last executing test programs: 7.270715548s ago: executing program 1 (id=194): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r3, &(0x7f0000003000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc855}], 0x1, 0x4004004) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/124, 0x7c}], 0x1}, 0x102) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, 0x0, 0x119) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000080), &(0x7f00000000c0), r1, 0x0, '\x00', 0x8, 0x4}) 7.064212258s ago: executing program 1 (id=195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042f"], 0x200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) 7.044387348s ago: executing program 1 (id=196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000002640)=ANY=[@ANYBLOB="12011003265d5d20030473da090000000301090224000106005004090471070294c6"], &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x8c7b, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff3, @empty, 0x9}}, 0x10001fb, 0x2, 0xffff189a, 0x3, 0x26, 0xffffffb7, 0x1a}, 0x9c) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x800, 0x3, 0x8, 0x9, 0x6, 0x9, 0x0, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x5, 0xf, 0x7, 0x8, 0xaf}}, &(0x7f0000000540)=0xb0) 6.960554706s ago: executing program 2 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x11, 0x6, r6, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) open_by_handle_at(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x200000c0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ecm(0x1, 0x7f, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001020000106d0001010790080904800303020600d40624060000b205240001000d5fe2385ac9c61269240f010700000002000900030c241b0300007fb61d9f884d05240100081524120900a317a88b045e4f01a607c0ffcb7e392a06241a8600230524150400090582024000678e9998e4806d9ac9660606"], &(0x7f0000000700)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x3, 0x0, 0x8, 0x40, 0x5}, 0x131, &(0x7f0000000780)={0x5, 0xf, 0x131, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3f, 0x7, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x43, 0xb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0xd4, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0xa, 0xf00f, 0x1, [0xcf, 0xfe403f, 0xffc030, 0x3f3f, 0x3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "362ad53bac9730c2e209bcb65add3e16"}, @generic={0xd9, 0x10, 0x3, "9ef1a57dc0bade450d463e58b2ae58c209d44f991cb607fb9a4a2cad078be1c4e31fd99e22c33feed16c146a35be5ec9d28f22607b0feada8b579d35ae0d90fad09963b2c1e6178251c0b808e4a4a15c4b7d6f84c01659a0bac486439bc473ff4eae5f592a98d8a43b62f212ac87849d83233e3f8f3f6ab78578288775731fd493b410cb8d1e70222361a9ab5ad3194a35151af89f9ec3a232b17a33883e49efa3cad2ada60575d2faa4d7f98ac466a181967931e136d5ede712dbae3b3cb31b7792ca766acbfba1b69d998b255a0d344b75eb5f73f5"}]}, 0x4, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c42}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x446}}, {0xf3, &(0x7f00000005c0)=@string={0xf3, 0x3, "71b6c4d9ccbbb214f0e61644de151992233cc13b5076e84be2905258d98d4892c16f4a11825cb12a0db8fde8970650708ff936180a6a4b377c80a750e93a405b34ae59a8f52f53d89f8c366af0fe204d1fb363945cd720ccd2bc086e6669e1a037a9c8611f7f26329b8d8d64ce08ecbeb5e3cd60a0e8949e90f418f069d9907fe51fcd4f1e9a807c9d3b0be3079c1db282ad0d237ee3b261d3cc0f419568ca9ab4346bc962f4bf534e83019a10680894888743954fff0908d1967d8a9808407df3ce1f7967bec891ca7202e57104a2d79f392b45ae36b47dd074d363d5a11d8b3763398a66389a654a8a3ac01898998c4b"}}, {0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1703e6de685bd804cb25f027f9049a4a20"]}]}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r13, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r13], 0x15) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x3, r6, 0x1, 0x8, 0x6, @multicast}, 0x14) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='gadgetfs\x00', 0x2a4040, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000002806"], 0xfdef) 4.339270072s ago: executing program 2 (id=205): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x82d7f) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0x6f2d, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x32ec, 0x2}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x5, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x8) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x1, 0x9e, 0x7, 0x3, 0x4, 0x0}) sched_setscheduler(r8, 0x6, &(0x7f0000000540)=0x7) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000780)={{0x7fff, 0x4, 0x0, 0x0, 0x4}, [{0x3ff, 0xfffffffffffffffe, 0xf1, 0x7}, {0xa, 0x9, 0x8, 0x6}, {0x1, 0x6, 0x1, 0x10}, {0xb3, 0x66, 0x8, 0xf3}]}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, 0x0) symlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') sendto(0xffffffffffffffff, &(0x7f00000009c0)="b411a59b916aaa4d09721ab2c311ecb41824e0c41d48bfce220fa4519604b0bd71ffdf08cd7b25320060f83d871376429a0ec4d197c7676c1466365e71b79763ecd023ea0c5926e78549c306e9bed6ade1c8fb9ea5950f08b62b73a3f3f36bfd0f1e3952c610942ed4a389985f493b1d24f13cd934e8c45617607bef1e415fef13b32d5bdf20615350115abf82227e5d9a0d67bf107585fbc66ef6bb00fa5293d6e6cd3c36ba5bb3cacddd5425114a7001bbc854ca1a8bda5624dbe8448f1cde3ca73508ae8900000000000000", 0xcd, 0x2404c0c0, &(0x7f0000000940)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x80) syz_usb_control_io$uac2(r0, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0xffffff85}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)=ANY=[], &(0x7f0000000480)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x0, "33cf02a4"}, @global=@item_4={0x3, 0x1, 0x4, "e12d8f2b"}, @main=@item_4={0x3, 0x0, 0x9, "1330fa38"}, @local=@item_4={0x3, 0x2, 0x9, "365160d7"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x5, 0x1, {0x22, 0x914}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x20, 0xb, 0x35, "a9495f68aefa6cb848e7768982a4bafaabaddac611e784fc48036c5566e771b6e18c7bbb1cf219949a781bbaef93161e49d9253046"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7b}, &(0x7f0000000300)={0x20, 0x1, 0xf0, "daa3d2df0724046d6b7f454c6f8f0cc0588ea8e89d163aba7f880b835bec65c49c4fd69f44949d7cab714e0731b14c14cddd4a4be34720087d8e17688acd341ac7495ec99ffe87b01814e8de801dc761a17888f91b7b93172d59ff1f537d45880f7d86f6eb4cefeee9c8c6ae3bd74d72be1338fdea3df8cadf12180fbc925c3cad1b16dff43591353c60a91f86f47fee2ad87e8fa88bbb594f1dac3320ea8e90583115a7796590ca94773f37caabf4891aa04efbb1fcff24162991205b0cbd7cc9047979c6caf892cd429653fde25d06081f63c94add813007c63f3d80bd3ba6940dc5eee95855f82686815f01556500"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x80}}) 3.664423615s ago: executing program 1 (id=210): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000009c0)=0x2, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x48, 0x1, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"}) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 2.779277982s ago: executing program 3 (id=211): ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x3, 0x203, 0x9, 0x6, 0x80, 0x8}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) close_range(r0, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r3, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2041) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffff7fffffffff, 0x7, 0x0, '\x00', {0x800, 0x1, 0x1, 0x800, 0xee01, r5, 0x2000, '\x00', 0xa, 0xffffffffffff8005, 0xb4e7, 0x3, {0x88007, 0xfffffff9}, {0xc7, 0x7f4a}, {0x1, 0x9}, {0x200000008, 0x7}, 0x8000, 0x4, 0x0, 0x9}}}}) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x3, 0x1}}, 0x50) 2.644160568s ago: executing program 3 (id=212): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="e406247cce54f1bf1e68fde89a67b3dfea3060f92bb7f4243fda118f4f153550b02022b6f8d5148b465b98fd98f7bd9cc44c9631e975f0552476c44f6c2e85c70acfd0ee1d4a2486d002534cf671599667b69c27d027198b6e4369905809d7df3c37513302ccaf882c23b2ddc05506f68d138c17c039f397c4d0c911c794cb1e7edb8e9d822f3409078cad3ec5f1b3c04ea91cf1371d13496bf89170b951b39ee0a60c91a0c9e339165c209da032c42733c037e500a37c14c9c092ff95988e88d79fd27a90968b436dd98f842300c363878a55b86f0caf802c06ca3c69bcbfff80c9492d264c4e90c0758cbbf313c3824b97af8a787ac54aea77f1128e2b65c13cb6d8f465f2da8d1b6b5c871a14647244e3f4f44241a02e49ae978c1a5a8a78bd727455136f9524d086ee15d3d5b29ca5d2b112136fa5663c0fcdec7e491d0eae70dad83bb95100e05619fdce4b689cd98a13c281f0c0f0358631f3789f982e9ead2881377b706a198a85c65a0b4473e96adc7b8d247df03db08ee9c3eb966db91b1248174389ad7591c00e8862c604b99c69d6e8410d26fb467056d64794c9feec3b8a90180d57922dd4684d6b39b454aba577ec24da7a957366803fc8083573e7aed698172719a4968fa8e9e23ec939ba27eaeabb3bb2d1e0112f4e3b2ef9d68d808dcb1f4c6cb60aa659f26e8e1682ad13d85a3a3147415a18c1bb746bbf", 0x200}, {0x0, 0x20000}], 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800, 0xf0cb2f4a0c2cfc5d, 0x0) close(0x3) 2.198528094s ago: executing program 0 (id=214): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="2c10", 0x2}, {&(0x7f0000000300)="f6d2341cf45c6568996f1219ec5b1a3e9ab9471d8de19807eafd27dd307c4cc4feb60c289f83438d697d737759162165dc45f551f1598f56e9f463cffb44c4db6f486c285809a4f966657708740a657d2cfe505de759f0ab40148225a77de088719e989d40d65cf5437085b34822c422b563cf71491362f2b2b8af33409d585567b621fdc35dfcc8", 0x88}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) pipe(&(0x7f00000045c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf250c0000005400038008000200ff01000044000400d700981b00eb2e0466b3b726c12bffd2da6226299a994f49a227f189a859257dea5b53a46afb0f8effa4689e815bf8cce16e4a1e1c000000ffffffffffffffff04000100180001801400020076657468305f746f5f626174616476"], 0x80}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 2.015735598s ago: executing program 0 (id=215): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f3f0b32aa4526bc424cc83055c5a8d21e6cb87d69b11022ef02d2b83dda571f8"}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) setreuid(0xffffffffffffffff, 0xee01) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4a}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)) 1.840527008s ago: executing program 0 (id=216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.727267469s ago: executing program 0 (id=217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x200, @rand_addr=' \x01\x00', 0x7}, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f010000000000000000000c241b4800f3ff000500a0050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002000000000000"], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x24010045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='yeah', 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000440)={{0x2, 0x4e20, @empty}, {0x1}, 0x5e, {0x2, 0x4e1e, @rand_addr=0x642100fd}}) shutdown(r0, 0x1) 1.586214517s ago: executing program 3 (id=218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000080)={0x1, "638d0bd930b49e000500001000", 0x400, 0x0, 0xfff, 0x1}) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000000)={0x4, "606a787b669a447bf1bf5fe6d46b840f8fde65172c9e42ae70251895e3019ec4", 0x200, 0xffff62d9, 0x80000001, 0x8, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020603000000000000000000000000050c00078005001400fd00000011000300686173683a6e65742c6e657400000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000003c0)={0x0, 0x8fd9, 0x0, [0xc2c2, 0x93, 0x8, 0x1], [0x80000000, 0x3, 0x7, 0x9, 0x7f, 0xfffffffffffffffa, 0x2, 0x27, 0xd, 0x8a, 0x6, 0xb, 0xe, 0x7, 0x8, 0x8, 0x1, 0x4, 0x55, 0x7, 0x3, 0x51, 0xd0e6, 0x3, 0x8, 0x9b0, 0x7, 0x1, 0xfffffffffffffffa, 0x0, 0x1000, 0x2, 0x9, 0x4, 0x5, 0xffffffffffffffff, 0x0, 0x8001, 0x9, 0x1, 0x1ff, 0xa, 0x1000, 0x1, 0x2, 0x7f, 0x7, 0x9, 0x5, 0x0, 0x6e74, 0x0, 0x5, 0x0, 0x4, 0x6, 0xfffffffffffeffff, 0xf, 0x8, 0x1000, 0x7, 0x7e52, 0x7, 0x9, 0xf0, 0xffffffffffffffff, 0xb3b, 0x71, 0x8000, 0xc0a, 0x4, 0x3, 0x9, 0xd, 0x100, 0x9, 0x9, 0x7fffffffffffffff, 0x81, 0xa1e, 0xef8, 0x8, 0x8, 0x4, 0x40, 0x4, 0x881, 0x48, 0x101, 0x1ff, 0xde9, 0x7fff, 0x4d, 0x9, 0x6, 0x4, 0x9, 0x7fffffff, 0x1ff, 0x8000, 0x4, 0x1, 0x6, 0x8, 0x9, 0x1c00, 0xdb89, 0xaf7, 0x6, 0x100000000, 0x8, 0x1, 0x9, 0x10767b0f, 0x7, 0x2b475267, 0xffffffffffffffff, 0x80, 0x1, 0x7, 0x8]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000b40)={0x0, 0x59, 0x0, [0xc, 0x7, 0x5, 0x9, 0xfe], [0x3, 0xffff, 0x5, 0x4, 0x1, 0xb, 0x3, 0xb, 0x6, 0x9, 0x5, 0x0, 0x727ec8ca, 0x8, 0x6, 0x1, 0x0, 0x5, 0x100000000, 0x9, 0x38b5, 0xe077, 0x200, 0x7, 0x4, 0x3, 0x72, 0x0, 0x3, 0x4, 0x0, 0x4, 0x4, 0x8001, 0x6c2, 0x400, 0x4, 0xffffffffffffe793, 0x1ff, 0x9, 0x90, 0x7f, 0x2, 0x1, 0x5, 0x6, 0x7, 0x7f, 0x7fffffff, 0x4, 0x1ff, 0x0, 0x10, 0x0, 0xff, 0x3, 0x2, 0xe5f1, 0x45f, 0x7, 0x1, 0xc, 0x6, 0x7, 0x3, 0x8, 0x9, 0xfffffffffffffff9, 0x0, 0x8, 0x10000, 0x9, 0x577, 0x8000000000000000, 0x80000000, 0x4, 0xa, 0x9, 0x9, 0xbfe4, 0xffff, 0x0, 0x4, 0x4, 0xb, 0x6, 0xb, 0xfffffffffffffff7, 0x7, 0x6, 0x6, 0x3, 0xa, 0x6, 0x1, 0x7, 0x2, 0x9, 0x8, 0x7, 0x100, 0x8000000000000000, 0x3, 0x88ad, 0x101, 0x2, 0x2, 0xfffffffffffffff9, 0x1, 0x10000, 0x7fffffff, 0x9, 0xfff, 0x45, 0x5, 0x14e, 0x2, 0x101, 0x790, 0x1, 0x6]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000f80)={0x6, 0x2, {0x7ff, @struct={0x100, 0x1ff}, r3, 0x2, 0x9, 0xfffffffffffff3c7, 0x400, 0x4, 0x480, @usage=0x4a09, 0x6, 0xb06, [0x2, 0x6, 0xfff, 0x4, 0x4]}, {0xfffffffffffffffa, @usage=0x3, r4, 0x2000000000000000, 0x0, 0x6, 0x6, 0x3, 0x8, @struct={0x7, 0x3}, 0x6, 0xfff, [0x9, 0xe7, 0x8000000000000001, 0x2, 0x2, 0x6cc]}, {0x8000000000000001, @struct={0x7fff, 0xe12}, 0x0, 0xfc37, 0x8001, 0xc9f, 0x6, 0xfffffffffffffffa, 0x24, @struct={0x8, 0x1}, 0xcc, 0x5c, [0x5, 0x75be, 0x6, 0x0, 0x5, 0x7f]}, {0x0, 0x7, 0x8000000000000001}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x4) timer_create(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000080)={0x1, "638d0bd930b49e000500001000", 0x400, 0x0, 0xfff, 0x1}) (async) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000000)={0x4, "606a787b669a447bf1bf5fe6d46b840f8fde65172c9e42ae70251895e3019ec4", 0x200, 0xffff62d9, 0x80000001, 0x8, 0x5}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020603000000000000000000000000050c00078005001400fd00000011000300686173683a6e65742c6e657400000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000003c0)={0x0, 0x8fd9, 0x0, [0xc2c2, 0x93, 0x8, 0x1], [0x80000000, 0x3, 0x7, 0x9, 0x7f, 0xfffffffffffffffa, 0x2, 0x27, 0xd, 0x8a, 0x6, 0xb, 0xe, 0x7, 0x8, 0x8, 0x1, 0x4, 0x55, 0x7, 0x3, 0x51, 0xd0e6, 0x3, 0x8, 0x9b0, 0x7, 0x1, 0xfffffffffffffffa, 0x0, 0x1000, 0x2, 0x9, 0x4, 0x5, 0xffffffffffffffff, 0x0, 0x8001, 0x9, 0x1, 0x1ff, 0xa, 0x1000, 0x1, 0x2, 0x7f, 0x7, 0x9, 0x5, 0x0, 0x6e74, 0x0, 0x5, 0x0, 0x4, 0x6, 0xfffffffffffeffff, 0xf, 0x8, 0x1000, 0x7, 0x7e52, 0x7, 0x9, 0xf0, 0xffffffffffffffff, 0xb3b, 0x71, 0x8000, 0xc0a, 0x4, 0x3, 0x9, 0xd, 0x100, 0x9, 0x9, 0x7fffffffffffffff, 0x81, 0xa1e, 0xef8, 0x8, 0x8, 0x4, 0x40, 0x4, 0x881, 0x48, 0x101, 0x1ff, 0xde9, 0x7fff, 0x4d, 0x9, 0x6, 0x4, 0x9, 0x7fffffff, 0x1ff, 0x8000, 0x4, 0x1, 0x6, 0x8, 0x9, 0x1c00, 0xdb89, 0xaf7, 0x6, 0x100000000, 0x8, 0x1, 0x9, 0x10767b0f, 0x7, 0x2b475267, 0xffffffffffffffff, 0x80, 0x1, 0x7, 0x8]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000b40)={0x0, 0x59, 0x0, [0xc, 0x7, 0x5, 0x9, 0xfe], [0x3, 0xffff, 0x5, 0x4, 0x1, 0xb, 0x3, 0xb, 0x6, 0x9, 0x5, 0x0, 0x727ec8ca, 0x8, 0x6, 0x1, 0x0, 0x5, 0x100000000, 0x9, 0x38b5, 0xe077, 0x200, 0x7, 0x4, 0x3, 0x72, 0x0, 0x3, 0x4, 0x0, 0x4, 0x4, 0x8001, 0x6c2, 0x400, 0x4, 0xffffffffffffe793, 0x1ff, 0x9, 0x90, 0x7f, 0x2, 0x1, 0x5, 0x6, 0x7, 0x7f, 0x7fffffff, 0x4, 0x1ff, 0x0, 0x10, 0x0, 0xff, 0x3, 0x2, 0xe5f1, 0x45f, 0x7, 0x1, 0xc, 0x6, 0x7, 0x3, 0x8, 0x9, 0xfffffffffffffff9, 0x0, 0x8, 0x10000, 0x9, 0x577, 0x8000000000000000, 0x80000000, 0x4, 0xa, 0x9, 0x9, 0xbfe4, 0xffff, 0x0, 0x4, 0x4, 0xb, 0x6, 0xb, 0xfffffffffffffff7, 0x7, 0x6, 0x6, 0x3, 0xa, 0x6, 0x1, 0x7, 0x2, 0x9, 0x8, 0x7, 0x100, 0x8000000000000000, 0x3, 0x88ad, 0x101, 0x2, 0x2, 0xfffffffffffffff9, 0x1, 0x10000, 0x7fffffff, 0x9, 0xfff, 0x45, 0x5, 0x14e, 0x2, 0x101, 0x790, 0x1, 0x6]}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000f80)={0x6, 0x2, {0x7ff, @struct={0x100, 0x1ff}, r3, 0x2, 0x9, 0xfffffffffffff3c7, 0x400, 0x4, 0x480, @usage=0x4a09, 0x6, 0xb06, [0x2, 0x6, 0xfff, 0x4, 0x4]}, {0xfffffffffffffffa, @usage=0x3, r4, 0x2000000000000000, 0x0, 0x6, 0x6, 0x3, 0x8, @struct={0x7, 0x3}, 0x6, 0xfff, [0x9, 0xe7, 0x8000000000000001, 0x2, 0x2, 0x6cc]}, {0x8000000000000001, @struct={0x7fff, 0xe12}, 0x0, 0xfc37, 0x8001, 0xc9f, 0x6, 0xfffffffffffffffa, 0x24, @struct={0x8, 0x1}, 0xcc, 0x5c, [0x5, 0x75be, 0x6, 0x0, 0x5, 0x7f]}, {0x0, 0x7, 0x8000000000000001}}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x4) (async) timer_create(0x0, 0x0, 0x0) (async) 1.248060611s ago: executing program 3 (id=219): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 912.609582ms ago: executing program 2 (id=220): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f802000000005e140602000000000e00350010000000028000001294", 0x2e}, {&(0x7f0000000240)="975e7f5983fa87dd385df2c7a77d0e81e1910e5355795bea280b16e1ea949379013c4e31286f36a051d25b302d1ad62033ceb4760a93808c770fc7864183496b962732effebc43be1e9313b44f01b83f32ea8a1f1795dfdab0a2c69e4896b9c2b23e53be5b3abdbb3304c51eb3dd435a8533c2ca6473f9c443ab6af98f71a095", 0x80}, {&(0x7f00000002c0)="8b4420b3b29378d5b1af870f6ed331b4d7a43b47dd7213ae", 0x18}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="6abfdc41b802ee1902a0bfeb2a594a81cbd6f568ad0fcbc59c91a392a57e940cbbbd8aaf6c296f2ef63f5ae2189aab8812a3b6bccab2f4ab4cfee1779edc7ef7af3ae3f68bca57c92758fc227bf8d4ab709b498bc7badb7f4833eb333c4d302eb496f9c234417bff6dc18512c4b677a719a2c435b694db445c48ad045e5f14948f725551cd4fa743b7", 0x89}], 0x5}, 0x20000004) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x100400000) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x5) clock_gettime(0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x308a02, 0x0) sendfile(r6, r6, 0x0, 0x9) ioctl$VIDIOC_DQBUF(r5, 0xc04c5611, &(0x7f0000000180)=@multiplanar_mmap={0xfffffff8, 0x3, 0x4, 0x100200, 0x9, {}, {0x1, 0x8, 0xa0, 0x8, 0x3, 0x7, "98ebbad9"}, 0x8, 0x1, {0x0}, 0x1, 0x0, r6}) mlock(&(0x7f000018c000/0x3000)=nil, 0x3000) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000001400efff28bd7000fbdbdf2527190400010000000365240e18b8bd80897f84d2cb6542ca6039b4f76f9309e99b25bdf0d1ea14329f8d82dcb9acd39c1cd8f58c90af8e98d539715e50ddd24f04395e02719a26d066be5fa1"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0x7, &(0x7f0000000200)="952bb3e006ae9a"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r9 = socket(0x10, 0x80002, 0x2) bind$netlink(r9, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$key(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x10}}, 0x40000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 686.204039ms ago: executing program 2 (id=221): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 467.878516ms ago: executing program 1 (id=222): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x5931a207826ebb82) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x13, 0x0, 0x1, [@nested={0x49, 0xf8, 0x0, 0x1, [@generic="e02b4221d3c744305fd369f30020dc8fcc58a362542a963097bf883548fe5ae164e5e6f4e0fb772aa1dc9e0330c9c8d1a98a1e02167abc021907e655c6053ebde9f7c472a7"]}]}, @typed={0x8, 0xe, 0x0, 0x0, @ipv4=@loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)={r3, 0x4, 0x2, "a58d"}, 0xa) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x7f, @local, 0x8}}, 0x7, 0x40, 0x20000, 0xb1, 0x5ed0}, &(0x7f0000000280)=0x98) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x1, 0xc8, "3b1751", "9a3e67", "593f1c", '\x00', 0x7, 0x1, 0x5, 0x3, 0x9, 0x46, 0x4, 0x4, 0x7, 0x9}}}}, 0xf) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 413.295112ms ago: executing program 1 (id=223): r0 = socket(0x11, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x10000, @mcast1, 0x7}, 0x1c, 0x0}, 0x2004810) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r3) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf251e0000000c00065a2c4b695b43fb29cbfd062fe0648f8600010000000100000004002f80e73d98c3844e59494d03321e596956eb3ddea24674be89614d3b39bb88e17df970c75fb1ce1e"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) 342.709385ms ago: executing program 3 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 244.497213ms ago: executing program 2 (id=225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 244.153062ms ago: executing program 0 (id=226): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0xfffffffc, 0xfffffffc, 0x14b4, 0x400000, 0x85, "00000000000000000000ffff00"}) 107.00232ms ago: executing program 3 (id=227): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000100)={0x4000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x8, 0x0, 0xb0, 0x6a9}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0xfffff952, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 58.367944ms ago: executing program 2 (id=228): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x82d7f) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0x6f2d, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x32ec, 0x2}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x5, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x8) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x1, 0x9e, 0x7, 0x3, 0x4, 0x0}) sched_setscheduler(r8, 0x6, &(0x7f0000000540)=0x7) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000780)={{0x7fff, 0x4, 0x0, 0x0, 0x4}, [{0x3ff, 0xfffffffffffffffe, 0xf1, 0x7}, {0xa, 0x9, 0x8, 0x6}, {0x1, 0x6, 0x1, 0x10}, {0xb3, 0x66, 0x8, 0xf3}]}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, 0x0) symlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') sendto(0xffffffffffffffff, &(0x7f00000009c0)="b411a59b916aaa4d09721ab2c311ecb41824e0c41d48bfce220fa4519604b0bd71ffdf08cd7b25320060f83d871376429a0ec4d197c7676c1466365e71b79763ecd023ea0c5926e78549c306e9bed6ade1c8fb9ea5950f08b62b73a3f3f36bfd0f1e3952c610942ed4a389985f493b1d24f13cd934e8c45617607bef1e415fef13b32d5bdf20615350115abf82227e5d9a0d67bf107585fbc66ef6bb00fa5293d6e6cd3c36ba5bb3cacddd5425114a7001bbc854ca1a8bda5624dbe8448f1cde3ca73508ae89000000000000000000", 0xcf, 0x2404c0c0, &(0x7f0000000940)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x80) syz_usb_control_io$uac2(r0, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0xffffff85}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)=ANY=[], &(0x7f0000000480)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x0, "33cf02a4"}, @global=@item_4={0x3, 0x1, 0x4, "e12d8f2b"}, @main=@item_4={0x3, 0x0, 0x9, "1330fa38"}, @local=@item_4={0x3, 0x2, 0x9, "365160d7"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x5, 0x1, {0x22, 0x914}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x20, 0xb, 0x35, "a9495f68aefa6cb848e7768982a4bafaabaddac611e784fc48036c5566e771b6e18c7bbb1cf219949a781bbaef93161e49d9253046"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7b}, &(0x7f0000000300)={0x20, 0x1, 0xf0, "daa3d2df0724046d6b7f454c6f8f0cc0588ea8e89d163aba7f880b835bec65c49c4fd69f44949d7cab714e0731b14c14cddd4a4be34720087d8e17688acd341ac7495ec99ffe87b01814e8de801dc761a17888f91b7b93172d59ff1f537d45880f7d86f6eb4cefeee9c8c6ae3bd74d72be1338fdea3df8cadf12180fbc925c3cad1b16dff43591353c60a91f86f47fee2ad87e8fa88bbb594f1dac3320ea8e90583115a7796590ca94773f37caabf4891aa04efbb1fcff24162991205b0cbd7cc9047979c6caf892cd429653fde25d06081f63c94add813007c63f3d80bd3ba6940dc5eee95855f82686815f01556500"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x80}}) 0s ago: executing program 0 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x2705, &(0x7f0000000080), 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000001540)=[{{&(0x7f0000001080)={0xa, 0x4e20, 0x1, @private2, 0x10003}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x48040) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) migrate_pages(r3, 0x6c, &(0x7f00000035c0)=0x8000000000000000, &(0x7f0000003600)=0x8001) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000140)) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 85.431546][ T5596] cgroup: Unknown subsys name 'net' [ 85.673652][ T5596] cgroup: Unknown subsys name 'cpuset' [ 85.728725][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.705516][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.704392][ T4924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.719624][ T4924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.722401][ T4924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.726786][ T4924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.727717][ T4924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.821899][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.845023][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.847076][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.863454][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.864219][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.924009][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.951267][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.970940][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.972084][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.974699][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.092955][ T822] cfg80211: failed to load regulatory.db [ 92.134013][ T4924] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.159943][ T4924] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.161921][ T4924] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.163707][ T4924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.167401][ T4924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.819195][ T60] Bluetooth: hci0: command tx timeout [ 93.978165][ T60] Bluetooth: hci1: command tx timeout [ 94.068143][ T60] Bluetooth: hci2: command tx timeout [ 94.218124][ T60] Bluetooth: hci3: command tx timeout [ 94.252157][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.253266][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.253475][ T5611] bridge_slave_0: entered allmulticast mode [ 94.255778][ T5611] bridge_slave_0: entered promiscuous mode [ 94.273925][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.290527][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.292155][ T5619] bridge_slave_0: entered allmulticast mode [ 94.301885][ T5619] bridge_slave_0: entered promiscuous mode [ 94.330583][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.330953][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.331129][ T5618] bridge_slave_0: entered allmulticast mode [ 94.333493][ T5618] bridge_slave_0: entered promiscuous mode [ 94.337801][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.343564][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.358108][ T5611] bridge_slave_1: entered allmulticast mode [ 94.363364][ T5611] bridge_slave_1: entered promiscuous mode [ 94.382799][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.383833][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.385704][ T5619] bridge_slave_1: entered allmulticast mode [ 94.415832][ T5619] bridge_slave_1: entered promiscuous mode [ 94.439686][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.439985][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.440394][ T5618] bridge_slave_1: entered allmulticast mode [ 94.442813][ T5618] bridge_slave_1: entered promiscuous mode [ 94.502112][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.502348][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.502541][ T5607] bridge_slave_0: entered allmulticast mode [ 94.505099][ T5607] bridge_slave_0: entered promiscuous mode [ 94.585728][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.586057][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.586638][ T5607] bridge_slave_1: entered allmulticast mode [ 94.593888][ T5607] bridge_slave_1: entered promiscuous mode [ 94.636344][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.649477][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.724126][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.732841][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.747430][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.776847][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.822692][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.886588][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.915465][ T5611] team0: Port device team_slave_0 added [ 94.923393][ T5619] team0: Port device team_slave_0 added [ 94.949106][ T5618] team0: Port device team_slave_0 added [ 94.953214][ T5611] team0: Port device team_slave_1 added [ 94.956280][ T5619] team0: Port device team_slave_1 added [ 94.992390][ T5618] team0: Port device team_slave_1 added [ 95.032989][ T5607] team0: Port device team_slave_0 added [ 95.093530][ T5607] team0: Port device team_slave_1 added [ 95.123511][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.123528][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.123553][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.184699][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.184717][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.184744][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.253511][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.253524][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.253544][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.255523][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.255533][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.255551][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.257405][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.257415][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.257434][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.346958][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.347019][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.347115][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.447464][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.447476][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.447494][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.510072][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.510086][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.510105][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.670349][ T5611] hsr_slave_0: entered promiscuous mode [ 95.671977][ T5611] hsr_slave_1: entered promiscuous mode [ 95.693625][ T5619] hsr_slave_0: entered promiscuous mode [ 95.695017][ T5619] hsr_slave_1: entered promiscuous mode [ 95.696256][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 95.696329][ T5619] Cannot create hsr debugfs directory [ 95.737145][ T5618] hsr_slave_0: entered promiscuous mode [ 95.743157][ T5618] hsr_slave_1: entered promiscuous mode [ 95.747341][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 95.747407][ T5618] Cannot create hsr debugfs directory [ 95.898144][ T60] Bluetooth: hci0: command tx timeout [ 96.030855][ T5607] hsr_slave_0: entered promiscuous mode [ 96.032268][ T5607] hsr_slave_1: entered promiscuous mode [ 96.033409][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 96.033436][ T5607] Cannot create hsr debugfs directory [ 96.060959][ T60] Bluetooth: hci1: command tx timeout [ 96.138159][ T60] Bluetooth: hci2: command tx timeout [ 96.298332][ T60] Bluetooth: hci3: command tx timeout [ 96.801518][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.841907][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.855893][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.897165][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.908774][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.955025][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.983711][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.006175][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.141684][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.173809][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.196402][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.223528][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.237780][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.281699][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.309126][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.355762][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.511412][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.543533][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.560079][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.592600][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.615574][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.652152][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.682130][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.713224][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.873209][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.907633][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.924356][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.953399][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.970620][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.978358][ T60] Bluetooth: hci0: command tx timeout [ 98.002076][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.006570][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.028924][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.120449][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.138249][ T60] Bluetooth: hci1: command tx timeout [ 98.219797][ T60] Bluetooth: hci2: command tx timeout [ 98.261542][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.312529][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.323476][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.323933][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.378256][ T60] Bluetooth: hci3: command tx timeout [ 98.423429][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.423560][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.502157][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.553016][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.553180][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.575949][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.605815][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.605981][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.705913][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.724491][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.770543][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.770719][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.844550][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.845162][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.937285][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.040534][ T184] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.040666][ T184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.097656][ T3415] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.097848][ T3415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.781809][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.058219][ T60] Bluetooth: hci0: command tx timeout [ 100.176582][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.211733][ T5611] veth0_vlan: entered promiscuous mode [ 100.219779][ T60] Bluetooth: hci1: command tx timeout [ 100.298174][ T60] Bluetooth: hci2: command tx timeout [ 100.322747][ T5611] veth1_vlan: entered promiscuous mode [ 100.458240][ T60] Bluetooth: hci3: command tx timeout [ 100.573890][ T5618] veth0_vlan: entered promiscuous mode [ 100.601451][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.614971][ T5611] veth0_macvtap: entered promiscuous mode [ 100.666518][ T5611] veth1_macvtap: entered promiscuous mode [ 100.695819][ T5618] veth1_vlan: entered promiscuous mode [ 100.776940][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.802004][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.854423][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.909351][ T1285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.927321][ T1285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.952637][ T1285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.973244][ T1285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.981351][ T5618] veth0_macvtap: entered promiscuous mode [ 101.005948][ T5619] veth0_vlan: entered promiscuous mode [ 101.055681][ T5618] veth1_macvtap: entered promiscuous mode [ 101.166835][ T5619] veth1_vlan: entered promiscuous mode [ 101.344039][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.360578][ T5607] veth0_vlan: entered promiscuous mode [ 101.407343][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.472302][ T3340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.472331][ T3340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.505871][ T5607] veth1_vlan: entered promiscuous mode [ 101.529841][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.535671][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.537628][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.541406][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.643008][ T5619] veth0_macvtap: entered promiscuous mode [ 101.698062][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.698084][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.705980][ T5619] veth1_macvtap: entered promiscuous mode [ 102.013131][ T5607] veth0_macvtap: entered promiscuous mode [ 102.035142][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.106571][ T5607] veth1_macvtap: entered promiscuous mode [ 102.126823][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.142466][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.142484][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.228650][ T3340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.235513][ T3340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.304514][ T3340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.332019][ T3340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.424468][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.627735][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.640999][ T3383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.641014][ T3383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.737117][ T3383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.783704][ T37] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 102.843322][ T3383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.866990][ T3383] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.867737][ T3383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.092121][ T37] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 103.092152][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.092173][ T37] usb 2-1: Product: syz [ 103.092187][ T37] usb 2-1: Manufacturer: syz [ 103.092202][ T37] usb 2-1: SerialNumber: syz [ 103.171047][ T37] usb 2-1: config 0 descriptor?? [ 103.354237][ T37] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 103.925384][ T1285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.925405][ T1285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.115556][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.115579][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.324829][ T5761] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.364398][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.364419][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.713666][ T3383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.713686][ T3383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.849953][ T5765] FAULT_INJECTION: forcing a failure. [ 105.849953][ T5765] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.850011][ T5765] CPU: 0 UID: 0 PID: 5765 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.850042][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.850063][ T5765] Call Trace: [ 105.850079][ T5765] [ 105.850089][ T5765] dump_stack_lvl+0xe8/0x150 [ 105.850130][ T5765] should_fail_ex+0x46b/0x600 [ 105.850169][ T5765] _copy_to_user+0x31/0xb0 [ 105.850205][ T5765] simple_read_from_buffer+0xe1/0x170 [ 105.850239][ T5765] proc_fail_nth_read+0x1be/0x230 [ 105.850271][ T5765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.850304][ T5765] ? rw_verify_area+0x2ac/0x4e0 [ 105.850335][ T5765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.850365][ T5765] vfs_read+0x212/0xa80 [ 105.850405][ T5765] ? __pfx_vfs_read+0x10/0x10 [ 105.850438][ T5765] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.850471][ T5765] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.850505][ T5765] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 105.850537][ T5765] ? mutex_lock_nested+0x152/0x1d0 [ 105.850561][ T5765] ? fdget_pos+0x252/0x320 [ 105.850596][ T5765] ksys_read+0x156/0x270 [ 105.850643][ T5765] ? __pfx_ksys_read+0x10/0x10 [ 105.850684][ T5765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.850709][ T5765] do_syscall_64+0x15f/0xf80 [ 105.850741][ T5765] ? trace_irq_disable+0x3b/0x140 [ 105.850773][ T5765] ? clear_bhb_loop+0x40/0x90 [ 105.850803][ T5765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.850827][ T5765] RIP: 0033:0x7f8b9fe4d60e [ 105.850854][ T5765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.850874][ T5765] RSP: 002b:00007f8b9e0e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.850899][ T5765] RAX: ffffffffffffffda RBX: 00007f8b9e0e66c0 RCX: 00007f8b9fe4d60e [ 105.850915][ T5765] RDX: 000000000000000f RSI: 00007f8b9e0e60a0 RDI: 0000000000000004 [ 105.850927][ T5765] RBP: 00007f8b9e0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.850938][ T5765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.850949][ T5765] R13: 00007f8ba0106038 R14: 00007f8ba0105fa0 R15: 00007ffc61e506a8 [ 105.850976][ T5765] [ 106.108967][ T37] gspca_stk1135: reg_w 0x203 err -110 [ 106.111292][ T37] gspca_stk1135: serial bus timeout: status=0x00 [ 106.111308][ T37] gspca_stk1135: Sensor write failed [ 106.111346][ T37] gspca_stk1135: serial bus timeout: status=0x00 [ 106.111356][ T37] gspca_stk1135: Sensor write failed [ 106.111394][ T37] gspca_stk1135: serial bus timeout: status=0x00 [ 106.111405][ T37] gspca_stk1135: Sensor read failed [ 106.111449][ T37] gspca_stk1135: serial bus timeout: status=0x00 [ 106.111460][ T37] gspca_stk1135: Sensor read failed [ 106.111472][ T37] gspca_stk1135: Detected sensor type unknown (0x0) [ 106.111512][ T37] gspca_stk1135: serial bus timeout: status=0x00 [ 106.111523][ T37] gspca_stk1135: Sensor read failed [ 106.111557][ T37] gspca_stk1135: serial bus timeout: status=0x00 [ 106.111567][ T37] gspca_stk1135: Sensor read failed [ 106.111605][ T37] gspca_stk1135: serial bus timeout: status=0x00 [ 106.111616][ T37] gspca_stk1135: Sensor write failed [ 106.111653][ T37] gspca_stk1135: serial bus timeout: status=0x00 [ 106.111664][ T37] gspca_stk1135: Sensor write failed [ 106.111761][ T37] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 106.829535][ T37] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.998302][ T37] usb 4-1: Using ep0 maxpacket: 8 [ 107.019918][ T37] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 107.019961][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.019985][ T37] usb 4-1: Product: syz [ 107.020001][ T37] usb 4-1: Manufacturer: syz [ 107.020017][ T37] usb 4-1: SerialNumber: syz [ 107.104077][ T37] usb 4-1: config 0 descriptor?? [ 107.335707][ T5771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.357676][ T5771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.422785][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.459783][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.599463][ T37] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 107.599575][ T37] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 107.731120][ T37] usb 4-1: USB disconnect, device number 2 [ 107.801949][ T5341] usb 2-1: USB disconnect, device number 2 [ 107.945015][ T5789] random: crng reseeded on system resumption [ 108.578111][ T5341] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.712641][ T5779] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.788058][ T5341] usb 2-1: Using ep0 maxpacket: 8 [ 108.949246][ T5341] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 108.949282][ T5341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.988452][ T5779] usb 1-1: Using ep0 maxpacket: 8 [ 108.994850][ T5779] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.033315][ T5779] usb 1-1: config 6 has an invalid interface number: 40 but max is 1 [ 109.033347][ T5779] usb 1-1: config 6 has no interface number 1 [ 109.033403][ T5779] usb 1-1: config 6 interface 0 has no altsetting 0 [ 109.033426][ T5779] usb 1-1: config 6 interface 40 has no altsetting 0 [ 109.089008][ T5779] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=e8.30 [ 109.089042][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.089065][ T5779] usb 1-1: Product: syz [ 109.089081][ T5779] usb 1-1: Manufacturer: syz [ 109.089098][ T5779] usb 1-1: SerialNumber: syz [ 109.566535][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.567072][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.714226][ T5341] pvrusb2: Hardware description: Terratec Grabster AV400 [ 109.714249][ T5341] pvrusb2: ********** [ 109.714257][ T5341] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 109.714270][ T5341] pvrusb2: Important functionality might not be entirely working. [ 109.714279][ T5341] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 109.714291][ T5341] pvrusb2: ********** [ 110.044428][ T2390] pvrusb2: Invalid write control endpoint [ 110.172582][ T5707] usb 2-1: USB disconnect, device number 3 [ 110.266846][ T5779] rndis_host 1-1:6.40: bogus CDC Union [ 110.416016][ T5779] usb 1-1: USB disconnect, device number 2 [ 110.593984][ T2390] pvrusb2: Invalid write control endpoint [ 110.594002][ T2390] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 110.594012][ T2390] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 110.594021][ T2390] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 110.594032][ T2390] pvrusb2: Device being rendered inoperable [ 110.618416][ T1008] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.626789][ T2390] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 110.660765][ T2390] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 110.670193][ T2390] pvrusb2: Attached sub-driver cx25840 [ 110.670228][ T2390] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 110.670240][ T2390] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 110.794669][ T1008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.794706][ T1008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.794730][ T1008] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.794792][ T1008] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.794817][ T1008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.952260][ T1008] usb 4-1: config 0 descriptor?? [ 111.003848][ T5827] warning: `syz.0.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.321262][ T5778] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 111.321304][ T5778] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 111.321333][ T5778] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 111.321362][ T5778] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 111.321392][ T5778] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 111.321422][ T5778] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 111.321451][ T5778] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 111.321479][ T5778] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 111.321509][ T5778] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 111.321537][ T5778] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 111.350945][ T5779] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.578353][ T5778] hid-generic 0000:0000:000E.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 111.594111][ T5779] usb 3-1: Using ep0 maxpacket: 32 [ 111.611165][ T5779] usb 3-1: config index 0 descriptor too short (expected 35561, got 27) [ 111.611194][ T5779] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 111.611214][ T5779] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.611234][ T5779] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 111.611254][ T5779] usb 3-1: config 1 has no interface number 0 [ 111.611297][ T5779] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 111.611320][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.756202][ T1008] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 111.911065][ T5707] usb 4-1: USB disconnect, device number 3 [ 111.921665][ T5779] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 112.024762][ T5779] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 112.025110][ T5779] snd_usb_pod 3-1:1.1: invalid control EP [ 112.025121][ T5779] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 112.057208][ T5779] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 112.060025][ T5779] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 112.087640][ T5833] fido_id[5833]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.118555][ T5836] fido_id[5836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 112.226744][ T5826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.237344][ T5826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.626088][ T5845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.626884][ T5845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.879496][ T5778] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.041674][ T5778] usb 4-1: Using ep0 maxpacket: 32 [ 113.044634][ T5778] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.044666][ T5778] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 113.044693][ T5778] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.047242][ T5778] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 113.047274][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.047298][ T5778] usb 4-1: Product: syz [ 113.047314][ T5778] usb 4-1: Manufacturer: syz [ 113.047330][ T5778] usb 4-1: SerialNumber: syz [ 113.153562][ T5778] usb 4-1: config 0 descriptor?? [ 113.373202][ T5856] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET) [ 113.409693][ T5778] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 113.409733][ T5778] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 113.462976][ T5778] usb 4-1: USB disconnect, device number 4 [ 113.500466][ T5857] netlink: 'syz.1.30': attribute type 11 has an invalid length. [ 113.787643][ T5706] usb 3-1: USB disconnect, device number 2 [ 114.091377][ T5861] syzkaller1: entered promiscuous mode [ 114.091408][ T5861] syzkaller1: entered allmulticast mode [ 114.369794][ T5706] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.568437][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 114.575945][ T5706] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 114.593196][ T5706] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 114.593231][ T5706] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 114.593254][ T5706] usb 3-1: Product: syz [ 114.593270][ T5706] usb 3-1: Manufacturer: syz [ 114.593286][ T5706] usb 3-1: SerialNumber: syz [ 114.758117][ T5707] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 114.886866][ T5706] usb 3-1: Invalid connection information received from device [ 114.922870][ T5707] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.949220][ T5707] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 114.949253][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.949274][ T5707] usb 1-1: Product: syz [ 114.949290][ T5707] usb 1-1: Manufacturer: syz [ 114.949306][ T5707] usb 1-1: SerialNumber: syz [ 114.999441][ T5707] usb 1-1: config 0 descriptor?? [ 115.095611][ T5706] usb 3-1: USB disconnect, device number 3 [ 115.208750][ T5707] cdc_subset 1-1:0.0: probe with driver cdc_subset failed with error -22 [ 115.398105][ T5779] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.450279][ T5706] usb 1-1: USB disconnect, device number 3 [ 115.548148][ T5779] usb 4-1: Using ep0 maxpacket: 32 [ 115.557169][ T5779] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 115.557200][ T5779] usb 4-1: config 0 has no interface number 0 [ 115.557244][ T5779] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 115.557265][ T5779] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid maxpacket 43071, setting to 1024 [ 115.557286][ T5779] usb 4-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.632411][ T5779] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 115.632435][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.632450][ T5779] usb 4-1: Product: syz [ 115.632475][ T5779] usb 4-1: Manufacturer: syz [ 115.632493][ T5779] usb 4-1: SerialNumber: syz [ 115.687678][ T5779] usb 4-1: config 0 descriptor?? [ 115.702987][ T5886] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.734273][ T5779] redrat3 4-1:0.83: Couldn't find all endpoints [ 115.911210][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.911813][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.947444][ T1008] usb 4-1: USB disconnect, device number 5 [ 116.049013][ T5758] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.053343][ T5900] netlink: 14 bytes leftover after parsing attributes in process `syz.1.43'. [ 116.208200][ T5758] usb 3-1: Using ep0 maxpacket: 16 [ 116.215947][ T5758] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 116.215978][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.216000][ T5758] usb 3-1: Product: syz [ 116.216015][ T5758] usb 3-1: Manufacturer: syz [ 116.216031][ T5758] usb 3-1: SerialNumber: syz [ 116.260444][ T5904] loop4: detected capacity change from 0 to 523370496 [ 116.342932][ T5758] usb 3-1: config 0 descriptor?? [ 116.365901][ T5758] gspca_main: spca508-2.14.0 probing 041e:4018 [ 116.560778][ T5758] gspca_spca508: reg_read err -32 [ 116.590954][ T5758] gspca_spca508: reg_read err -32 [ 117.000588][ T5758] gspca_spca508: reg_read err -32 [ 117.863271][ T5920] ======================================================= [ 117.863271][ T5920] WARNING: The mand mount option has been deprecated and [ 117.863271][ T5920] and is ignored by this kernel. Remove the mand [ 117.863271][ T5920] option from the mount to silence this warning. [ 117.863271][ T5920] ======================================================= [ 117.943233][ T5758] gspca_spca508: reg write: error -71 [ 117.943359][ T5758] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 117.966424][ T5758] usb 3-1: USB disconnect, device number 4 [ 118.391361][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.51'. [ 118.392959][ T5927] tmpfs: Unknown parameter 'usrquota'½p' [ 120.224324][ T5957] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 120.224499][ T5957] Error validating options; rc = [-22] [ 120.338945][ T5778] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.488486][ T5779] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.498340][ T5778] usb 4-1: Using ep0 maxpacket: 8 [ 120.520649][ T5778] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 120.520694][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.648054][ T5779] usb 1-1: Using ep0 maxpacket: 16 [ 120.649868][ T5778] pvrusb2: Hardware description: Terratec Grabster AV400 [ 120.650006][ T5778] pvrusb2: ********** [ 120.650014][ T5778] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 120.650026][ T5778] pvrusb2: Important functionality might not be entirely working. [ 120.650034][ T5778] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 120.650045][ T5778] pvrusb2: ********** [ 120.651719][ T5779] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.651772][ T5779] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 120.651863][ T5779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.651892][ T5779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.658478][ T5779] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 120.658625][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.658649][ T5779] usb 1-1: Product: syz [ 120.658666][ T5779] usb 1-1: Manufacturer: syz [ 120.658742][ T5779] usb 1-1: SerialNumber: syz [ 120.806106][ T2390] pvrusb2: Invalid write control endpoint [ 120.899586][ T5779] usb 1-1: config 0 descriptor?? [ 120.972982][ T5779] appledisplay 1-1:0.0: Submitting URB failed [ 120.973131][ T5779] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -5 [ 121.051202][ T5967] FAULT_INJECTION: forcing a failure. [ 121.051202][ T5967] name failslab, interval 1, probability 0, space 0, times 1 [ 121.051363][ T5967] CPU: 1 UID: 0 PID: 5967 Comm: syz.3.60 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.051391][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.051405][ T5967] Call Trace: [ 121.051413][ T5967] [ 121.051423][ T5967] dump_stack_lvl+0xe8/0x150 [ 121.051458][ T5967] should_fail_ex+0x46b/0x600 [ 121.051492][ T5967] should_failslab+0xa8/0x100 [ 121.051528][ T5967] __kmalloc_noprof+0xdf/0x7b0 [ 121.051560][ T5967] ? tomoyo_encode+0x28b/0x550 [ 121.051600][ T5967] tomoyo_encode+0x28b/0x550 [ 121.051640][ T5967] tomoyo_realpath_from_path+0x58d/0x5d0 [ 121.051700][ T5967] ? tomoyo_path_number_perm+0x219/0x630 [ 121.051730][ T5967] tomoyo_path_number_perm+0x246/0x630 [ 121.051763][ T5967] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 121.051791][ T5967] ? __lock_acquire+0x6b5/0x2d10 [ 121.051817][ T5967] ? do_raw_spin_lock+0x12b/0x2f0 [ 121.051879][ T5967] ? __fget_files+0x2a/0x420 [ 121.051908][ T5967] ? __fget_files+0x2a/0x420 [ 121.051932][ T5967] ? __fget_files+0x3a6/0x420 [ 121.051956][ T5967] ? __fget_files+0x2a/0x420 [ 121.051986][ T5967] security_file_ioctl+0xc3/0x2a0 [ 121.052016][ T5967] __se_sys_ioctl+0x47/0x170 [ 121.052047][ T5967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.052072][ T5967] do_syscall_64+0x15f/0xf80 [ 121.052101][ T5967] ? trace_irq_disable+0x3b/0x140 [ 121.052142][ T5967] ? clear_bhb_loop+0x40/0x90 [ 121.052169][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.052192][ T5967] RIP: 0033:0x7fda00e6cdd9 [ 121.052220][ T5967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.052238][ T5967] RSP: 002b:00007fd9ff09d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.052266][ T5967] RAX: ffffffffffffffda RBX: 00007fda010e6090 RCX: 00007fda00e6cdd9 [ 121.052283][ T5967] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004 [ 121.052297][ T5967] RBP: 00007fd9ff09d090 R08: 0000000000000000 R09: 0000000000000000 [ 121.052311][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.052324][ T5967] R13: 00007fda010e6128 R14: 00007fda010e6090 R15: 00007fffe3f3cc48 [ 121.052358][ T5967] [ 121.052471][ T5967] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.542368][ T2390] pvrusb2: Invalid write control endpoint [ 121.542385][ T2390] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 121.542395][ T2390] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 121.542404][ T2390] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 121.542415][ T2390] pvrusb2: Device being rendered inoperable [ 121.542453][ T2390] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 121.542512][ T2390] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 121.634807][ T5778] usb 1-1: USB disconnect, device number 4 [ 121.659419][ T5961] syz.2.63 (5961) used greatest stack depth: 17344 bytes left [ 121.661113][ T2390] pvrusb2: Attached sub-driver cx25840 [ 121.661126][ T2390] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 121.661135][ T2390] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 121.867870][ T5975] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 121.902087][ T5977] Zero length message leads to an empty skb [ 122.484283][ T5993] vivid-000: ================= START STATUS ================= [ 122.484326][ T5993] vivid-000: Test Pattern: 75% Colorbar [ 122.484356][ T5993] vivid-000: Fill Percentage of Frame: 100 [ 122.484378][ T5993] vivid-000: Horizontal Movement: No Movement [ 122.484398][ T5993] vivid-000: Vertical Movement: No Movement [ 122.484417][ T5993] vivid-000: OSD Text Mode: All [ 122.484435][ T5993] vivid-000: Show Border: false [ 122.484453][ T5993] vivid-000: Show Square: false [ 122.484472][ T5993] vivid-000: Sensor Flipped Horizontally: false [ 122.484492][ T5993] vivid-000: Sensor Flipped Vertically: false [ 122.484511][ T5993] vivid-000: Insert SAV Code in Image: false [ 122.484530][ T5993] vivid-000: Insert EAV Code in Image: false [ 122.484550][ T5993] vivid-000: Insert Video Guard Band: false [ 122.484569][ T5993] vivid-000: Reduced Framerate: false [ 122.484588][ T5993] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 122.484608][ T5993] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 122.484628][ T5993] vivid-000: Enable Capture Cropping: true grabbed [ 122.484651][ T5993] vivid-000: Enable Capture Composing: true grabbed [ 122.484674][ T5993] vivid-000: Enable Capture Scaler: true grabbed [ 122.484697][ T5993] vivid-000: Timestamp Source: End of Frame [ 122.484734][ T5993] vivid-000: Colorspace: sRGB [ 122.484753][ T5993] vivid-000: Transfer Function: Default [ 122.484772][ T5993] vivid-000: Y'CbCr Encoding: Default [ 122.484791][ T5993] vivid-000: HSV Encoding: Hue 0-179 [ 122.484809][ T5993] vivid-000: Quantization: Default [ 122.484827][ T5993] vivid-000: Apply Alpha To Red Only: false [ 122.484845][ T5993] vivid-000: Standard Aspect Ratio: 4x3 [ 122.484863][ T5993] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 122.484886][ T5993] vivid-000: DV Timings: 640x480p59 inactive [ 122.484909][ T5993] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 122.484929][ T5993] vivid-000: Maximum EDID Blocks: 2 [ 122.484948][ T5993] vivid-000: Limited RGB Range (16-235): false [ 122.588746][ T5993] vivid-000: Rx RGB Quantization Range: Automatic [ 122.588819][ T5993] vivid-000: Power Present: 0x00000001 [ 122.588893][ T5993] tpg source WxH: 320x240 (Y'CbCr) [ 122.588927][ T5993] tpg field: 1 [ 122.588949][ T5993] tpg crop: (0,0)/320x240 [ 122.588995][ T5993] tpg compose: (0,0)/320x240 [ 122.589030][ T5993] tpg colorspace: 8 [ 122.589822][ T5993] tpg transfer function: 0/2 [ 122.589867][ T5993] tpg Y'CbCr encoding: 0/1 [ 122.589898][ T5993] tpg quantization: 0/2 [ 122.589928][ T5993] tpg RGB range: 0/2 [ 122.589961][ T5993] vivid-000: ================== END STATUS ================== [ 122.701545][ T5707] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.848075][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 122.850483][ T5707] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 122.850511][ T5707] usb 1-1: config 0 has no interface number 0 [ 122.850558][ T5707] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 122.850585][ T5707] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.850698][ T5707] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.850725][ T5707] usb 1-1: config 0 interface 196 has no altsetting 0 [ 122.853507][ T5707] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 122.853536][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.853555][ T5707] usb 1-1: Product: syz [ 122.853569][ T5707] usb 1-1: Manufacturer: syz [ 122.853583][ T5707] usb 1-1: SerialNumber: syz [ 122.994146][ T5707] usb 1-1: config 0 descriptor?? [ 122.996470][ T5989] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.123181][ T37] usb 4-1: USB disconnect, device number 6 [ 123.831503][ T5707] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 123.831825][ T5707] ipheth 1-1:0.196: probe with driver ipheth failed with error -110 [ 123.940254][ T6007] ntfs3(nullb0): Primary boot signature is not NTFS. [ 123.940974][ T6007] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 123.991171][ T6006] ntfs3(nullb0): Primary boot signature is not NTFS. [ 123.991336][ T6006] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 125.178215][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.198877][ T5996] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 125.785714][ T5996] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.847433][ T5996] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.925326][ T5996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.925433][ T5996] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.984257][ T5996] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.046708][ T5996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.046821][ T5996] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.121502][ T5996] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.211769][ T5996] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.211903][ T5996] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.294427][ T5996] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.413746][ T37] usb 1-1: USB disconnect, device number 5 [ 126.798183][ T5707] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.948743][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 126.951135][ T5707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.972011][ T5707] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 126.972046][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.972070][ T5707] usb 3-1: Product: syz [ 126.972087][ T5707] usb 3-1: Manufacturer: syz [ 126.972104][ T5707] usb 3-1: SerialNumber: syz [ 127.060535][ T6028] TCP: TCP_TX_DELAY enabled [ 127.153488][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 127.203044][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 127.258210][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.303614][ T5707] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 127.340669][ T38] audit: type=1326 audit(1778126069.657:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.0.80" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b6c5cdd9 code=0x0 [ 127.385688][ T6033] IPVS: length: 70 != 8 [ 127.403885][ T6033] program syz.0.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.569571][ T5707] usb 3-1: USB disconnect, device number 5 [ 127.670260][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.978381][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.061718][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.128592][ T6047] vivid-001: ================= START STATUS ================= [ 128.133424][ T6047] vivid-001: Interlaced VBI Format: false [ 128.133448][ T6047] vivid-001: ================== END STATUS ================== [ 128.221792][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.309330][ T5707] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 128.438108][ T5707] usb 2-1: device descriptor read/64, error -71 [ 128.591868][ T6055] ªªªªªª: renamed from vlan0 (while UP) [ 128.771659][ T5707] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 128.918420][ T5707] usb 2-1: device descriptor read/64, error -71 [ 129.030238][ T5707] usb usb2-port1: attempt power cycle [ 129.339341][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.430242][ T5707] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 129.463277][ T5707] usb 2-1: device descriptor read/8, error -71 [ 129.638084][ T1008] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.720674][ T5707] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 129.780461][ T5707] usb 2-1: device descriptor read/8, error -71 [ 129.803225][ T1008] usb 3-1: Using ep0 maxpacket: 16 [ 129.805905][ T1008] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 129.829756][ T1008] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 129.829781][ T1008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.829796][ T1008] usb 3-1: Product: syz [ 129.829807][ T1008] usb 3-1: Manufacturer: syz [ 129.829819][ T1008] usb 3-1: SerialNumber: syz [ 129.874804][ T1008] r8152-cfgselector 3-1: Unknown version 0x0000 [ 129.874827][ T1008] r8152-cfgselector 3-1: config 0 descriptor?? [ 129.905423][ T5707] usb usb2-port1: unable to enumerate USB device [ 130.058087][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.138094][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.300420][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.329487][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.330526][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.388328][ T5779] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 130.516464][ T6076] netlink: 'syz.0.96': attribute type 2 has an invalid length. [ 130.813411][ T6078] tipc: Can't bind to reserved service type 2 [ 131.288819][ T60] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 131.603514][ T60] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 131.833177][ T6098] faux_driver vkms: [drm] Unknown color mode 2054; guessing buffer size. [ 131.928534][ T6100] syzkaller1: entered promiscuous mode [ 131.928566][ T6100] syzkaller1: entered allmulticast mode [ 132.145852][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.380867][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.448849][ T5707] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 132.519949][ T6113] netlink: 9 bytes leftover after parsing attributes in process `syz.3.109'. [ 132.585917][ T6114] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 132.604419][ T6113] gretap0: entered promiscuous mode [ 132.623250][ T5707] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 132.623312][ T5707] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 132.623331][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.676448][ T6113] netlink: 5 bytes leftover after parsing attributes in process `syz.3.109'. [ 132.676645][ T6113] 0ªî{X¹¦: renamed from gretap0 [ 132.746229][ T5707] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 132.746783][ T6113] 0ªî{X¹¦: left promiscuous mode [ 132.746806][ T6113] 0ªî{X¹¦: entered allmulticast mode [ 132.781826][ T6113] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 132.953934][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.970973][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.160449][ T6127] overlayfs: failed to resolve './file0': -2 [ 133.199194][ T5707] usb 1-1: USB disconnect, device number 6 [ 133.275825][ T6127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.112'. [ 134.326887][ T6160] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 134.662177][ T6164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.115'. [ 135.557650][ T6185] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 136.224068][ T60] Bluetooth: hci0: unexpected event for opcode 0x200c [ 136.293690][ T6208] binder: BINDER_SET_CONTEXT_MGR already set [ 136.293708][ T6208] binder: 6207:6208 ioctl 4018620d 200000000040 returned -16 [ 136.790539][ T1008] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 136.971344][ T1008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.971403][ T1008] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.971464][ T1008] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 136.971490][ T1008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.027539][ T1008] usb 1-1: config 0 descriptor?? [ 137.081150][ T1008] qmi_wwan 1-1:0.0: bogus CDC Union: master=25, slave=0 [ 137.081342][ T1008] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 137.524160][ T5779] usb 1-1: USB disconnect, device number 7 [ 137.614882][ T1008] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.617807][ T37] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.768994][ T37] usb 2-1: device descriptor read/64, error -71 [ 137.771789][ T1008] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.771816][ T1008] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 137.771871][ T1008] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 137.771896][ T1008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.777826][ T1008] usb 3-1: config 0 descriptor?? [ 138.035497][ T37] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.259823][ T37] usb 2-1: device descriptor read/64, error -71 [ 138.305460][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'. [ 138.373245][ T37] usb usb2-port1: attempt power cycle [ 138.502455][ T6233] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.536007][ T5779] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.625796][ T1008] Bluetooth: Can't get version to change to load ram patch err [ 138.625816][ T1008] Bluetooth: Loading patch file failed [ 138.625853][ T1008] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 138.665201][ T1008] usb 3-1: USB disconnect, device number 7 [ 138.697786][ T5779] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.721915][ T5779] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.721936][ T5779] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.724450][ T5779] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 138.724482][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.724497][ T5779] usb 1-1: Product: syz [ 138.724509][ T5779] usb 1-1: Manufacturer: syz [ 138.724520][ T5779] usb 1-1: SerialNumber: syz [ 138.781498][ T37] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 138.823252][ T37] usb 2-1: device descriptor read/8, error -71 [ 139.098334][ T37] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 139.129369][ T37] usb 2-1: device descriptor read/8, error -71 [ 139.146645][ T4924] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 139.252055][ T37] usb usb2-port1: unable to enumerate USB device [ 139.321846][ T6253] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 139.321870][ T6253] netlink: 'syz.2.143': attribute type 3 has an invalid length. [ 139.321884][ T6253] netlink: 132 bytes leftover after parsing attributes in process `syz.2.143'. [ 140.017781][ T5707] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 140.185376][ T5707] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 140.185410][ T5707] usb 3-1: config 150 has no interface number 0 [ 140.185457][ T5707] usb 3-1: config 150 interface 204 has no altsetting 0 [ 140.188825][ T5707] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 140.188857][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.188881][ T5707] usb 3-1: Product: syz [ 140.188899][ T5707] usb 3-1: Manufacturer: syz [ 140.188915][ T5707] usb 3-1: SerialNumber: syz [ 140.533945][ T6267] MTD: Couldn't look up './cgroup': -15 [ 140.534074][ T6267] ./cgroup: Can't lookup blockdev [ 140.557450][ T6267] MTD: Couldn't look up './cgroup': -15 [ 140.557622][ T6267] ./cgroup: Can't lookup blockdev [ 140.689281][ T5707] xr_serial 3-1:150.204: xr_serial converter detected [ 140.746278][ T5707] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 140.746345][ T5707] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 140.776467][ T5707] usb 3-1: USB disconnect, device number 8 [ 140.809745][ T5707] xr_serial 3-1:150.204: device disconnected [ 140.895194][ T1008] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 140.984480][ T6270] overlayfs: failed to resolve './cgroup': -2 [ 141.019881][ T6270] syzkaller1: entered promiscuous mode [ 141.019966][ T6270] syzkaller1: entered allmulticast mode [ 141.037760][ T1008] usb 2-1: device descriptor read/64, error -71 [ 141.149982][ T4924] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.272833][ T1008] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 141.392372][ T5779] usb 1-1: cannot find UAC_HEADER [ 141.435341][ T1008] usb 2-1: device descriptor read/64, error -71 [ 141.523175][ T5779] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 141.536877][ T5779] usb 1-1: USB disconnect, device number 8 [ 141.603407][ T1008] usb usb2-port1: attempt power cycle [ 141.714401][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.769855][ T6281] openvswitch: netlink: Actions may not be safe on all matching packets [ 141.939139][ T6283] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3939892539 (252153122496 ns) > initial count (209709312064 ns). Using initial count to start timer. [ 141.965334][ T1008] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.987814][ T1008] usb 2-1: device descriptor read/8, error -71 [ 142.006731][ T5707] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.087273][ T5779] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.168548][ T5707] usb 3-1: Using ep0 maxpacket: 32 [ 142.176777][ T5707] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 142.176810][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.176832][ T5707] usb 3-1: Product: syz [ 142.176854][ T5707] usb 3-1: Manufacturer: syz [ 142.176870][ T5707] usb 3-1: SerialNumber: syz [ 142.219515][ T5779] usb 1-1: device descriptor read/64, error -71 [ 142.238682][ T5707] usb 3-1: config 0 descriptor?? [ 142.260207][ T1008] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.262137][ T5707] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 142.283590][ T1008] usb 2-1: device descriptor read/8, error -71 [ 142.394966][ T1008] usb usb2-port1: unable to enumerate USB device [ 142.463026][ T6276] syz.2.151: vmalloc error: size 35184372089152, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset= [ 142.463739][ T5779] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.489193][ T6276] /,mems_allowed=0-1 [ 142.489279][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.2.151 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.489306][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.489320][ T6276] Call Trace: [ 142.489328][ T6276] [ 142.489339][ T6276] dump_stack_lvl+0xe8/0x150 [ 142.489375][ T6276] warn_alloc+0x24c/0x270 [ 142.489417][ T6276] ? __pfx_warn_alloc+0x10/0x10 [ 142.489456][ T6276] ? ktime_get+0x45/0x220 [ 142.489501][ T6276] __vmalloc_node_range_noprof+0x132/0x1750 [ 142.489549][ T6276] ? __pfx___schedule+0x10/0x10 [ 142.489590][ T6276] ? lockdep_hardirqs_on+0x7a/0x110 [ 142.489625][ T6276] ? irqentry_exit+0x218/0x780 [ 142.489672][ T6276] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.489703][ T6276] ? preempt_schedule_common+0x82/0xd0 [ 142.489736][ T6276] ? preempt_schedule_thunk+0x16/0x40 [ 142.489776][ T6276] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 142.489812][ T6276] vmalloc_noprof+0xb2/0xe0 [ 142.489835][ T6276] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 142.489889][ T6276] dvb_dvr_do_ioctl+0x12e/0x220 [ 142.489929][ T6276] dvb_usercopy+0x199/0x2e0 [ 142.489956][ T6276] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 142.489986][ T6276] ? __pfx_dvb_usercopy+0x10/0x10 [ 142.490020][ T6276] ? __fget_files+0x3a6/0x420 [ 142.490053][ T6276] ? __fget_files+0x2a/0x420 [ 142.490085][ T6276] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 142.490117][ T6276] dvb_dvr_ioctl+0x29/0x40 [ 142.490147][ T6276] __se_sys_ioctl+0xff/0x170 [ 142.490181][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.490200][ T6276] do_syscall_64+0x15f/0xf80 [ 142.490239][ T6276] ? trace_irq_disable+0x3b/0x140 [ 142.490274][ T6276] ? clear_bhb_loop+0x40/0x90 [ 142.490302][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.490324][ T6276] RIP: 0033:0x7f8b9fe8cdd9 [ 142.490348][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.490363][ T6276] RSP: 002b:00007f8b9e0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.490380][ T6276] RAX: ffffffffffffffda RBX: 00007f8ba0105fa0 RCX: 00007f8b9fe8cdd9 [ 142.490407][ T6276] RDX: 0000200000000140 RSI: 0000000000006f2d RDI: 0000000000000004 [ 142.490423][ T6276] RBP: 00007f8b9ff22d69 R08: 0000000000000000 R09: 0000000000000000 [ 142.490438][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.490453][ T6276] R13: 00007f8ba0106038 R14: 00007f8ba0105fa0 R15: 00007ffc61e506a8 [ 142.490489][ T6276] [ 142.490644][ T6276] Mem-Info: [ 142.490660][ T6276] active_anon:22021 inactive_anon:0 isolated_anon:0 [ 142.490660][ T6276] active_file:0 inactive_file:51214 isolated_file:0 [ 142.490660][ T6276] unevictable:768 dirty:68 writeback:0 [ 142.490660][ T6276] slab_reclaimable:11223 slab_unreclaimable:94807 [ 142.490660][ T6276] mapped:24838 shmem:17734 pagetables:1068 [ 142.490660][ T6276] sec_pagetables:0 bounce:0 [ 142.490660][ T6276] kernel_misc_reclaimable:0 [ 142.490660][ T6276] free:1323563 free_pcp:5255 free_cma:0 [ 142.490748][ T6276] Node 0 active_anon:88084kB inactive_anon:0kB active_file:0kB inactive_file:204668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99352kB dirty:272kB writeback:0kB shmem:69400kB kernel_stack:12384kB pagetables:4164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 142.490808][ T6276] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 142.490860][ T6276] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.490930][ T6276] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 142.490973][ T6276] Node 0 DMA32 free:1337504kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88084kB inactive_anon:0kB active_file:0kB inactive_file:204668kB unevictable:1536kB writepending:272kB zspages:0kB present:3129332kB managed:2552768kB mlocked:0kB bounce:0kB free_pcp:21000kB local_pcp:9772kB free_cma:0kB [ 142.491043][ T6276] lowmem_reserve[]: 0 0 0 0 0 [ 142.491070][ T6276] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:896kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 142.491141][ T6276] lowmem_reserve[]: 0 0 0 0 0 [ 142.491179][ T6276] Node 1 Normal free:3941388kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.491239][ T6276] lowmem_reserve[]: 0 0 0 0 0 [ 142.491280][ T6276] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.491628][ T6276] Node 0 DMA32: 1110*4kB (UME) 855*8kB (UME) 475*16kB (UME) 87*32kB (UM) 66*64kB (UME) 23*128kB (UE) 12*256kB (UM) 8*512kB (UM) 3*1024kB (ME) 4*2048kB (UME) 315*4096kB (M) = 1337504kB [ 142.491828][ T6276] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 142.491940][ T6276] Node 1 Normal: 3*4kB (UM) 2*8kB (M) 9*16kB (UM) 9*32kB (UM) 7*64kB (UM) 5*128kB (UM) 2*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (M) 960*4096kB (M) = 3941388kB [ 142.494015][ T6276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.494035][ T6276] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 142.494070][ T6276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.494088][ T6276] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 142.494107][ T6276] 68944 total pagecache pages [ 142.510963][ T6276] 0 pages in swap cache [ 142.511016][ T6276] Free swap = 124996kB [ 142.511055][ T6276] Total swap = 124996kB [ 142.511066][ T6276] 2097051 pages RAM [ 142.511075][ T6276] 0 pages HighMem/MovableOnly [ 142.511084][ T6276] 427021 pages reserved [ 142.511092][ T6276] 0 pages cma reserved [ 142.567262][ T5778] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.627353][ T5779] usb 1-1: device descriptor read/64, error -71 [ 142.739589][ T5779] usb usb1-port1: attempt power cycle [ 142.739863][ T5778] usb 4-1: Using ep0 maxpacket: 8 [ 142.801172][ T5778] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 142.801269][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.801319][ T5778] usb 4-1: Product: syz [ 142.801629][ T5778] usb 4-1: Manufacturer: syz [ 142.801672][ T5778] usb 4-1: SerialNumber: syz [ 142.905723][ T5778] usb 4-1: config 0 descriptor?? [ 143.220744][ T5778] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 143.242785][ T5707] gspca_ov534_9: reg_w failed -71 [ 143.301947][ T5779] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 143.319202][ T5779] usb 1-1: device descriptor read/8, error -71 [ 143.563580][ T5707] gspca_ov534_9: Unknown sensor 0000 [ 143.563681][ T5707] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 143.583797][ T5707] usb 3-1: USB disconnect, device number 9 [ 143.714874][ T5779] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.737990][ T5779] usb 1-1: device descriptor read/8, error -71 [ 143.753864][ T5778] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 143.787723][ T5778] usb 4-1: USB disconnect, device number 7 [ 143.847622][ T5779] usb usb1-port1: unable to enumerate USB device [ 144.836501][ T1008] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.004793][ T1008] usb 4-1: Using ep0 maxpacket: 32 [ 145.017866][ T1008] usb 4-1: config index 0 descriptor too short (expected 16420, got 36) [ 145.017896][ T1008] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.042909][ T1008] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 145.042940][ T1008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.042963][ T1008] usb 4-1: Product: syz [ 145.042978][ T1008] usb 4-1: Manufacturer: syz [ 145.042994][ T1008] usb 4-1: SerialNumber: syz [ 145.086783][ T1008] usb 4-1: config 0 descriptor?? [ 145.137125][ T1008] ipheth 4-1:0.0: Unable to find alternate settings interface [ 145.295670][ T6304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.297777][ T6304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.471561][ T5778] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 145.630041][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 145.630095][ T5778] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 145.630123][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.714504][ T5778] usb 2-1: config 0 descriptor?? [ 145.721262][ T6314] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 145.938756][ T5778] usb 2-1: string descriptor 0 read error: -71 [ 145.959294][ T5778] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 146.086088][ T4960] bcm5974 2-1:0.0: could not read from device [ 146.175973][ T4960] bcm5974 2-1:0.0: could not read from device [ 146.198746][ T5778] usb 2-1: USB disconnect, device number 16 [ 146.497504][ T5707] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.658590][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 146.676927][ T5707] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 146.676967][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.676989][ T5707] usb 1-1: Product: syz [ 146.677000][ T5707] usb 1-1: Manufacturer: syz [ 146.677012][ T5707] usb 1-1: SerialNumber: syz [ 146.734823][ T5707] usb 1-1: config 0 descriptor?? [ 146.756208][ T5707] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 146.886057][ T6322] binder: 6321:6322 ioctl c0306201 2000000003c0 returned -14 [ 147.588987][ T5779] usb 4-1: USB disconnect, device number 8 [ 147.695844][ T5707] gspca_ov534_9: reg_w failed -71 [ 148.017409][ T5707] gspca_ov534_9: Unknown sensor 0000 [ 148.017506][ T5707] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 148.063300][ T5707] usb 1-1: USB disconnect, device number 13 [ 148.079870][ T6330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.171'. [ 148.503918][ T38] audit: type=1326 audit(1778650378.491:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.2.175" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9fe8cdd9 code=0x7ffc0000 [ 148.503971][ T38] audit: type=1326 audit(1778650378.491:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.2.175" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9fe8cdd9 code=0x7ffc0000 [ 148.575662][ T38] audit: type=1326 audit(1778650378.491:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.2.175" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8b9fe8cdd9 code=0x7ffc0000 [ 148.575720][ T38] audit: type=1326 audit(1778650378.561:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.2.175" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9fe8cdd9 code=0x7ffc0000 [ 148.575769][ T38] audit: type=1326 audit(1778650378.561:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.2.175" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9fe8cdd9 code=0x7ffc0000 [ 148.658938][ T38] audit: type=1326 audit(1778650378.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.2.175" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b9fe8cdd9 code=0x7ffc0000 [ 148.684752][ T38] audit: type=1326 audit(1778650378.669:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.2.175" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9fe8cdd9 code=0x7ffc0000 [ 148.694691][ T38] audit: type=1326 audit(1778650378.669:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.2.175" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b9fe8cdd9 code=0x7ffc0000 [ 148.694862][ T38] audit: type=1326 audit(1778650378.679:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.2.175" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9fe8cdd9 code=0x7ffc0000 [ 148.711407][ T38] audit: type=1326 audit(1778650378.689:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.2.175" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b9fe8cdd9 code=0x7ffc0000 [ 149.539584][ T6350] fuse: Bad value for 'fd' [ 150.130075][ T5779] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 150.374666][ T5779] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 150.374698][ T5779] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 150.377176][ T5779] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 150.377205][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.377226][ T5779] usb 4-1: Product: syz [ 150.377244][ T5779] usb 4-1: Manufacturer: syz [ 150.377255][ T5779] usb 4-1: SerialNumber: syz [ 150.435622][ T5779] usb 4-1: config 0 descriptor?? [ 150.454414][ T5779] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 150.564437][ T5341] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 150.736041][ T5341] usb 3-1: Using ep0 maxpacket: 32 [ 150.745728][ T5341] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 150.745763][ T5341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.745786][ T5341] usb 3-1: Product: syz [ 150.745803][ T5341] usb 3-1: Manufacturer: syz [ 150.745819][ T5341] usb 3-1: SerialNumber: syz [ 150.791652][ T5341] usb 3-1: config 0 descriptor?? [ 150.824614][ T5341] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 150.878979][ T5779] usb 4-1: USB disconnect, device number 9 [ 151.195131][ T6364] netlink: 'syz.0.184': attribute type 21 has an invalid length. [ 151.253980][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 151.827216][ T5341] gspca_ov534_9: reg_w failed -71 [ 152.119767][ T5341] gspca_ov534_9: Unknown sensor 0000 [ 152.119852][ T5341] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 152.143894][ T5341] usb 3-1: USB disconnect, device number 10 [ 152.161765][ T6388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.164881][ T6388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.316324][ T60] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 152.382468][ T5707] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.540386][ T5707] usb 4-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid wMaxPacketSize 0 [ 152.540422][ T5707] usb 4-1: config 2 interface 0 has no altsetting 0 [ 152.542942][ T5707] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 152.542975][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.543008][ T5707] usb 4-1: Product: syz [ 152.543019][ T5707] usb 4-1: Manufacturer: syz [ 152.543030][ T5707] usb 4-1: SerialNumber: syz [ 152.624523][ T32] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 152.745506][ T37] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 152.775846][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 152.778486][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.782388][ T32] usb 2-1: config 6 has an invalid interface number: 113 but max is 0 [ 152.782416][ T32] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 152.782429][ T32] usb 2-1: config 6 has no interface number 0 [ 152.782500][ T32] usb 2-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.782520][ T32] usb 2-1: config 6 interface 113 has no altsetting 0 [ 152.783852][ T32] usb 2-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 152.783881][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.783962][ T32] usb 2-1: SerialNumber: syz [ 152.912766][ T5707] ims_pcu 4-1:2.0: Incorrect number of endpoints on data interface (1) [ 152.912814][ T5707] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 152.934850][ T32] ftdi_sio 2-1:6.113: FTDI USB Serial Device converter detected [ 152.955685][ T5707] usb 4-1: USB disconnect, device number 10 [ 152.986120][ T32] usb 2-1: Detected SIO [ 153.015428][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.034885][ T37] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 153.034931][ T37] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 153.034962][ T37] usb 3-1: config 1 interface 0 has no altsetting 1 [ 153.083032][ T37] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 153.083062][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.083076][ T37] usb 3-1: Product: syz [ 153.083087][ T37] usb 3-1: Manufacturer: syz [ 153.083097][ T37] usb 3-1: SerialNumber: syz [ 153.165736][ T32] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 153.207745][ T37] smsusb:smsusb_probe: board id=8, interface number 0 [ 153.219775][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 153.220305][ T6399] tmpfs: Bad value for 'mpol' [ 153.332023][ T6402] FAULT_INJECTION: forcing a failure. [ 153.332023][ T6402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.332054][ T6402] CPU: 0 UID: 0 PID: 6402 Comm: syz.0.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.332074][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.332085][ T6402] Call Trace: [ 153.332092][ T6402] [ 153.332101][ T6402] dump_stack_lvl+0xe8/0x150 [ 153.332134][ T6402] should_fail_ex+0x46b/0x600 [ 153.332166][ T6402] _copy_to_user+0x31/0xb0 [ 153.332194][ T6402] simple_read_from_buffer+0xe1/0x170 [ 153.332219][ T6402] proc_fail_nth_read+0x1be/0x230 [ 153.332244][ T6402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.332269][ T6402] ? rw_verify_area+0x2ac/0x4e0 [ 153.332293][ T6402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.332318][ T6402] vfs_read+0x212/0xa80 [ 153.332350][ T6402] ? __pfx_vfs_read+0x10/0x10 [ 153.332379][ T6402] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 153.332408][ T6402] ? lockdep_hardirqs_on+0x7a/0x110 [ 153.332434][ T6402] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 153.332458][ T6402] ? mutex_lock_nested+0x152/0x1d0 [ 153.332476][ T6402] ? fdget_pos+0x252/0x320 [ 153.332510][ T6402] ksys_read+0x156/0x270 [ 153.332554][ T6402] ? __pfx_ksys_read+0x10/0x10 [ 153.332578][ T6402] ? __pfx_v4l2_ioctl+0x10/0x10 [ 153.332607][ T6402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.332626][ T6402] do_syscall_64+0x15f/0xf80 [ 153.332652][ T6402] ? trace_irq_disable+0x3b/0x140 [ 153.332686][ T6402] ? clear_bhb_loop+0x40/0x90 [ 153.332710][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.332729][ T6402] RIP: 0033:0x7f21b6c1d60e [ 153.332747][ T6402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.332763][ T6402] RSP: 002b:00007f21b4eadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.332784][ T6402] RAX: ffffffffffffffda RBX: 00007f21b4eae6c0 RCX: 00007f21b6c1d60e [ 153.332798][ T6402] RDX: 000000000000000f RSI: 00007f21b4eae0a0 RDI: 0000000000000004 [ 153.332809][ T6402] RBP: 00007f21b4eae090 R08: 0000000000000000 R09: 0000000000000000 [ 153.332820][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.332830][ T6402] R13: 00007f21b6ed6038 R14: 00007f21b6ed5fa0 R15: 00007fff0cebc718 [ 153.332860][ T6402] [ 153.467714][ T37] smsusb:smsusb_probe: Device initialized with return code -19 [ 153.800480][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.801079][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.978193][ T6419] capability: warning: `syz.0.200' uses deprecated v2 capabilities in a way that may be insecure [ 154.066275][ T5341] usb 3-1: USB disconnect, device number 11 [ 154.449259][ T6424] process 'syz.0.203' launched './file0' with NULL argv: empty string added [ 154.618173][ T6427] FAULT_INJECTION: forcing a failure. [ 154.618173][ T6427] name failslab, interval 1, probability 0, space 0, times 0 [ 154.618201][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.618218][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.618228][ T6427] Call Trace: [ 154.618233][ T6427] [ 154.618240][ T6427] dump_stack_lvl+0xe8/0x150 [ 154.618294][ T6427] should_fail_ex+0x46b/0x600 [ 154.618332][ T6427] ? __pfx_proc_alloc_inode+0x10/0x10 [ 154.618361][ T6427] should_failslab+0xa8/0x100 [ 154.618397][ T6427] ? __pfx_proc_alloc_inode+0x10/0x10 [ 154.618416][ T6427] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 154.618439][ T6427] ? proc_alloc_inode+0x2a/0xc0 [ 154.618462][ T6427] ? __pfx_proc_alloc_inode+0x10/0x10 [ 154.618481][ T6427] proc_alloc_inode+0x2a/0xc0 [ 154.618501][ T6427] alloc_inode+0x6a/0x1b0 [ 154.618520][ T6427] new_inode+0x22/0x170 [ 154.618541][ T6427] proc_pid_make_inode+0x21/0x130 [ 154.618568][ T6427] proc_fd_instantiate+0x54/0x2f0 [ 154.618585][ T6427] ? fput+0xa0/0xd0 [ 154.618607][ T6427] proc_lookupfd_common+0x145/0x250 [ 154.618626][ T6427] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 154.618643][ T6427] ? __pfx_proc_lookupfd_common+0x10/0x10 [ 154.618678][ T6427] ? bpf_lsm_inode_permission+0x9/0x20 [ 154.618705][ T6427] ? may_o_create+0x2d2/0x370 [ 154.618729][ T6427] ? bpf_lsm_inode_create+0x9/0x20 [ 154.618754][ T6427] path_openat+0x11cb/0x38a0 [ 154.618802][ T6427] ? __pfx_path_openat+0x10/0x10 [ 154.618836][ T6427] ? do_raw_spin_lock+0x12b/0x2f0 [ 154.618866][ T6427] do_file_open+0x23e/0x4a0 [ 154.618889][ T6427] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 154.618916][ T6427] ? __pfx_do_file_open+0x10/0x10 [ 154.618937][ T6427] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 154.618972][ T6427] ? alloc_fd+0x64e/0x6c0 [ 154.618998][ T6427] do_sys_openat2+0x113/0x200 [ 154.619020][ T6427] ? __pfx_do_sys_openat2+0x10/0x10 [ 154.619039][ T6427] ? ksys_write+0x248/0x270 [ 154.619063][ T6427] ? __pfx_ksys_write+0x10/0x10 [ 154.619087][ T6427] ? fput+0xa0/0xd0 [ 154.619107][ T6427] __x64_sys_openat+0x138/0x170 [ 154.619128][ T6427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.619146][ T6427] do_syscall_64+0x15f/0xf80 [ 154.619171][ T6427] ? clear_bhb_loop+0x40/0x90 [ 154.619191][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.619207][ T6427] RIP: 0033:0x7f21b6c5cdd9 [ 154.619222][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.619236][ T6427] RSP: 002b:00007f21b4eae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.619254][ T6427] RAX: ffffffffffffffda RBX: 00007f21b6ed5fa0 RCX: 00007f21b6c5cdd9 [ 154.619266][ T6427] RDX: 00000000000c0041 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 154.619278][ T6427] RBP: 00007f21b4eae090 R08: 0000000000000000 R09: 0000000000000000 [ 154.619289][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.619311][ T6427] R13: 00007f21b6ed6038 R14: 00007f21b6ed5fa0 R15: 00007fff0cebc718 [ 154.619336][ T6427] [ 155.337859][ T32] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 155.516468][ T5779] usb 2-1: USB disconnect, device number 17 [ 155.518382][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 155.571110][ T32] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 155.571149][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.571176][ T32] usb 3-1: Product: syz [ 155.571192][ T32] usb 3-1: Manufacturer: syz [ 155.571209][ T32] usb 3-1: SerialNumber: syz [ 155.630118][ T5779] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 155.658748][ T32] usb 3-1: config 0 descriptor?? [ 155.688698][ T5779] ftdi_sio 2-1:6.113: device disconnected [ 155.770063][ T32] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 155.896528][ T6429] warn_alloc: 2 callbacks suppressed [ 155.896547][ T6429] syz.2.205: vmalloc error: size 35184372089152, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.896617][ T6429] CPU: 0 UID: 0 PID: 6429 Comm: syz.2.205 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.896643][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.896657][ T6429] Call Trace: [ 155.896666][ T6429] [ 155.896677][ T6429] dump_stack_lvl+0xe8/0x150 [ 155.896711][ T6429] warn_alloc+0x24c/0x270 [ 155.896750][ T6429] ? __pfx_warn_alloc+0x10/0x10 [ 155.896802][ T6429] __vmalloc_node_range_noprof+0x132/0x1750 [ 155.896846][ T6429] ? kasan_quarantine_put+0xbb/0x1f0 [ 155.896893][ T6429] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.896931][ T6429] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 155.896964][ T6429] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.896997][ T6429] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 155.897029][ T6429] vmalloc_noprof+0xb2/0xe0 [ 155.897061][ T6429] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 155.897095][ T6429] dvb_dvr_do_ioctl+0x12e/0x220 [ 155.897137][ T6429] dvb_usercopy+0x199/0x2e0 [ 155.897166][ T6429] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 155.897198][ T6429] ? __pfx_dvb_usercopy+0x10/0x10 [ 155.897246][ T6429] ? __fget_files+0x3a6/0x420 [ 155.897273][ T6429] ? __fget_files+0x2a/0x420 [ 155.897304][ T6429] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 155.897335][ T6429] dvb_dvr_ioctl+0x29/0x40 [ 155.897367][ T6429] __se_sys_ioctl+0xff/0x170 [ 155.897400][ T6429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.897425][ T6429] do_syscall_64+0x15f/0xf80 [ 155.897458][ T6429] ? clear_bhb_loop+0x40/0x90 [ 155.897486][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.897510][ T6429] RIP: 0033:0x7f8b9fe8cdd9 [ 155.897531][ T6429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.897550][ T6429] RSP: 002b:00007f8b9e0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.897574][ T6429] RAX: ffffffffffffffda RBX: 00007f8ba0105fa0 RCX: 00007f8b9fe8cdd9 [ 155.897591][ T6429] RDX: 0000200000000140 RSI: 0000000000006f2d RDI: 0000000000000004 [ 155.897605][ T6429] RBP: 00007f8b9ff22d69 R08: 0000000000000000 R09: 0000000000000000 [ 155.897620][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.897633][ T6429] R13: 00007f8ba0106038 R14: 00007f8ba0105fa0 R15: 00007ffc61e506a8 [ 155.897668][ T6429] [ 155.993992][ T6429] Mem-Info: [ 155.994045][ T6429] active_anon:30635 inactive_anon:0 isolated_anon:0 [ 155.994045][ T6429] active_file:0 inactive_file:53459 isolated_file:0 [ 155.994045][ T6429] unevictable:768 dirty:31 writeback:0 [ 155.994045][ T6429] slab_reclaimable:11278 slab_unreclaimable:95188 [ 155.994045][ T6429] mapped:32882 shmem:26315 pagetables:1141 [ 155.994045][ T6429] sec_pagetables:0 bounce:0 [ 155.994045][ T6429] kernel_misc_reclaimable:0 [ 155.994045][ T6429] free:1312893 free_pcp:1950 free_cma:0 [ 155.994808][ T6429] Node 0 active_anon:122540kB inactive_anon:0kB active_file:0kB inactive_file:213648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131528kB dirty:124kB writeback:0kB shmem:103724kB kernel_stack:12344kB pagetables:4456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 156.024814][ T6429] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 156.025600][ T6429] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.026376][ T6429] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 156.026874][ T6429] Node 0 DMA32 free:1294824kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:122540kB inactive_anon:0kB active_file:0kB inactive_file:213648kB unevictable:1536kB writepending:124kB zspages:0kB present:3129332kB managed:2552768kB mlocked:0kB bounce:0kB free_pcp:8028kB local_pcp:3728kB free_cma:0kB [ 156.042896][ T6429] lowmem_reserve[]: 0 0 0 0 0 [ 156.043332][ T6429] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:896kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 156.044371][ T6429] lowmem_reserve[]: 0 0 0 0 0 [ 156.058343][ T6429] Node 1 Normal free:3941388kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.059166][ T6429] lowmem_reserve[]: 0 0 0 0 0 [ 156.261209][ T6429] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.269812][ T6429] Node 0 DMA32: 888*4kB (UE) 874*8kB (UE) 445*16kB (UM) 35*32kB (UME) 77*64kB (UME) 24*128kB (UE) 15*256kB (UME) 29*512kB (UME) 12*1024kB (M) 10*2048kB (UME) 297*4096kB (M) = 1294752kB [ 156.281803][ T6429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 156.287280][ T6429] Node 1 Normal: 3*4kB (UM) 2*8kB (M) 9*16kB (UM) 9*32kB (UM) 7*64kB (UM) 5*128kB (UM) 2*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (M) 960*4096kB (M) = 3941388kB [ 156.287636][ T6429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.287655][ T6429] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.287674][ T6429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.287692][ T6429] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.287768][ T6429] 79795 total pagecache pages [ 156.287778][ T6429] 0 pages in swap cache [ 156.287786][ T6429] Free swap = 124996kB [ 156.287795][ T6429] Total swap = 124996kB [ 156.287804][ T6429] 2097051 pages RAM [ 156.287812][ T6429] 0 pages HighMem/MovableOnly [ 156.287821][ T6429] 427021 pages reserved [ 156.287829][ T6429] 0 pages cma reserved [ 156.309213][ T32] gspca_ov534_9: reg_w failed -110 [ 156.747449][ T32] gspca_ov534_9: Unknown sensor 0000 [ 156.747538][ T32] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 156.881045][ T5779] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 157.020624][ T5779] usb 2-1: device descriptor read/64, error -71 [ 157.261087][ T5779] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 157.394018][ T5779] usb 2-1: device descriptor read/64, error -71 [ 157.502988][ T5779] usb usb2-port1: attempt power cycle [ 157.875334][ T5779] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 157.896284][ T5779] usb 2-1: device descriptor read/8, error -71 [ 157.996094][ T5693] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 158.147328][ T5779] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 158.169093][ T5779] usb 2-1: device descriptor read/8, error -71 [ 158.185721][ T5693] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.185788][ T5693] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.185830][ T5693] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 158.221143][ T5693] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.221166][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.221181][ T5693] usb 1-1: Product: syz [ 158.221192][ T5693] usb 1-1: Manufacturer: syz [ 158.221203][ T5693] usb 1-1: SerialNumber: syz [ 158.282898][ T5779] usb usb2-port1: unable to enumerate USB device [ 158.313154][ T5693] cdc_mbim 1-1:1.0: skipping garbage [ 158.376943][ T32] usb 3-1: USB disconnect, device number 12 [ 158.543768][ T5693] cdc_mbim 1-1:1.0: bind() failure [ 158.597526][ T5693] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 158.597561][ T5693] cdc_ncm 1-1:1.1: bind() failure [ 158.780734][ T5693] usb 1-1: USB disconnect, device number 14 [ 158.915232][ T4924] Bluetooth: hci1: unexpected subevent 0x19 length: 11 < 28 [ 158.916154][ T6477] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.222'. [ 159.299657][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 159.703249][ C1] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 0 to 2 [ 159.704043][ C1] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 2 to 0 [ 159.715922][ T5706] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 159.756652][ T5693] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 159.887441][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 159.902632][ T5693] usb 1-1: device descriptor read/64, error -71 [ 159.905577][ T5706] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 159.905607][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.905627][ T5706] usb 3-1: Product: syz [ 159.905641][ T5706] usb 3-1: Manufacturer: syz [ 159.905656][ T5706] usb 3-1: SerialNumber: syz [ 159.954679][ T5706] usb 3-1: config 0 descriptor?? [ 159.967247][ T5706] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 160.159061][ T5693] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 160.290286][ T5693] usb 1-1: device descriptor read/64, error -71 [ 160.319849][ T4924] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.412183][ T5693] usb usb1-port1: attempt power cycle [ 160.772372][ T5693] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 160.793158][ T5693] usb 1-1: device descriptor read/8, error -71 [ 160.874483][ T5706] gspca_ov534_9: reg_w failed -71 [ 161.033690][ T5693] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 161.055421][ T5693] usb 1-1: device descriptor read/8, error -71 [ 161.164338][ T5706] gspca_ov534_9: Unknown sensor 0000 [ 161.164421][ T5706] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 161.170971][ T5706] usb 3-1: USB disconnect, device number 13 [ 161.190013][ T5693] usb usb1-port1: unable to enumerate USB device