 4-1: config 0 has no interface number 0 [ 251.306456][ T5868] usb 4-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=8f.82 [ 251.351894][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.360618][ T5869] usb 1-1: device descriptor read/64, error -71 [ 251.500134][ T5869] usb usb1-port1: attempt power cycle [ 251.532221][ T5868] usb 4-1: config 0 descriptor?? [ 251.958357][ T5869] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 251.989682][ T5869] usb 1-1: device descriptor read/8, error -71 [ 252.316015][ T5869] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 252.341931][ T7926] binder: 7920:7926 ioctl 4018620d 0 returned -22 [ 253.041055][ T5869] usb 1-1: device descriptor read/8, error -71 [ 253.159471][ T5869] usb usb1-port1: unable to enumerate USB device [ 254.416587][ T5869] usb 4-1: USB disconnect, device number 18 [ 254.541952][ T7944] fuse: Bad value for 'user_id' [ 254.587494][ T7944] fuse: Bad value for 'user_id' [ 255.319315][ T7951] fuse: Unknown parameter 'use00000000000000000000' [ 255.565832][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 255.565849][ T29] audit: type=1326 audit(1736749446.524:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7961 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0549f85d29 code=0x7ffc0000 [ 255.966045][ T29] audit: type=1326 audit(1736749446.564:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7961 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0549f85d29 code=0x7ffc0000 [ 256.309220][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.328708][ T7962] loop2: detected capacity change from 0 to 7 [ 256.346743][ T7963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.359298][ T7962] Dev loop2: unable to read RDB block 7 [ 256.364913][ T7962] loop2: AHDI p2 p3 p4 [ 256.375696][ T29] audit: type=1326 audit(1736749446.564:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7961 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0549f85d29 code=0x7ffc0000 [ 256.415716][ T7968] netlink: 'syz.3.550': attribute type 1 has an invalid length. [ 256.418967][ T7962] loop2: partition table partially beyond EOD, truncated [ 256.429899][ T7963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.450876][ T7962] loop2: p2 start 131072 is beyond EOD, truncated [ 256.453912][ T7968] netlink: 224 bytes leftover after parsing attributes in process `syz.3.550'. [ 256.457338][ T7962] loop2: p3 size 150995200 extends beyond EOD, truncated [ 256.462654][ T29] audit: type=1326 audit(1736749446.564:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7961 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0549f85d29 code=0x7ffc0000 [ 256.507581][ T29] audit: type=1326 audit(1736749446.564:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7961 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0549f85d29 code=0x7ffc0000 [ 256.529357][ T29] audit: type=1326 audit(1736749446.564:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7961 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0549f85d29 code=0x7ffc0000 [ 256.551134][ T29] audit: type=1326 audit(1736749446.564:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7961 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0549f85d29 code=0x7ffc0000 [ 256.572760][ T29] audit: type=1326 audit(1736749446.564:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7961 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0549f85d29 code=0x7ffc0000 [ 256.594281][ T29] audit: type=1326 audit(1736749446.564:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7961 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0549f85d29 code=0x7ffc0000 [ 256.597488][ T7962] mkiss: ax0: crc mode is auto. [ 256.615954][ T29] audit: type=1326 audit(1736749446.564:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7961 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0549f85d29 code=0x7ffc0000 [ 256.634389][ T5194] Dev loop2: unable to read RDB block 7 [ 256.664590][ T5194] loop2: AHDI p2 p3 p4 [ 256.672567][ T5194] loop2: partition table partially beyond EOD, truncated [ 256.683379][ T5194] loop2: p2 start 131072 is beyond EOD, truncated [ 256.693411][ T5194] loop2: p3 size 150995200 extends beyond EOD, truncated [ 256.870276][ T5868] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 257.265781][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 257.388412][ T5868] usb 1-1: device descriptor read/64, error -71 [ 257.958472][ T5868] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 257.986638][ T5872] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 258.318848][ T5868] usb 1-1: device descriptor read/64, error -71 [ 258.410297][ T5872] usb 2-1: config 0 has an invalid interface number: 226 but max is 0 [ 258.419101][ T5872] usb 2-1: config 0 has no interface number 0 [ 258.431717][ T5872] usb 2-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=8f.82 [ 258.441581][ T5868] usb usb1-port1: attempt power cycle [ 258.455490][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.467450][ T5872] usb 2-1: config 0 descriptor?? [ 258.798298][ T5868] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 258.970296][ T5868] usb 1-1: device descriptor read/8, error -71 [ 259.408705][ T5868] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 260.407014][ T5868] usb 1-1: device descriptor read/8, error -71 [ 260.698759][ T5868] usb usb1-port1: unable to enumerate USB device [ 260.713604][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 260.713622][ T29] audit: type=1326 audit(1736749451.674:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3d385d29 code=0x7ffc0000 [ 261.505969][ T29] audit: type=1326 audit(1736749451.674:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3d385d29 code=0x7ffc0000 [ 261.620645][ T5870] usb 2-1: USB disconnect, device number 28 [ 261.640339][ T29] audit: type=1326 audit(1736749452.514:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd3d385d29 code=0x7ffc0000 [ 261.740117][ T29] audit: type=1326 audit(1736749452.514:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3d385d29 code=0x7ffc0000 [ 261.784026][ T8015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.813275][ T29] audit: type=1326 audit(1736749452.514:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3d385d29 code=0x7ffc0000 [ 262.035754][ T29] audit: type=1326 audit(1736749452.514:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7efd3d385d29 code=0x7ffc0000 [ 262.057140][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.092939][ T8017] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 262.204837][ T29] audit: type=1326 audit(1736749452.514:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3d385d29 code=0x7ffc0000 [ 262.354684][ T29] audit: type=1326 audit(1736749452.514:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3d385d29 code=0x7ffc0000 [ 262.508376][ T29] audit: type=1326 audit(1736749452.514:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7efd3d385d29 code=0x7ffc0000 [ 262.564773][ T29] audit: type=1326 audit(1736749452.514:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3d385d29 code=0x7ffc0000 [ 262.656800][ T8034] loop2: detected capacity change from 0 to 7 [ 262.675513][ T8034] Dev loop2: unable to read RDB block 7 [ 262.681441][ T8034] loop2: AHDI p2 p3 p4 [ 262.685879][ T8034] loop2: partition table partially beyond EOD, truncated [ 262.693298][ T8034] loop2: p2 start 131072 is beyond EOD, truncated [ 262.699849][ T8034] loop2: p3 size 150995200 extends beyond EOD, truncated [ 262.967252][ T8034] mkiss: ax0: crc mode is auto. [ 263.868410][ T5872] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 264.948498][ T5872] usb 3-1: device descriptor read/64, error -71 [ 265.603266][ T5868] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 265.738431][ T5872] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 265.834296][ T5868] usb 4-1: config 0 has an invalid interface number: 226 but max is 0 [ 265.842796][ T5868] usb 4-1: config 0 has no interface number 0 [ 265.849144][ T5868] usb 4-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=8f.82 [ 265.858238][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.919052][ T5868] usb 4-1: config 0 descriptor?? [ 265.924666][ T5872] usb 3-1: device descriptor read/64, error -71 [ 266.005790][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 266.005809][ T29] audit: type=1326 audit(1736749456.934:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 266.020489][ T8065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.040370][ T29] audit: type=1326 audit(1736749456.934:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 266.062215][ T29] audit: type=1326 audit(1736749456.984:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 266.083908][ T29] audit: type=1326 audit(1736749456.984:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 266.105316][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.111594][ T29] audit: type=1326 audit(1736749456.984:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 266.150902][ T29] audit: type=1326 audit(1736749456.984:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 266.172140][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.178608][ T29] audit: type=1326 audit(1736749456.984:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 266.200485][ T29] audit: type=1326 audit(1736749456.984:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 266.221886][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.228495][ T29] audit: type=1326 audit(1736749456.984:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 266.250970][ T29] audit: type=1326 audit(1736749456.984:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55bd985d29 code=0x7ffc0000 [ 266.272290][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.579945][ T5872] usb usb3-port1: attempt power cycle [ 266.619643][ T8070] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 266.941616][ T5872] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 267.103943][ T5872] usb 3-1: device descriptor read/8, error -71 [ 267.144697][ T8079] loop2: detected capacity change from 0 to 7 [ 267.163231][ T8079] Dev loop2: unable to read RDB block 7 [ 267.173141][ T8079] loop2: AHDI p2 p3 p4 [ 267.177356][ T8079] loop2: partition table partially beyond EOD, truncated [ 267.186694][ T8079] loop2: p2 start 131072 is beyond EOD, truncated [ 267.195421][ T8079] loop2: p3 size 150995200 extends beyond EOD, truncated [ 267.234637][ T8082] mkiss: ax0: crc mode is auto. [ 267.543118][ T8085] tun0: tun_chr_ioctl cmd 1074812118 [ 268.162970][ T5868] usb 4-1: USB disconnect, device number 19 [ 269.826458][ T8114] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 271.118547][ T5870] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 271.598416][ T5870] usb 2-1: device descriptor read/64, error -71 [ 271.848872][ T5870] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 271.957398][ T8130] loop2: detected capacity change from 0 to 7 [ 271.968646][ T8130] Dev loop2: unable to read RDB block 7 [ 271.977195][ T8130] loop2: AHDI p2 p3 p4 [ 271.983928][ T8130] loop2: partition table partially beyond EOD, truncated [ 271.992458][ T8130] loop2: p2 start 131072 is beyond EOD, truncated [ 271.999048][ T5870] usb 2-1: device descriptor read/64, error -71 [ 272.006018][ T8130] loop2: p3 size 150995200 extends beyond EOD, truncated [ 272.131613][ T5870] usb usb2-port1: attempt power cycle [ 272.173338][ T5194] Dev loop2: unable to read RDB block 7 [ 272.409977][ T5194] loop2: AHDI p2 p3 p4 [ 272.414265][ T5194] loop2: partition table partially beyond EOD, truncated [ 272.423729][ T5194] loop2: p2 start 131072 is beyond EOD, truncated [ 272.432719][ T5194] loop2: p3 size 150995200 extends beyond EOD, truncated [ 272.488399][ T5870] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 272.547563][ T5870] usb 2-1: device descriptor read/8, error -71 [ 272.910265][ T8130] mkiss: ax0: crc mode is auto. [ 272.930843][ T5870] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 272.972158][ T5870] usb 2-1: device descriptor read/8, error -71 [ 273.114765][ T5870] usb usb2-port1: unable to enumerate USB device [ 273.723790][ T8149] fuse: Unknown parameter 'user_i00000000000000000000' [ 276.475780][ T8154] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 278.593330][ T8189] loop2: detected capacity change from 0 to 7 [ 278.660764][ T8189] Dev loop2: unable to read RDB block 7 [ 278.671934][ T8191] mkiss: ax0: crc mode is auto. [ 278.678602][ T8189] loop2: AHDI p2 p3 p4 [ 278.698396][ T8189] loop2: partition table partially beyond EOD, truncated [ 278.708893][ T8189] loop2: p2 start 131072 is beyond EOD, truncated [ 278.715357][ T8189] loop2: p3 size 150995200 extends beyond EOD, truncated [ 280.029120][ T8202] fuse: Unknown parameter 'user_i00000000000000000000' [ 281.209829][ T8212] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 286.649350][ T8244] fuse: Unknown parameter 'user_id00000000000000000000' [ 287.357435][ T8236] binder: BINDER_SET_CONTEXT_MGR already set [ 287.365711][ T8236] binder: 8234:8236 ioctl 4018620d 20004a80 returned -16 [ 287.448567][ T46] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 287.717605][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.020602][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.078287][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.623758][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.632901][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.641014][ T46] usb 3-1: Product: syz [ 289.645522][ T46] usb 3-1: Manufacturer: syz [ 289.650634][ T46] usb 3-1: SerialNumber: syz [ 289.669944][ T46] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 289.676771][ T46] cdc_ncm 3-1:1.0: bind() failure [ 291.513479][ T46] usb 3-1: USB disconnect, device number 16 [ 292.458733][ T8299] binder: BINDER_SET_CONTEXT_MGR already set [ 292.464746][ T8299] binder: 8298:8299 ioctl 4018620d 20000100 returned -16 [ 292.477341][ T8299] binder: BINDER_SET_CONTEXT_MGR already set [ 292.483446][ T8299] binder: 8298:8299 ioctl 4018620d 20004a80 returned -16 [ 293.308599][ T5908] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 293.468690][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 293.510250][ T5908] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 293.716592][ T5908] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 293.737204][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 293.839161][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.865654][ T5908] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 293.925317][ T8301] syz.1.642 (8301) used greatest stack depth: 18000 bytes left [ 293.980468][ T8309] evm: overlay not supported [ 294.069249][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 294.083464][ T5908] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 294.093331][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.113197][ T5908] usb 4-1: config 0 descriptor?? [ 295.946480][ T5908] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 295.979792][ T5908] usb 4-1: USB disconnect, device number 20 [ 296.007760][ T5908] usblp0: removed [ 299.322577][ T8348] wg2: entered promiscuous mode [ 299.338673][ T8348] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 299.523238][ T8357] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 304.025887][ T5868] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 304.490833][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 304.565790][ T5868] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 304.574388][ T5868] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 304.583145][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 304.592543][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.602365][ T5868] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 304.612315][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 304.625438][ T5868] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 304.634813][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.827811][ T5868] usb 1-1: config 0 descriptor?? [ 306.245957][ T5868] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 306.313244][ T5868] usb 1-1: USB disconnect, device number 27 [ 306.365506][ T5868] usblp0: removed [ 306.954992][ T8414] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 307.755920][ T8426] netlink: 'syz.3.671': attribute type 1 has an invalid length. [ 307.883430][ T8426] netlink: 224 bytes leftover after parsing attributes in process `syz.3.671'. [ 308.266704][ T8426] mkiss: ax0: crc mode is auto. [ 309.451362][ T8455] binder: 8454:8455 unknown command 0 [ 309.456801][ T8455] binder: 8454:8455 ioctl c0306201 20000080 returned -22 [ 309.494078][ T8455] binder: 8454:8455 ioctl c030621f 20000000 returned -22 [ 310.118392][ T5908] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 310.268504][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 310.275629][ T5908] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 310.284610][ T5908] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 310.293338][ T5908] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 310.302730][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 310.504379][ T5908] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 310.514310][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 310.581333][ T8463] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 311.240020][ T8459] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 311.259944][ T5908] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 311.269148][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.574847][ T5908] usb 1-1: config 0 descriptor?? [ 313.676085][ T5908] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 314.063167][ T5908] usb 1-1: USB disconnect, device number 28 [ 314.387790][ T5908] usblp0: removed [ 314.422759][ T8488] 9pnet_fd: Insufficient options for proto=fd [ 314.428465][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 314.428481][ T29] audit: type=1326 audit(1736749505.384:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7fc00000 [ 314.698377][ T46] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 314.768352][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 314.848450][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 314.856524][ T46] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 314.866355][ T46] usb 3-1: config 0 has no interface number 0 [ 314.874441][ T46] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.911560][ T46] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 314.940461][ T25] usb 5-1: config 3 has an invalid interface number: 11 but max is 0 [ 314.968867][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.984109][ T25] usb 5-1: config 3 has no interface number 0 [ 314.985670][ T29] audit: type=1326 audit(1736749505.944:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55bd985d29 code=0x7fc00000 [ 315.101745][ T25] usb 5-1: config 3 interface 11 has no altsetting 0 [ 315.108620][ T46] usb 3-1: Product: syz [ 315.112807][ T46] usb 3-1: Manufacturer: syz [ 315.117710][ T46] usb 3-1: SerialNumber: syz [ 315.129359][ T46] usb 3-1: config 0 descriptor?? [ 315.159665][ T29] audit: type=1326 audit(1736749506.064:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7fc00000 [ 315.189833][ T29] audit: type=1326 audit(1736749506.064:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7fc00000 [ 315.216624][ T29] audit: type=1326 audit(1736749506.064:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7fc00000 [ 315.238467][ T29] audit: type=1326 audit(1736749506.064:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7fc00000 [ 315.260895][ T29] audit: type=1326 audit(1736749506.064:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7fc00000 [ 315.283201][ T29] audit: type=1326 audit(1736749506.064:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7fc00000 [ 315.306327][ T46] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 315.315932][ T25] usb 5-1: New USB device found, idVendor=2955, idProduct=0001, bcdDevice=f5.2d [ 315.325034][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.330600][ T29] audit: type=1326 audit(1736749506.064:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7fc00000 [ 315.352249][ T25] usb 5-1: Product: syz [ 315.354506][ T29] audit: type=1326 audit(1736749506.064:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bd985d29 code=0x7fc00000 [ 315.390402][ T8487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.407755][ T973] usb 3-1: USB disconnect, device number 17 [ 315.420177][ T25] usb 5-1: Manufacturer: syz [ 315.442654][ T25] usb 5-1: SerialNumber: syz [ 315.775690][ T5990] usb 3-1: Failed to submit usb control message: -71 [ 315.787942][ T5990] usb 3-1: unable to send the bmi data to the device: -71 [ 315.797899][ T5990] usb 3-1: unable to get target info from device [ 316.373483][ T8509] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 316.699098][ T5990] usb 3-1: could not get target info (-71) [ 316.762397][ T5990] usb 3-1: could not probe fw (-71) [ 317.231744][ T25] usb 5-1: USB disconnect, device number 21 [ 317.517643][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.321558][ T5868] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 319.468327][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 319.479897][ T5868] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 319.839149][ T5868] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 320.143967][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 320.161740][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 320.303044][ T5868] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 320.313179][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 320.326285][ T5868] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 320.345658][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.406201][ T5868] usb 1-1: config 0 descriptor?? [ 321.177286][ T5868] usb 1-1: can't set config #0, error -71 [ 321.203902][ T5868] usb 1-1: USB disconnect, device number 29 [ 321.893351][ T8561] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 322.242810][ T973] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 322.669967][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 322.728684][ T973] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 322.746238][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.806843][ T973] usb 5-1: Product: syz [ 322.829196][ T973] usb 5-1: Manufacturer: syz [ 322.854214][ T973] usb 5-1: SerialNumber: syz [ 322.949246][ T973] r8152-cfgselector 5-1: Unknown version 0x0000 [ 322.958237][ T973] r8152-cfgselector 5-1: config 0 descriptor?? [ 323.441263][ T8575] Mount JFS Failure: -22 [ 323.445854][ T8575] jfs_mount failed w/return code = -22 [ 323.997639][ T8580] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 324.104594][ T973] r8152-cfgselector 5-1: Unknown version 0x0000 [ 324.112167][ T973] r8152-cfgselector 5-1: bad CDC descriptors [ 324.217517][ T973] r8152-cfgselector 5-1: USB disconnect, device number 22 [ 324.426487][ T8588] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 324.435605][ T8588] netlink: 224 bytes leftover after parsing attributes in process `syz.0.707'. [ 324.466725][ T8588] mkiss: ax0: crc mode is auto. [ 324.540216][ T973] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 324.698496][ T973] usb 5-1: Using ep0 maxpacket: 32 [ 324.754085][ T973] usb 5-1: too many configurations: 62, using maximum allowed: 8 [ 325.215307][ T973] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 325.310956][ T973] usb 5-1: can't read configurations, error -61 [ 325.590250][ T973] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 325.834453][ T973] usb 5-1: Using ep0 maxpacket: 32 [ 325.842764][ T973] usb 5-1: too many configurations: 62, using maximum allowed: 8 [ 326.018324][ T973] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 326.899035][ T973] usb 5-1: can't read configurations, error -61 [ 326.906327][ T973] usb usb5-port1: attempt power cycle [ 328.138269][ T973] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 328.234414][ T973] usb 5-1: device descriptor read/8, error -71 [ 328.496829][ T8634] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 328.507898][ T8634] netlink: 224 bytes leftover after parsing attributes in process `syz.2.725'. [ 328.541954][ T8634] mkiss: ax0: crc mode is auto. [ 328.811618][ T8622] binder: BINDER_SET_CONTEXT_MGR already set [ 328.823171][ T8622] binder: 8620:8622 ioctl 4018620d 20004a80 returned -16 [ 330.368687][ T8651] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 333.961878][ T8699] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 333.969663][ T8699] netlink: 224 bytes leftover after parsing attributes in process `syz.1.741'. [ 334.011675][ T8699] mkiss: ax0: crc mode is auto. [ 334.330267][ T25] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 334.499711][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 334.507426][ T25] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 334.525310][ T25] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 334.917090][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 334.926497][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 334.936670][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 334.948554][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 334.961883][ T25] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 335.026874][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.251600][ T25] usb 1-1: config 0 descriptor?? [ 336.226240][ T25] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 336.658962][ T5908] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 336.933615][ T5908] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 336.944090][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.966291][ T5908] usb 2-1: Product: syz [ 336.970956][ T5908] usb 2-1: Manufacturer: syz [ 336.975976][ T5908] usb 2-1: SerialNumber: syz [ 337.043840][ T5908] usb 2-1: config 0 descriptor?? [ 337.054571][ T8] usb 1-1: USB disconnect, device number 30 [ 337.102091][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 337.113054][ T8708] netlink: 'syz.4.744': attribute type 3 has an invalid length. [ 337.126696][ T8] usblp0: removed [ 337.497701][ T5908] usb 2-1: Firmware version (0.0) predates our first public release. [ 337.507502][ T5908] usb 2-1: Please update to version 0.2 or newer [ 337.518565][ T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 337.526613][ T5908] usb 2-1: Firmware: build e6_WqAА [ 337.678828][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 337.923265][ T25] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 337.949867][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 338.166285][ T5908] usb 2-1: USB disconnect, device number 33 [ 338.194416][ T25] usb 5-1: can't read configurations, error -22 [ 338.211229][ T46] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 338.246802][ T46] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 338.286143][ T46] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.300032][ T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.309572][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.356322][ T46] usbtmc 3-1:16.0: bulk endpoints not found [ 338.400325][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 338.444312][ T8744] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 338.455265][ T8744] netlink: 224 bytes leftover after parsing attributes in process `syz.3.755'. [ 338.479110][ T8744] mkiss: ax0: crc mode is auto. [ 338.560711][ T25] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 338.576508][ T25] usb 5-1: can't read configurations, error -22 [ 338.603609][ T25] usb usb5-port1: attempt power cycle [ 339.611385][ T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 339.671274][ T25] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 339.686635][ T25] usb 5-1: can't read configurations, error -22 [ 339.848657][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 339.946980][ T25] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 340.013247][ T25] usb 5-1: can't read configurations, error -22 [ 340.049186][ T25] usb usb5-port1: unable to enumerate USB device [ 340.254709][ T8761] fuse: Unknown parameter 'fd0x0000000000000003' [ 341.130896][ T5868] usb 3-1: USB disconnect, device number 18 [ 341.138339][ T5872] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 341.668558][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 342.302695][ T8782] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 342.493880][ T5872] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 342.503852][ T5872] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 342.515928][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 342.598294][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 343.059792][ T8787] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 343.095771][ T8787] netlink: 224 bytes leftover after parsing attributes in process `syz.2.767'. [ 343.125608][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 343.282303][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 343.295604][ T5872] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 343.304888][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.267599][ T5872] usb 1-1: config 0 descriptor?? [ 344.843453][ T5872] usb 1-1: can't set config #0, error -71 [ 344.856616][ T5872] usb 1-1: USB disconnect, device number 31 [ 345.603981][ T8814] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 346.020554][ T8818] xt_hashlimit: Unknown mode mask 500, kernel too old? [ 346.091520][ T8813] fuse: Unknown parameter 'fd0x0000000000000003' [ 347.206195][ T8831] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 348.614029][ T8841] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 349.398510][ T46] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 349.568500][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 349.600220][ T46] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 349.699280][ T46] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 349.794980][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 349.863160][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 349.895199][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 350.045627][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.058942][ T46] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 350.068030][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.041525][ T46] usb 3-1: config 0 descriptor?? [ 351.257778][ T46] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 351.592448][ T5834] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 352.667707][ T46] usb 3-1: USB disconnect, device number 19 [ 352.945444][ T8872] fuse: Bad value for 'rootmode' [ 353.043181][ T46] usblp0: removed [ 353.067373][ T8873] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 354.267463][ T8892] program syz.3.790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.268453][ T46] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 356.203983][ T8899] libceph: resolve 'c' (ret=-3): failed [ 357.106985][ T8891] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 357.321234][ T46] usb 5-1: device descriptor read/all, error -71 [ 358.972776][ T5908] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 359.741631][ T8930] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 360.258382][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 360.265625][ T5908] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 360.285590][ T5908] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 360.353672][ T5908] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 360.440279][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.509559][ T5908] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 360.600955][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 360.638327][ T5871] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 360.651389][ T5908] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 360.660703][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.700959][ T5908] usb 1-1: config 0 descriptor?? [ 360.860074][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.871837][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.883903][ T5871] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 360.893865][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.932786][ T5908] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 360.958742][ T5871] usb 5-1: config 0 descriptor?? [ 361.368965][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 361.388407][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 361.415726][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.442714][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.673123][ T5872] usb 1-1: USB disconnect, device number 32 [ 361.683610][ T5872] usblp0: removed [ 361.719908][ T8951] x_tables: duplicate underflow at hook 2 [ 362.110482][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 362.311421][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 362.849380][ T8] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 362.884896][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.908297][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.092929][ T8954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.110554][ T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.140000][ T5871] usbhid 5-1:0.0: can't add hid device: -71 [ 363.146259][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 363.359541][ T8954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.805'. [ 364.020406][ T5871] usb 5-1: USB disconnect, device number 33 [ 364.161975][ T5908] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 364.318377][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 364.402188][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 364.441133][ T5908] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 364.449610][ T5908] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.459593][ T5908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 364.469484][ T5908] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.480355][ T5908] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.493727][ T5908] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 364.502992][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.517785][ T5908] usbtmc 1-1:16.0: bulk endpoints not found [ 364.710668][ T5908] usb 3-1: USB disconnect, device number 20 [ 367.449397][ T46] usb 1-1: USB disconnect, device number 33 [ 367.604008][ T9020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.825'. [ 367.613738][ T9020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.825'. [ 367.931442][ T9026] FAULT_INJECTION: forcing a failure. [ 367.931442][ T9026] name failslab, interval 1, probability 0, space 0, times 0 [ 367.963716][ T9026] CPU: 0 UID: 0 PID: 9026 Comm: syz.2.827 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 367.974366][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.984552][ T9026] Call Trace: [ 367.987852][ T9026] [ 367.990806][ T9026] dump_stack_lvl+0x241/0x360 [ 367.995521][ T9026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.000747][ T9026] ? __pfx__printk+0x10/0x10 [ 368.005370][ T9026] ? fs_reclaim_acquire+0x93/0x130 [ 368.010511][ T9026] ? __pfx___might_resched+0x10/0x10 [ 368.015830][ T9026] should_fail_ex+0x3b0/0x4e0 [ 368.020538][ T9026] should_failslab+0xac/0x100 [ 368.025243][ T9026] __kmalloc_noprof+0xdd/0x4c0 [ 368.030023][ T9026] ? kstrtouint_from_user+0x128/0x190 [ 368.035397][ T9026] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 368.041121][ T9026] tomoyo_realpath_from_path+0xcf/0x5e0 [ 368.046693][ T9026] tomoyo_path_number_perm+0x236/0x860 [ 368.052181][ T9026] ? __lock_acquire+0x1397/0x2100 [ 368.057230][ T9026] ? tomoyo_path_number_perm+0x206/0x860 [ 368.062863][ T9026] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 368.068865][ T9026] ? __fget_files+0x2a/0x410 [ 368.073450][ T9026] ? __fget_files+0x2a/0x410 [ 368.078038][ T9026] security_file_ioctl+0xc6/0x2a0 [ 368.083059][ T9026] __se_sys_ioctl+0x46/0x170 [ 368.087645][ T9026] do_syscall_64+0xf3/0x230 [ 368.092147][ T9026] ? clear_bhb_loop+0x35/0x90 [ 368.096819][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.102720][ T9026] RIP: 0033:0x7efd3d385d29 [ 368.107133][ T9026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.126743][ T9026] RSP: 002b:00007efd3e1bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.135162][ T9026] RAX: ffffffffffffffda RBX: 00007efd3d575fa0 RCX: 00007efd3d385d29 [ 368.143134][ T9026] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 368.151099][ T9026] RBP: 00007efd3e1bf090 R08: 0000000000000000 R09: 0000000000000000 [ 368.159067][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.167053][ T9026] R13: 0000000000000000 R14: 00007efd3d575fa0 R15: 00007fff5af631b8 [ 368.175057][ T9026] [ 368.191940][ T9035] fuse: Unknown parameter 'use00000000000000000000' [ 368.263953][ T9026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 368.309082][ T9026] kvm: kvm [9025]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 368.341838][ T9026] kvm: kvm [9025]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 368.355921][ T9039] fuse: Unknown parameter '' [ 369.717516][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.836'. [ 369.898415][ T5908] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 369.921792][ T9067] XFS (nbd4): no-recovery mounts must be read-only. [ 369.926510][ T9066] fuse: Unknown parameter 'user_i00000000000000000000' [ 370.068305][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 370.075023][ T5908] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 370.083587][ T5908] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.107404][ T5908] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.198069][ T5908] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 370.225010][ T5908] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.245339][ T5908] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 370.254700][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.303193][ T5908] usbtmc 4-1:16.0: bulk endpoints not found [ 373.668453][ T8] usb 4-1: USB disconnect, device number 21 [ 373.687451][ T9101] syz_tun: entered allmulticast mode [ 373.725736][ T9100] syz_tun: left allmulticast mode [ 373.730357][ T9105] fuse: Unknown parameter 'user_i00000000000000000000' [ 374.774471][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 375.450811][ T8] IPVS: starting estimator thread 0... [ 375.538353][ T9128] IPVS: using max 23 ests per chain, 55200 per kthread [ 375.669694][ T9132] netlink: 68 bytes leftover after parsing attributes in process `syz.3.855'. [ 377.348430][ T5868] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 377.453827][ T9146] fuse: Unknown parameter 'user_i00000000000000000000' [ 377.509171][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 377.522792][ T5868] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 377.568326][ T5868] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.598334][ T5868] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 377.627355][ T5868] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 377.656140][ T5868] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.788347][ T46] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 377.789085][ T5868] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 377.973505][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.760969][ T5868] usbtmc 5-1:16.0: bulk endpoints not found [ 378.992636][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.008667][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 379.017629][ T46] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 379.057067][ T46] usb 3-1: config 0 has no interface number 0 [ 379.265757][ T46] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 379.275201][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.288611][ T46] usb 3-1: Product: syz [ 379.292904][ T46] usb 3-1: Manufacturer: syz [ 379.412762][ T9151] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.438395][ T46] usb 3-1: SerialNumber: syz [ 379.484132][ T46] usb 3-1: config 0 descriptor?? [ 379.548331][ T9158] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 379.554565][ T9158] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 379.564296][ T46] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 379.713538][ T9151] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.745396][ T9151] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 379.752998][ T9158] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.811481][ T9158] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 379.884865][ T9158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.900234][ T9158] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 379.947299][ T9158] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 379.953568][ T9158] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 380.037249][ T9165] loop2: detected capacity change from 0 to 7 [ 380.045788][ T9165] Dev loop2: unable to read RDB block 7 [ 380.051628][ T9165] loop2: AHDI p2 p3 [ 380.055762][ T9165] loop2: partition table partially beyond EOD, truncated [ 380.063097][ T9165] loop2: p2 start 131072 is beyond EOD, truncated [ 380.088916][ T46] gspca_topro: reg_w err -110 [ 380.093991][ T9165] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 380.104029][ T9165] netlink: 224 bytes leftover after parsing attributes in process `syz.3.869'. [ 380.118885][ T46] gspca_topro: Sensor soi763a [ 380.163953][ T9165] mkiss: ax0: crc mode is auto. [ 380.407227][ T46] usb 3-1: USB disconnect, device number 21 [ 380.650454][ T9176] mmap: syz.1.870 (9176) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 382.447302][ T5908] usb 5-1: USB disconnect, device number 34 [ 388.168835][ T9250] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 388.488476][ T9253] syzkaller0: entered allmulticast mode [ 389.138484][ T5908] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 390.221361][ T9265] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 390.598408][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 390.608720][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.619013][ T5908] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.637287][ T5908] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 390.647568][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.823785][ T5908] usb 3-1: Product: syz [ 390.847934][ T5908] usb 3-1: Manufacturer: syz [ 390.913759][ T5908] usb 3-1: SerialNumber: syz [ 391.136525][ T5908] usb 3-1: config 0 descriptor?? [ 392.688941][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 392.688960][ T29] audit: type=1400 audit(1736749583.644:335): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=9278 comm="syz.0.889" name="/" dev="mqueue" ino=4588 [ 392.792834][ T29] audit: type=1400 audit(1736749583.684:336): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=rw pid=9278 comm="syz.0.889" name="raw-gadget" dev="devtmpfs" ino=820 [ 392.905393][ T5908] usb 3-1: USB disconnect, device number 22 [ 394.478712][ T5872] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 394.552742][ T9304] FAULT_INJECTION: forcing a failure. [ 394.552742][ T9304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.566409][ T9304] CPU: 1 UID: 0 PID: 9304 Comm: syz.4.900 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 394.577032][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.587112][ T9304] Call Trace: [ 394.590413][ T9304] [ 394.593363][ T9304] dump_stack_lvl+0x241/0x360 [ 394.598075][ T9304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.603306][ T9304] ? __pfx__printk+0x10/0x10 [ 394.607922][ T9304] ? __pfx_lock_release+0x10/0x10 [ 394.612948][ T9304] should_fail_ex+0x3b0/0x4e0 [ 394.617620][ T9304] _copy_from_user+0x2f/0xc0 [ 394.622252][ T9304] __sys_bpf+0x1a4/0x810 [ 394.626497][ T9304] ? __pfx___sys_bpf+0x10/0x10 [ 394.631253][ T9304] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 394.637248][ T9304] __x64_sys_bpf+0x7c/0x90 [ 394.641681][ T9304] do_syscall_64+0xf3/0x230 [ 394.646184][ T9304] ? clear_bhb_loop+0x35/0x90 [ 394.650860][ T9304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.656761][ T9304] RIP: 0033:0x7f6995185d29 [ 394.661172][ T9304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.680775][ T9304] RSP: 002b:00007f6995ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.689187][ T9304] RAX: ffffffffffffffda RBX: 00007f6995376080 RCX: 00007f6995185d29 [ 394.697152][ T9304] RDX: 0000000000000094 RSI: 0000000020000740 RDI: 0000000000000005 [ 394.705119][ T9304] RBP: 00007f6995ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 394.713082][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.721050][ T9304] R13: 0000000000000000 R14: 00007f6995376080 R15: 00007ffc216d2778 [ 394.729034][ T9304] [ 394.732150][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.736628][ T9315] ------------[ cut here ]------------ [ 394.745304][ T9315] platform vkms: [drm] vblank wait timed out on crtc 0 [ 394.755970][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.760623][ T9315] WARNING: CPU: 1 PID: 9315 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x97c/0xa00 [ 394.776824][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.776837][ T9315] Modules linked in: [ 394.791824][ T9315] CPU: 1 UID: 0 PID: 9315 Comm: syz.1.901 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 394.802558][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.806481][ T5872] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 394.812695][ T9315] RIP: 0010:drm_wait_one_vblank+0x97c/0xa00 [ 394.812733][ T9315] Code: 80 3c 08 00 74 08 4c 89 ff e8 90 02 9a fc 49 8b 1f 48 c7 c7 00 68 71 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 05 cf f6 fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9 [ 394.812752][ T9315] RSP: 0018:ffffc9001b3bfac0 EFLAGS: 00010246 [ 394.812776][ T9315] RAX: c28a89cdaa470000 RBX: 0000000000000000 RCX: 0000000000080000 [ 394.812790][ T9315] RDX: ffffc9000d7c9000 RSI: 0000000000010975 RDI: 0000000000010976 [ 394.812804][ T9315] RBP: ffffc9001b3bfc00 R08: ffffffff816019a2 R09: fffffbfff1cfa210 [ 394.812820][ T9315] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 1ffff92003677f64 [ 394.812835][ T9315] R13: 0000000000005ae0 R14: ffffffff8c84c5e0 R15: ffff8880254b6010 [ 394.827930][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.847434][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.848148][ T9315] FS: 00007f054ae456c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 394.862014][ T5872] usb 4-1: Product: syz [ 394.862971][ T9315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.894933][ T5872] usb 4-1: Manufacturer: syz [ 394.902859][ T9315] CR2: 000055556d7de808 CR3: 0000000024d12000 CR4: 00000000003526f0 [ 394.902886][ T9315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 394.902902][ T9315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 394.902917][ T9315] Call Trace: [ 394.902925][ T9315] [ 394.902936][ T9315] ? __warn+0x165/0x4d0 [ 394.902961][ T9315] ? drm_wait_one_vblank+0x97c/0xa00 [ 394.902992][ T9315] ? report_bug+0x2b3/0x500 [ 394.932008][ T5872] usb 4-1: SerialNumber: syz [ 394.933439][ T9315] ? drm_wait_one_vblank+0x97c/0xa00 [ 394.933481][ T9315] ? handle_bug+0x60/0x90 [ 394.963715][ T5872] cdc_ncm 4-1:1.0: skipping garbage [ 394.965205][ T9315] ? exc_invalid_op+0x1a/0x50 [ 394.965235][ T9315] ? asm_exc_invalid_op+0x1a/0x20 [ 394.978230][ T5872] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 394.979297][ T9315] ? __warn_printk+0x292/0x360 [ 394.992220][ T5872] cdc_ncm 4-1:1.0: bind() failure [ 394.993533][ T9315] ? drm_wait_one_vblank+0x97c/0xa00 [ 394.993579][ T9315] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 395.005287][ T5872] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 395.008579][ T9315] ? __pfx_autoremove_wake_function+0x10/0x10 [ 395.008622][ T9315] ? drm_vblank_get+0x173/0x270 [ 395.008650][ T9315] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 395.017595][ T5872] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 395.020868][ T9315] drm_fb_helper_ioctl+0x114/0x140 [ 395.037174][ T5872] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 395.043227][ T9315] do_fb_ioctl+0x40a/0x7b0 [ 395.043268][ T9315] ? __pfx_do_fb_ioctl+0x10/0x10 [ 395.043309][ T9315] ? smk_tskacc+0x300/0x370 [ 395.043343][ T9315] ? smack_file_ioctl+0x29e/0x3a0 [ 395.043367][ T9315] ? __pfx_smack_file_ioctl+0x10/0x10 [ 395.043402][ T9315] ? __fget_files+0x2a/0x410 [ 395.043427][ T9315] ? __fget_files+0x2a/0x410 [ 395.043452][ T9315] ? __pfx_fb_ioctl+0x10/0x10 [ 395.043478][ T9315] __se_sys_ioctl+0xf5/0x170 [ 395.062928][ T5872] cdc_ncm 4-1:1.1: bind() failure [ 395.069501][ T9315] do_syscall_64+0xf3/0x230 [ 395.069537][ T9315] ? clear_bhb_loop+0x35/0x90 [ 395.069561][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.069589][ T9315] RIP: 0033:0x7f0549f85d29 [ 395.069609][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.069634][ T9315] RSP: 002b:00007f054ae45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.069660][ T9315] RAX: ffffffffffffffda RBX: 00007f054a176080 RCX: 00007f0549f85d29 [ 395.069676][ T9315] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 395.069691][ T9315] RBP: 00007f054a001b08 R08: 0000000000000000 R09: 0000000000000000 [ 395.069706][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.069720][ T9315] R13: 0000000000000000 R14: 00007f054a176080 R15: 00007fffac3bca28 [ 395.069755][ T9315] [ 395.069778][ T9315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 395.069791][ T9315] CPU: 1 UID: 0 PID: 9315 Comm: syz.1.901 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 395.069811][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.069823][ T9315] Call Trace: [ 395.069831][ T9315] [ 395.069839][ T9315] dump_stack_lvl+0x241/0x360 [ 395.069867][ T9315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.069890][ T9315] ? __pfx__printk+0x10/0x10 [ 395.069910][ T9315] ? _printk+0xd5/0x120 [ 395.069934][ T9315] ? __init_begin+0x41000/0x41000 [ 395.069959][ T9315] ? vscnprintf+0x5d/0x90 [ 395.069982][ T9315] panic+0x349/0x880 [ 395.070006][ T9315] ? __warn+0x174/0x4d0 [ 395.070028][ T9315] ? __pfx_panic+0x10/0x10 [ 395.070069][ T9315] __warn+0x344/0x4d0 [ 395.070088][ T9315] ? drm_wait_one_vblank+0x97c/0xa00 [ 395.070117][ T9315] report_bug+0x2b3/0x500 [ 395.070140][ T9315] ? drm_wait_one_vblank+0x97c/0xa00 [ 395.070169][ T9315] handle_bug+0x60/0x90 [ 395.070187][ T9315] exc_invalid_op+0x1a/0x50 [ 395.070205][ T9315] asm_exc_invalid_op+0x1a/0x20 [ 395.070231][ T9315] RIP: 0010:drm_wait_one_vblank+0x97c/0xa00 [ 395.070256][ T9315] Code: 80 3c 08 00 74 08 4c 89 ff e8 90 02 9a fc 49 8b 1f 48 c7 c7 00 68 71 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 05 cf f6 fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9 [ 395.070272][ T9315] RSP: 0018:ffffc9001b3bfac0 EFLAGS: 00010246 [ 395.070288][ T9315] RAX: c28a89cdaa470000 RBX: 0000000000000000 RCX: 0000000000080000 [ 395.070303][ T9315] RDX: ffffc9000d7c9000 RSI: 0000000000010975 RDI: 0000000000010976 [ 395.070316][ T9315] RBP: ffffc9001b3bfc00 R08: ffffffff816019a2 R09: fffffbfff1cfa210 [ 395.070331][ T9315] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 1ffff92003677f64 [ 395.070346][ T9315] R13: 0000000000005ae0 R14: ffffffff8c84c5e0 R15: ffff8880254b6010 [ 395.070367][ T9315] ? __warn_printk+0x292/0x360 [ 395.070405][ T9315] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 395.070430][ T9315] ? __pfx_autoremove_wake_function+0x10/0x10 [ 395.070458][ T9315] ? drm_vblank_get+0x173/0x270 [ 395.070483][ T9315] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 395.070509][ T9315] drm_fb_helper_ioctl+0x114/0x140 [ 395.070535][ T9315] do_fb_ioctl+0x40a/0x7b0 [ 395.070562][ T9315] ? __pfx_do_fb_ioctl+0x10/0x10 [ 395.070598][ T9315] ? smk_tskacc+0x300/0x370 [ 395.070635][ T9315] ? smack_file_ioctl+0x29e/0x3a0 [ 395.070656][ T9315] ? __pfx_smack_file_ioctl+0x10/0x10 [ 395.070686][ T9315] ? __fget_files+0x2a/0x410 [ 395.070710][ T9315] ? __fget_files+0x2a/0x410 [ 395.070733][ T9315] ? __pfx_fb_ioctl+0x10/0x10 [ 395.070758][ T9315] __se_sys_ioctl+0xf5/0x170 [ 395.070782][ T9315] do_syscall_64+0xf3/0x230 [ 395.070807][ T9315] ? clear_bhb_loop+0x35/0x90 [ 395.070828][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.070854][ T9315] RIP: 0033:0x7f0549f85d29 [ 395.070870][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.070884][ T9315] RSP: 002b:00007f054ae45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.070904][ T9315] RAX: ffffffffffffffda RBX: 00007f054a176080 RCX: 00007f0549f85d29 [ 395.070919][ T9315] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 395.070932][ T9315] RBP: 00007f054a001b08 R08: 0000000000000000 R09: 0000000000000000 [ 395.070945][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.070957][ T9315] R13: 0000000000000000 R14: 00007f054a176080 R15: 00007fffac3bca28 [ 395.070986][ T9315] [ 395.075119][ T9315] Kernel Offset: disabled