last executing test programs: 19m47.839368167s ago: executing program 32 (id=14): r0 = socket$netlink(0x10, 0x3, 0x1) r1 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x1) copy_file_range(r1, 0x0, r1, &(0x7f0000000040)=0xfffffffffffffffc, 0xa33, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x3}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x114}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000050}, 0x44804) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0x10, 0x3, 0x0) r3 = syz_ublk_setup_io_uring(0x57c, &(0x7f0000000500)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) r7 = eventfd2(0x1, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000080)=r7, 0x1) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x200009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x43c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1a0}}}, 0x0) 18m12.890978578s ago: executing program 33 (id=156): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 16m50.772608211s ago: executing program 34 (id=251): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd07, &(0x7f0000000580)="040000000000000000000000380100000000000000000000000000000000000000d5c3760e747a") recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000040)={0x1}) ptrace$setregs(0xd, 0x0, 0x6, &(0x7f0000000180)="a16b07f6bd5b0f5b42631ef1181c1b2275e3f557b0e789bb5207") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r5}, 0x38) 14m31.343925401s ago: executing program 35 (id=419): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 13m16.341918884s ago: executing program 2 (id=508): pipe2(&(0x7f0000001cc0), 0x800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 13m15.145081632s ago: executing program 2 (id=509): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_hsr\x00', {0x4}, 0x3}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0x21) 13m14.756065013s ago: executing program 2 (id=510): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000085, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="1a", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 13m10.226965992s ago: executing program 2 (id=514): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x0, 0x2c2, &(0x7f00000006c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000140)={0x8, 0x1}) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 13m9.823123148s ago: executing program 2 (id=515): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0xa) write(0xffffffffffffffff, &(0x7f0000000d00)='n', 0x1) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 13m8.952333543s ago: executing program 2 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x41, 0x107, 0x70bd28, 0xfffffff6, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\n\x00'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}, @generic='v']}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendto$inet(r2, 0x0, 0x0, 0x2000076d, &(0x7f00000001c0)={0x2, 0xfeff, @broadcast}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r8) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0x78}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000001b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001980)={0x100, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffe4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4048015}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) tee(r4, r1, 0x7, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x448c4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2101, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r10, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) 13m7.850878984s ago: executing program 36 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x41, 0x107, 0x70bd28, 0xfffffff6, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\n\x00'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}, @generic='v']}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendto$inet(r2, 0x0, 0x0, 0x2000076d, &(0x7f00000001c0)={0x2, 0xfeff, @broadcast}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r8) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0x78}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000001b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001980)={0x100, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffe4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4048015}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) tee(r4, r1, 0x7, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x448c4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2101, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r10, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) 11m53.812710328s ago: executing program 6 (id=589): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19c}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x25, 0x0, @void}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000440)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001580)=@newsa={0x100, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_SET_MARK={0x8}]}, 0x100}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe2b616c077308390}, 0xc, &(0x7f0000019440)={&(0x7f0000000380)={0x4c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9e1c}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x4c}}, 0x44) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x3, 0x4, 0x100f24}) 11m49.787093051s ago: executing program 6 (id=593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000001050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080008400000"], 0x64}}, 0x0) 11m48.772544161s ago: executing program 6 (id=595): r0 = gettid() ioperm(0x2, 0x5, 0xbc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x13002) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x0) 11m47.620199486s ago: executing program 6 (id=597): syz_open_dev$tty1(0xc, 0x4, 0x2) 11m47.324619253s ago: executing program 6 (id=598): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x2000, 0x190) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000480)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r0, 0x1, {0x0, 0x0, 0x0, 0x5a, 0x80, 0x0, 0x0, 0x119, 0x0, "faf90002000000bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f35000000000000000000005100", "42d8cc26f7061a74df2cfc1fc89f399e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e0800", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffcec, 0x100]}}) ioctl$LOOP_CLR_FD(r0, 0x4c01) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x25, &(0x7f0000000180)=0x1000002, 0x4) sendfile(r0, r0, 0x0, 0x2000000000409) socket$can_raw(0x1d, 0x3, 0x1) pipe2(&(0x7f0000000040), 0x0) setfsuid(0x0) 11m45.665679385s ago: executing program 6 (id=600): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000040)={0x1}) 11m29.463259462s ago: executing program 37 (id=600): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000040)={0x1}) 6m36.041633728s ago: executing program 8 (id=1071): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) lseek(0xffffffffffffffff, 0x2, 0x1) mknodat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) fremovexattr(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x200000000000011, 0x2, 0xd) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 6m32.823520197s ago: executing program 8 (id=1077): syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000050a245d5cde008647e86f828000000000002907800000000ffffffff"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 6m29.14050494s ago: executing program 8 (id=1083): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000001c0)={0x0, 0x0, 0xd}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6m27.828753153s ago: executing program 8 (id=1085): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto(r0, &(0x7f0000000380)="50fbdf12a30d7a48b2c51cb3bf52a6b2cdb77ef9af01603a3e68adff5949f1a05ad2fbb22bae1b24430193d8533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1ebeeafb3b9c984e706165f40ce186881f478339b8932380347120b327f3ea27c07e28e8b0c063013d797231dcd24fbb4eab58234f90e5301df6139d990980000088aabbdce8733c7738e96970380fbdd930", 0xa1, 0x4008044, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 6m24.856238153s ago: executing program 8 (id=1087): r0 = socket$pptp(0x18, 0x1, 0x2) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x2) 6m24.656096093s ago: executing program 5 (id=1088): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) 6m24.436600952s ago: executing program 5 (id=1090): setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) 6m24.351572731s ago: executing program 8 (id=1091): add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x189, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = msgget$private(0x0, 0x8) msgctl$IPC_RMID(r3, 0x0) 6m22.990345075s ago: executing program 5 (id=1093): syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000050a245d5cde008647e86f828000000000002907800000000ffffffff"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 6m19.84068083s ago: executing program 5 (id=1095): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00') r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x3) pread64(r0, &(0x7f0000000780)=""/185, 0xb9, 0x3c) r2 = getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaffffffffffffff7fadf700142c0020010000000000000000000000000001ff0200000000000000000000000000017d8700907800"/74], 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="4eaa000000000000711051000000000095000000000000001ac9e4cb316ad9e07b9b5986cb5c1d391d58a921f394d3e3673ccc6fa122ea99d4690ca158d252c617714649f2984bc188f9716a1f9216b0324c823d934d39eba49ec80dc9dd4f8d785bc09446e77bfac903581c"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r6, &(0x7f0000000cc0)=[{&(0x7f00000003c0)="1bbc54a66edbce655800000000", 0xd}, {&(0x7f0000000080)="01", 0x1}], 0x2, 0x3, 0x80000000, 0x10) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000080)=0x766) 6m18.547570667s ago: executing program 5 (id=1096): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x0, 0x37e9, 0x2f92) 6m16.250890249s ago: executing program 5 (id=1097): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 6m7.130559654s ago: executing program 38 (id=1091): add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x189, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = msgget$private(0x0, 0x8) msgctl$IPC_RMID(r3, 0x0) 6m0.575547717s ago: executing program 39 (id=1097): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 29.165688677s ago: executing program 3 (id=2130): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)={0x0, 0x7, 0x1, 'h'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0x7, 0x19, "61e8d1ab6166c3bcc0481db7b0b45c460baed6b5bffd16802a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x73}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "d4a620d7df1cc53e2fadc070a78d8f771312770ab53a79adae68591fff68bfe16ce5b41f2d21a22f4e83c82fa7ea5a"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 27.061745846s ago: executing program 3 (id=2137): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x1042, &(0x7f0000001300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60010100100c1100fe880000000000000000000000000001fe8000"/52], 0x0) 26.871470684s ago: executing program 3 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf", @ANYRES32=r2], 0x30}}, 0x20000004) 25.2910653s ago: executing program 3 (id=2145): syz_usb_connect(0x2, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x1, 0xbb, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x1, 0x1, 0x7, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x80, [@midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x6, 0x7, [{0x9, 0x5}, {0x68, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0xfc, 0x5a}, {0x0, 0x5}, {0x40, 0x8}], 0x81}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x40}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x87, 0x9}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x2, 0x2}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x5, 0x4, [{0x8, 0x8}, {0x3, 0xc}, {0x80, 0x62}, {0x5, 0xe}], 0x2}], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0xeb, 0x76, 0x9, {0x10, 0x25, 0x1, 0xc, "232cfa3788abac6c5097b456"}}}, {{0x9, 0x5, 0x0, 0x2, 0x8d3ccdc20e09f6f0, 0x0, 0x1, 0x5, {0x11, 0x25, 0x1, 0xd, "e27d73e0c7309a40caca2f18d0"}}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x3, 0xfd, 0x9, {0x7, 0x25, 0x1, 0x3, "80c28c"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x7f, 0x7, 0xd7, 0x7}, 0x71, &(0x7f0000000280)={0x5, 0xf, 0x71, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b3febdd15875990dd218b8785ec54236"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x1ff, 0xf, 0x69a, [0x3f00, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x1, 0x3, 0x2f20}, @generic={0x2c, 0x10, 0xb, "b6fe1c0b05dc4a241f4ba34756be01db106b1f9939d360ec8d21089eb55c125d959a32067e8879c568"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x7, 0x0, 0xfd, 0xe2df, 0x95}]}, 0x6, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x414}}, {0x5e, &(0x7f00000003c0)=@string={0x5e, 0x3, "6577536fa194a56780eecd2fa2de94c0df3ecf43f1bd61acfaa7f1df621b966ec942038f9af088dbaffbcda79c2c23c8f4b37c7a3d740ba73fc72ac5ba8f428ad38e5097fc9cb372800b9fa9d1eb2ad0d2f1772ecd24f05d4f1d2910"}}, {0xe7, &(0x7f0000000540)=@string={0xe7, 0x3, "58c486407e9abd80a43eed916a4c7767926e3ba97e47fd6efae7fcd0c731b3e4f7a36a307a6fdc9704fe74acd95978448f97b200c32ee0041e5150b091aa5a97f46458727e61e8739726fd67bab0c5c6fc769bf42b101fb56bf8064c7150511b905867857ed0ef9bec41e5b6cc56dff2c45285b7e426c8d0a201f48ca30f4a4a3e43dabe0c747bc6ad21961876fa8ff92526521e469c3d79627231a5c23918e0cfb815b2ba1bf46302c97b8f2c42bc8f16a67c062ddf15b89fdf20da6e217aa3e5609de213b8a214b42b3c6109931d5366a2168afd894afa2375fab2bf1d4fe264d4705450"}}, {0x22, &(0x7f00000006c0)=@string={0x22, 0x3, "579e1186c8c5cd33e3324c78d96a6799643bd92e414c445222c920a6c7761151"}}, {0xa2, &(0x7f0000000700)=@string={0xa2, 0x3, "c335136752cf24c7717f611045070459825def52773b4dd1d20a98937a154d307087cf2e2e87113b7c1ebfe3bda1d11715c724dc1618e955de2b1eb9e2cee3bf88e4385e6ba02f899e801eb0fdef13d1ff39b2996be82f73068c961e579a0833bd0112384ec7e4aadb05603c4717104a6d44da9b88cd20ddc6ecad07d1d7c72e96ed859a99bfe785e6e6475b69786287b002c3dbae30a432d8ab69f1b91e88a2"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x403}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0xf014, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x2000040) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4044004) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000640)=@sack_info={0x0, 0x2, 0x1ff}, 0xc) r5 = socket$kcm(0x2d, 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000380)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000b80), 0x1, 0x2) poll(&(0x7f0000000040)=[{r7, 0x9081}], 0x1, 0xffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500050000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000001440)=@fd={0x2, 0xb, 0x4, 0x800, 0x7, {0x77359400}, {0xc, 0x8, 0x4, 0x80, 0x7, 0x2, '8NJJ'}, 0x9193, 0x4, {}, 0x8}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000240)={0xffffffffffffffff, r6}) 22.67873001s ago: executing program 3 (id=2153): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x1042, &(0x7f0000001300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60010100100c1100fe880000000000000000000000000001fe8000"/52], 0x0) 22.397174312s ago: executing program 3 (id=2154): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0xac, 0x0, 0x1, 0x70bd2c, 0x25dfdbf9, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xa0079f}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0xfffffffd}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff9}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x2370}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) request_key(&(0x7f0000001080)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0) 11.825313203s ago: executing program 1 (id=2183): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e3010905810389"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000800)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001640)={0x14, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x2, "00c15100"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.149477064s ago: executing program 9 (id=2184): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x2732, 0x2040) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000140)={0x20, 0x15, 0x2, 'o5'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.011168195s ago: executing program 4 (id=2186): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/178) 9.609564328s ago: executing program 4 (id=2187): syz_usb_connect(0x0, 0xb6, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x15555555555558d4}) syz_usb_connect$cdc_ncm(0x0, 0xad, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x2, 0x1, 0x1, 0x40, 0xff, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "7d560eb9ec6d"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x3, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x3, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x599d, 0xe, 0xac39}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm={0x15, 0x24, 0x12, 0xb80}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xfd, 0x2, 0xfa}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xc, 0xe, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x64, 0x1c, 0x6b}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x81, 0x3, 0x0, 0x40, 0xea}, 0x40, &(0x7f0000000180)={0x5, 0xf, 0x40, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x3, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x5, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "b76f0437f0cf91171853427435d42f1e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x5, 0x2, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa, 0x2, 0x3, 0x6, 0xe}, @ptm_cap={0x3}]}, 0x2, [{0x4a, &(0x7f00000001c0)=@string={0x4a, 0x3, "cd2ec6db7e96c9906129907f2080602ed68fc00c0b61bf9b06c3ac24cfe9ba9aade1cad5280b336e3dde3be758977d8c144c596b99a56e113086e272d30b68be0a1bb6beb84940a5"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41b}}]}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009210000000122460009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240b0000030000090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0000460000004300a7ea3163fdfa964e2c8d95"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.386474494s ago: executing program 1 (id=2188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xffffffff}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 9.088665989s ago: executing program 9 (id=2190): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="702300001d"], 0x2370}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') sendmsg$inet6(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000003c0)=@secondary) 7.223173126s ago: executing program 9 (id=2193): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0xf93f000, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.992179153s ago: executing program 0 (id=2194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf2551000000", @ANYRES32=r2], 0x30}}, 0x20000004) 6.783442331s ago: executing program 7 (id=2195): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff000705810340"], 0x0) syz_usb_connect$midi(0x3, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="120100030000005930144b474000010203010902bf00010101c005090400000501030001092403000601090604062402030147062402017f040624020104080624020104cd072401010004000000000000000003050602013cc074098e0106062402000e6606240200c40606240200050709050a0108000608061025010cf8f2c1bd7d2c6e38effa5c5209050c0400040106f707250103528edd09050300000481028a07250103e9a4d609050808000276050707250103d374e6090508034000800f060e25010a622d367c64a6217c4a01"], &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x0, 0x0, 0x8, 0xff, 0xd}, 0x51, &(0x7f0000000180)={0x5, 0xf, 0x51, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0xa, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "97f51c4eb72aadc457cfb79a25013bfe"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x6, 0x2}, @wireless={0xb, 0x10, 0x1, 0x0, 0x8, 0x0, 0x2, 0x0, 0x9e}, @ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x7e11283, 0xf00f, 0xfff, [0xff00c0, 0x3f, 0x0, 0xff3fcf]}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x407}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0x9e, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x4, 0x70}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x2, 0x1}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x140, 0x2, 0x80, 0x5, 0x20, 0x4}, 0x5, 0x0, 0x2, [{0xf9, &(0x7f0000000340)=@string={0xf9, 0x3, "7f3ab6e014c61c4a8a559b88e8242f1dfc354110661f87a789448a9189a2359a106d6938c23228f8a3e01fdfdbb63a7b08a9aac378e152558af57d026bd5c7987ed69935a7b48119220af6fb84ee4bfd684d8097ca9559bed361d94ac4c85d9be8b5bc0b858ea6a29c231bab7ee95980d984e96491cdf9dcd5327c02d5cd2a57eedb70174e93879434e8bfe9432a04cb52f656078c7d89344cfda85dd21667e337d46d8b113d5d03e1456d0c67b68be33eac1fe002eda07a76a277aea8c9b572aa239d24ff8e7966eef7c1584697152e0ad327130a9c609d05d118b102ba4fff41b1d9cf68126d29fc6151a5cf54a9746f8c60205e48bf"}}, {0x4f, &(0x7f0000000440)=@string={0x4f, 0x3, "9090b4a15d1fb0b200e7209e05c88c25755cf4990a4864b4ad73e4e0f3bdf326df801a4b6cb35feed4bdef3e41af46c68f5b75357cea099b59740a78a713434c955855c7d2237d7bf74a890f2a"}}]}) 6.78094659s ago: executing program 1 (id=2196): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000004010902120001000000000904"], 0x0) syz_usb_connect$uac3(0x0, 0x85, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x3e, 0x682344) ioctl$EVIOCGABS0(r1, 0x80184540, 0x0) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x4, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x2b}, [@extension_unit={0xc, 0x24, 0x8, 0x6, 0x7, 0x3, "57974be984"}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x6, "934a"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x5, 0x1, [0x9], 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xfd, 0x9b, 0xd, {0x7, 0x25, 0x1, 0x0, 0xa0, 0x17}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x85, 0x4, {0x7, 0x25, 0x1, 0xc, 0x3, 0x8}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x45, 0x6, 0xfd, 0xff, 0xf4}, 0x21, &(0x7f00000004c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x93, 0xf0f, 0x67, [0xff006f, 0x30, 0x0, 0xff000f]}]}, 0x5, [{0x2, &(0x7f0000000500)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x816}}, {0x2e, &(0x7f0000000700)=@string={0x2e, 0x3, "7bac6cc830ded5f7bae495e67ef63b41fbc5f07ac54eee44879c4195bbed8ac2cd1dae402995c580e57bc619"}}, {0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r2, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d0"], 0x0) syz_usb_disconnect(r0) 6.649014387s ago: executing program 4 (id=2197): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x0, 0x9, 0x0, 0x10, 0x81}, 0x5, &(0x7f00000005c0)={0x5, 0xf, 0x5}, 0x2, [{0x87, &(0x7f0000000640)=@string={0x87, 0x3, "ceed6bd697651751ecd7e18e16de492fde0c3fab294ffd0efc37b61c52ada8b996f6f77b0c1d7bf4e5773ac121e815de32e974308ae5d9a592e477e070e28d2e8c9597c452fdc13f51e11474c093891c969281d216dcfd67a55bfb8bdc9f0588dd0f3d61c1a927406658eec4849a4043dc274b9660fc8d94a41e1f1b2da9119c1ac269f0a3"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x100c}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a20000000200d1d"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect(0x2, 0x51, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x21, 0xe1, 0xda, 0x20, 0x1404, 0xcddc, 0xbd2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x17, 0x5, 0xf0, 0x2, "", [{{0x9, 0x4, 0x46, 0x4, 0x3, 0xf2, 0x4, 0x23, 0x7, [@hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xa1}}], [{{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x10, 0xf0, 0x3}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x3, 0x4, 0x6, [@generic={0x2, 0x22}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x75, 0xc7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x52, 0x80}]}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x110, 0xd, 0x7, 0x20, 0x40, 0x5}, 0x5, &(0x7f00000009c0)={0x5, 0xf, 0x5}, 0x1, [{0x2, &(0x7f0000000a00)=@string={0x2}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x38, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000180), 0x3, 0x200000) write$hidraw(r2, &(0x7f00000001c0)="83cc9335f8893d92b36d74ac18d05c720ef8d8b82a95812565c4882d41cc4a7576e8cc32612c796067329cfd22eea9edfb9caf39947311fe6dab3beac111782d5447d5121f4352a1cc7c4bdb4f0927fb57e0646f1d3f2c938c29e859cc5d145b11762c3ffa26", 0x66) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 6.348629917s ago: executing program 0 (id=2198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 5.84960647s ago: executing program 0 (id=2199): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000080)={0x6, "7ed547b2f0cfe53cb4be574d1ed341f6a1bfb8aa4622377b049e453ccb4007795cb49aa6981e8701eee094225d68149129a5444b1ec0442185f46f1b9ccf84c1"}) 5.708779681s ago: executing program 0 (id=2200): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)={0x0, 0x7, 0x1, 'h'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0x7, 0x19, "61e8d1ab6166c3bcc0481db7b0b45c460baed6b5bffd16802a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x73}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "d4a620d7df1cc53e2fadc070a78d8f771312770ab53a79adae68591fff68bfe16ce5b41f2d21a22f4e83c82fa7ea5a"}}) 4.545348628s ago: executing program 1 (id=2201): syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d81"], 0x0) 4.428941287s ago: executing program 4 (id=2202): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x4}, 0xfffffffe}, {{0x0, 0xfffffffffffffddd, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xfffffffffffffee9, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002840)=""/4090, 0xffa}, {&(0x7f0000004740)=""/4092, 0x1000}, {&(0x7f0000000040)=""/90, 0x5a}, {&(0x7f0000002640)=""/203, 0xcb}, {&(0x7f0000002740)=""/84, 0x54}], 0x5}, 0x900000}], 0x7, 0x2, 0x0) 3.367458314s ago: executing program 7 (id=2203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000004008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.345819067s ago: executing program 4 (id=2204): syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000088ee20104f100400c3c60102030109022b0001000000000904000002b6b33c000905000000000000000705940a0207da09050502"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000961e410b1134200557b0102030109021b0001000000000904000001cf28fc00090501004000"], 0x0) syz_usb_connect$midi(0x5, 0x39, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0x1, 0xa6, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x5, [@midi_out_jack={0x7, 0x24, 0x3, 0x2, 0x0, 0x0, [], 0x40}], [{{0x9, 0x5, 0xa, 0x3, 0x3ff, 0xff, 0xb, 0x3, {0x5, 0x25, 0x1, 0x1, '\x00'}}}]}}}}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0xf, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xe3, 0x9, 0x3c}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x8, 0x40}}]}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x96, &(0x7f0000000440)={0x5, 0xf, 0x96, 0x4, [@generic={0x66, 0x10, 0x1, "d6520f7a40784066526f77e8f264ec36a7dea04ff35693378991f446b1ea5f5f9f5a2a2e9402240858ab5f3fa2ee28f9c1f41a9ad107074a7044c2e68f8ca8e633cd3ff333ea74eee0f7483f31497e066e844b254d9a45758e92655312fd880ede3a43"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x401, 0xf000, 0x2, [0xff3f0f, 0xff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "073583e505c0e171f1efebd2434f9475"}, @ptm_cap={0x3}]}}) syz_usb_connect(0xd, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x5c, &(0x7f0000000040)=@string={0x5c, 0x3, "98ca0b3d7ddb3999d9e7c4305f6b398036703b86545aff00324b91ab5725edb170a7f338d6828382734f05ae3cb7cd78561b4d3255538084d652378c478665e40c6f801fa4ee471f3103d51c4818f872a9afb3e04d5596341ed7"}}, {0xf0, &(0x7f0000000340)=@string={0xf0, 0x3, "999b500d7b27635b7458e63e03129b358755683e22e4ac6feb0fcf27bb8aa3c7bb5af74679277ff8c22bf6a3ad513f716b7677e95607c823b3f0f11796f58231d13c1fd36ed7b1da3995214b269e3ed51c63cdabce4de836b56daa704feca6e5b94b80c1e41862e8eaa112ad603c0fdd5618e4798f5ba68f3410a22ab5afccc8d6016f1efd62a9d1579d70bf1fa4fac2b6b715dfb65db1a95d3cb187ad346d2cf99e96c1fecef87e53b9949fa5c922d4a7853d559793932f8091a317bfc9493a688cd7fab364a187322716cd27151a459ff2aaa8300995e1b828f8f603f3e0a25db3973e27cee20ad58ce3a1c74a"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x63, &(0x7f0000000200)=@string={0x63, 0x3, "b519545df240dcb687e919eed295574bc77c87af83aa8c49f8511a29557824da6671dd2676effb6bbff6ac582f27ac81984cfc2964a25454435b8b88f90bb6bbacd7039b2f40eff0ae5d91e98203505f3f6fa3964d6acf2ce86060141299c23e63"}}]}) 3.235512167s ago: executing program 9 (id=2205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) 2.983871997s ago: executing program 1 (id=2206): syz_usb_connect(0x2, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x1, 0xbb, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x1, 0x1, 0x7, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x80, [@midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x6, 0x7, [{0x9, 0x5}, {0x68, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0xfc, 0x5a}, {0x0, 0x5}, {0x40, 0x8}], 0x81}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x40}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x87, 0x9}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x2, 0x2}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x5, 0x4, [{0x8, 0x8}, {0x3, 0xc}, {0x80, 0x62}, {0x5, 0xe}], 0x2}], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0xeb, 0x76, 0x9, {0x10, 0x25, 0x1, 0xc, "232cfa3788abac6c5097b456"}}}, {{0x9, 0x5, 0x0, 0x2, 0x8d3ccdc20e09f6f0, 0x0, 0x1, 0x5, {0x11, 0x25, 0x1, 0xd, "e27d73e0c7309a40caca2f18d0"}}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x3, 0xfd, 0x9, {0x7, 0x25, 0x1, 0x3, "80c28c"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x7f, 0x7, 0xd7, 0x7}, 0x71, &(0x7f0000000280)={0x5, 0xf, 0x71, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b3febdd15875990dd218b8785ec54236"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x1ff, 0xf, 0x69a, [0x3f00, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x1, 0x3, 0x2f20}, @generic={0x2c, 0x10, 0xb, "b6fe1c0b05dc4a241f4ba34756be01db106b1f9939d360ec8d21089eb55c125d959a32067e8879c568"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x7, 0x0, 0xfd, 0xe2df, 0x95}]}, 0x6, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x414}}, {0x65, &(0x7f00000003c0)=@string={0x65, 0x3, "6577536fa194a56780eecd2fa2de94c0df3ecf43f1bd61acfaa7f1df621b966ec942038f9af088dbaffbcda79c2c23c8f4b37c7a3d740ba73fc72ac5ba8f428ad38e5097fc9cb372800b9fa9d1eb2ad0d2f1772ecd24f05d4f1d291080d321437a55ed"}}, {0xe7, &(0x7f0000000540)=@string={0xe7, 0x3, "58c486407e9abd80a43eed916a4c7767926e3ba97e47fd6efae7fcd0c731b3e4f7a36a307a6fdc9704fe74acd95978448f97b200c32ee0041e5150b091aa5a97f46458727e61e8739726fd67bab0c5c6fc769bf42b101fb56bf8064c7150511b905867857ed0ef9bec41e5b6cc56dff2c45285b7e426c8d0a201f48ca30f4a4a3e43dabe0c747bc6ad21961876fa8ff92526521e469c3d79627231a5c23918e0cfb815b2ba1bf46302c97b8f2c42bc8f16a67c062ddf15b89fdf20da6e217aa3e5609de213b8a214b42b3c6109931d5366a2168afd894afa2375fab2bf1d4fe264d4705450"}}, {0x22, &(0x7f00000006c0)=@string={0x22, 0x3, "579e1186c8c5cd33e3324c78d96a6799643bd92e414c445222c920a6c7761151"}}, {0xa2, &(0x7f0000000700)=@string={0xa2, 0x3, "c335136752cf24c7717f611045070459825def52773b4dd1d20a98937a154d307087cf2e2e87113b7c1ebfe3bda1d11715c724dc1618e955de2b1eb9e2cee3bf88e4385e6ba02f899e801eb0fdef13d1ff39b2996be82f73068c961e579a0833bd0112384ec7e4aadb05603c4717104a6d44da9b88cd20ddc6ecad07d1d7c72e96ed859a99bfe785e6e6475b69786287b002c3dbae30a432d8ab69f1b91e88a2"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x403}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0xf014, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x2000040) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4044004) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000640)=@sack_info={0x0, 0x2, 0x1ff}, 0xc) r5 = socket$kcm(0x2d, 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000380)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000b80), 0x1, 0x2) poll(&(0x7f0000000040)=[{r7, 0x9081}], 0x1, 0xffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500050000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000001440)=@fd={0x2, 0xb, 0x4, 0x800, 0x7, {0x77359400}, {0xc, 0x8, 0x4, 0x80, 0x7, 0x2, '8NJJ'}, 0x9193, 0x4, {}, 0x8}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000240)={0xffffffffffffffff, r6}) 2.557850199s ago: executing program 7 (id=2207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) 2.027990656s ago: executing program 0 (id=2208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xffffffff}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 1.950923671s ago: executing program 9 (id=2209): syz_usb_connect(0x1, 0x2d, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584", @ANYBLOB="8f6e"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803) 1.812007842s ago: executing program 7 (id=2210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.512046699s ago: executing program 0 (id=2211): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) 1.502579441s ago: executing program 7 (id=2212): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) close(0xffffffffffffffff) 652.853696ms ago: executing program 4 (id=2213): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x0, 0x9, 0x0, 0x10, 0x81}, 0x5, &(0x7f00000005c0)={0x5, 0xf, 0x5}, 0x2, [{0x87, &(0x7f0000000640)=@string={0x87, 0x3, "ceed6bd697651751ecd7e18e16de492fde0c3fab294ffd0efc37b61c52ada8b996f6f77b0c1d7bf4e5773ac121e815de32e974308ae5d9a592e477e070e28d2e8c9597c452fdc13f51e11474c093891c969281d216dcfd67a55bfb8bdc9f0588dd0f3d61c1a927406658eec4849a4043dc274b9660fc8d94a41e1f1b2da9119c1ac269f0a3"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x100c}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a20000000200d1d"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect(0x2, 0x51, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x21, 0xe1, 0xda, 0x20, 0x1404, 0xcddc, 0xbd2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x17, 0x5, 0xf0, 0x2, "", [{{0x9, 0x4, 0x46, 0x4, 0x3, 0xf2, 0x4, 0x23, 0x7, [@hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xa1}}], [{{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x10, 0xf0, 0x3}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x3, 0x4, 0x6, [@generic={0x2, 0x22}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x75, 0xc7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x52, 0x80}]}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x110, 0xd, 0x7, 0x20, 0x40, 0x5}, 0x5, &(0x7f00000009c0)={0x5, 0xf, 0x5}, 0x1, [{0x2, &(0x7f0000000a00)=@string={0x2}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x38, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000180), 0x3, 0x200000) write$hidraw(r2, &(0x7f00000001c0)="83cc9335f8893d92b36d74ac18d05c720ef8d8b82a95812565c4882d41cc4a7576e8cc32612c796067329cfd22eea9edfb9caf39947311fe6dab3beac111782d5447d5121f4352a1cc7c4bdb4f0927fb57e0646f1d3f2c938c29e859cc5d145b11762c3ffa26", 0x66) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 590.079055ms ago: executing program 7 (id=2214): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x4a, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="000f01000000da"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 439.575714ms ago: executing program 1 (id=2215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x25, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x5}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) waitid(0x2, r2, &(0x7f00000000c0), 0x8, &(0x7f0000000200)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0xffff) sendfile(r6, r7, 0x0, 0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x7) syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') 0s ago: executing program 9 (id=2216): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x4}, 0xfffffffe}, {{0x0, 0xfffffffffffffddd, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xfffffffffffffee9, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002840)=""/4090, 0xffa}, {&(0x7f0000004740)=""/4092, 0x1000}, {&(0x7f0000000040)=""/90, 0x5a}, {&(0x7f0000002640)=""/203, 0xcb}, {&(0x7f0000002740)=""/84, 0x54}], 0x5}, 0x900000}], 0x7, 0x2, 0x0) kernel console output (not intermixed with test programs): 0/0x10 [ 1057.582961][T13064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.583008][T13064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.583068][T13064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.583124][T13064] vfs_mkdir+0x364/0x850 [ 1057.583179][T13064] filename_mkdirat+0x48b/0x5e0 [ 1057.583251][T13064] ? __pfx_filename_mkdirat+0x10/0x10 [ 1057.583317][T13064] ? strncpy_from_user+0x19d/0x2d0 [ 1057.583367][T13064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.583413][T13064] ? do_getname+0x191/0x390 [ 1057.583462][T13064] __x64_sys_mkdirat+0x89/0xc0 [ 1057.583527][T13064] do_syscall_64+0x123/0x790 [ 1057.583592][T13064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.583633][T13064] RIP: 0033:0x7f0d3c59cfc7 [ 1057.583665][T13064] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.583705][T13064] RSP: 002b:00007f0d3d3e2e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1057.583742][T13064] RAX: ffffffffffffffda RBX: 00007f0d3d3e2ee0 RCX: 00007f0d3c59cfc7 [ 1057.583770][T13064] RDX: 00000000000001ff RSI: 0000200000005b40 RDI: 00000000ffffff9c [ 1057.583796][T13064] RBP: 0000200000005b00 R08: 0000200000005b00 R09: 0000000000000000 [ 1057.583823][T13064] R10: 0000200000005b00 R11: 0000000000000246 R12: 0000200000005b40 [ 1057.583849][T13064] R13: 00007f0d3d3e2ea0 R14: 0000000000000000 R15: 0000000000000000 [ 1057.583900][T13064] [ 1057.674223][T13064] F2FS-fs (loop9): Stopped filesystem due to reason: 1 [ 1057.937094][T12718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.039711][T12718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.122918][ T3376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.123085][ T3376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.164591][T10754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.164746][T10754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.234602][T12759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1059.266488][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1059.269188][T12759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1059.319400][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1059.332867][T12759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1059.360620][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1059.381388][T12759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1059.393968][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1059.477357][T13107] fuse: fd is not a fuse device [ 1059.806473][T13130] loop7: detected capacity change from 0 to 512 [ 1059.817278][T13130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1059.817364][T13130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1059.835556][T13130] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1059.907253][T13132] loop9: detected capacity change from 0 to 512 [ 1059.919877][T12759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.036451][T13132] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.036793][T13130] EXT4-fs (loop7): 1 truncate cleaned up [ 1060.039125][T13132] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.048225][T13130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1060.061189][T13099] loop0: detected capacity change from 0 to 40427 [ 1060.096917][T13099] F2FS-fs (loop0): invalid crc value [ 1060.100423][T12759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.169528][T10754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.169662][T10754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.203445][T10754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.203602][T10754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.547894][T13147] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.1280: iget: bad i_size value: 2533274857506816 [ 1060.568459][T13147] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.1280: iget: bad i_size value: 2533274857506816 [ 1061.239172][T12718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.256689][T13099] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1061.668675][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.678326][ T8523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.348201][T12718] veth0_vlan: entered promiscuous mode [ 1063.396608][T12718] veth1_vlan: entered promiscuous mode [ 1063.629560][T12718] veth0_macvtap: entered promiscuous mode [ 1063.663922][T12718] veth1_macvtap: entered promiscuous mode [ 1063.704313][T12718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.729757][T12718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.781026][ T5921] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.839437][T13194] loop0: detected capacity change from 0 to 4096 [ 1063.931482][ T5921] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.961036][ T3376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.023797][ T5919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.419719][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.419761][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.465109][ T31] audit: type=1800 audit(1788438206.356:51): pid=13194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1292" name="file1" dev="loop0" ino=34 res=0 errno=0 [ 1064.614271][T10754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.614330][T10754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.780419][T12759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.940023][T12759] veth0_vlan: entered promiscuous mode [ 1064.980776][T12759] veth1_vlan: entered promiscuous mode [ 1065.025130][T12759] veth0_macvtap: entered promiscuous mode [ 1065.067933][T12759] veth1_macvtap: entered promiscuous mode [ 1065.094869][T12759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.169054][T12759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.091859][ T5747] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1066.514449][ T5747] usb 8-1: Using ep0 maxpacket: 16 [ 1066.523879][ T5747] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1066.537024][ T5747] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.537087][ T5747] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.537129][ T5747] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1066.537178][ T5747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.581323][ T5747] usb 8-1: config 0 descriptor?? [ 1066.996625][T13212] loop7: detected capacity change from 0 to 256 [ 1067.450462][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.461283][T13212] FAT-fs (loop7): data area starts beyond volume (274 > 64) [ 1067.461318][T13212] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1067.493629][ T5747] usbhid 8-1:0.0: can't add hid device: -71 [ 1067.493778][ T5747] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1067.522371][ T5747] usb 8-1: USB disconnect, device number 3 [ 1067.614670][T13223] loop4: detected capacity change from 0 to 512 [ 1067.624046][T13223] EXT4-fs: Ignoring removed oldalloc option [ 1068.167152][T13223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.234712][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.597714][T10753] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.637177][ T6554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.719870][T13237] overlayfs: failed to clone upperpath [ 1069.496254][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.496310][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.850862][ T3376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.852012][ T3376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.872862][ T31] audit: type=1800 audit(1788438211.766:52): pid=13239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1298" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1069.937996][T13247] loop0: detected capacity change from 0 to 512 [ 1070.014858][T13247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.015013][T13247] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.684906][T12718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.590775][T13278] loop7: detected capacity change from 0 to 64 [ 1074.723651][T11684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.115875][T13286] loop0: detected capacity change from 0 to 1024 [ 1081.609892][T13328] loop4: detected capacity change from 0 to 64 [ 1082.041192][T13340] netlink: 'syz.1.1312': attribute type 10 has an invalid length. [ 1082.068557][T13340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.112928][T13340] bond0: (slave team0): Enslaving as an active interface with an up link [ 1082.393635][T13348] hub 8-0:1.0: USB hub found [ 1082.403422][T13348] hub 8-0:1.0: 1 port detected [ 1083.567119][T13355] loop4: detected capacity change from 0 to 128 [ 1083.597190][T13355] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1083.678631][T13355] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1083.706459][T13363] ip_tables: iptables: counters copy to user failed while replacing table [ 1083.947818][T13365] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1083.962994][T13365] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1083.981598][T13365] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1084.001323][T13365] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1084.014151][T13365] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1084.028568][T13365] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1084.041824][T13365] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1084.051874][T13365] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1084.051937][T13365] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 1087.866463][T13389] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1088.549275][T13390] loop7: detected capacity change from 0 to 512 [ 1089.020477][T13395] loop4: detected capacity change from 0 to 64 [ 1089.754209][T13390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.821642][T13390] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.317592][T13403] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz.7.1343: iget: bad i_size value: 2533274857506816 [ 1090.929661][T13408] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1348'. [ 1091.539451][T13418] netlink: 'syz.0.1351': attribute type 10 has an invalid length. [ 1091.567070][T13418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.598559][T13418] bond0: (slave team0): Enslaving as an active interface with an up link [ 1092.204940][T13422] ip_tables: iptables: counters copy to user failed while replacing table [ 1092.262173][T13421] loop9: detected capacity change from 0 to 4096 [ 1092.484489][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.512720][T13421] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.009854][T13411] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #15: comm syz.9.1349: corrupted inode contents [ 1093.027166][T13411] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1093.038209][T13411] EXT4-fs error (device loop9): ext4_dirty_inode:6731: inode #15: comm syz.9.1349: mark_inode_dirty error [ 1093.060665][T13411] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1093.073670][T13411] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #15: comm syz.9.1349: corrupted inode contents [ 1093.073801][T13411] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1093.092517][T13411] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #15: comm syz.9.1349: mark_inode_dirty error [ 1093.092625][T13411] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1093.093589][T13411] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #15: comm syz.9.1349: corrupted inode contents [ 1093.093691][T13411] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1093.094906][T13411] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #15: comm syz.9.1349: mark_inode_dirty error [ 1093.095002][T13411] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1093.128643][T13411] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #15: comm syz.9.1349: corrupted inode contents [ 1093.196146][T13411] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1093.247753][T13439] loop0: detected capacity change from 0 to 128 [ 1093.268593][T13439] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1093.299873][T13411] EXT4-fs error (device loop9): ext4_truncate:4721: inode #15: comm syz.9.1349: mark_inode_dirty error [ 1093.308132][T13439] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1093.323319][T13411] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1093.327434][T13411] EXT4-fs error (device loop9): ext4_evict_inode:278: comm syz.9.1349: couldn't truncate inode 15 (err -117) [ 1094.075072][ T8523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.612812][T13460] loop4: detected capacity change from 0 to 1768 [ 1098.011077][T13507] loop1: detected capacity change from 0 to 512 [ 1098.127140][T13507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.127302][T13507] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.966920][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.149868][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 1101.163092][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 1102.177308][T13552] loop1: detected capacity change from 0 to 512 [ 1103.353872][T13552] EXT4-fs error (device loop1): ext4_iget_extra_inode:5209: inode #15: comm syz.1.1380: corrupted in-inode xattr: invalid ea_ino [ 1103.353936][T13552] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1103.367556][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1103.367585][ C1] EXT4-fs (loop1): initial error at time 1788438245: ext4_iget_extra_inode:5209: inode 15 [ 1103.367631][ C1] EXT4-fs (loop1): last error at time 1788438245: ext4_iget_extra_inode:5209: inode 15 [ 1103.376376][T13552] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1380: couldn't read orphan inode 15 (err -117) [ 1103.376430][T13552] loop1: lost filesystem error report for type 5 error -117 [ 1103.385508][T13552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1103.747975][T13561] loop7: detected capacity change from 0 to 512 [ 1104.034513][T13561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.042615][T13561] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.131711][T13567] fuse: fd is not a fuse device [ 1104.949504][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.050982][T13569] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz.7.1383: iget: bad i_size value: 2533274857506816 [ 1106.022654][T13580] ucma_write: process 33 (syz.1.1386) changed security contexts after opening file descriptor, this is not allowed. [ 1107.399525][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.926704][T13600] loop1: detected capacity change from 0 to 512 [ 1109.946709][T13600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1109.946797][T13600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1109.949463][T13600] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1110.042528][T13600] EXT4-fs (loop1): 1 truncate cleaned up [ 1110.077503][T13600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.615789][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.549782][T13624] loop9: detected capacity change from 0 to 256 [ 1113.562915][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1401'. [ 1113.580558][T13645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.664511][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.664620][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.938920][T13664] loop7: detected capacity change from 0 to 2048 [ 1116.027227][T13665] loop1: detected capacity change from 0 to 512 [ 1116.045814][T13665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1116.045894][T13665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1116.093151][T13665] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1116.228184][T13665] EXT4-fs (loop1): 1 truncate cleaned up [ 1116.239881][T13665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1116.973916][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.366265][T13684] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1410'. [ 1117.819200][T13691] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1117.838883][T13691] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1117.895026][T13691] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1117.897841][T13691] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1117.911024][T13691] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1117.911175][T13691] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1117.913811][T13691] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1117.913944][T13691] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1117.913977][T13691] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1119.332991][T13720] loop9: detected capacity change from 0 to 256 [ 1120.126480][T13720] FAT-fs (loop9): data area starts beyond volume (274 > 64) [ 1120.126537][T13720] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1120.754639][T13729] loop1: detected capacity change from 0 to 512 [ 1120.758615][T13729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1120.758686][T13729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1120.763317][T13729] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1120.844612][T13729] EXT4-fs (loop1): 1 truncate cleaned up [ 1120.855031][T13729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.039782][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 1121.112051][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 1121.232033][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.541926][T13751] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1122.551301][T13751] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1122.603648][T13751] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1122.610954][T13751] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1122.658825][T13751] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1122.661081][T13751] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1122.741599][T13751] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1122.741738][T13751] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1122.741772][T13751] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1123.448986][T13724] loop9: detected capacity change from 0 to 32768 [ 1124.360185][T13772] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1124.371301][T13772] batman_adv: batadv0: Adding interface: gretap1 [ 1124.371349][T13772] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.371403][T13772] batman_adv: batadv0: Interface activated: gretap1 [ 1125.900188][T13787] loop7: detected capacity change from 0 to 512 [ 1125.909348][T13787] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1125.909401][T13787] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1125.959363][T13787] EXT4-fs (loop7): 1 truncate cleaned up [ 1125.965689][T13787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1126.333462][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.419785][T13825] loop9: detected capacity change from 0 to 256 [ 1127.442505][T13825] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1127.470502][T13825] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 1127.470569][T13825] FAT-fs (loop9): Filesystem has been set read-only [ 1127.881134][ T9234] Bluetooth: hci5: command tx timeout [ 1128.028541][T13820] loop7: detected capacity change from 0 to 4096 [ 1128.751249][T13843] openvswitch: netlink: IPv4 tun info is not correct [ 1128.752186][ T31] audit: type=1800 audit(1788438270.646:53): pid=13820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1448" name="file1" dev="loop7" ino=34 res=0 errno=0 [ 1129.234613][T13850] loop9: detected capacity change from 0 to 512 [ 1129.298507][T13850] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1129.298564][T13850] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1129.329756][T13850] EXT4-fs (loop9): 1 truncate cleaned up [ 1129.358416][T13850] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1129.599430][T13859] ip_tables: iptables: counters copy to user failed while replacing table [ 1129.667418][T13860] netlink: 'syz.0.1458': attribute type 4 has an invalid length. [ 1129.667479][T13860] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1458'. [ 1129.760299][ T8523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.121526][T13870] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1462'. [ 1130.441195][T13876] hsr0 speed is unknown, defaulting to 1000 [ 1130.523904][T13876] hsr0 speed is unknown, defaulting to 1000 [ 1130.527328][T13876] hsr0 speed is unknown, defaulting to 1000 [ 1130.660431][T13876] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1130.731662][T13876] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1130.750862][T13876] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1130.801468][T13877] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1130.821362][T13877] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1130.857809][T13877] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1130.875655][T13877] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1130.893116][T13877] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1130.904784][T13877] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1130.924299][T13877] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1130.934955][T13877] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1130.945303][T13877] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1131.293847][T13876] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1131.398644][T13883] hub 8-0:1.0: USB hub found [ 1131.401971][T13883] hub 8-0:1.0: 1 port detected [ 1131.615430][T13876] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1131.693870][T13887] loop0: detected capacity change from 0 to 512 [ 1131.776845][T13888] syzkaller0: entered promiscuous mode [ 1131.776901][T13888] syzkaller0: entered allmulticast mode [ 1131.824564][T13887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1131.824720][T13887] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.182343][T13876] hsr0 speed is unknown, defaulting to 1000 [ 1133.342533][T13876] hsr0 speed is unknown, defaulting to 1000 [ 1133.364600][T13876] hsr0 speed is unknown, defaulting to 1000 [ 1133.469492][T13876] hsr0 speed is unknown, defaulting to 1000 [ 1133.489312][T13876] hsr0 speed is unknown, defaulting to 1000 [ 1133.524525][T13876] hsr0 speed is unknown, defaulting to 1000 [ 1133.719848][T13911] loop9: detected capacity change from 0 to 512 [ 1133.754679][T13911] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1133.761666][T13911] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1133.826507][T13911] EXT4-fs (loop9): 1 truncate cleaned up [ 1133.856284][T13911] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1134.176532][T11684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.330884][ T8523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.702480][T13928] syz_tun: entered allmulticast mode [ 1135.207365][T13926] syz_tun: left allmulticast mode [ 1137.137824][T13963] loop7: detected capacity change from 0 to 512 [ 1137.195491][T13963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1137.237121][T13963] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.723908][T13933] ip_tables: iptables: counters copy to user failed while replacing table [ 1137.763149][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.769128][T13975] loop0: detected capacity change from 0 to 512 [ 1137.784585][T13975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1137.784662][T13975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1137.799703][T13975] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1137.834910][T13975] EXT4-fs (loop0): 1 truncate cleaned up [ 1137.869104][T13975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1138.168602][T13987] tipc: Enabling of bearer rejected, failed to enable media [ 1138.325059][T11684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.523381][ T9234] Bluetooth: hci4: command 0x0406 tx timeout [ 1143.415862][T14070] loop0: detected capacity change from 0 to 512 [ 1143.417121][T14070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1143.417451][T14070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1143.934442][T14070] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1144.043092][T14070] EXT4-fs (loop0): 1 truncate cleaned up [ 1144.047752][T14070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.240284][T14083] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1511'. [ 1145.419055][T11684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.044863][T14122] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1525'. [ 1146.829651][T14135] loop9: detected capacity change from 0 to 512 [ 1146.846074][T14135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1146.857230][T14135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1146.879353][T14135] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1146.906557][T14135] EXT4-fs (loop9): 1 truncate cleaned up [ 1147.054671][T14135] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.440682][ T8523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.940966][T14117] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1149.757726][T14175] hub 8-0:1.0: USB hub found [ 1149.764091][T14175] hub 8-0:1.0: 1 port detected [ 1152.462492][T14194] loop0: detected capacity change from 0 to 512 [ 1152.481936][T14194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1152.491591][T14194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1152.501890][T14194] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1152.535825][T14194] EXT4-fs (loop0): 1 truncate cleaned up [ 1152.547186][T14194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1152.594718][T14200] futex_wake_op: syz.3.1545 tries to shift op by 144; fix this program [ 1152.894630][T11684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.023943][T14212] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1546'. [ 1154.386823][T14224] loop7: detected capacity change from 0 to 512 [ 1154.454329][T14224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.474231][T14224] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.831455][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.902437][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 1158.173477][T10754] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1158.185949][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 1158.187257][T10754] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1158.187324][T10754] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1158.187385][T10754] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1158.238174][T14262] loop7: detected capacity change from 0 to 512 [ 1158.251265][T14262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1158.251365][T14262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1158.256228][T14262] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1158.340359][T14262] EXT4-fs (loop7): 1 truncate cleaned up [ 1158.343732][T14262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1159.468729][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.543543][T14275] syzkaller0: entered promiscuous mode [ 1159.543587][T14275] syzkaller0: entered allmulticast mode [ 1161.209118][T14298] hub 8-0:1.0: USB hub found [ 1161.214031][T14298] hub 8-0:1.0: 1 port detected [ 1162.548828][T14312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1577'. [ 1162.738683][T14321] tipc: Enabling of bearer rejected, failed to enable media [ 1163.001030][T14325] loop1: detected capacity change from 0 to 512 [ 1163.018351][T14325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1163.026147][T14325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1163.048312][T14325] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1163.094679][T14325] EXT4-fs (loop1): 1 truncate cleaned up [ 1163.126748][T14325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1163.335947][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.487459][T14380] loop9: detected capacity change from 0 to 512 [ 1165.499492][T14380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1165.499584][T14380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1165.504261][T14380] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1165.536468][T14380] EXT4-fs (loop9): 1 truncate cleaned up [ 1165.544361][T14380] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.864970][ T8523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.347317][T14410] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1606'. [ 1168.746205][T14419] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1171.383972][T14453] loop1: detected capacity change from 0 to 512 [ 1171.393836][T14453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1171.408119][T14453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1171.418322][T14453] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1171.471215][T14453] EXT4-fs (loop1): 1 truncate cleaned up [ 1171.486267][T14453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1171.503008][T14456] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1618'. [ 1171.875794][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.231949][T14478] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1172.402110][T14483] netlink: 'syz.3.1626': attribute type 12 has an invalid length. [ 1173.990783][T14501] veth1_to_bond: entered allmulticast mode [ 1174.003024][T14501] veth1_to_bond: entered promiscuous mode [ 1174.264123][T10754] IPVS: starting estimator thread 0... [ 1174.362444][T14508] IPVS: using max 23 ests per chain, 55200 per kthread [ 1174.447991][T14499] veth1_to_bond: left promiscuous mode [ 1174.455202][T14499] veth1_to_bond: left allmulticast mode [ 1174.628484][T14517] loop0: detected capacity change from 0 to 512 [ 1174.639339][T14517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1174.648790][T14517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1174.664310][T14517] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1174.720172][T14517] EXT4-fs (loop0): 1 truncate cleaned up [ 1174.765542][T14517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.809452][T14521] loop9: detected capacity change from 0 to 512 [ 1174.902386][T14521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.902537][T14521] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1175.251892][T11684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.096702][T14542] warning: `syz.1.1643' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1176.607902][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.615589][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.204772][T14547] bond0: (slave team0): Releasing backup interface [ 1177.317735][T14547] bridge_slave_0: left allmulticast mode [ 1177.317798][T14547] bridge_slave_0: left promiscuous mode [ 1177.318139][T14547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.376095][T14547] bridge_slave_1: left allmulticast mode [ 1177.390418][T14547] bridge_slave_1: left promiscuous mode [ 1177.390759][T14547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.470411][T14547] bond0: (slave bond_slave_0): Releasing backup interface [ 1177.483363][ T8523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.543805][T14547] bond0: (slave bond_slave_1): Releasing backup interface [ 1177.620902][T14547] team0: Port device team_slave_0 removed [ 1177.660638][T14547] team0: Port device team_slave_1 removed [ 1177.673402][T14547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.681175][T14547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.693423][T14547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.706348][T14547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.739686][T14547] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1177.934255][T14564] overlayfs: failed to clone upperpath [ 1178.993922][T14579] loop1: detected capacity change from 0 to 2048 [ 1179.680787][T14579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1179.893648][T14579] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1179.893916][T14579] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1179.893969][T14579] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1179.893969][T14579] [ 1179.894004][T14579] EXT4-fs (loop1): Total free blocks count 0 [ 1179.894036][T14579] EXT4-fs (loop1): Free/Dirty block details [ 1179.894067][T14579] EXT4-fs (loop1): free_blocks=2415919504 [ 1179.894102][T14579] EXT4-fs (loop1): dirty_blocks=16 [ 1179.894133][T14579] EXT4-fs (loop1): Block reservation details [ 1179.973148][T14579] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1180.215822][T10754] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1180.233511][T14612] loop7: detected capacity change from 0 to 512 [ 1180.307103][T14612] EXT4-fs: Mount option(s) incompatible with ext3 [ 1181.354821][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 1181.493064][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.493161][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.493253][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.493325][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.558519][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 1182.342583][T14653] netlink: 'syz.9.1674': attribute type 2 has an invalid length. [ 1182.342641][T14653] netlink: 'syz.9.1674': attribute type 2 has an invalid length. [ 1183.020495][T14665] lo: entered allmulticast mode [ 1183.100788][T14673] syz.9.1681 uses obsolete (PF_INET,SOCK_PACKET) [ 1183.145297][T14662] lo: left allmulticast mode [ 1183.278627][T14678] loop0: detected capacity change from 0 to 512 [ 1183.328196][T14678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.329247][T14678] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.330422][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 1183.617970][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 1183.727168][T14692] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.1683: iget: bad i_size value: 2533274857506816 [ 1183.947443][T14697] loop4: detected capacity change from 0 to 2048 [ 1184.125695][T14693] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.1683: iget: bad i_size value: 2533274857506816 [ 1185.713093][T11684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.728323][T14697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.851312][T14697] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1185.851591][T14697] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1185.851636][T14697] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1185.851636][T14697] [ 1185.851663][T14697] EXT4-fs (loop4): Total free blocks count 0 [ 1185.851688][T14697] EXT4-fs (loop4): Free/Dirty block details [ 1185.851711][T14697] EXT4-fs (loop4): free_blocks=2415919504 [ 1185.851737][T14697] EXT4-fs (loop4): dirty_blocks=16 [ 1185.851761][T14697] EXT4-fs (loop4): Block reservation details [ 1185.851784][T14697] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1185.986657][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1186.499432][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'. [ 1186.522282][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'. [ 1187.493994][T14735] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1187.570321][ C1] Unknown status report in ack skb [ 1187.989666][T14752] loop1: detected capacity change from 0 to 512 [ 1188.089227][T14754] hub 8-0:1.0: USB hub found [ 1188.091121][T14754] hub 8-0:1.0: 1 port detected [ 1188.097358][T14752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.097484][T14752] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1188.621291][T11728] Bluetooth: hci0: command 0x0406 tx timeout [ 1189.214912][T14767] loop9: detected capacity change from 0 to 2048 [ 1191.229528][T14767] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1191.274325][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.765344][ T31] audit: type=1800 audit(1788438333.656:54): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1710" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1191.789692][T14767] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1191.790701][T14767] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1191.790758][T14767] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1191.790758][T14767] [ 1191.795335][T14767] EXT4-fs (loop9): Total free blocks count 0 [ 1191.795363][T14767] EXT4-fs (loop9): Free/Dirty block details [ 1191.795388][T14767] EXT4-fs (loop9): free_blocks=2415919504 [ 1191.795415][T14767] EXT4-fs (loop9): dirty_blocks=16 [ 1191.795439][T14767] EXT4-fs (loop9): Block reservation details [ 1191.795462][T14767] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 1192.196867][T13634] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1192.596375][T14794] ip_tables: iptables: counters copy to user failed while replacing table [ 1192.646537][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1716'. [ 1192.669740][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1716'. [ 1192.920354][T14808] hub 8-0:1.0: USB hub found [ 1192.925403][T14808] hub 8-0:1.0: 1 port detected [ 1193.026507][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1193.035702][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1193.035753][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1194.633300][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1194.633362][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1194.656036][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1194.994862][T14841] siw: device registration error -23 [ 1195.458467][T14850] loop0: detected capacity change from 0 to 128 [ 1195.470163][T14850] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1195.579192][T14850] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1196.731354][T14864] syzkaller0: entered promiscuous mode [ 1196.731412][T14864] syzkaller0: entered allmulticast mode [ 1197.274456][T14870] ip_tables: iptables: counters copy to user failed while replacing table [ 1197.887898][ T8552] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1197.915552][T14859] loop9: detected capacity change from 0 to 32768 [ 1198.054994][ T8552] usb 8-1: not running at top speed; connect to a high speed hub [ 1198.055069][ T8552] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1198.057394][ T8552] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1198.057460][ T8552] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1198.057520][ T8552] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1198.057579][ T8552] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1198.057645][ T8552] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1198.057704][ T8552] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1198.086568][ T8552] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.086626][ T8552] usb 8-1: Product: syz [ 1198.086664][ T8552] usb 8-1: Manufacturer: syz [ 1198.086700][ T8552] usb 8-1: SerialNumber: syz [ 1198.111982][T14884] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1198.112181][T14884] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1198.112439][T14884] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1198.112635][T14884] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1198.112823][T14884] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1198.964821][ T8552] usb 8-1: USB2VGA dongle found at address 4 [ 1199.000552][ T8552] usb 8-1: Allocated 8 output buffers [ 1199.000619][ T8552] usb 8-1: Not attached to USB 2.0 hub, deferring init [ 1199.020686][T14884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.021365][T14884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.027385][T14859] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1199.027936][T14859] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop9": -EINTR [ 1199.055399][T14859] XFS (loop9): log mount failed [ 1199.252452][ T5907] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1199.301862][ T5762] usb 8-1: USB disconnect, device number 4 [ 1199.402002][ T5907] usb 2-1: device descriptor read/64, error -71 [ 1199.647585][ T5907] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1200.512602][ T5907] usb 2-1: device descriptor read/64, error -71 [ 1200.624635][ T5907] usb usb2-port1: attempt power cycle [ 1201.276080][ T5907] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1201.364066][ T5907] usb 2-1: device descriptor read/8, error -71 [ 1201.781299][ T5907] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1201.804561][ T5907] usb 2-1: device descriptor read/8, error -71 [ 1201.912299][ T5907] usb usb2-port1: unable to enumerate USB device [ 1202.153420][T14937] loop7: detected capacity change from 0 to 512 [ 1202.244922][T14937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1202.245068][T14937] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1202.265752][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 1202.435228][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 1203.433723][T14964] loop1: detected capacity change from 0 to 512 [ 1204.861998][T14964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.862196][T14964] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1204.885914][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.194944][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.489996][T14978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1758'. [ 1205.632461][ T8552] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1205.761658][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1205.796163][ T8552] usb 10-1: not running at top speed; connect to a high speed hub [ 1205.796231][ T8552] usb 10-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1205.815595][ T8552] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1205.815673][ T8552] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1205.815745][ T8552] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1205.815802][ T8552] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1205.815858][ T8552] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1205.815915][ T8552] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1205.891319][ T8552] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.899608][ T8552] usb 10-1: Product: syz [ 1205.905118][ T8552] usb 10-1: Manufacturer: syz [ 1205.905172][ T8552] usb 10-1: SerialNumber: syz [ 1205.921087][T14976] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1205.928606][T14976] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1205.936817][T14976] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1205.944442][T14976] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1205.944642][T14976] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1205.962920][ T8552] usb 10-1: USB2VGA dongle found at address 17 [ 1205.974104][ T8552] usb 10-1: Allocated 8 output buffers [ 1205.981257][ T8552] usb 10-1: Not attached to USB 2.0 hub, deferring init [ 1206.200135][T14976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.214511][T14976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.230330][T14976] usb 10-1: Device not attached to USB 2.0 hub [ 1206.261875][T14995] hub 8-0:1.0: USB hub found [ 1206.273021][T14995] hub 8-0:1.0: 1 port detected [ 1206.443928][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1765'. [ 1206.456733][ T8552] usb 10-1: USB disconnect, device number 17 [ 1206.475082][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1765'. [ 1206.857765][T15009] loop4: detected capacity change from 0 to 512 [ 1206.954041][T15009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.969769][T15009] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.704417][T15022] loop1: detected capacity change from 0 to 128 [ 1208.705641][T12718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.736399][T15022] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1208.737175][T15022] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1209.888444][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'. [ 1209.923851][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'. [ 1210.161580][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1211.466423][T15067] loop7: detected capacity change from 0 to 512 [ 1211.534244][T15067] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.548937][T15067] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.143532][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.613110][T15104] loop0: detected capacity change from 0 to 512 [ 1213.678048][T15104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1213.678203][T15104] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1216.486615][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1216.519107][T11684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.053893][ T5907] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1219.055094][T15168] loop4: detected capacity change from 0 to 128 [ 1219.060119][T15168] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1219.065425][T15168] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1219.160734][T15170] netlink: 'syz.7.1815': attribute type 10 has an invalid length. [ 1219.160807][T15170] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1815'. [ 1219.239480][T15173] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1817'. [ 1219.250562][ T5907] usb 10-1: not running at top speed; connect to a high speed hub [ 1219.250654][ T5907] usb 10-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1219.270430][ T5907] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1219.282111][ T5907] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1219.293932][ T5907] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1219.293988][ T5907] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1219.294038][ T5907] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1219.294089][ T5907] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1219.340307][ T5907] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.348620][ T5907] usb 10-1: Product: syz [ 1219.353220][ T5907] usb 10-1: Manufacturer: syz [ 1219.358091][ T5907] usb 10-1: SerialNumber: syz [ 1219.368528][T15160] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1219.376038][T15160] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1219.376231][T15160] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1219.376426][T15160] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1219.376603][T15160] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1219.433062][ T5907] usb 10-1: USB2VGA dongle found at address 18 [ 1219.442212][ T5907] usb 10-1: Allocated 8 output buffers [ 1219.450266][ T5907] usb 10-1: Not attached to USB 2.0 hub, deferring init [ 1219.587666][T15179] netlink: 'syz.0.1819': attribute type 10 has an invalid length. [ 1219.597344][T15179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1819'. [ 1219.717368][T15160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.717988][T15160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.738674][T15160] usb 10-1: Device not attached to USB 2.0 hub [ 1219.855068][ T5907] usb 10-1: USB disconnect, device number 18 [ 1220.081136][T15190] netlink: 'syz.0.1822': attribute type 10 has an invalid length. [ 1220.253021][T15190] team0: Device gre0 is of different type [ 1220.338536][T15197] netlink: 'syz.1.1825': attribute type 10 has an invalid length. [ 1220.338617][T15197] veth1_virt_wifi: entered promiscuous mode [ 1220.479649][ T5275] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1222.692444][T15244] loop9: detected capacity change from 0 to 512 [ 1222.815901][T15244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.830357][T15244] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1223.178669][T15215] hsr0 speed is unknown, defaulting to 1000 [ 1223.273558][T15251] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.1837: iget: bad i_size value: 2533274857506816 [ 1223.577269][T15252] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.1837: iget: bad i_size value: 2533274857506816 [ 1224.629506][T15261] loop7: detected capacity change from 0 to 2048 [ 1224.871781][T15261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.965299][ T31] audit: type=1800 audit(1788438366.856:55): pid=15261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1839" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1225.082303][T15260] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1225.474253][ T8523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.666803][ T3258] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 120 with error 28 [ 1225.666877][ T3258] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1225.666877][ T3258] [ 1225.687828][ T3258] EXT4-fs (loop7): Total free blocks count 0 [ 1225.687872][ T3258] EXT4-fs (loop7): Free/Dirty block details [ 1225.687907][ T3258] EXT4-fs (loop7): free_blocks=2415919504 [ 1225.687941][ T3258] EXT4-fs (loop7): dirty_blocks=128 [ 1225.687974][ T3258] EXT4-fs (loop7): Block reservation details [ 1225.688004][ T3258] EXT4-fs (loop7): i_reserved_data_blocks=8 [ 1225.827151][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.929006][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1858'. [ 1227.996903][T15325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1858'. [ 1232.117707][ T5275] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1236.132347][T15459] loop7: detected capacity change from 0 to 128 [ 1236.146089][T15459] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1236.151572][T15459] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1236.285800][T15464] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1236.298351][T15464] batman_adv: batadv0: Adding interface: gretap1 [ 1236.306548][T15464] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1236.306624][T15464] batman_adv: batadv0: Interface activated: gretap1 [ 1238.081813][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.088298][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.662476][T15526] Driver unsupported XDP return value 0 on prog (id 71) dev N/A, expect packet loss! [ 1243.296935][T15582] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1930'. [ 1243.597156][T15594] netlink: 'syz.0.1934': attribute type 29 has an invalid length. [ 1243.638032][T15592] netlink: 'syz.0.1934': attribute type 29 has an invalid length. [ 1244.151374][ T8552] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1244.942005][ T8552] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1244.968946][ T8552] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.969011][ T8552] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1244.969088][ T8552] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1244.999748][ T8552] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.999814][ T8552] usb 10-1: Product: syz [ 1244.999867][ T8552] usb 10-1: Manufacturer: syz [ 1244.999903][ T8552] usb 10-1: SerialNumber: syz [ 1245.285777][ T8552] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1245.285859][ T8552] uvcvideo 10-1:220.0: No valid video chain found. [ 1245.310645][ T8552] usb 10-1: USB disconnect, device number 19 [ 1249.412920][T15673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1963'. [ 1249.473676][T15677] netlink: 'syz.0.1965': attribute type 29 has an invalid length. [ 1250.588634][ T9234] Bluetooth: hci5: command 0x0406 tx timeout [ 1251.543541][T15720] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1979'. [ 1254.007171][T15711] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1254.152155][T15711] usb 10-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1254.154844][T15711] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.154920][T15711] usb 10-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1254.154959][T15711] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1254.167575][T15711] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.167619][T15711] usb 10-1: Product: syz [ 1254.167647][T15711] usb 10-1: Manufacturer: syz [ 1254.167675][T15711] usb 10-1: SerialNumber: syz [ 1254.281076][ T5762] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1254.428708][T15770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.429436][T15770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.454306][ T5762] usb 5-1: Using ep0 maxpacket: 16 [ 1254.460311][ T5762] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1254.471220][ T5762] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.471297][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1254.471355][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.508789][ T5762] usb 5-1: config 0 descriptor?? [ 1254.515968][ T8552] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1254.675901][ T8552] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1254.695692][ T8552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.695754][ T8552] usb 1-1: Product: syz [ 1254.695834][ T8552] usb 1-1: Manufacturer: syz [ 1254.695878][ T8552] usb 1-1: SerialNumber: syz [ 1254.855750][ T8510] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1254.870226][T15770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.875419][T15770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.968088][T15779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.972011][T15779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.002405][ T5762] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1255.082662][T15770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.092613][T15770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.097944][T15711] speedtch 10-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 1255.141053][ T1212] usb 1-1: USB disconnect, device number 3 [ 1255.304583][T15711] speedtch 10-1:1.0: probe with driver speedtch failed with error -22 [ 1255.318638][T15711] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1255.319354][T15711] speedtch 10-1:1.1: probe with driver speedtch failed with error -71 [ 1255.325779][T15711] usb 10-1: USB disconnect, device number 20 [ 1255.412621][ T30] usb 5-1: USB disconnect, device number 8 [ 1255.965585][ T8510] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1255.965851][ T8510] ath9k_htc: Failed to initialize the device [ 1255.992543][ T1212] usb 1-1: ath9k_htc: USB layer deinitialized [ 1256.535473][ T1212] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1256.681838][ T1212] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1256.683367][ T1212] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1256.683467][ T1212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1289, setting to 1024 [ 1256.683523][ T1212] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1256.683590][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.216323][ T1212] usb 1-1: USB disconnect, device number 4 [ 1257.222784][T11728] Bluetooth: hci6: Reading Intel version command failed (-71) [ 1257.305076][ T8510] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1257.480300][ T8510] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1257.491168][ T8510] usb 5-1: config 1 has an invalid interface number: 27 but max is 1 [ 1257.491228][ T8510] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.491272][ T8510] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1257.491317][ T8510] usb 5-1: config 1 has no interface number 2 [ 1257.491396][ T8510] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1257.498032][ T8510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.498072][ T8510] usb 5-1: Product: syz [ 1257.498099][ T8510] usb 5-1: Manufacturer: syz [ 1257.498126][ T8510] usb 5-1: SerialNumber: syz [ 1257.582327][T15844] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1257.604665][T15844] batman_adv: batadv0: Adding interface: gretap1 [ 1257.604762][T15844] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.640827][T15844] batman_adv: batadv0: Interface activated: gretap1 [ 1257.899035][ T8552] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1258.057650][ T8552] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1258.059153][ T8552] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1258.059194][ T8552] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.059261][ T8552] usb 10-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1258.059300][ T8552] usb 10-1: config 220 has no interface number 1 [ 1258.059356][ T8552] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1258.059430][ T8552] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1258.066585][ T8552] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.066626][ T8552] usb 10-1: Product: syz [ 1258.066683][ T8552] usb 10-1: Manufacturer: syz [ 1258.066710][ T8552] usb 10-1: SerialNumber: syz [ 1258.575107][ T8552] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1258.575189][ T8552] uvcvideo 10-1:220.0: No valid video chain found. [ 1258.585850][ T8552] usb 10-1: USB disconnect, device number 21 [ 1260.408732][ T8510] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 1261.780274][ T8510] speedtch 5-1:1.0: speedtch_bind: device reset failed (-19)! [ 1261.780406][ T8510] usb 5-1: selecting invalid altsetting 0 [ 1261.785615][ T8510] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1261.809742][ T8510] speedtch 5-1:1.27: speedtch_bind: setting interface to 1 failed (-19)! [ 1261.815491][ T8510] usb 5-1: selecting invalid altsetting 0 [ 1261.815528][ T8510] speedtch 5-1:1.27: usbatm_usb_probe: bind failed: -19! [ 1261.837192][ T8510] usb 5-1: selecting invalid altsetting 0 [ 1261.837255][ T8510] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 1261.837644][ T8510] usb 5-1: selecting invalid altsetting 0 [ 1261.837679][ T8510] speedtch 5-1:1.1: probe with driver speedtch failed with error -22 [ 1261.879787][ T8510] usb 5-1: USB disconnect, device number 9 [ 1262.055877][T15907] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1262.077307][T15907] batman_adv: batadv0: Adding interface: gretap2 [ 1262.077351][T15907] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.077642][T15907] batman_adv: batadv0: Interface activated: gretap2 [ 1263.171029][ T8552] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1263.343971][ T8510] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1263.381029][ T8552] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 1263.395507][ T8552] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.395601][ T8552] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1263.395691][ T8552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.478527][ T8552] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 1263.530764][ T8510] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1263.536441][ T8510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.536524][ T8510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.536566][ T8510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1263.536630][ T8510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.549171][ T8510] usb 5-1: config 0 descriptor?? [ 1264.741593][T15901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.798616][T15901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.938865][ T8510] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1265.069485][ T30] usb 1-1: USB disconnect, device number 5 [ 1265.071761][ T2353] pvrusb2: control-write URB failure, status=-71 [ 1265.072577][ T2353] pvrusb2: Device being rendered inoperable [ 1265.105566][ T2353] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1265.140851][ T2353] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1265.157472][ T2353] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1265.157581][ T2353] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1265.157702][ T2353] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1265.263894][ T8552] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1265.282672][ T2353] pvrusb2: Attached sub-driver cx25840 [ 1265.343125][T15916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.354946][T15916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.431476][ T2353] pvrusb2: Attempted to execute control transfer when device not ok [ 1265.431551][ T2353] pvrusb2: Attempted to execute control transfer when device not ok [ 1265.431578][ T2353] pvrusb2: Attempted to execute control transfer when device not ok [ 1265.431600][ T2353] pvrusb2: Attempted to execute control transfer when device not ok [ 1265.431617][ T2353] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1265.432991][ T8552] usb 10-1: Using ep0 maxpacket: 16 [ 1265.435724][ T8552] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1265.443296][ T8552] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1265.443342][ T8552] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 160, changing to 11 [ 1265.443388][ T8552] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 41956, setting to 1024 [ 1265.443434][ T8552] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1265.498499][ T8552] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.498544][ T8552] usb 10-1: Product: syz [ 1265.498571][ T8552] usb 10-1: Manufacturer: syz [ 1265.498599][ T8552] usb 10-1: SerialNumber: syz [ 1265.516516][ T8552] usb 10-1: config 0 descriptor?? [ 1265.571300][T15916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.614962][T15916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.709962][T10754] IPVS: starting estimator thread 0... [ 1265.801530][T15959] IPVS: using max 27 ests per chain, 64800 per kthread [ 1265.871724][ T8552] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input10 [ 1266.165808][ T8552] usb 10-1: USB disconnect, device number 22 [ 1266.165923][ C0] synaptics_usb 10-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 1266.222465][ T2353] TUNER: Unable to find symbol tda829x_probe() [ 1266.348723][ T2353] DVB: Unable to find symbol tda9887_attach() [ 1266.348768][ T2353] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 1266.349860][ T2353] pvrusb2: Attached sub-driver tuner [ 1266.349883][ T2353] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1266.349927][ T2353] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1267.411084][ T30] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1267.761868][ T30] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1267.772437][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.782487][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1267.794834][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.834158][ T30] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1268.068043][ T1212] usb 5-1: USB disconnect, device number 10 [ 1268.448006][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.459895][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.467873][ T1212] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1268.485562][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.497821][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.513716][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.525383][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.537526][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.548218][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.624725][ T1212] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1268.641797][ T1212] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.641884][ T1212] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1268.653749][ T1212] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1268.653799][ T1212] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1268.653867][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.821080][ T30] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1268.974565][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1268.974647][ T30] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 1269.001162][ T30] usb 2-1: config 0 has no interfaces? [ 1269.007609][ T30] usb 2-1: config 0 has no interfaces? [ 1269.014548][ T30] usb 2-1: config 0 has no interfaces? [ 1269.022038][ T30] usb 2-1: config 0 has no interfaces? [ 1269.030174][ T30] usb 2-1: config 0 has no interfaces? [ 1269.036618][ T30] usb 2-1: config 0 has no interfaces? [ 1269.042972][ T30] usb 2-1: config 0 has no interfaces? [ 1269.049318][ T30] usb 2-1: config 0 has no interfaces? [ 1269.058603][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.067100][ T30] usb 2-1: Product: syz [ 1269.073135][ T30] usb 2-1: Manufacturer: syz [ 1269.073225][ T30] usb 2-1: SerialNumber: syz [ 1269.090798][ T30] usb 2-1: config 0 descriptor?? [ 1269.105808][ T8552] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1269.269171][ T8552] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1269.273202][ T8552] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1269.273244][ T8552] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.273280][ T8552] usb 10-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1269.273319][ T8552] usb 10-1: config 220 has no interface number 1 [ 1269.273374][ T8552] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1269.273409][ T8552] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1269.277401][ T8552] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.277441][ T8552] usb 10-1: Product: syz [ 1269.277468][ T8552] usb 10-1: Manufacturer: syz [ 1269.277495][ T8552] usb 10-1: SerialNumber: syz [ 1269.371440][ T8510] usb 2-1: USB disconnect, device number 17 [ 1269.555215][ T8552] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1269.555296][ T8552] uvcvideo 10-1:220.0: No valid video chain found. [ 1269.598691][ T8552] usb 10-1: USB disconnect, device number 23 [ 1269.936368][ T30] usb 1-1: USB disconnect, device number 6 [ 1269.978802][ T30] idmouse 1-1:1.0: disconnected [ 1270.034995][ T1212] gud 5-1:1.0: USB-1: Failed to add TV modes (ret=-71) [ 1270.045765][ T1212] gud 5-1:1.0: USB-1: Failed to add properties (ret=-71) [ 1270.054950][ T1212] gud 5-1:1.0: Failed to get connectors (error=-71) [ 1270.054993][ T1212] gud 5-1:1.0: probe with driver gud failed with error -71 [ 1270.061064][ T8510] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1270.106067][ T1212] usb 5-1: USB disconnect, device number 11 [ 1270.369594][ T8510] usb 2-1: Using ep0 maxpacket: 8 [ 1270.496519][ T8510] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1270.528071][ T8510] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1270.528172][ T8510] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1270.528211][ T8510] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1270.528253][ T8510] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1270.528297][ T8510] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.528364][ T8510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.788226][ T8510] usb 2-1: usb_control_msg returned -32 [ 1270.788319][ T8510] usbtmc 2-1:16.0: can't read capabilities [ 1271.531218][ T1212] usb 2-1: USB disconnect, device number 18 [ 1271.826926][T16070] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2072'. [ 1272.111090][ T30] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1272.402213][ T30] usb 10-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1272.412956][ T30] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1272.413037][ T30] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1272.413094][ T30] usb 10-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1272.413149][ T30] usb 10-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1272.413217][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.470885][T16065] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1273.278196][T16080] loop1: detected capacity change from 0 to 2048 [ 1273.404575][T16080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1273.453838][T16065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.454528][T16065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.471058][ T31] audit: type=1800 audit(1788438415.356:56): pid=16080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2075" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1273.537223][T16078] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1273.545821][T16065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.546412][T16065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.301339][ T30] ims_pcu 10-1:1.0: GET_INFO command failed, error: -71 [ 1274.309105][ T30] ims_pcu 10-1:1.0: probe with driver ims_pcu failed with error -71 [ 1274.595097][ T8510] usb 10-1: USB disconnect, device number 24 [ 1274.622348][T10754] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 40 with error 28 [ 1274.622415][T10754] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1274.622415][T10754] [ 1274.622467][T10754] EXT4-fs (loop1): Total free blocks count 0 [ 1274.622490][T10754] EXT4-fs (loop1): Free/Dirty block details [ 1274.622512][T10754] EXT4-fs (loop1): free_blocks=2415919504 [ 1274.622538][T10754] EXT4-fs (loop1): dirty_blocks=48 [ 1274.622563][T10754] EXT4-fs (loop1): Block reservation details [ 1274.622586][T10754] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 1274.665382][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.751073][ T30] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1274.914019][ T30] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1274.928543][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.928628][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.960092][ T30] usb 5-1: config 0 descriptor?? [ 1274.977461][ T30] pwc: Askey VC010 type 2 USB webcam detected. [ 1275.291161][ T8510] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1275.580426][ T30] pwc: send_video_command error -71 [ 1275.592398][ T30] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1275.604533][ T30] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1275.624946][ T8510] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1275.633948][ T8510] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1275.633991][ T8510] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.634026][ T8510] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1275.634064][ T8510] usb 2-1: config 220 has no interface number 1 [ 1275.634119][ T8510] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1275.634154][ T8510] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1275.655769][ T8510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.655814][ T8510] usb 2-1: Product: syz [ 1275.655841][ T8510] usb 2-1: Manufacturer: syz [ 1275.655867][ T8510] usb 2-1: SerialNumber: syz [ 1275.708495][ T30] usb 5-1: USB disconnect, device number 12 [ 1275.989565][ T8510] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1275.989643][ T8510] uvcvideo 2-1:220.0: No valid video chain found. [ 1276.050669][ T8510] usb 2-1: USB disconnect, device number 19 [ 1276.151057][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1276.306727][ T30] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1276.323020][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.323105][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.354812][ T30] usb 5-1: config 0 descriptor?? [ 1276.377106][ T30] pwc: Askey VC010 type 2 USB webcam detected. [ 1276.644974][T16135] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2088'. [ 1277.391770][ T30] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1277.448838][ T30] pwc: recv_control_msg error -32 req 02 val 2700 [ 1277.466083][ T30] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1277.488645][ T30] pwc: recv_control_msg error -32 req 04 val 1000 [ 1277.497831][ T30] pwc: recv_control_msg error -32 req 04 val 1300 [ 1277.515003][ T30] pwc: recv_control_msg error -32 req 04 val 1400 [ 1277.530015][ T30] pwc: recv_control_msg error -32 req 02 val 2000 [ 1277.725325][ T30] pwc: recv_control_msg error -32 req 02 val 2100 [ 1277.763045][ T30] pwc: recv_control_msg error -32 req 04 val 1500 [ 1277.798834][ T30] pwc: recv_control_msg error -32 req 02 val 2500 [ 1278.082449][ T30] pwc: recv_control_msg error -71 req 02 val 2600 [ 1278.089700][ T30] pwc: recv_control_msg error -71 req 02 val 2900 [ 1278.096866][ T30] pwc: recv_control_msg error -71 req 02 val 2800 [ 1278.105535][ T30] pwc: recv_control_msg error -71 req 04 val 1100 [ 1278.115367][ T30] pwc: recv_control_msg error -71 req 04 val 1200 [ 1278.142521][ T30] pwc: Registered as video103. [ 1278.189494][ T30] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 1278.240752][ T30] usb 5-1: USB disconnect, device number 13 [ 1278.252902][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2092'. [ 1278.328874][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2092'. [ 1278.856382][T16147] syzkaller0: entered promiscuous mode [ 1278.856441][T16147] syzkaller0: entered allmulticast mode [ 1279.361045][T16164] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1279.514952][T16164] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1279.534790][T16164] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 1279.534857][T16164] usb 10-1: config 1 has no interface number 0 [ 1279.534994][ T30] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1279.932391][ T30] usb 5-1: not running at top speed; connect to a high speed hub [ 1279.936328][ T30] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1280.193276][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1280.193337][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1280.193387][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1280.193444][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1280.193494][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1280.193545][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1280.229645][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.229691][ T30] usb 5-1: Product: syz [ 1280.229720][ T30] usb 5-1: Manufacturer: syz [ 1280.229748][ T30] usb 5-1: SerialNumber: syz [ 1280.249482][T16168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1280.249669][T16168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1280.249846][T16168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1280.250018][T16168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1280.250191][T16168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1280.267600][ T30] usb 5-1: USB2VGA dongle found at address 14 [ 1280.290770][ T30] usb 5-1: Allocated 8 output buffers [ 1280.290809][ T30] usb 5-1: Not attached to USB 2.0 hub, deferring init [ 1280.414524][T16164] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.414570][T16164] usb 10-1: Product: syz [ 1280.414598][T16164] usb 10-1: Manufacturer: syz [ 1280.414627][T16164] usb 10-1: SerialNumber: syz [ 1280.583260][T16168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.583844][T16168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.634432][T16164] usb 10-1: 3:1 : does not exist [ 1280.649282][T16164] usb 10-1: 3:2 : does not exist [ 1280.819522][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.836222][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.894518][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.895092][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.899956][ T5747] usb 5-1: USB disconnect, device number 14 [ 1280.971307][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.977016][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.020637][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.039131][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.340789][ T5747] usb 10-1: USB disconnect, device number 25 [ 1282.722316][ T5747] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1282.869784][T16207] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2108'. [ 1282.959542][ T5747] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1282.972780][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.033723][ T5747] usb 2-1: config 0 descriptor?? [ 1283.044745][ T5747] cp210x 2-1:0.0: cp210x converter detected [ 1283.280521][T16201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.297704][T16201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.334245][T16201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.341655][T16201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.354521][T16201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.358456][T16201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.381050][ T8510] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1283.387023][T16201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.412920][T16201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.444946][ T5747] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1283.445004][ T5747] cp210x 2-1:0.0: querying part number failed [ 1283.465097][T16215] syzkaller0: entered promiscuous mode [ 1283.465148][T16215] syzkaller0: entered allmulticast mode [ 1283.480519][ T5747] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1283.541063][ T8510] usb 1-1: Using ep0 maxpacket: 16 [ 1283.547077][ T8510] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 1283.557669][ T8510] usb 1-1: config 66 has too many interfaces: 235, using maximum allowed: 32 [ 1283.557732][ T8510] usb 1-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.557789][ T8510] usb 1-1: config 66 has 1 interface, different from the descriptor's value: 235 [ 1283.593465][ T8510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.603183][ T8510] usb 1-1: Product: syz [ 1283.603252][ T8510] usb 1-1: Manufacturer: syz [ 1283.603289][ T8510] usb 1-1: SerialNumber: syz [ 1284.424134][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.468990][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.524429][ T8510] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1284.660720][ T8510] dvb_usb_af9015 1-1:66.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1284.788323][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.788944][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.857452][ T30] usb 1-1: USB disconnect, device number 7 [ 1284.999362][T16235] lo: entered allmulticast mode [ 1285.056667][T16233] lo: left allmulticast mode [ 1285.500476][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 1285.514985][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 1286.921716][T16267] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2125'. [ 1289.376097][ T5747] usb 2-1: USB disconnect, device number 20 [ 1289.618334][ T5747] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1289.627716][ T5747] cp210x 2-1:0.0: device disconnected [ 1290.533341][T16277] syzkaller0: entered promiscuous mode [ 1290.533389][T16277] syzkaller0: entered allmulticast mode [ 1290.859368][T16286] lo: entered allmulticast mode [ 1290.909639][T16290] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1290.922653][T16290] batman_adv: batadv0: Adding interface: gretap1 [ 1290.932363][T16290] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.962174][T16290] batman_adv: batadv0: Interface activated: gretap1 [ 1290.976514][T16285] lo: left allmulticast mode [ 1291.421053][ T5747] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1291.609147][ T5747] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1291.609215][ T5747] usb 10-1: New USB device found, idVendor=19d2, idProduct=0066, bcdDevice=ce.11 [ 1291.631114][ T5747] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1291.631192][ T5747] usb 10-1: can't read configurations, error -71 [ 1292.189280][T16311] loop0: detected capacity change from 0 to 128 [ 1292.424381][T16311] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1292.490659][T16311] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1295.652568][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1295.752599][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1296.688650][T16356] syzkaller0: entered promiscuous mode [ 1296.688707][T16356] syzkaller0: entered allmulticast mode [ 1297.730143][T16370] loop1: detected capacity change from 0 to 128 [ 1297.731968][ T9234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1297.742431][ T9234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1297.747790][ T9234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1297.762714][T16370] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1297.787596][ T9234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1297.797922][ T9234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1297.824975][T16370] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1298.235041][ T5918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.331886][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 1298.721235][T15711] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1298.722360][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1298.954243][T15711] usb 10-1: device descriptor read/64, error -32 [ 1299.241177][T15711] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1299.432702][T15711] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1299.432794][T15711] usb 10-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=59.64 [ 1299.466129][T15711] usb 10-1: config 4 has an invalid interface number: 176 but max is 0 [ 1299.466199][T15711] usb 10-1: config 4 has no interface number 0 [ 1299.466266][T15711] usb 10-1: config 4 interface 176 has no altsetting 0 [ 1299.485804][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.485880][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.510764][T15711] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.510830][T15711] usb 10-1: Product: syz [ 1299.510883][T15711] usb 10-1: Manufacturer: syz [ 1299.511592][T15711] usb 10-1: SerialNumber: syz [ 1299.734403][ T5918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.808866][T16386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.809449][T16386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.898280][T11728] Bluetooth: hci2: command tx timeout [ 1299.918109][T15711] mvusb_mdio 10-1:4.176: probe with driver mvusb_mdio failed with error -5 [ 1299.923036][T15711] usb 10-1: USB disconnect, device number 29 [ 1300.046273][ T8703] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1300.213968][ T8703] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=53.27 [ 1300.215368][ T8703] usb 1-1: config 127 has an invalid interface number: 127 but max is 0 [ 1300.215437][ T8703] usb 1-1: config 127 has no interface number 0 [ 1300.219151][ T8703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.219205][ T8703] usb 1-1: Product: syz [ 1300.219253][ T8703] usb 1-1: Manufacturer: syz [ 1300.219290][ T8703] usb 1-1: SerialNumber: syz [ 1300.227063][ T5918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.304820][ T5907] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1300.416601][ T5918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.465022][ T5907] usb 2-1: not running at top speed; connect to a high speed hub [ 1300.465073][ T5907] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1300.467842][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1300.467896][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1300.467945][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1300.468024][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1300.468072][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1300.468122][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1300.477329][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.477373][ T5907] usb 2-1: Product: syz [ 1300.477402][ T5907] usb 2-1: Manufacturer: syz [ 1300.477429][ T5907] usb 2-1: SerialNumber: syz [ 1300.498186][T16406] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1300.498366][T16406] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1300.498545][T16406] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1300.498889][T16406] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1300.499439][T16406] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1300.520509][ T5907] usb 2-1: USB2VGA dongle found at address 21 [ 1300.598228][ T5907] usb 2-1: Allocated 8 output buffers [ 1300.598265][ T5907] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 1300.804522][T16406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.805156][T16406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.087188][ T5907] usb 2-1: USB disconnect, device number 21 [ 1301.546227][T16433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.557859][T16433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.609328][ T5918] batman_adv: batadv0: Interface deactivated: gretap2 [ 1301.958096][ T5918] team0: Port device xfrm0 removed [ 1301.962086][T11728] Bluetooth: hci2: command tx timeout [ 1302.304754][ T5918] batman_adv: batadv0: Removing interface: gretap2 [ 1302.421167][ T30] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1302.518420][ T5918] bond0 (unregistering): Released all slaves [ 1302.574635][T16371] hsr0 speed is unknown, defaulting to 1000 [ 1302.583076][ T30] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1302.584595][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.624505][ T30] usb 2-1: config 0 descriptor?? [ 1302.653987][ T30] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1302.826653][ T5918] tipc: Left network mode [ 1303.900029][T16458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.900823][T16458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.920839][T16448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.921676][T16448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.929221][T16448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.932136][T16448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.309782][T11728] Bluetooth: hci2: command tx timeout [ 1304.310358][ T30] gspca_cpia1: usb_control_msg 03, error -110 [ 1304.310767][ T30] gspca_cpia1: usb_control_msg 01, error -32 [ 1304.312668][ T30] gspca_cpia1: usb_control_msg 01, error -32 [ 1304.313053][ T30] gspca_cpia1: usb_control_msg 01, error -32 [ 1304.316612][ T30] gspca_cpia1: usb_control_msg 01, error -32 [ 1304.316636][ T30] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1304.554058][T16448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.554629][T16448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.577151][ T30] usb 1-1: USB disconnect, device number 8 [ 1304.777256][T16448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.786828][T16448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.271790][ T5907] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1306.299539][T16482] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2181'. [ 1306.361349][T11728] Bluetooth: hci2: command tx timeout [ 1306.463097][ T5907] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1306.481649][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1306.481739][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1306.498787][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1306.498830][ T5907] usb 1-1: Product: syz [ 1306.498858][ T5907] usb 1-1: Manufacturer: syz [ 1306.516798][ T5907] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1306.555937][ T8510] usb 2-1: USB disconnect, device number 22 [ 1306.732139][ T5918] hsr_slave_1: left promiscuous mode [ 1307.023153][ T8510] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1307.214508][ T8510] usb 2-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1307.228280][ T8510] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1307.228385][ T8510] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1307.228473][ T8510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.294732][ T8510] usb 2-1: config 0 descriptor?? [ 1307.321628][T16487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1307.405599][T16497] loop4: detected capacity change from 0 to 128 [ 1307.414591][T16497] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1307.437809][T16497] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1307.811755][ T6554] smbdirect: ib_dev[syz1] removed [ 1307.833965][ T8703] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1307.876511][ T8510] wacom 0003:056A:5012.0009: unknown main item tag 0x0 [ 1307.884750][ T8510] wacom 0003:056A:5012.0009: unknown main item tag 0x0 [ 1307.884861][ T8510] wacom 0003:056A:5012.0009: unknown main item tag 0x0 [ 1307.884907][ T8510] wacom 0003:056A:5012.0009: unknown main item tag 0x0 [ 1307.884986][ T8510] wacom 0003:056A:5012.0009: unknown main item tag 0x0 [ 1307.885028][ T8510] wacom 0003:056A:5012.0009: unknown main item tag 0x0 [ 1307.885069][ T8510] wacom 0003:056A:5012.0009: unknown main item tag 0x0 [ 1307.885140][ T8510] wacom 0003:056A:5012.0009: unknown main item tag 0x0 [ 1307.885183][ T8510] wacom 0003:056A:5012.0009: unknown main item tag 0x0 [ 1307.885228][ T8510] wacom 0003:056A:5012.0009: unknown main item tag 0x0 [ 1307.885588][ T8510] wacom 0003:056A:5012.0009: ignoring exceeding usage max [ 1307.965418][ T8510] wacom 0003:056A:5012.0009: reserved main item tag 0xd [ 1307.987409][ T8510] wacom 0003:056A:5012.0009: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 1307.989948][ T8703] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1307.998794][ T8703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.998836][ T8703] usb 10-1: Product: syz [ 1307.998864][ T8703] usb 10-1: Manufacturer: syz [ 1307.998891][ T8703] usb 10-1: SerialNumber: syz [ 1308.059066][ T8703] usb 10-1: config 0 descriptor?? [ 1308.066812][ T8510] usb 2-1: USB disconnect, device number 23 [ 1308.484344][ T8703] usb 10-1: Firmware version (0.0) predates our first public release. [ 1308.484414][ T8703] usb 10-1: Please update to version 0.2 or newer [ 1308.615999][ T5907] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 1308.635821][ T5907] usb 1-1: USB disconnect, device number 9 [ 1308.649833][ T5907] mos7840 1-1:1.0: device disconnected [ 1308.844806][T16371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.844955][T16371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.845134][T16371] bridge_slave_0: entered allmulticast mode [ 1308.857341][T16371] bridge_slave_0: entered promiscuous mode [ 1308.861485][T16371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.861663][T16371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.861823][T16371] bridge_slave_1: entered allmulticast mode [ 1308.864035][T16371] bridge_slave_1: entered promiscuous mode [ 1308.949066][ T8703] usb 10-1: USB disconnect, device number 30 [ 1309.175314][T16371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.204154][ T30] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1309.360288][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1309.360377][ T30] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1309.362179][ T30] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 1309.362219][ T30] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 1309.362255][ T30] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1309.362294][ T30] usb 5-1: config 129 has no interface number 0 [ 1309.362323][ T30] usb 5-1: config 129 has no interface number 1 [ 1309.362388][ T30] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1309.362437][ T30] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1309.362498][ T30] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1309.362547][ T30] usb 5-1: config 129 interface 135 has no altsetting 0 [ 1309.362581][ T30] usb 5-1: config 129 interface 5 has no altsetting 0 [ 1309.376653][ T30] usb 5-1: string descriptor 0 read error: -22 [ 1309.376822][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.521601][T16371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.528107][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1309.528178][ T30] usb 5-1: MIDIStreaming interface descriptor not found [ 1310.503430][T16511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.504070][T16511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.535904][T16511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.547562][T16511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.570667][T16511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.571355][T16511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.391091][T16371] team0: Port device team_slave_0 added [ 1311.420341][T16371] team0: Port device team_slave_1 added [ 1311.608921][ T30] usb 5-1: USB disconnect, device number 15 [ 1311.764797][T16544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2194'. [ 1311.885208][T16371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.892291][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.892341][T16371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.896300][T16371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.896324][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.896371][T16371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.981998][ T8510] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1312.072797][ T5907] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1312.141751][ T8510] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1312.147077][ T8510] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.157509][T16371] hsr_slave_0: entered promiscuous mode [ 1312.168702][T16371] hsr_slave_1: entered promiscuous mode [ 1312.169593][T16371] debugfs: 'hsr0' already exists in 'hsr' [ 1312.169623][T16371] Cannot create hsr debugfs directory [ 1312.173663][ T8510] usb 10-1: config 0 descriptor?? [ 1312.188868][ T8510] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1312.221743][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 1312.225691][ T5907] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1312.235089][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 1312.235132][ T5907] usb 2-1: SerialNumber: syz [ 1312.256376][ T5907] usb 2-1: config 0 descriptor?? [ 1312.278269][ T30] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1312.430346][ T5907] as10x_usb: device has been detected [ 1312.431793][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 1312.439909][ T5907] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1312.444355][ T30] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1312.463728][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.463804][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.463873][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.499693][ T30] usb 5-1: config 0 descriptor?? [ 1312.517918][ T30] hub 5-1:0.0: USB hub found [ 1312.527057][T16547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.527830][T16547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.755652][ T30] hub 5-1:0.0: 29 ports detected [ 1312.771298][ T30] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1312.786408][ T5907] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1312.941042][ T5747] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1312.967139][T16550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.968015][T16550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.987967][T16547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.992666][T16547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.003226][T16550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.009401][T16550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.127120][ T5907] as10x_usb: error during firmware upload part1 [ 1313.138019][ T5907] Registered device nBox DVB-T Dongle [ 1313.148267][ T5907] usb 2-1: USB disconnect, device number 24 [ 1313.340366][ T5747] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1313.352943][ T5747] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1313.353018][ T5747] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1313.380260][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1313.380326][ T5747] usb 1-1: Product: syz [ 1313.380378][ T5747] usb 1-1: Manufacturer: syz [ 1313.419106][ T5747] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1313.419891][ T5907] Unregistered device nBox DVB-T Dongle [ 1313.437702][ T5907] as10x_usb: device has been disconnected [ 1313.476029][ T30] usb 5-1: USB disconnect, device number 16 [ 1314.238531][ T8510] gspca_stv06xx: Photobit pb0100 sensor detected [ 1314.250537][T16371] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1314.261572][ T8552] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1314.275372][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1314.277460][T16371] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1314.289456][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1314.292085][T16371] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1314.305194][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1314.307018][T16371] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1314.322449][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1314.425323][ T8552] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 1314.426821][ T8552] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 1314.426861][ T8552] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.426897][ T8552] usb 2-1: config 0 has no interface number 0 [ 1314.426950][ T8552] usb 2-1: config 0 interface 237 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1314.432330][ T8552] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 1314.432370][ T8552] usb 2-1: Product: syz [ 1314.432398][ T8552] usb 2-1: Manufacturer: syz [ 1314.432425][ T8552] usb 2-1: SerialNumber: syz [ 1314.453444][ T8552] usb 2-1: config 0 descriptor?? [ 1314.582929][ T8510] input: STV06xx as /devices/platform/dummy_hcd.9/usb10/10-1/input/input15 [ 1314.652258][T16371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.691562][ T8510] usb 10-1: USB disconnect, device number 31 [ 1314.768820][ T5907] usb 2-1: USB disconnect, device number 25 [ 1314.771628][T16371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.842297][T13634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.842447][T13634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.887274][T13634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.887435][T13634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.643733][ T5747] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 1315.669271][ T5747] usb 1-1: USB disconnect, device number 10 [ 1315.693775][ T5747] mos7840 1-1:1.0: device disconnected [ 1315.711281][ T8703] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1315.871117][ T8703] usb 5-1: Using ep0 maxpacket: 16 [ 1315.914073][ T8703] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1315.989696][ T8703] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1316.002851][ T8703] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1316.002984][ T8703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1316.003089][ T8703] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1316.017445][ T8703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1316.017728][ T8703] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1316.017831][ T8703] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1316.264087][ T8703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.264155][ T8703] usb 5-1: Product: syz [ 1316.264203][ T8703] usb 5-1: Manufacturer: syz [ 1316.264239][ T8703] usb 5-1: SerialNumber: syz [ 1316.504252][ T8703] usb 5-1: config 0 descriptor?? [ 1316.515820][T16600] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1316.523310][ T5907] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1316.556275][ T8703] iuu_phoenix 5-1:0.0: iuu_phoenix converter detected [ 1316.573821][ T8703] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 1316.680765][ T5907] usb 2-1: not running at top speed; connect to a high speed hub [ 1316.680824][ T5907] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1316.703790][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1316.703848][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1316.703900][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1316.703948][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1316.704003][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1316.704051][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1316.742770][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.742813][ T5907] usb 2-1: Product: syz [ 1316.742840][ T5907] usb 2-1: Manufacturer: syz [ 1316.742867][ T5907] usb 2-1: SerialNumber: syz [ 1316.777083][T16605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1316.777323][T16605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1316.777500][T16605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1316.777677][T16605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1316.777853][T16605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1316.811641][ T5907] usb 2-1: USB2VGA dongle found at address 26 [ 1316.855471][ T5907] usb 2-1: Allocated 8 output buffers [ 1316.855545][ T5907] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 1316.869778][T16600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.884333][T16600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.929409][T16600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.948433][T16600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.972786][ T8509] usb 10-1: new low-speed USB device number 32 using dummy_hcd [ 1316.985401][T16600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.998044][T16600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.074657][ T8703] usb 5-1: USB disconnect, device number 17 [ 1317.090227][T16605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.104542][T16605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.124496][ T8509] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1317.140286][ T8509] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 1317.140354][ T8509] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 1317.140414][ T8509] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1317.140468][ T8509] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1317.140527][ T8509] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1317.140575][ T8509] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 110, setting to 8 [ 1317.140621][ T8509] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1317.164689][ T8509] usb 10-1: string descriptor 0 read error: -22 [ 1317.164847][ T8509] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.191380][ T5747] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1317.268151][ T8703] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1317.279374][ T8703] iuu_phoenix 5-1:0.0: device disconnected [ 1317.313543][ T8509] usb 10-1: config 0 descriptor?? [ 1317.317303][T16619] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1317.320698][ T5907] usb 2-1: USB disconnect, device number 26 [ 1317.370096][ T8509] hub 10-1:0.0: bad descriptor, ignoring hub [ 1317.370171][ T8509] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1317.384586][ T5747] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1317.399456][ T5747] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.399556][ T5747] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1317.399620][ T5747] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1317.399672][ T5747] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1317.399743][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.538856][ T8509] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input16 [ 1317.691943][ C0] usb_acecad 10-1:0.0: can't resubmit intr, dummy_hcd.9-1/input0, status -1 [ 1317.713274][ T8509] usb 10-1: USB disconnect, device number 32 [ 1318.041192][ T8703] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1318.202055][ T8703] usb 5-1: Using ep0 maxpacket: 32 [ 1318.211993][ T8703] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1318.223614][ T8703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.223717][ T8703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.223796][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.260431][ T8703] usb 5-1: config 0 descriptor?? [ 1318.273245][ T8703] hub 5-1:0.0: USB hub found [ 1318.484359][ T8703] hub 5-1:0.0: 29 ports detected [ 1318.490127][ T8703] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1318.611517][ T5747] [drm] Initialized gud 1.0.0 for 1-1:1.0 on minor 1 [ 1318.695323][T16634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.705841][T16634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.719305][T16371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.740863][T16634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.765414][T16634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.999686][ T5747] ================================================================== [ 1318.999714][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1318.999774][ T5747] Read of size 256 at addr ffff8880636dbafc by task kworker/1:3/5747 [ 1318.999799][ T5747] [ 1318.999812][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1318.999848][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1318.999872][ T5747] Workqueue: usb_hub_wq hub_event [ 1318.999914][ T5747] Call Trace: [ 1318.999925][ T5747] [ 1318.999937][ T5747] dump_stack_lvl+0x100/0x190 [ 1318.999982][ T5747] print_report+0x13d/0x4b0 [ 1319.000028][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.000064][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1319.000114][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1319.000155][ T5747] kasan_report+0xdf/0x1c0 [ 1319.000204][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1319.000251][ T5747] kasan_check_range+0x10f/0x1e0 [ 1319.000283][ T5747] __asan_memcpy+0x23/0x60 [ 1319.000321][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1319.000371][ T5747] fbcon_init+0x1065/0x1830 [ 1319.000417][ T5747] visual_init+0x320/0x620 [ 1319.000465][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1319.000506][ T5747] do_take_over_console+0x501/0x5d0 [ 1319.000541][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1319.000580][ T5747] fbcon_fb_registered+0x364/0x4b0 [ 1319.000628][ T5747] do_register_framebuffer+0x503/0x870 [ 1319.000670][ T5747] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1319.000716][ T5747] ? find_held_lock+0x2b/0x80 [ 1319.000760][ T5747] register_framebuffer+0x23/0x40 [ 1319.000800][ T5747] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1319.000855][ T5747] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1319.000910][ T5747] drm_fb_helper_initial_config+0x44/0x60 [ 1319.000970][ T5747] drm_fbdev_client_hotplug+0x19e/0x220 [ 1319.001022][ T5747] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1319.001071][ T5747] drm_client_register+0x197/0x280 [ 1319.001125][ T5747] drm_fbdev_client_setup+0x155/0x480 [ 1319.001162][ T5747] drm_client_setup+0x160/0x1a0 [ 1319.001196][ T5747] gud_probe+0x1835/0x1c20 [ 1319.001244][ T5747] ? __pfx_gud_probe+0x10/0x10 [ 1319.001288][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.001326][ T5747] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1319.001365][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1319.001400][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.001437][ T5747] ? __pm_runtime_set_status+0x13c/0x970 [ 1319.001479][ T5747] usb_probe_interface+0x386/0x9b0 [ 1319.001529][ T5747] ? __pfx_usb_probe_interface+0x10/0x10 [ 1319.001576][ T5747] ? kernfs_put+0x3f/0x60 [ 1319.001609][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.001645][ T5747] ? sysfs_create_link+0x68/0xc0 [ 1319.001674][ T5747] ? __pfx_usb_probe_interface+0x10/0x10 [ 1319.001721][ T5747] really_probe+0x241/0xa60 [ 1319.001756][ T5747] __driver_probe_device+0x210/0x460 [ 1319.001790][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.001829][ T5747] driver_probe_device+0x4a/0x140 [ 1319.001863][ T5747] __device_attach_driver+0x1df/0x320 [ 1319.001899][ T5747] ? __pfx___device_attach_driver+0x10/0x10 [ 1319.001934][ T5747] bus_for_each_drv+0x159/0x1e0 [ 1319.001986][ T5747] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1319.002033][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.002069][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 [ 1319.002107][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.002142][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1319.002180][ T5747] __device_attach+0x1e4/0x4d0 [ 1319.002215][ T5747] ? __pfx___device_attach+0x10/0x10 [ 1319.002250][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.002286][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 [ 1319.002321][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.002361][ T5747] device_initial_probe+0xaf/0xd0 [ 1319.002397][ T5747] bus_probe_device+0x64/0x160 [ 1319.002428][ T5747] device_add+0x121d/0x1970 [ 1319.002469][ T5747] ? __pfx_device_add+0x10/0x10 [ 1319.002508][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.002544][ T5747] ? mark_held_locks+0x40/0x70 [ 1319.002590][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.002627][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.002668][ T5747] usb_set_configuration+0xd97/0x1c60 [ 1319.002723][ T5747] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1319.002757][ T5747] usb_generic_driver_probe+0xa1/0xe0 [ 1319.002792][ T5747] usb_probe_device+0xef/0x400 [ 1319.002834][ T5747] ? __pfx_usb_probe_device+0x10/0x10 [ 1319.002878][ T5747] really_probe+0x241/0xa60 [ 1319.002913][ T5747] __driver_probe_device+0x210/0x460 [ 1319.002946][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.002991][ T5747] driver_probe_device+0x4a/0x140 [ 1319.003026][ T5747] __device_attach_driver+0x1df/0x320 [ 1319.003063][ T5747] ? __pfx___device_attach_driver+0x10/0x10 [ 1319.003098][ T5747] bus_for_each_drv+0x159/0x1e0 [ 1319.003145][ T5747] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1319.003193][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.003229][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 [ 1319.003267][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.003303][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1319.003342][ T5747] __device_attach+0x1e4/0x4d0 [ 1319.003376][ T5747] ? __pfx___device_attach+0x10/0x10 [ 1319.003411][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.003447][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 [ 1319.003481][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.003521][ T5747] device_initial_probe+0xaf/0xd0 [ 1319.003557][ T5747] bus_probe_device+0x64/0x160 [ 1319.003588][ T5747] device_add+0x121d/0x1970 [ 1319.003629][ T5747] ? __pfx_device_add+0x10/0x10 [ 1319.003667][ T5747] ? usb_detect_static_quirks+0x335/0x3e0 [ 1319.003705][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.003746][ T5747] usb_new_device.part.0+0xcc2/0x1686 [ 1319.003791][ T5747] ? do_raw_spin_lock+0x128/0x260 [ 1319.003824][ T5747] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1319.003867][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.003903][ T5747] ? mark_held_locks+0x40/0x70 [ 1319.003950][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.003993][ T5747] hub_event.cold+0x1e3/0xe90 [ 1319.004051][ T5747] ? __pfx_hub_event+0x10/0x10 [ 1319.004090][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.004127][ T5747] ? __lock_acquire+0x1c20/0x1ec0 [ 1319.004176][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.004212][ T5747] ? lock_acquire+0x1d1/0x380 [ 1319.004259][ T5747] ? process_one_work+0xa2c/0x1b10 [ 1319.004302][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.004338][ T5747] ? process_one_work+0x906/0x1b10 [ 1319.004380][ T5747] ? process_one_work+0x906/0x1b10 [ 1319.004421][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.004462][ T5747] process_one_work+0xac7/0x1b10 [ 1319.004512][ T5747] ? __pfx_process_one_work+0x10/0x10 [ 1319.004556][ T5747] ? lock_acquire+0x1d1/0x380 [ 1319.004609][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.004648][ T5747] worker_thread+0x5ef/0xe50 [ 1319.004695][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 1319.004739][ T5747] ? kthread+0x13a/0x450 [ 1319.004775][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 1319.004816][ T5747] kthread+0x373/0x450 [ 1319.004853][ T5747] ? __pfx_kthread+0x10/0x10 [ 1319.004892][ T5747] ret_from_fork+0x730/0xd60 [ 1319.004922][ T5747] ? __pfx_ret_from_fork+0x10/0x10 [ 1319.004951][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.004991][ T5747] ? __switch_to+0x800/0x10f0 [ 1319.005029][ T5747] ? __switch_to_asm+0x39/0x70 [ 1319.005056][ T5747] ? __pfx_kthread+0x10/0x10 [ 1319.005095][ T5747] ret_from_fork_asm+0x1a/0x30 [ 1319.005133][ T5747] [ 1319.005144][ T5747] [ 1319.005151][ T5747] Allocated by task 16625: [ 1319.005166][ T5747] kasan_save_stack+0x30/0x50 [ 1319.005207][ T5747] kasan_save_track+0x14/0x30 [ 1319.005247][ T5747] __kasan_kmalloc+0xaa/0xb0 [ 1319.005287][ T5747] __kmalloc_noprof+0x32f/0x840 [ 1319.005324][ T5747] tomoyo_realpath_from_path+0xb6/0x690 [ 1319.005369][ T5747] tomoyo_path_perm+0x276/0x460 [ 1319.005403][ T5747] tomoyo_path_symlink+0x97/0xe0 [ 1319.005428][ T5747] security_path_symlink+0x152/0x2d0 [ 1319.005463][ T5747] filename_symlinkat+0x122/0x560 [ 1319.005489][ T5747] __x64_sys_symlinkat+0x9c/0xe0 [ 1319.005516][ T5747] do_syscall_64+0x123/0x790 [ 1319.005552][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.005580][ T5747] [ 1319.005587][ T5747] Freed by task 16625: [ 1319.005601][ T5747] kasan_save_stack+0x30/0x50 [ 1319.005641][ T5747] kasan_save_track+0x14/0x30 [ 1319.005681][ T5747] kasan_save_free_info+0x3b/0x70 [ 1319.005712][ T5747] __kasan_slab_free+0x5f/0x80 [ 1319.005754][ T5747] kfree+0x22b/0x6d0 [ 1319.005782][ T5747] tomoyo_realpath_from_path+0x19c/0x690 [ 1319.005826][ T5747] tomoyo_path_perm+0x276/0x460 [ 1319.005860][ T5747] tomoyo_path_symlink+0x97/0xe0 [ 1319.005885][ T5747] security_path_symlink+0x152/0x2d0 [ 1319.005918][ T5747] filename_symlinkat+0x122/0x560 [ 1319.005945][ T5747] __x64_sys_symlinkat+0x9c/0xe0 [ 1319.005974][ T5747] do_syscall_64+0x123/0x790 [ 1319.006010][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.006039][ T5747] [ 1319.006046][ T5747] The buggy address belongs to the object at ffff8880636da000 [ 1319.006046][ T5747] which belongs to the cache kmalloc-4k of size 4096 [ 1319.006070][ T5747] The buggy address is located 2812 bytes to the right of [ 1319.006070][ T5747] allocated 4096-byte region [ffff8880636da000, ffff8880636db000) [ 1319.006100][ T5747] [ 1319.006107][ T5747] The buggy address belongs to the physical page: [ 1319.006120][ T5747] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x636d8 [ 1319.006146][ T5747] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1319.006170][ T5747] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1319.006195][ T5747] page_type: f5(slab) [ 1319.006219][ T5747] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1319.006246][ T5747] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1319.006274][ T5747] head: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1319.006301][ T5747] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1319.006328][ T5747] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1319.006355][ T5747] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1319.006372][ T5747] page dumped because: kasan: bad access detected [ 1319.006386][ T5747] page_owner tracks the page as allocated [ 1319.006397][ T5747] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 1317204286545 [ 1319.006443][ T5747] post_alloc_hook+0xfd/0x120 [ 1319.006473][ T5747] get_page_from_freelist+0x110d/0x35d0 [ 1319.006507][ T5747] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1319.006543][ T5747] new_slab+0xa9/0x6e0 [ 1319.006573][ T5747] refill_objects+0xe3/0x410 [ 1319.006605][ T5747] __pcs_replace_empty_main+0x35e/0x650 [ 1319.006636][ T5747] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 1319.006678][ T5747] kmalloc_reserve+0xe8/0x350 [ 1319.006718][ T5747] __alloc_skb+0x185/0x710 [ 1319.006745][ T5747] nsim_dev_trap_report_work+0x2af/0xd20 [ 1319.006784][ T5747] process_one_work+0xac7/0x1b10 [ 1319.006823][ T5747] worker_thread+0x5ef/0xe50 [ 1319.006862][ T5747] kthread+0x373/0x450 [ 1319.006895][ T5747] ret_from_fork+0x730/0xd60 [ 1319.006920][ T5747] ret_from_fork_asm+0x1a/0x30 [ 1319.006945][ T5747] page last free pid 16619 tgid 16616 ts 1317158748151 stack trace: [ 1319.006965][ T5747] __free_frozen_pages+0x79f/0x10f0 [ 1319.006996][ T5747] qlist_free_all+0x47/0xf0 [ 1319.007031][ T5747] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1319.007071][ T5747] __kasan_slab_alloc+0x69/0x90 [ 1319.007114][ T5747] __kmalloc_noprof+0x2cc/0x840 [ 1319.007151][ T5747] tomoyo_realpath_from_path+0xb6/0x690 [ 1319.007195][ T5747] tomoyo_path_number_perm+0x23c/0x580 [ 1319.007245][ T5747] security_file_ioctl+0xd3/0x230 [ 1319.007280][ T5747] __x64_sys_ioctl+0xb7/0x210 [ 1319.007314][ T5747] do_syscall_64+0x123/0x790 [ 1319.007350][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.007379][ T5747] [ 1319.007387][ T5747] Memory state around the buggy address: [ 1319.007401][ T5747] ffff8880636db980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.007422][ T5747] ffff8880636dba00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.007443][ T5747] >ffff8880636dba80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.007460][ T5747] ^ [ 1319.007477][ T5747] ffff8880636dbb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.007498][ T5747] ffff8880636dbb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.007515][ T5747] ================================================================== [ 1319.256183][T16371] veth0_vlan: entered promiscuous mode [ 1319.357884][T16371] veth1_vlan: entered promiscuous mode [ 1319.452156][ T8703] usb 5-1: USB disconnect, device number 18 [ 1319.457826][ T5747] Disabling lock debugging due to kernel taint [ 1319.457843][ T5747] ================================================================== [ 1319.457861][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1319.457924][ T5747] Read of size 256 at addr ffff8880636dbaf8 by task kworker/1:3/5747 [ 1319.457955][ T5747] [ 1319.457980][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1319.458035][ T5747] Tainted: [B]=BAD_PAGE [ 1319.458050][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1319.458078][ T5747] Workqueue: usb_hub_wq hub_event [ 1319.458132][ T5747] Call Trace: [ 1319.458145][ T5747] [ 1319.458160][ T5747] dump_stack_lvl+0x100/0x190 [ 1319.458214][ T5747] print_report+0x13d/0x4b0 [ 1319.458273][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.458322][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1319.458387][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1319.458440][ T5747] kasan_report+0xdf/0x1c0 [ 1319.458505][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1319.458566][ T5747] kasan_check_range+0x10f/0x1e0 [ 1319.458609][ T5747] __asan_memcpy+0x23/0x60 [ 1319.458657][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1319.458722][ T5747] fbcon_init+0x1065/0x1830 [ 1319.458782][ T5747] visual_init+0x320/0x620 [ 1319.458844][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1319.458894][ T5747] do_take_over_console+0x501/0x5d0 [ 1319.458940][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1319.458998][ T5747] fbcon_fb_registered+0x364/0x4b0 [ 1319.459059][ T5747] do_register_framebuffer+0x503/0x870 [ 1319.459115][ T5747] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1319.459175][ T5747] ? find_held_lock+0x2b/0x80 [ 1319.459233][ T5747] register_framebuffer+0x23/0x40 [ 1319.459285][ T5747] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1319.459355][ T5747] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1319.459425][ T5747] drm_fb_helper_initial_config+0x44/0x60 [ 1319.459479][ T5747] drm_fbdev_client_hotplug+0x19e/0x220 [ 1319.459527][ T5747] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1319.459574][ T5747] drm_client_register+0x197/0x280 [ 1319.459629][ T5747] drm_fbdev_client_setup+0x155/0x480 [ 1319.459678][ T5747] drm_client_setup+0x160/0x1a0 [ 1319.459722][ T5747] gud_probe+0x1835/0x1c20 [ 1319.459778][ T5747] ? __pfx_gud_probe+0x10/0x10 [ 1319.459823][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.459873][ T5747] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1319.459924][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1319.459976][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.460022][ T5747] ? __pm_runtime_set_status+0x13c/0x970 [ 1319.460078][ T5747] usb_probe_interface+0x386/0x9b0 [ 1319.460143][ T5747] ? __pfx_usb_probe_interface+0x10/0x10 [ 1319.460202][ T5747] ? kernfs_put+0x3f/0x60 [ 1319.460245][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.460292][ T5747] ? sysfs_create_link+0x68/0xc0 [ 1319.460330][ T5747] ? __pfx_usb_probe_interface+0x10/0x10 [ 1319.460392][ T5747] really_probe+0x241/0xa60 [ 1319.460438][ T5747] __driver_probe_device+0x210/0x460 [ 1319.460482][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.460532][ T5747] driver_probe_device+0x4a/0x140 [ 1319.460577][ T5747] __device_attach_driver+0x1df/0x320 [ 1319.460624][ T5747] ? __pfx___device_attach_driver+0x10/0x10 [ 1319.460669][ T5747] bus_for_each_drv+0x159/0x1e0 [ 1319.460730][ T5747] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1319.460791][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.460838][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 [ 1319.460887][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.460934][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1319.460988][ T5747] __device_attach+0x1e4/0x4d0 [ 1319.461034][ T5747] ? __pfx___device_attach+0x10/0x10 [ 1319.461079][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.461126][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 [ 1319.461171][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.461222][ T5747] device_initial_probe+0xaf/0xd0 [ 1319.461270][ T5747] bus_probe_device+0x64/0x160 [ 1319.461310][ T5747] device_add+0x121d/0x1970 [ 1319.461363][ T5747] ? __pfx_device_add+0x10/0x10 [ 1319.461414][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.461461][ T5747] ? mark_held_locks+0x40/0x70 [ 1319.461522][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.461570][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.461623][ T5747] usb_set_configuration+0xd97/0x1c60 [ 1319.461692][ T5747] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1319.461738][ T5747] usb_generic_driver_probe+0xa1/0xe0 [ 1319.461785][ T5747] usb_probe_device+0xef/0x400 [ 1319.461842][ T5747] ? __pfx_usb_probe_device+0x10/0x10 [ 1319.461901][ T5747] really_probe+0x241/0xa60 [ 1319.461949][ T5747] __driver_probe_device+0x210/0x460 [ 1319.462000][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.462051][ T5747] driver_probe_device+0x4a/0x140 [ 1319.462096][ T5747] __device_attach_driver+0x1df/0x320 [ 1319.462143][ T5747] ? __pfx___device_attach_driver+0x10/0x10 [ 1319.462188][ T5747] bus_for_each_drv+0x159/0x1e0 [ 1319.462250][ T5747] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1319.462310][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.462357][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 [ 1319.462407][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.462454][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1319.462504][ T5747] __device_attach+0x1e4/0x4d0 [ 1319.462549][ T5747] ? __pfx___device_attach+0x10/0x10 [ 1319.462595][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.462642][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 [ 1319.462686][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.462738][ T5747] device_initial_probe+0xaf/0xd0 [ 1319.462785][ T5747] bus_probe_device+0x64/0x160 [ 1319.462825][ T5747] device_add+0x121d/0x1970 [ 1319.462878][ T5747] ? __pfx_device_add+0x10/0x10 [ 1319.462927][ T5747] ? usb_detect_static_quirks+0x335/0x3e0 [ 1319.462982][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.463035][ T5747] usb_new_device.part.0+0xcc2/0x1686 [ 1319.463094][ T5747] ? do_raw_spin_lock+0x128/0x260 [ 1319.463138][ T5747] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1319.463193][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.463240][ T5747] ? mark_held_locks+0x40/0x70 [ 1319.463300][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.463351][ T5747] hub_event.cold+0x1e3/0xe90 [ 1319.463426][ T5747] ? __pfx_hub_event+0x10/0x10 [ 1319.463477][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.463524][ T5747] ? __lock_acquire+0x1c20/0x1ec0 [ 1319.463589][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.463636][ T5747] ? lock_acquire+0x1d1/0x380 [ 1319.463696][ T5747] ? process_one_work+0xa2c/0x1b10 [ 1319.463752][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.463800][ T5747] ? process_one_work+0x906/0x1b10 [ 1319.463855][ T5747] ? process_one_work+0x906/0x1b10 [ 1319.463908][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.463961][ T5747] process_one_work+0xac7/0x1b10 [ 1319.464030][ T5747] ? __pfx_process_one_work+0x10/0x10 [ 1319.464087][ T5747] ? lock_acquire+0x1d1/0x380 [ 1319.464155][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.464207][ T5747] worker_thread+0x5ef/0xe50 [ 1319.464267][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 1319.464324][ T5747] ? kthread+0x13a/0x450 [ 1319.464371][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 1319.464425][ T5747] kthread+0x373/0x450 [ 1319.464473][ T5747] ? __pfx_kthread+0x10/0x10 [ 1319.464524][ T5747] ret_from_fork+0x730/0xd60 [ 1319.464563][ T5747] ? __pfx_ret_from_fork+0x10/0x10 [ 1319.464602][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.464650][ T5747] ? __switch_to+0x800/0x10f0 [ 1319.464699][ T5747] ? __switch_to_asm+0x39/0x70 [ 1319.464736][ T5747] ? __pfx_kthread+0x10/0x10 [ 1319.464787][ T5747] ret_from_fork_asm+0x1a/0x30 [ 1319.464835][ T5747] [ 1319.464850][ T5747] [ 1319.464860][ T5747] Allocated by task 16625: [ 1319.464879][ T5747] kasan_save_stack+0x30/0x50 [ 1319.464931][ T5747] kasan_save_track+0x14/0x30 [ 1319.464989][ T5747] __kasan_kmalloc+0xaa/0xb0 [ 1319.465039][ T5747] __kmalloc_noprof+0x32f/0x840 [ 1319.465088][ T5747] tomoyo_realpath_from_path+0xb6/0x690 [ 1319.465147][ T5747] tomoyo_path_perm+0x276/0x460 [ 1319.465192][ T5747] tomoyo_path_symlink+0x97/0xe0 [ 1319.465225][ T5747] security_path_symlink+0x152/0x2d0 [ 1319.465269][ T5747] filename_symlinkat+0x122/0x560 [ 1319.465304][ T5747] __x64_sys_symlinkat+0x9c/0xe0 [ 1319.465339][ T5747] do_syscall_64+0x123/0x790 [ 1319.465386][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.465424][ T5747] [ 1319.465433][ T5747] Freed by task 16625: [ 1319.465450][ T5747] kasan_save_stack+0x30/0x50 [ 1319.465502][ T5747] kasan_save_track+0x14/0x30 [ 1319.465554][ T5747] kasan_save_free_info+0x3b/0x70 [ 1319.465596][ T5747] __kasan_slab_free+0x5f/0x80 [ 1319.465650][ T5747] kfree+0x22b/0x6d0 [ 1319.465686][ T5747] tomoyo_realpath_from_path+0x19c/0x690 [ 1319.465744][ T5747] tomoyo_path_perm+0x276/0x460 [ 1319.465788][ T5747] tomoyo_path_symlink+0x97/0xe0 [ 1319.465821][ T5747] security_path_symlink+0x152/0x2d0 [ 1319.465864][ T5747] filename_symlinkat+0x122/0x560 [ 1319.465898][ T5747] __x64_sys_symlinkat+0x9c/0xe0 [ 1319.465933][ T5747] do_syscall_64+0x123/0x790 [ 1319.465985][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.466022][ T5747] [ 1319.466031][ T5747] The buggy address belongs to the object at ffff8880636da000 [ 1319.466031][ T5747] which belongs to the cache kmalloc-4k of size 4096 [ 1319.466062][ T5747] The buggy address is located 2808 bytes to the right of [ 1319.466062][ T5747] allocated 4096-byte region [ffff8880636da000, ffff8880636db000) [ 1319.466102][ T5747] [ 1319.466111][ T5747] The buggy address belongs to the physical page: [ 1319.466128][ T5747] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x636d8 [ 1319.466162][ T5747] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1319.466194][ T5747] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1319.466227][ T5747] page_type: f5(slab) [ 1319.466260][ T5747] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1319.466296][ T5747] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1319.466333][ T5747] head: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1319.466368][ T5747] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1319.466404][ T5747] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1319.466440][ T5747] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1319.466463][ T5747] page dumped because: kasan: bad access detected [ 1319.466481][ T5747] page_owner tracks the page as allocated [ 1319.466495][ T5747] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 1317204286545 [ 1319.466555][ T5747] post_alloc_hook+0xfd/0x120 [ 1319.466594][ T5747] get_page_from_freelist+0x110d/0x35d0 [ 1319.466638][ T5747] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1319.466684][ T5747] new_slab+0xa9/0x6e0 [ 1319.466723][ T5747] refill_objects+0xe3/0x410 [ 1319.466764][ T5747] __pcs_replace_empty_main+0x35e/0x650 [ 1319.466806][ T5747] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 1319.466859][ T5747] kmalloc_reserve+0xe8/0x350 [ 1319.466913][ T5747] __alloc_skb+0x185/0x710 [ 1319.466949][ T5747] nsim_dev_trap_report_work+0x2af/0xd20 [ 1319.467004][ T5747] process_one_work+0xac7/0x1b10 [ 1319.467055][ T5747] worker_thread+0x5ef/0xe50 [ 1319.467104][ T5747] kthread+0x373/0x450 [ 1319.467148][ T5747] ret_from_fork+0x730/0xd60 [ 1319.467180][ T5747] ret_from_fork_asm+0x1a/0x30 [ 1319.467229][ T5747] page last free pid 16619 tgid 16616 ts 1317158748151 stack trace: [ 1319.467256][ T5747] __free_frozen_pages+0x79f/0x10f0 [ 1319.467292][ T5747] qlist_free_all+0x47/0xf0 [ 1319.467339][ T5747] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1319.467389][ T5747] __kasan_slab_alloc+0x69/0x90 [ 1319.467447][ T5747] __kmalloc_noprof+0x2cc/0x840 [ 1319.467495][ T5747] tomoyo_realpath_from_path+0xb6/0x690 [ 1319.467553][ T5747] tomoyo_path_number_perm+0x23c/0x580 [ 1319.467603][ T5747] security_file_ioctl+0xd3/0x230 [ 1319.467649][ T5747] __x64_sys_ioctl+0xb7/0x210 [ 1319.467694][ T5747] do_syscall_64+0x123/0x790 [ 1319.467742][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.467780][ T5747] [ 1319.467789][ T5747] Memory state around the buggy address: [ 1319.467809][ T5747] ffff8880636db980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.467836][ T5747] ffff8880636dba00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.467864][ T5747] >ffff8880636dba80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.467886][ T5747] ^ [ 1319.467909][ T5747] ffff8880636dbb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.467937][ T5747] ffff8880636dbb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.467959][ T5747] ================================================================== [ 1319.479884][ T5747] ================================================================== [ 1319.479906][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1319.479974][ T5747] Read of size 256 at addr ffff8880636dbaf4 by task kworker/1:3/5747 [ 1319.480006][ T5747] [ 1319.480027][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1319.480082][ T5747] Tainted: [B]=BAD_PAGE [ 1319.480097][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1319.480124][ T5747] Workqueue: usb_hub_wq hub_event [ 1319.480177][ T5747] Call Trace: [ 1319.480190][ T5747] [ 1319.480205][ T5747] dump_stack_lvl+0x100/0x190 [ 1319.480258][ T5747] print_report+0x13d/0x4b0 [ 1319.480316][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.480364][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1319.480429][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1319.480482][ T5747] kasan_report+0xdf/0x1c0 [ 1319.480546][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1319.480607][ T5747] kasan_check_range+0x10f/0x1e0 [ 1319.480650][ T5747] __asan_memcpy+0x23/0x60 [ 1319.480699][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1319.480764][ T5747] fbcon_init+0x1065/0x1830 [ 1319.480823][ T5747] visual_init+0x320/0x620 [ 1319.480885][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1319.480939][ T5747] do_take_over_console+0x501/0x5d0 [ 1319.480987][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1319.481039][ T5747] fbcon_fb_registered+0x364/0x4b0 [ 1319.481100][ T5747] do_register_framebuffer+0x503/0x870 [ 1319.481154][ T5747] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1319.481214][ T5747] ? find_held_lock+0x2b/0x80 [ 1319.481269][ T5747] register_framebuffer+0x23/0x40 [ 1319.481322][ T5747] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1319.481393][ T5747] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1319.481463][ T5747] drm_fb_helper_initial_config+0x44/0x60 [ 1319.481516][ T5747] drm_fbdev_client_hotplug+0x19e/0x220 [ 1319.481564][ T5747] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1319.481611][ T5747] drm_client_register+0x197/0x280 [ 1319.481666][ T5747] drm_fbdev_client_setup+0x155/0x480 [ 1319.481714][ T5747] drm_client_setup+0x160/0x1a0 [ 1319.481758][ T5747] gud_probe+0x1835/0x1c20 [ 1319.481815][ T5747] ? __pfx_gud_probe+0x10/0x10 [ 1319.481860][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.481909][ T5747] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1319.481959][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1319.482011][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.482058][ T5747] ? __pm_runtime_set_status+0x13c/0x970 [ 1319.482113][ T5747] usb_probe_interface+0x386/0x9b0 [ 1319.482178][ T5747] ? __pfx_usb_probe_interface+0x10/0x10 [ 1319.482238][ T5747] ? kernfs_put+0x3f/0x60 [ 1319.482281][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.482328][ T5747] ? sysfs_create_link+0x68/0xc0 [ 1319.482366][ T5747] ? __pfx_usb_probe_interface+0x10/0x10 [ 1319.482428][ T5747] really_probe+0x241/0xa60 [ 1319.482473][ T5747] __driver_probe_device+0x210/0x460 [ 1319.482517][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.482567][ T5747] driver_probe_device+0x4a/0x140 [ 1319.482613][ T5747] __device_attach_driver+0x1df/0x320 [ 1319.482660][ T5747] ? __pfx___device_attach_driver+0x10/0x10 [ 1319.482758][ T5747] bus_for_each_drv+0x159/0x1e0 [ 1319.482820][ T5747] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1319.482881][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.482927][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 [ 1319.482983][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.483029][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1319.483079][ T5747] __device_attach+0x1e4/0x4d0 [ 1319.483124][ T5747] ? __pfx___device_attach+0x10/0x10 [ 1319.483169][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.483216][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 [ 1319.483262][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.483313][ T5747] device_initial_probe+0xaf/0xd0 [ 1319.483360][ T5747] bus_probe_device+0x64/0x160 [ 1319.483401][ T5747] device_add+0x121d/0x1970 [ 1319.483456][ T5747] ? __pfx_device_add+0x10/0x10 [ 1319.483505][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.483552][ T5747] ? mark_held_locks+0x40/0x70 [ 1319.483616][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.483664][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.483723][ T5747] usb_set_configuration+0xd97/0x1c60 [ 1319.483794][ T5747] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1319.483841][ T5747] usb_generic_driver_probe+0xa1/0xe0 [ 1319.483887][ T5747] usb_probe_device+0xef/0x400 [ 1319.483941][ T5747] ? __pfx_usb_probe_device+0x10/0x10 [ 1319.484009][ T5747] really_probe+0x241/0xa60 [ 1319.484061][ T5747] __driver_probe_device+0x210/0x460 [ 1319.484104][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.484154][ T5747] driver_probe_device+0x4a/0x140 [ 1319.484204][ T5747] __device_attach_driver+0x1df/0x320 [ 1319.484251][ T5747] ? __pfx___device_attach_driver+0x10/0x10 [ 1319.484297][ T5747] bus_for_each_drv+0x159/0x1e0 [ 1319.484358][ T5747] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1319.484421][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.484468][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 [ 1319.484518][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.484565][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1319.484615][ T5747] __device_attach+0x1e4/0x4d0 [ 1319.484659][ T5747] ? __pfx___device_attach+0x10/0x10 [ 1319.484704][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.484752][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 [ 1319.484796][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.484847][ T5747] device_initial_probe+0xaf/0xd0 [ 1319.484894][ T5747] bus_probe_device+0x64/0x160 [ 1319.484934][ T5747] device_add+0x121d/0x1970 [ 1319.484994][ T5747] ? __pfx_device_add+0x10/0x10 [ 1319.485044][ T5747] ? usb_detect_static_quirks+0x335/0x3e0 [ 1319.485094][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.485146][ T5747] usb_new_device.part.0+0xcc2/0x1686 [ 1319.485206][ T5747] ? do_raw_spin_lock+0x128/0x260 [ 1319.485249][ T5747] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1319.485305][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.485351][ T5747] ? mark_held_locks+0x40/0x70 [ 1319.485411][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.485463][ T5747] hub_event.cold+0x1e3/0xe90 [ 1319.485537][ T5747] ? __pfx_hub_event+0x10/0x10 [ 1319.485588][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.485635][ T5747] ? __lock_acquire+0x1c20/0x1ec0 [ 1319.485699][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.485746][ T5747] ? lock_acquire+0x1d1/0x380 [ 1319.485806][ T5747] ? process_one_work+0xa2c/0x1b10 [ 1319.485862][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.485910][ T5747] ? process_one_work+0x906/0x1b10 [ 1319.485964][ T5747] ? process_one_work+0x906/0x1b10 [ 1319.486020][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.486072][ T5747] process_one_work+0xac7/0x1b10 [ 1319.486137][ T5747] ? __pfx_process_one_work+0x10/0x10 [ 1319.486193][ T5747] ? lock_acquire+0x1d1/0x380 [ 1319.486260][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.486311][ T5747] worker_thread+0x5ef/0xe50 [ 1319.486371][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 1319.486427][ T5747] ? kthread+0x13a/0x450 [ 1319.486474][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 1319.486528][ T5747] kthread+0x373/0x450 [ 1319.486575][ T5747] ? __pfx_kthread+0x10/0x10 [ 1319.486625][ T5747] ret_from_fork+0x730/0xd60 [ 1319.486665][ T5747] ? __pfx_ret_from_fork+0x10/0x10 [ 1319.486703][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1319.486750][ T5747] ? __switch_to+0x800/0x10f0 [ 1319.486799][ T5747] ? __switch_to_asm+0x39/0x70 [ 1319.486836][ T5747] ? __pfx_kthread+0x10/0x10 [ 1319.486886][ T5747] ret_from_fork_asm+0x1a/0x30 [ 1319.486934][ T5747] [ 1319.486949][ T5747] [ 1319.486959][ T5747] Allocated by task 16625: [ 1319.486982][ T5747] kasan_save_stack+0x30/0x50 [ 1319.487034][ T5747] kasan_save_track+0x14/0x30 [ 1319.487086][ T5747] __kasan_kmalloc+0xaa/0xb0 [ 1319.487137][ T5747] __kmalloc_noprof+0x32f/0x840 [ 1319.487185][ T5747] tomoyo_realpath_from_path+0xb6/0x690 [ 1319.487260][ T5747] tomoyo_path_perm+0x276/0x460 [ 1319.487304][ T5747] tomoyo_path_symlink+0x97/0xe0 [ 1319.487337][ T5747] security_path_symlink+0x152/0x2d0 [ 1319.487381][ T5747] filename_symlinkat+0x122/0x560 [ 1319.487416][ T5747] __x64_sys_symlinkat+0x9c/0xe0 [ 1319.487451][ T5747] do_syscall_64+0x123/0x790 [ 1319.487498][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.487536][ T5747] [ 1319.487545][ T5747] Freed by task 16625: [ 1319.487562][ T5747] kasan_save_stack+0x30/0x50 [ 1319.487617][ T5747] kasan_save_track+0x14/0x30 [ 1319.487669][ T5747] kasan_save_free_info+0x3b/0x70 [ 1319.487710][ T5747] __kasan_slab_free+0x5f/0x80 [ 1319.487764][ T5747] kfree+0x22b/0x6d0 [ 1319.487801][ T5747] tomoyo_realpath_from_path+0x19c/0x690 [ 1319.487857][ T5747] tomoyo_path_perm+0x276/0x460 [ 1319.487902][ T5747] tomoyo_path_symlink+0x97/0xe0 [ 1319.487935][ T5747] security_path_symlink+0x152/0x2d0 [ 1319.487983][ T5747] filename_symlinkat+0x122/0x560 [ 1319.488018][ T5747] __x64_sys_symlinkat+0x9c/0xe0 [ 1319.488052][ T5747] do_syscall_64+0x123/0x790 [ 1319.488099][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.488135][ T5747] [ 1319.488144][ T5747] The buggy address belongs to the object at ffff8880636da000 [ 1319.488144][ T5747] which belongs to the cache kmalloc-4k of size 4096 [ 1319.488175][ T5747] The buggy address is located 2804 bytes to the right of [ 1319.488175][ T5747] allocated 4096-byte region [ffff8880636da000, ffff8880636db000) [ 1319.488215][ T5747] [ 1319.488225][ T5747] The buggy address belongs to the physical page: [ 1319.488241][ T5747] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x636d8 [ 1319.488275][ T5747] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1319.488306][ T5747] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1319.488340][ T5747] page_type: f5(slab) [ 1319.488372][ T5747] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1319.488408][ T5747] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1319.488444][ T5747] head: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1319.488480][ T5747] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1319.488516][ T5747] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1319.488551][ T5747] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1319.488574][ T5747] page dumped because: kasan: bad access detected [ 1319.488592][ T5747] page_owner tracks the page as allocated [ 1319.488605][ T5747] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 1317204286545 [ 1319.488664][ T5747] post_alloc_hook+0xfd/0x120 [ 1319.488703][ T5747] get_page_from_freelist+0x110d/0x35d0 [ 1319.488747][ T5747] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1319.488794][ T5747] new_slab+0xa9/0x6e0 [ 1319.488832][ T5747] refill_objects+0xe3/0x410 [ 1319.488874][ T5747] __pcs_replace_empty_main+0x35e/0x650 [ 1319.488915][ T5747] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 1319.488973][ T5747] kmalloc_reserve+0xe8/0x350 [ 1319.489027][ T5747] __alloc_skb+0x185/0x710 [ 1319.489065][ T5747] nsim_dev_trap_report_work+0x2af/0xd20 [ 1319.489115][ T5747] process_one_work+0xac7/0x1b10 [ 1319.489165][ T5747] worker_thread+0x5ef/0xe50 [ 1319.489216][ T5747] kthread+0x373/0x450 [ 1319.489260][ T5747] ret_from_fork+0x730/0xd60 [ 1319.489293][ T5747] ret_from_fork_asm+0x1a/0x30 [ 1319.489326][ T5747] page last free pid 16619 tgid 16616 ts 1317158748151 stack trace: [ 1319.489353][ T5747] __free_frozen_pages+0x79f/0x10f0 [ 1319.489389][ T5747] qlist_free_all+0x47/0xf0 [ 1319.489436][ T5747] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1319.489487][ T5747] __kasan_slab_alloc+0x69/0x90 [ 1319.489543][ T5747] __kmalloc_noprof+0x2cc/0x840 [ 1319.489590][ T5747] tomoyo_realpath_from_path+0xb6/0x690 [ 1319.489648][ T5747] tomoyo_path_number_perm+0x23c/0x580 [ 1319.489694][ T5747] security_file_ioctl+0xd3/0x230 [ 1319.489739][ T5747] __x64_sys_ioctl+0xb7/0x210 [ 1319.489784][ T5747] do_syscall_64+0x123/0x790 [ 1319.489831][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.489869][ T5747] [ 1319.489878][ T5747] Memory state around the buggy address: [ 1319.489897][ T5747] ffff8880636db980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.489925][ T5747] ffff8880636dba00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.489953][ T5747] >ffff8880636dba80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.489979][ T5747] ^ [ 1319.490002][ T5747] ffff8880636dbb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.490030][ T5747] ffff8880636dbb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 6 printk messages dropped ** [ 1319.538450][ T5747] Tainted: [B]=BAD_PAGE [ 1319.538466][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 ** 210 printk messages dropped ** [ 1319.548273][ T5747] >ffff8880636dba80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 9 printk messages dropped ** [ 1319.676432][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1319.676487][ T5747] Tainted: [B]=BAD_PAGE [ 1319.676502][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1319.676530][ T5747] Workqueue: usb_hub_wq hub_event ** 68 printk messages dropped ** [ 1319.680099][ T5747] usb_set_configuration+0xd97/0x1c60 ** 149 printk messages dropped ** [ 1319.860214][ T5747] [ 1319.860235][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1319.860290][ T5747] Tainted: [B]=BAD_PAGE [ 1319.860305][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1319.860333][ T5747] Workqueue: usb_hub_wq hub_event [ 1319.860386][ T5747] Call Trace: [ 1319.860399][ T5747] ** 10 printk messages dropped ** [ 1319.860981][ T5747] fbcon_init+0x1065/0x1830 ** 154 printk messages dropped ** [ 1319.868436][ T5747] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) ** 48 printk messages dropped ** [ 1320.020303][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1320.020365][ T5747] Read of size 256 at addr ffff8880636dbae4 by task kworker/1:3/5747 [ 1320.020397][ T5747] [ 1320.020418][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1320.020473][ T5747] Tainted: [B]=BAD_PAGE [ 1320.020488][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 ** 181 printk messages dropped ** [ 1320.029053][ T5747] __alloc_frozen_pages_noprof+0x2eb/0x3300 ** 34 printk messages dropped ** [ 1320.127890][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1320.127952][ T5747] Read of size 256 at addr ffff8880636dbae0 by task kworker/1:3/5747 [ 1320.127991][ T5747] [ 1320.128011][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1320.128068][ T5747] Tainted: [B]=BAD_PAGE [ 1320.128084][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 ** 100 printk messages dropped ** [ 1320.133233][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 115 printk messages dropped ** [ 1320.244421][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1320.244484][ T5747] Read of size 256 at addr ffff8880636dbadc by task kworker/1:3/5747 [ 1320.244515][ T5747] [ 1320.244536][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1320.244590][ T5747] Tainted: [B]=BAD_PAGE [ 1320.244606][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1320.244633][ T5747] Workqueue: usb_hub_wq hub_event [ 1320.244686][ T5747] Call Trace: [ 1320.244699][ T5747] [ 1320.244714][ T5747] dump_stack_lvl+0x100/0x190 [ 1320.244767][ T5747] print_report+0x13d/0x4b0 [ 1320.244826][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1320.244873][ T5747] ? __virt_addr_valid+0x239/0x430 ** 79 printk messages dropped ** [ 1320.249051][ T5747] __device_attach+0x1e4/0x4d0 ** 128 printk messages dropped ** [ 1320.390410][ T5747] ================================================================== [ 1320.390434][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1320.390497][ T5747] Read of size 256 at addr ffff8880636dbad8 by task kworker/1:3/5747 [ 1320.390528][ T5747] [ 1320.390549][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1320.390603][ T5747] Tainted: [B]=BAD_PAGE ** 9 printk messages dropped ** [ 1320.391011][ T5747] kasan_report+0xdf/0x1c0 ** 187 printk messages dropped ** [ 1320.399846][ T5747] qlist_free_all+0x47/0xf0 ** 18 printk messages dropped ** [ 1320.515314][ T5747] ================================================================== [ 1320.515335][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1320.515398][ T5747] Read of size 256 at addr ffff8880636dbad4 by task kworker/1:3/5747 [ 1320.515429][ T5747] [ 1320.515450][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) ** 36 printk messages dropped ** [ 1320.517331][ T5747] ? _raw_spin_unlock_irqrestore+0x52/0x80 ** 180 printk messages dropped ** [ 1320.672572][ T5747] ================================================================== [ 1320.672596][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1320.672661][ T5747] Read of size 256 at addr ffff8880636dbad0 by task kworker/1:3/5747 [ 1320.672694][ T5747] [ 1320.672715][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) ** 125 printk messages dropped ** [ 1320.679299][ T5747] ? __pfx_kthread+0x10/0x10 ** 92 printk messages dropped ** [ 1320.796095][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1320.796157][ T5747] Read of size 256 at addr ffff8880636dbacc by task kworker/1:3/5747 [ 1320.796188][ T5747] [ 1320.796209][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1320.796263][ T5747] Tainted: [B]=BAD_PAGE [ 1320.796278][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1320.796306][ T5747] Workqueue: usb_hub_wq hub_event [ 1320.796359][ T5747] Call Trace: [ 1320.796372][ T5747] [ 1320.796386][ T5747] dump_stack_lvl+0x100/0x190 [ 1320.796439][ T5747] print_report+0x13d/0x4b0 [ 1320.796498][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1320.796546][ T5747] ? __virt_addr_valid+0x239/0x430 ** 98 printk messages dropped ** [ 1320.801683][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 110 printk messages dropped ** [ 1320.915231][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1320.915293][ T5747] Read of size 256 at addr ffff8880636dbac8 by task kworker/1:3/5747 [ 1320.915325][ T5747] [ 1320.915345][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1320.915399][ T5747] Tainted: [B]=BAD_PAGE [ 1320.915414][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1320.915442][ T5747] Workqueue: usb_hub_wq hub_event [ 1320.915495][ T5747] Call Trace: [ 1320.915508][ T5747] [ 1320.915523][ T5747] dump_stack_lvl+0x100/0x190 [ 1320.915575][ T5747] print_report+0x13d/0x4b0 [ 1320.915634][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1320.915682][ T5747] ? __virt_addr_valid+0x239/0x430 ** 49 printk messages dropped ** [ 1320.918348][ T5747] __device_attach+0x1e4/0x4d0 ** 159 printk messages dropped ** [ 1321.040130][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1321.040192][ T5747] Read of size 256 at addr ffff8880636dbac4 by task kworker/1:3/5747 [ 1321.040223][ T5747] [ 1321.040244][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1321.040299][ T5747] Tainted: [B]=BAD_PAGE [ 1321.040314][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1321.040341][ T5747] Workqueue: usb_hub_wq hub_event [ 1321.040394][ T5747] Call Trace: [ 1321.040408][ T5747] [ 1321.040422][ T5747] dump_stack_lvl+0x100/0x190 ** 26 printk messages dropped ** [ 1321.041934][ T5747] drm_client_setup+0x160/0x1a0 ** 171 printk messages dropped ** [ 1321.049806][ T5747] security_file_ioctl+0xd3/0x230 ** 13 printk messages dropped ** [ 1321.165571][ T5747] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1321.165637][ T5747] Read of size 256 at addr ffff8880636dbac0 by task kworker/1:3/5747 [ 1321.165670][ T5747] [ 1321.165691][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1321.165746][ T5747] Tainted: [B]=BAD_PAGE [ 1321.165761][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1321.165789][ T5747] Workqueue: usb_hub_wq hub_event ** 23 printk messages dropped ** [ 1321.167060][ T5747] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 ** 193 printk messages dropped ** [ 1321.287078][ T5747] [ 1321.287099][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1321.287154][ T5747] Tainted: [B]=BAD_PAGE [ 1321.287169][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1321.287197][ T5747] Workqueue: usb_hub_wq hub_event [ 1321.287266][ T5747] Call Trace: [ 1321.287280][ T5747] [ 1321.287295][ T5747] dump_stack_lvl+0x100/0x190 ** 116 printk messages dropped ** [ 1321.293425][ T5747] ? kthread+0x13a/0x450 ** 97 printk messages dropped ** [ 1321.424458][ T5747] [ 1321.424479][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1321.424534][ T5747] Tainted: [B]=BAD_PAGE [ 1321.424549][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1321.424576][ T5747] Workqueue: usb_hub_wq hub_event [ 1321.424629][ T5747] Call Trace: [ 1321.424642][ T5747] [ 1321.424657][ T5747] dump_stack_lvl+0x100/0x190 [ 1321.424709][ T5747] print_report+0x13d/0x4b0 [ 1321.424768][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1321.424815][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1321.424878][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1321.424931][ T5747] kasan_report+0xdf/0x1c0 ** 48 printk messages dropped ** [ 1321.427530][ T5747] ? __pfx___device_attach+0x10/0x10 ** 160 printk messages dropped ** [ 1321.553377][ T5747] [ 1321.553397][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1321.553452][ T5747] Tainted: [B]=BAD_PAGE [ 1321.553467][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1321.553494][ T5747] Workqueue: usb_hub_wq hub_event [ 1321.553547][ T5747] Call Trace: [ 1321.553560][ T5747] [ 1321.553575][ T5747] dump_stack_lvl+0x100/0x190 [ 1321.553628][ T5747] print_report+0x13d/0x4b0 [ 1321.553687][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1321.553735][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1321.553798][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1321.553850][ T5747] kasan_report+0xdf/0x1c0 ** 10 printk messages dropped ** [ 1321.554464][ T5747] do_register_framebuffer+0x503/0x870 ** 183 printk messages dropped ** [ 1321.562988][ T5747] __x64_sys_ioctl+0xb7/0x210 ** 14 printk messages dropped ** [ 1321.679714][ T5747] [ 1321.679735][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 1321.679790][ T5747] Tainted: [B]=BAD_PAGE [ 1321.679805][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1321.679833][ T5747] Workqueue: usb_hub_wq hub_event [ 1321.679886][ T5747] Call Trace: [ 1321.679899][ T5747] [ 1321.679914][ T5747] dump_stack_lvl+0x100/0x190 [ 1321.679966][ T5747] print_report+0x13d/0x4b0 [ 1321.680030][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1321.680078][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1321.680144][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1321.680196][ T5747] kasan_report+0xdf/0x1c0 [ 1321.680260][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1321.680323][ T5747] kasan_check_range+0x10f/0x1e0 [ 1321.680366][ T5747] __asan_memcpy+0x23/0x60 [ 1321.680415][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1321.680479][ T5747] fbcon_init+0x1065/0x1830 [ 1321.680538][ T5747] visual_init+0x320/0x620 [ 1321.680600][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1321.680650][ T5747] do_take_over_console+0x501/0x5d0 [ 1321.680696][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1321.680747][ T5747] fbcon_fb_registered+0x364/0x4b0 [ 1321.680808][ T5747] do_register_framebuffer+0x503/0x870 [ 1321.680864][ T5747] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1321.680924][ T5747] ? find_held_lock+0x2b/0x80 [ 1321.680984][ T5747] register_framebuffer+0x23/0x40 [ 1321.681036][ T5747] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1321.681109][ T5747] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1321.681182][ T5747] drm_fb_helper_initial_config+0x44/0x60 [ 1321.681237][ T5747] drm_fbdev_client_hotplug+0x19e/0x220 [ 1321.681285][ T5747] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1321.681331][ T5747] drm_client_register+0x197/0x280 [ 1321.681387][ T5747] drm_fbdev_client_setup+0x155/0x480 [ 1321.681435][ T5747] drm_client_setup+0x160/0x1a0 [ 1321.681479][ T5747] gud_probe+0x1835/0x1c20 [ 1321.681535][ T5747] ? __pfx_gud_probe+0x10/0x10 [ 1321.681581][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1321.681631][ T5747] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1321.681680][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1321.681726][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1321.681773][ T5747] ? __pm_runtime_set_status+0x13c/0x970 [ 1321.681828][ T5747] usb_probe_interface+0x386/0x9b0 [ 1321.681894][ T5747] ? __pfx_usb_probe_interface+0x10/0x10 [ 1321.681954][ T5747] ? kernfs_put+0x3f/0x60 [ 1321.682003][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1321.682050][ T5747] ? sysfs_create_link+0x68/0xc0 [ 1321.682088][ T5747] ? __pfx_usb_probe_interface+0x10/0x10 [ 1321.682150][ T5747] really_probe+0x241/0xa60 [ 1321.682266][ T5747] __driver_probe_device+0x210/0x460 [ 1321.682309][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1321.682360][ T5747] driver_probe_device+0x4a/0x140 [ 1321.682405][ T5747] __device_attach_driver+0x1df/0x320 [ 1321.682452][ T5747] ? __pfx___device_attach_driver+0x10/0x10 [ 1321.682497][ T5747] bus_for_each_drv+0x159/0x1e0 [ 1321.682559][ T5747] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1321.682620][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1321.682667][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 [ 1321.682717][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1321.682764][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1321.682814][ T5747] __device_attach+0x1e4/0x4d0 [ 1321.682859][ T5747] ? __pfx___device_attach+0x10/0x10 ** 50 printk messages dropped ** [ 1321.685448][ T5747] ? lock_acquire+0x1d1/0x380 ** 111 printk messages dropped ** [ 1321.814839][ T5747] Tainted: [B]=BAD_PAGE ** 130 printk messages dropped ** [ 1321.821519][ T5747] ? __pfx_kthread+0x10/0x10 ** 175 printk messages dropped ** [ 1322.290121][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 ** 192 printk messages dropped ** [ 1322.794218][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 197 printk messages dropped ** [ 1322.821311][ T5747] drm_client_setup+0x160/0x1a0 ** 177 printk messages dropped ** [ 1322.829478][ T5747] ffff8880636db980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 234 printk messages dropped ** [ 1322.876483][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 ** 221 printk messages dropped ** [ 1322.912470][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1322.912498][ T5747] Workqueue: usb_hub_wq hub_event [ 1322.912549][ T5747] Call Trace: ** 30 printk messages dropped ** [ 1322.914191][ T5747] ? __pfx_gud_probe+0x10/0x10 ** 189 printk messages dropped ** [ 1322.963646][ T5747] Workqueue: usb_hub_wq hub_event [ 1322.963699][ T5747] Call Trace: [ 1322.963712][ T5747] [ 1322.963728][ T5747] dump_stack_lvl+0x100/0x190 [ 1322.963780][ T5747] print_report+0x13d/0x4b0 [ 1322.963839][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1322.963887][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1322.963952][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1322.964010][ T5747] kasan_report+0xdf/0x1c0 [ 1322.964075][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 62 printk messages dropped ** [ 1322.967373][ T5747] usb_probe_device+0xef/0x400 ** 149 printk messages dropped ** [ 1323.021938][ T5747] Workqueue: usb_hub_wq hub_event [ 1323.022000][ T5747] Call Trace: [ 1323.022014][ T5747] [ 1323.022030][ T5747] dump_stack_lvl+0x100/0x190 [ 1323.022085][ T5747] print_report+0x13d/0x4b0 [ 1323.022148][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1323.022198][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.022266][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.022321][ T5747] kasan_report+0xdf/0x1c0 [ 1323.022388][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.022451][ T5747] kasan_check_range+0x10f/0x1e0 [ 1323.022495][ T5747] __asan_memcpy+0x23/0x60 [ 1323.022544][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1323.022608][ T5747] fbcon_init+0x1065/0x1830 [ 1323.022671][ T5747] visual_init+0x320/0x620 ** 53 printk messages dropped ** [ 1323.025461][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 154 printk messages dropped ** [ 1323.085241][ T5747] Call Trace: [ 1323.085255][ T5747] [ 1323.085271][ T5747] dump_stack_lvl+0x100/0x190 [ 1323.085323][ T5747] print_report+0x13d/0x4b0 [ 1323.085383][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1323.085430][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.085495][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.085548][ T5747] kasan_report+0xdf/0x1c0 [ 1323.085613][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.085673][ T5747] kasan_check_range+0x10f/0x1e0 ** 6 printk messages dropped ** [ 1323.086050][ T5747] do_fbcon_takeover+0xe9/0x210 ** 181 printk messages dropped ** [ 1323.094551][ T5747] __kmalloc_noprof+0x2cc/0x840 ** 24 printk messages dropped ** [ 1323.146891][ T5747] [ 1323.146905][ T5747] dump_stack_lvl+0x100/0x190 [ 1323.146958][ T5747] print_report+0x13d/0x4b0 [ 1323.147023][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1323.147070][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.147135][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.147188][ T5747] kasan_report+0xdf/0x1c0 ** 44 printk messages dropped ** [ 1323.149606][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 ** 170 printk messages dropped ** [ 1323.239883][ T5747] [ 1323.239898][ T5747] dump_stack_lvl+0x100/0x190 [ 1323.239951][ T5747] print_report+0x13d/0x4b0 [ 1323.240015][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1323.240063][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.240127][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.240180][ T5747] kasan_report+0xdf/0x1c0 [ 1323.240244][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.240304][ T5747] kasan_check_range+0x10f/0x1e0 [ 1323.240348][ T5747] __asan_memcpy+0x23/0x60 [ 1323.240397][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1323.240460][ T5747] fbcon_init+0x1065/0x1830 [ 1323.240520][ T5747] visual_init+0x320/0x620 [ 1323.240582][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1323.240632][ T5747] do_take_over_console+0x501/0x5d0 [ 1323.240678][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1323.240729][ T5747] fbcon_fb_registered+0x364/0x4b0 ** 91 printk messages dropped ** [ 1323.245490][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 113 printk messages dropped ** [ 1323.297129][ T5747] [ 1323.297144][ T5747] dump_stack_lvl+0x100/0x190 [ 1323.297197][ T5747] print_report+0x13d/0x4b0 [ 1323.297256][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1323.297304][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.297369][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 113 printk messages dropped ** [ 1323.303370][ T5747] ? __pfx_worker_thread+0x10/0x10 ** 101 printk messages dropped ** [ 1323.355103][ T5747] Call Trace: [ 1323.355116][ T5747] [ 1323.355132][ T5747] dump_stack_lvl+0x100/0x190 [ 1323.355185][ T5747] print_report+0x13d/0x4b0 [ 1323.355244][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1323.355292][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.355356][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.355410][ T5747] kasan_report+0xdf/0x1c0 [ 1323.355474][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.355534][ T5747] kasan_check_range+0x10f/0x1e0 [ 1323.355576][ T5747] __asan_memcpy+0x23/0x60 [ 1323.355625][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1323.355690][ T5747] fbcon_init+0x1065/0x1830 [ 1323.355750][ T5747] visual_init+0x320/0x620 ** 82 printk messages dropped ** [ 1323.360011][ T5747] usb_new_device.part.0+0xcc2/0x1686 ** 128 printk messages dropped ** [ 1323.401685][ T5747] print_report+0x13d/0x4b0 [ 1323.401744][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1323.401793][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.401857][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.401911][ T5747] kasan_report+0xdf/0x1c0 [ 1323.401982][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.402042][ T5747] kasan_check_range+0x10f/0x1e0 ** 46 printk messages dropped ** [ 1323.404514][ T5747] ? __pfx___device_attach+0x10/0x10 ** 167 printk messages dropped ** [ 1323.493167][ T5747] dump_stack_lvl+0x100/0x190 [ 1323.493220][ T5747] print_report+0x13d/0x4b0 [ 1323.493279][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1323.493327][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.493392][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.493445][ T5747] kasan_report+0xdf/0x1c0 [ 1323.493509][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.493569][ T5747] kasan_check_range+0x10f/0x1e0 [ 1323.493612][ T5747] __asan_memcpy+0x23/0x60 ** 9 printk messages dropped ** [ 1323.494175][ T5747] ? find_held_lock+0x2b/0x80 ** 175 printk messages dropped ** [ 1323.502446][ T5747] kasan_quarantine_reduce+0x1a0/0x1f0 ** 25 printk messages dropped ** [ 1323.587127][ T5747] Call Trace: [ 1323.587140][ T5747] [ 1323.587155][ T5747] dump_stack_lvl+0x100/0x190 [ 1323.587224][ T5747] print_report+0x13d/0x4b0 [ 1323.587283][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1323.587331][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.587396][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.587449][ T5747] kasan_report+0xdf/0x1c0 [ 1323.587513][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.587572][ T5747] kasan_check_range+0x10f/0x1e0 [ 1323.587618][ T5747] __asan_memcpy+0x23/0x60 [ 1323.587668][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1323.587732][ T5747] fbcon_init+0x1065/0x1830 [ 1323.587793][ T5747] visual_init+0x320/0x620 [ 1323.587855][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1323.587905][ T5747] do_take_over_console+0x501/0x5d0 [ 1323.587951][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1323.588006][ T5747] fbcon_fb_registered+0x364/0x4b0 [ 1323.588067][ T5747] do_register_framebuffer+0x503/0x870 [ 1323.588123][ T5747] ? __pfx_do_register_framebuffer+0x10/0x10 ** 3 printk messages dropped ** [ 1323.588365][ T5747] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 ** 198 printk messages dropped ** [ 1323.662399][ T5747] Call Trace: [ 1323.662413][ T5747] [ 1323.662428][ T5747] dump_stack_lvl+0x100/0x190 [ 1323.662480][ T5747] print_report+0x13d/0x4b0 [ 1323.662539][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1323.662587][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.662651][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.662704][ T5747] kasan_report+0xdf/0x1c0 [ 1323.662768][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.662828][ T5747] kasan_check_range+0x10f/0x1e0 [ 1323.662870][ T5747] __asan_memcpy+0x23/0x60 [ 1323.662919][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1323.662990][ T5747] fbcon_init+0x1065/0x1830 [ 1323.663050][ T5747] visual_init+0x320/0x620 [ 1323.663111][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1323.663161][ T5747] do_take_over_console+0x501/0x5d0 [ 1323.663207][ T5747] do_fbcon_takeover+0xe9/0x210 ** 20 printk messages dropped ** [ 1323.664345][ T5747] usb_probe_interface+0x386/0x9b0 ** 175 printk messages dropped ** [ 1323.672230][ T5747] ================================================================== ** 10 printk messages dropped ** [ 1323.733216][ T5747] [ 1323.733232][ T5747] dump_stack_lvl+0x100/0x190 ** 3 printk messages dropped ** [ 1323.733458][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.733511][ T5747] kasan_report+0xdf/0x1c0 [ 1323.733575][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.733635][ T5747] kasan_check_range+0x10f/0x1e0 [ 1323.733677][ T5747] __asan_memcpy+0x23/0x60 [ 1323.733726][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1323.733790][ T5747] fbcon_init+0x1065/0x1830 [ 1323.733850][ T5747] visual_init+0x320/0x620 [ 1323.733912][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 ** 42 printk messages dropped ** [ 1323.736160][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 170 printk messages dropped ** [ 1323.793243][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.793296][ T5747] kasan_report+0xdf/0x1c0 [ 1323.793360][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.793420][ T5747] kasan_check_range+0x10f/0x1e0 [ 1323.793463][ T5747] __asan_memcpy+0x23/0x60 [ 1323.793513][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1323.793577][ T5747] fbcon_init+0x1065/0x1830 [ 1323.793637][ T5747] visual_init+0x320/0x620 [ 1323.793699][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1323.793749][ T5747] do_take_over_console+0x501/0x5d0 [ 1323.793795][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1323.793846][ T5747] fbcon_fb_registered+0x364/0x4b0 [ 1323.793907][ T5747] do_register_framebuffer+0x503/0x870 [ 1323.793962][ T5747] ? __pfx_do_register_framebuffer+0x10/0x10 ** 70 printk messages dropped ** [ 1323.797588][ T5747] device_initial_probe+0xaf/0xd0 ** 136 printk messages dropped ** [ 1323.880768][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.880833][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.880886][ T5747] kasan_report+0xdf/0x1c0 [ 1323.880954][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.881019][ T5747] kasan_check_range+0x10f/0x1e0 [ 1323.881062][ T5747] __asan_memcpy+0x23/0x60 [ 1323.881111][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1323.881175][ T5747] fbcon_init+0x1065/0x1830 [ 1323.881234][ T5747] visual_init+0x320/0x620 ** 21 printk messages dropped ** [ 1323.882418][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 191 printk messages dropped ** [ 1323.967111][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1323.967175][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.967243][ T5747] kasan_report+0xdf/0x1c0 [ 1323.967308][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1323.967368][ T5747] kasan_check_range+0x10f/0x1e0 [ 1323.967411][ T5747] __asan_memcpy+0x23/0x60 [ 1323.967460][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1323.967525][ T5747] fbcon_init+0x1065/0x1830 [ 1323.967586][ T5747] visual_init+0x320/0x620 [ 1323.967655][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1323.967708][ T5747] do_take_over_console+0x501/0x5d0 [ 1323.967754][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1323.967806][ T5747] fbcon_fb_registered+0x364/0x4b0 [ 1323.967867][ T5747] do_register_framebuffer+0x503/0x870 [ 1323.967921][ T5747] ? __pfx_do_register_framebuffer+0x10/0x10 ** 18 printk messages dropped ** [ 1323.968947][ T5747] ? __pfx_usb_probe_interface+0x10/0x10 ** 186 printk messages dropped ** [ 1324.341447][ T5747] dump_stack_lvl+0x100/0x190 [ 1324.341499][ T5747] print_report+0x13d/0x4b0 [ 1324.341558][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1324.341607][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1324.341671][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.341724][ T5747] kasan_report+0xdf/0x1c0 [ 1324.341788][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.341848][ T5747] kasan_check_range+0x10f/0x1e0 [ 1324.341891][ T5747] __asan_memcpy+0x23/0x60 ** 41 printk messages dropped ** [ 1324.344122][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 ** 172 printk messages dropped ** [ 1324.356365][ T5747] print_report+0x13d/0x4b0 [ 1324.356423][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1324.356471][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1324.356535][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.356588][ T5747] kasan_report+0xdf/0x1c0 [ 1324.356653][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.356713][ T5747] kasan_check_range+0x10f/0x1e0 ** 79 printk messages dropped ** [ 1324.360819][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 135 printk messages dropped ** [ 1324.366483][ T5747] print_report+0x13d/0x4b0 [ 1324.366542][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1324.366590][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1324.366653][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.366707][ T5747] kasan_report+0xdf/0x1c0 [ 1324.366771][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.366831][ T5747] kasan_check_range+0x10f/0x1e0 [ 1324.366874][ T5747] __asan_memcpy+0x23/0x60 [ 1324.366923][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1324.366991][ T5747] fbcon_init+0x1065/0x1830 [ 1324.367051][ T5747] visual_init+0x320/0x620 [ 1324.367113][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 ** 48 printk messages dropped ** [ 1324.369633][ T5747] ? __pfx_device_add+0x10/0x10 ** 162 printk messages dropped ** [ 1324.376633][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1324.376681][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1324.376744][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.376797][ T5747] kasan_report+0xdf/0x1c0 [ 1324.376859][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 60 printk messages dropped ** [ 1324.380053][ T5747] ? __pfx_usb_generic_driver_probe+0x10/0x10 ** 156 printk messages dropped ** [ 1324.386720][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1324.386767][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1324.386831][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.386883][ T5747] kasan_report+0xdf/0x1c0 [ 1324.386946][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.387011][ T5747] kasan_check_range+0x10f/0x1e0 [ 1324.387053][ T5747] __asan_memcpy+0x23/0x60 [ 1324.387102][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1324.387165][ T5747] fbcon_init+0x1065/0x1830 [ 1324.387241][ T5747] visual_init+0x320/0x620 ** 84 printk messages dropped ** [ 1324.391582][ T5747] ? __pfx_usb_new_device.part.0+0x10/0x10 ** 127 printk messages dropped ** [ 1324.396841][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1324.396888][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1324.396951][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.397008][ T5747] kasan_report+0xdf/0x1c0 [ 1324.397071][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.397131][ T5747] kasan_check_range+0x10f/0x1e0 [ 1324.397174][ T5747] __asan_memcpy+0x23/0x60 [ 1324.397223][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1324.397287][ T5747] fbcon_init+0x1065/0x1830 [ 1324.397348][ T5747] visual_init+0x320/0x620 [ 1324.397409][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1324.397459][ T5747] do_take_over_console+0x501/0x5d0 ** 54 printk messages dropped ** [ 1324.400291][ T5747] usb_generic_driver_probe+0xa1/0xe0 ** 156 printk messages dropped ** [ 1324.413260][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1324.413323][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.413376][ T5747] kasan_report+0xdf/0x1c0 [ 1324.413439][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.413499][ T5747] kasan_check_range+0x10f/0x1e0 [ 1324.413541][ T5747] __asan_memcpy+0x23/0x60 [ 1324.413590][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1324.413653][ T5747] fbcon_init+0x1065/0x1830 [ 1324.413713][ T5747] visual_init+0x320/0x620 ** 53 printk messages dropped ** [ 1324.416491][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 159 printk messages dropped ** [ 1324.444753][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1324.444817][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.444870][ T5747] kasan_report+0xdf/0x1c0 [ 1324.444934][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.444999][ T5747] kasan_check_range+0x10f/0x1e0 [ 1324.445042][ T5747] __asan_memcpy+0x23/0x60 [ 1324.445094][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1324.445158][ T5747] fbcon_init+0x1065/0x1830 [ 1324.445218][ T5747] visual_init+0x320/0x620 [ 1324.445281][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 ** 36 printk messages dropped ** [ 1324.447248][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 176 printk messages dropped ** [ 1324.503500][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.503553][ T5747] kasan_report+0xdf/0x1c0 [ 1324.503617][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.503677][ T5747] kasan_check_range+0x10f/0x1e0 [ 1324.503720][ T5747] __asan_memcpy+0x23/0x60 [ 1324.503768][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1324.503832][ T5747] fbcon_init+0x1065/0x1830 [ 1324.503892][ T5747] visual_init+0x320/0x620 [ 1324.503954][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 ** 64 printk messages dropped ** [ 1324.507303][ T5747] bus_for_each_drv+0x159/0x1e0 ** 148 printk messages dropped ** [ 1324.587473][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1324.587538][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.587596][ T5747] kasan_report+0xdf/0x1c0 [ 1324.587660][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.587720][ T5747] kasan_check_range+0x10f/0x1e0 [ 1324.587763][ T5747] __asan_memcpy+0x23/0x60 [ 1324.587812][ T5747] fbcon_prepare_logo+0x94e/0xc60 ** 15 printk messages dropped ** [ 1324.588725][ T5747] drm_client_register+0x197/0x280 ** 177 printk messages dropped ** [ 1324.596903][ T5747] ** 21 printk messages dropped ** [ 1324.653842][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1324.653906][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.653960][ T5747] kasan_report+0xdf/0x1c0 [ 1324.654030][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.654090][ T5747] kasan_check_range+0x10f/0x1e0 [ 1324.654132][ T5747] __asan_memcpy+0x23/0x60 [ 1324.654181][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1324.654245][ T5747] fbcon_init+0x1065/0x1830 [ 1324.654304][ T5747] visual_init+0x320/0x620 [ 1324.654366][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 ** 18 printk messages dropped ** [ 1324.655392][ T5747] ? _raw_spin_unlock_irqrestore+0x52/0x80 ** 193 printk messages dropped ** [ 1324.714092][ T5747] ? __virt_addr_valid+0x239/0x430 ** 1 printk messages dropped ** [ 1324.714211][ T5747] kasan_report+0xdf/0x1c0 [ 1324.714274][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1324.714335][ T5747] kasan_check_range+0x10f/0x1e0 [ 1324.714377][ T5747] __asan_memcpy+0x23/0x60 [ 1324.714426][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1324.714491][ T5747] fbcon_init+0x1065/0x1830 ** 39 printk messages dropped ** [ 1324.716615][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 ** 180 printk messages dropped ** [ 1324.807899][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1324.807963][ T5747] fbcon_init+0x1065/0x1830 [ 1324.808028][ T5747] visual_init+0x320/0x620 [ 1324.808090][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 ** 50 printk messages dropped ** [ 1324.810701][ T5747] ? mark_held_locks+0x40/0x70 ** 168 printk messages dropped ** [ 1324.860734][ T5747] fbcon_init+0x1065/0x1830 [ 1324.860794][ T5747] visual_init+0x320/0x620 [ 1324.860856][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1324.860906][ T5747] do_take_over_console+0x501/0x5d0 [ 1324.860955][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1324.861012][ T5747] fbcon_fb_registered+0x364/0x4b0 [ 1324.861072][ T5747] do_register_framebuffer+0x503/0x870 ** 90 printk messages dropped ** [ 1324.865799][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 122 printk messages dropped ** [ 1324.940473][ T5747] kasan_check_range+0x10f/0x1e0 [ 1324.940516][ T5747] __asan_memcpy+0x23/0x60 [ 1324.940564][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1324.940628][ T5747] fbcon_init+0x1065/0x1830 [ 1324.940692][ T5747] visual_init+0x320/0x620 [ 1324.940754][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 ** 9 printk messages dropped ** [ 1324.941331][ T5747] drm_fb_helper_initial_config+0x44/0x60 ** 196 printk messages dropped ** [ 1324.993073][ T5747] Workqueue: usb_hub_wq hub_event ** 10 printk messages dropped ** [ 1324.993604][ T5747] __asan_memcpy+0x23/0x60 ** 94 printk messages dropped ** [ 1324.998516][ T5747] ? __lock_acquire+0x1c20/0x1ec0 ** 126 printk messages dropped ** [ 1325.058239][ T5747] __asan_memcpy+0x23/0x60 [ 1325.058287][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1325.058352][ T5747] fbcon_init+0x1065/0x1830 [ 1325.058412][ T5747] visual_init+0x320/0x620 [ 1325.058473][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1325.058524][ T5747] do_take_over_console+0x501/0x5d0 [ 1325.058573][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1325.058625][ T5747] fbcon_fb_registered+0x364/0x4b0 ** 17 printk messages dropped ** [ 1325.059629][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 182 printk messages dropped ** [ 1325.179694][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:3 Tainted: G B syzkaller #0 PREEMPT(full) ** 13 printk messages dropped ** [ 1325.180328][ T5747] __asan_memcpy+0x23/0x60 [ 1325.180377][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1325.180443][ T5747] fbcon_init+0x1065/0x1830 ** 37 printk messages dropped ** [ 1325.182471][ T5747] ? __pfx_bus_for_each_drv+0x10/0x10 ** 181 printk messages dropped ** [ 1325.275523][ T5747] __asan_memcpy+0x23/0x60 [ 1325.275571][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1325.275636][ T5747] fbcon_init+0x1065/0x1830 [ 1325.275702][ T5747] visual_init+0x320/0x620 [ 1325.275765][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1325.275817][ T5747] do_take_over_console+0x501/0x5d0 [ 1325.275864][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1325.275917][ T5747] fbcon_fb_registered+0x364/0x4b0 [ 1325.275986][ T5747] do_register_framebuffer+0x503/0x870 [ 1325.276044][ T5747] ? __pfx_do_register_framebuffer+0x10/0x10 ** 36 printk messages dropped ** [ 1325.277996][ T5747] ? __pfx___device_attach+0x10/0x10 ** 172 printk messages dropped ** [ 1325.353843][ T5747] Call Trace: [ 1325.353857][ T5747] [ 1325.353872][ T5747] dump_stack_lvl+0x100/0x190 [ 1325.353925][ T5747] print_report+0x13d/0x4b0 [ 1325.353989][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1325.354038][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1325.354102][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.354155][ T5747] kasan_report+0xdf/0x1c0 [ 1325.354220][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.354279][ T5747] kasan_check_range+0x10f/0x1e0 [ 1325.354321][ T5747] __asan_memcpy+0x23/0x60 [ 1325.354370][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1325.354434][ T5747] fbcon_init+0x1065/0x1830 ** 23 printk messages dropped ** [ 1325.355727][ T5747] ? __pm_runtime_set_status+0x13c/0x970 ** 186 printk messages dropped ** [ 1325.436268][ T5747] [ 1325.436282][ T5747] dump_stack_lvl+0x100/0x190 [ 1325.436335][ T5747] print_report+0x13d/0x4b0 [ 1325.436395][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1325.436442][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1325.436507][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.436560][ T5747] kasan_report+0xdf/0x1c0 [ 1325.436624][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.436684][ T5747] kasan_check_range+0x10f/0x1e0 ** 44 printk messages dropped ** [ 1325.439060][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 ** 170 printk messages dropped ** [ 1325.497472][ T5747] print_report+0x13d/0x4b0 ** 3 printk messages dropped ** [ 1325.497701][ T5747] kasan_report+0xdf/0x1c0 [ 1325.497765][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.497825][ T5747] kasan_check_range+0x10f/0x1e0 ** 23 printk messages dropped ** [ 1325.499142][ T5747] ? _raw_spin_unlock_irqrestore+0x52/0x80 ** 194 printk messages dropped ** [ 1325.587484][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.587537][ T5747] kasan_report+0xdf/0x1c0 [ 1325.587604][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 21 printk messages dropped ** [ 1325.588820][ T5747] gud_probe+0x1835/0x1c20 ** 153 printk messages dropped ** [ 1325.595936][ T5747] __kmalloc_node_track_caller_noprof+0x6a8/0x870 ** 44 printk messages dropped ** [ 1325.643654][ T5747] kasan_report+0xdf/0x1c0 [ 1325.643718][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.643779][ T5747] kasan_check_range+0x10f/0x1e0 [ 1325.643821][ T5747] __asan_memcpy+0x23/0x60 [ 1325.643870][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1325.643933][ T5747] fbcon_init+0x1065/0x1830 [ 1325.643998][ T5747] visual_init+0x320/0x620 [ 1325.644060][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1325.644110][ T5747] do_take_over_console+0x501/0x5d0 [ 1325.644156][ T5747] do_fbcon_takeover+0xe9/0x210 ** 62 printk messages dropped ** [ 1325.647420][ T5747] bus_for_each_drv+0x159/0x1e0 ** 148 printk messages dropped ** [ 1325.689197][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.689256][ T5747] kasan_report+0xdf/0x1c0 [ 1325.689321][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.689382][ T5747] kasan_check_range+0x10f/0x1e0 [ 1325.689423][ T5747] __asan_memcpy+0x23/0x60 ** 81 printk messages dropped ** [ 1325.693638][ T5747] device_add+0x121d/0x1970 ** 134 printk messages dropped ** [ 1325.762187][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1325.762251][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.762304][ T5747] kasan_report+0xdf/0x1c0 [ 1325.762368][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.762428][ T5747] kasan_check_range+0x10f/0x1e0 [ 1325.762471][ T5747] __asan_memcpy+0x23/0x60 [ 1325.762518][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1325.762583][ T5747] fbcon_init+0x1065/0x1830 [ 1325.762643][ T5747] visual_init+0x320/0x620 [ 1325.762707][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 ** 102 printk messages dropped ** [ 1325.768128][ T5747] worker_thread+0x5ef/0xe50 ** 109 printk messages dropped ** [ 1325.801036][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1325.801100][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.801153][ T5747] kasan_report+0xdf/0x1c0 [ 1325.801217][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.801277][ T5747] kasan_check_range+0x10f/0x1e0 [ 1325.801320][ T5747] __asan_memcpy+0x23/0x60 ** 47 printk messages dropped ** [ 1325.803834][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 ** 167 printk messages dropped ** [ 1325.860788][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1325.860836][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1325.860900][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.860957][ T5747] kasan_report+0xdf/0x1c0 [ 1325.861027][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 48 printk messages dropped ** [ 1325.863623][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 167 printk messages dropped ** [ 1325.934840][ T5747] print_report+0x13d/0x4b0 [ 1325.934900][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1325.934948][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1325.935018][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.935071][ T5747] kasan_report+0xdf/0x1c0 [ 1325.935135][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.935194][ T5747] kasan_check_range+0x10f/0x1e0 [ 1325.935237][ T5747] __asan_memcpy+0x23/0x60 [ 1325.935289][ T5747] fbcon_prepare_logo+0x94e/0xc60 ** 53 printk messages dropped ** [ 1325.938122][ T5747] ? mark_held_locks+0x40/0x70 ** 158 printk messages dropped ** [ 1325.990878][ T5747] dump_stack_lvl+0x100/0x190 [ 1325.990934][ T5747] print_report+0x13d/0x4b0 [ 1325.990999][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1325.991047][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1325.991112][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1325.991166][ T5747] kasan_report+0xdf/0x1c0 [ 1325.991231][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 63 printk messages dropped ** [ 1325.994601][ T5747] ? __pfx_usb_probe_device+0x10/0x10 ** 149 printk messages dropped ** [ 1326.052860][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.052913][ T5747] Call Trace: [ 1326.052926][ T5747] [ 1326.052941][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.053000][ T5747] print_report+0x13d/0x4b0 [ 1326.053059][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.053107][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1326.053171][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1326.053223][ T5747] kasan_report+0xdf/0x1c0 [ 1326.053287][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1326.053348][ T5747] kasan_check_range+0x10f/0x1e0 [ 1326.053390][ T5747] __asan_memcpy+0x23/0x60 ** 38 printk messages dropped ** [ 1326.055460][ T5747] bus_for_each_drv+0x159/0x1e0 ** 171 printk messages dropped ** [ 1326.108668][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.108722][ T5747] Call Trace: [ 1326.108735][ T5747] [ 1326.108751][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.108803][ T5747] print_report+0x13d/0x4b0 [ 1326.108863][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.108914][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1326.108982][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1326.109035][ T5747] kasan_report+0xdf/0x1c0 [ 1326.109099][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1326.109160][ T5747] kasan_check_range+0x10f/0x1e0 [ 1326.109202][ T5747] __asan_memcpy+0x23/0x60 ** 29 printk messages dropped ** [ 1326.110829][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 180 printk messages dropped ** [ 1326.157496][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.157550][ T5747] Call Trace: [ 1326.157563][ T5747] [ 1326.157578][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.157635][ T5747] print_report+0x13d/0x4b0 [ 1326.157693][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.157741][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1326.157806][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1326.157859][ T5747] kasan_report+0xdf/0x1c0 [ 1326.157923][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1326.157988][ T5747] kasan_check_range+0x10f/0x1e0 [ 1326.158030][ T5747] __asan_memcpy+0x23/0x60 [ 1326.158079][ T5747] fbcon_prepare_logo+0x94e/0xc60 [ 1326.158143][ T5747] fbcon_init+0x1065/0x1830 [ 1326.158203][ T5747] visual_init+0x320/0x620 [ 1326.158267][ T5747] do_bind_con_driver.isra.0+0x636/0x9c0 ** 92 printk messages dropped ** [ 1326.163049][ T5747] ? lock_acquire+0x1d1/0x380 ** 113 printk messages dropped ** [ 1326.223839][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1326.223866][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.223919][ T5747] Call Trace: [ 1326.223933][ T5747] [ 1326.223948][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.224005][ T5747] print_report+0x13d/0x4b0 ** 37 printk messages dropped ** [ 1326.226085][ T5747] ? sysfs_create_link+0x68/0xc0 ** 172 printk messages dropped ** [ 1326.260066][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface ** 8 printk messages dropped ** [ 1326.273215][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.273268][ T5747] Call Trace: [ 1326.273282][ T5747] [ 1326.273296][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.273348][ T5747] print_report+0x13d/0x4b0 ** 54 printk messages dropped ** [ 1326.276271][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 ** 162 printk messages dropped ** [ 1326.304456][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.304509][ T5747] Call Trace: [ 1326.304522][ T5747] [ 1326.304537][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.304589][ T5747] print_report+0x13d/0x4b0 [ 1326.304648][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 14 printk messages dropped ** [ 1326.305482][ T5747] ? __pfx_do_register_framebuffer+0x10/0x10 ** 190 printk messages dropped ** [ 1326.314247][ T5747] ^ ** 10 printk messages dropped ** [ 1326.348559][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.348612][ T5747] Call Trace: [ 1326.348625][ T5747] [ 1326.348640][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.348693][ T5747] print_report+0x13d/0x4b0 [ 1326.348752][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 13 printk messages dropped ** [ 1326.349536][ T5747] do_register_framebuffer+0x503/0x870 ** 181 printk messages dropped ** [ 1326.358021][ T5747] tomoyo_path_number_perm+0x23c/0x580 ** 20 printk messages dropped ** [ 1326.394463][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.394516][ T5747] Call Trace: [ 1326.394530][ T5747] [ 1326.394545][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.394598][ T5747] print_report+0x13d/0x4b0 [ 1326.394659][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 109 printk messages dropped ** [ 1326.400462][ T5747] ? __pfx_process_one_work+0x10/0x10 ** 106 printk messages dropped ** [ 1326.432999][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.433053][ T5747] Call Trace: [ 1326.433066][ T5747] [ 1326.433082][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.433137][ T5747] print_report+0x13d/0x4b0 ** 19 printk messages dropped ** [ 1326.434273][ T5747] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 ** 197 printk messages dropped ** [ 1326.487265][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.487318][ T5747] Call Trace: [ 1326.487331][ T5747] [ 1326.487347][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.487398][ T5747] print_report+0x13d/0x4b0 [ 1326.487458][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.487506][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1326.487569][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 14 printk messages dropped ** [ 1326.488419][ T5747] register_framebuffer+0x23/0x40 ** 171 printk messages dropped ** [ 1326.496418][ T5747] page last free pid 16619 tgid 16616 ts 1317158748151 stack trace: ** 27 printk messages dropped ** [ 1326.527140][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.527194][ T5747] Call Trace: [ 1326.527208][ T5747] [ 1326.527240][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.527292][ T5747] print_report+0x13d/0x4b0 ** 27 printk messages dropped ** [ 1326.528859][ T5747] ? __pfx_gud_probe+0x10/0x10 ** 169 printk messages dropped ** [ 1326.536668][ T5747] security_file_ioctl+0xd3/0x230 ** 19 printk messages dropped ** [ 1326.589317][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.589370][ T5747] Call Trace: [ 1326.589384][ T5747] [ 1326.589399][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.589452][ T5747] print_report+0x13d/0x4b0 [ 1326.589511][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 4 printk messages dropped ** [ 1326.589802][ T5747] kasan_check_range+0x10f/0x1e0 ** 157 printk messages dropped ** [ 1326.597422][ T5747] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) ** 54 printk messages dropped ** [ 1326.662343][ T5747] Call Trace: [ 1326.662356][ T5747] [ 1326.662371][ T5747] dump_stack_lvl+0x100/0x190 ** 3 printk messages dropped ** [ 1326.662595][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 167 printk messages dropped ** [ 1326.670655][ T5747] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 ** 47 printk messages dropped ** [ 1326.716886][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.716939][ T5747] Call Trace: [ 1326.716953][ T5747] [ 1326.716968][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.717028][ T5747] print_report+0x13d/0x4b0 [ 1326.717088][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 33 printk messages dropped ** [ 1326.718947][ T5747] ? __pfx_usb_probe_interface+0x10/0x10 ** 183 printk messages dropped ** [ 1326.752938][ T5747] Tainted: [B]=BAD_PAGE [ 1326.752953][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1326.752989][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.753043][ T5747] Call Trace: [ 1326.753057][ T5747] [ 1326.753071][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.753125][ T5747] print_report+0x13d/0x4b0 [ 1326.753184][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.753232][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1326.753296][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 6 printk messages dropped ** [ 1326.753686][ T5747] visual_init+0x320/0x620 ** 148 printk messages dropped ** [ 1326.760998][ T5747] The buggy address is located 2468 bytes to the right of [ 1326.760998][ T5747] allocated 4096-byte region [ffff8880636da000, ffff8880636db000) ** 56 printk messages dropped ** [ 1326.780177][ T5747] Tainted: [B]=BAD_PAGE [ 1326.780192][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1326.780220][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.780273][ T5747] Call Trace: ** 30 printk messages dropped ** [ 1326.781916][ T5747] ? __pfx_gud_probe+0x10/0x10 ** 170 printk messages dropped ** [ 1326.789784][ T5747] __x64_sys_ioctl+0xb7/0x210 ** 16 printk messages dropped ** [ 1326.848939][ T5747] Tainted: [B]=BAD_PAGE [ 1326.848954][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1326.848981][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.849034][ T5747] Call Trace: [ 1326.849047][ T5747] [ 1326.849062][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.849114][ T5747] print_report+0x13d/0x4b0 [ 1326.849173][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 29 printk messages dropped ** [ 1326.850832][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 ** 184 printk messages dropped ** [ 1326.883440][ T5747] Tainted: [B]=BAD_PAGE [ 1326.883456][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1326.883489][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.883541][ T5747] Call Trace: [ 1326.883555][ T5747] [ 1326.883569][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.883621][ T5747] print_report+0x13d/0x4b0 [ 1326.883680][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.883727][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1326.883791][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 5 printk messages dropped ** [ 1326.884125][ T5747] fbcon_init+0x1065/0x1830 ** 147 printk messages dropped ** [ 1326.891479][ T5747] ** 58 printk messages dropped ** [ 1326.943004][ T5747] Tainted: [B]=BAD_PAGE [ 1326.943019][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1326.943047][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.943100][ T5747] Call Trace: ** 27 printk messages dropped ** [ 1326.944608][ T5747] drm_fbdev_client_setup+0x155/0x480 ** 183 printk messages dropped ** [ 1326.952967][ T5747] ffff8880636dba80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 6 printk messages dropped ** [ 1326.986246][ T5747] Tainted: [B]=BAD_PAGE [ 1326.986262][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1326.986289][ T5747] Workqueue: usb_hub_wq hub_event [ 1326.986342][ T5747] Call Trace: [ 1326.986355][ T5747] [ 1326.986370][ T5747] dump_stack_lvl+0x100/0x190 [ 1326.986423][ T5747] print_report+0x13d/0x4b0 [ 1326.986486][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 47 printk messages dropped ** [ 1326.989066][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 ** 167 printk messages dropped ** [ 1327.025026][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1327.025054][ T5747] Workqueue: usb_hub_wq hub_event [ 1327.025107][ T5747] Call Trace: [ 1327.025121][ T5747] [ 1327.025135][ T5747] dump_stack_lvl+0x100/0x190 [ 1327.025188][ T5747] print_report+0x13d/0x4b0 [ 1327.025255][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1327.025303][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1327.025367][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1327.025420][ T5747] kasan_report+0xdf/0x1c0 ** 34 printk messages dropped ** [ 1327.027325][ T5747] ? __pfx_usb_probe_interface+0x10/0x10 ** 177 printk messages dropped ** [ 1327.081071][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1327.081099][ T5747] Workqueue: usb_hub_wq hub_event [ 1327.081152][ T5747] Call Trace: [ 1327.081166][ T5747] [ 1327.081180][ T5747] dump_stack_lvl+0x100/0x190 [ 1327.081242][ T5747] print_report+0x13d/0x4b0 [ 1327.081301][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1327.081349][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1327.081413][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1327.081471][ T5747] kasan_report+0xdf/0x1c0 [ 1327.081534][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 28 printk messages dropped ** [ 1327.083095][ T5747] usb_probe_interface+0x386/0x9b0 ** 178 printk messages dropped ** [ 1327.127804][ T5747] Read of size 256 at addr ffff8880636db984 by task kworker/1:3/5747 ** 3 printk messages dropped ** [ 1327.127926][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1327.127954][ T5747] Workqueue: usb_hub_wq hub_event ** 78 printk messages dropped ** [ 1327.132045][ T5747] ? __pfx___device_attach_driver+0x10/0x10 ** 142 printk messages dropped ** [ 1327.197941][ T5747] Workqueue: usb_hub_wq hub_event [ 1327.197994][ T5747] Call Trace: [ 1327.198007][ T5747] [ 1327.198023][ T5747] dump_stack_lvl+0x100/0x190 [ 1327.198075][ T5747] print_report+0x13d/0x4b0 [ 1327.198133][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1327.198182][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1327.198256][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 75 printk messages dropped ** [ 1327.202241][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 ** 138 printk messages dropped ** [ 1327.266340][ T5747] Workqueue: usb_hub_wq hub_event [ 1327.266393][ T5747] Call Trace: [ 1327.266406][ T5747] [ 1327.266421][ T5747] dump_stack_lvl+0x100/0x190 [ 1327.266479][ T5747] print_report+0x13d/0x4b0 [ 1327.266540][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1327.266587][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1327.266651][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1327.266704][ T5747] kasan_report+0xdf/0x1c0 [ 1327.266767][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 [ 1327.266827][ T5747] kasan_check_range+0x10f/0x1e0 [ 1327.266869][ T5747] __asan_memcpy+0x23/0x60 [ 1327.266918][ T5747] fbcon_prepare_logo+0x94e/0xc60 ** 9 printk messages dropped ** [ 1327.267507][ T5747] register_framebuffer+0x23/0x40 ** 170 printk messages dropped ** [ 1327.275488][ T5747] ret_from_fork_asm+0x1a/0x30 ** 27 printk messages dropped ** [ 1327.350814][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1327.350842][ T5747] Workqueue: usb_hub_wq hub_event [ 1327.350895][ T5747] Call Trace: ** 17 printk messages dropped ** [ 1327.351820][ T5747] do_register_framebuffer+0x503/0x870 ** 179 printk messages dropped ** [ 1327.360226][ T5747] __kmalloc_noprof+0x2cc/0x840 ** 23 printk messages dropped ** [ 1327.395709][ T5747] Workqueue: usb_hub_wq hub_event [ 1327.395762][ T5747] Call Trace: [ 1327.395775][ T5747] [ 1327.395790][ T5747] dump_stack_lvl+0x100/0x190 [ 1327.395843][ T5747] print_report+0x13d/0x4b0 ** 45 printk messages dropped ** [ 1327.398315][ T5747] bus_for_each_drv+0x159/0x1e0 ** 172 printk messages dropped ** [ 1327.438549][ T5747] Workqueue: usb_hub_wq hub_event [ 1327.438603][ T5747] Call Trace: [ 1327.438617][ T5747] [ 1327.438632][ T5747] dump_stack_lvl+0x100/0x190 ** 4 printk messages dropped ** [ 1327.438912][ T5747] kasan_report+0xdf/0x1c0 ** 149 printk messages dropped ** [ 1327.446428][ T5747] __x64_sys_symlinkat+0x9c/0xe0 ** 62 printk messages dropped ** [ 1327.478114][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1327.478142][ T5747] Workqueue: usb_hub_wq hub_event ** 2 printk messages dropped ** [ 1327.478232][ T5747] dump_stack_lvl+0x100/0x190 ** 14 printk messages dropped ** [ 1327.479064][ T5747] fbcon_fb_registered+0x364/0x4b0 ** 167 printk messages dropped ** [ 1327.486967][ T5747] kmalloc_reserve+0xe8/0x350 ** 38 printk messages dropped ** [ 1327.526929][ T5747] dump_stack_lvl+0x100/0x190 [ 1327.526983][ T5747] print_report+0x13d/0x4b0 [ 1327.527045][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1327.527094][ T5747] ? __virt_addr_valid+0x239/0x430 [ 1327.527160][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 36 printk messages dropped ** [ 1327.529197][ T5747] really_probe+0x241/0xa60 ** 166 printk messages dropped ** [ 1327.536700][ T5747] ^ ** 13 printk messages dropped ** [ 1327.568271][ T5747] dump_stack_lvl+0x100/0x190 [ 1327.568327][ T5747] print_report+0x13d/0x4b0 [ 1327.568386][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 2 printk messages dropped ** [ 1327.568555][ T5747] kasan_report+0xdf/0x1c0 [ 1327.568619][ T5747] ? fbcon_prepare_logo+0x94e/0xc60 ** 46 printk messages dropped ** [ 1327.571108][ T5747] __device_attach+0x1e4/0x4d0 ** 139 printk messages dropped ** [ 1327.577417][ T5747] qlist_free_all+0x47/0xf0 [ 1327.577468][ T5747] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1327.577519][ T5747] __kasan_slab_alloc+0x69/0x90 [ 1327.577574][ T5747] __kmalloc_noprof+0x2cc/0x840 ** 51 printk messages dropped ** [ 1327.607051][ T5747] drm_fbdev_client_setup+0x155/0x480 ** 137 printk messages dropped ** [ 1327.613618][ T5747] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1327.613649][ T5747] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1327.613681][ T5747] page_type: f5(slab) [ 1327.613713][ T5747] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1327.613749][ T5747] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 ** 76 printk messages dropped ** [ 1327.658515][ T5747] drm_fbdev_client_hotplug+0x19e/0x220 ** 102 printk messages dropped ** [ 1327.663837][ T5747] ? __pfx_kthread+0x10/0x10 [ 1327.663888][ T5747] ret_from_fork_asm+0x1a/0x30 [ 1327.663936][ T5747] [ 1327.663950][ T5747] [ 1327.663959][ T5747] Allocated by task 16625: [ 1327.663983][ T5747] kasan_save_stack+0x30/0x50 [ 1327.664036][ T5747] kasan_save_track+0x14/0x30 ** 7 printk messages dropped ** [ 1327.664406][ T5747] __x64_sys_symlinkat+0x9c/0xe0 ** 148 printk messages dropped ** [ 1327.702888][ T5747] ? __pfx_usb_generic_driver_probe+0x10/0x10 ** 19 printk messages dropped ** [ 1327.703870][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 14 printk messages dropped ** [ 1327.704661][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 169 printk messages dropped ** [ 1327.750030][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 [ 1327.750081][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1327.750129][ T5747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1327.750179][ T5747] __device_attach+0x1e4/0x4d0 [ 1327.750224][ T5747] ? __pfx___device_attach+0x10/0x10 [ 1327.750270][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 31 printk messages dropped ** [ 1327.751866][ T5747] ? srso_alias_return_thunk+0x5/0xfbef5 ** 148 printk messages dropped ** [ 1327.780709][ T5747] do_fbcon_takeover+0xe9/0x210 [ 1327.780761][ T5747] fbcon_fb_registered+0x364/0x4b0 [ 1327.780822][ T5747] do_register_framebuffer+0x503/0x870 [ 1327.780878][ T5747] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1327.780940][ T5747] ? find_held_lock+0x2b/0x80 [ 1327.781000][ T5747] register_framebuffer+0x23/0x40 [ 1327.781053][ T5747] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1327.781124][ T5747] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1327.781195][ T5747] drm_fb_helper_initial_config+0x44/0x60 ** 12 printk messages dropped ** [ 1327.781844][ T5747] usb_probe_interface+0x386/0x9b0 ** 167 printk messages dropped ** [ 1327.789597][ T5747] [ 1327.789607][ T5747] Memory state around the buggy address: [ 1327.789626][ T5747] ffff8880636db800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1327.789654][ T5747] ffff8880636db880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1327.789681][ T5747] >ffff8880636db900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1327.789703][ T5747] ^ [ 1327.789725][ T5747] ffff8880636db980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 27 printk messages dropped ** [ 1327.829415][ T5747] fbcon_fb_registered+0x364/0x4b0 ** 154 printk messages dropped ** [ 1327.836806][ T5747] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1327.836842][ T5747] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff