last executing test programs: 8m47.649233462s ago: executing program 3 (id=2028): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0x0, 0x4}}, 0x2e) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001540)) r10 = dup(r9) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000000)={0x1, r10}) ioctl$VHOST_NET_SET_BACKEND(r8, 0xaf02, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) 8m46.03080688s ago: executing program 3 (id=2031): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x110, 0x30, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{0xfc, 0x1, [@m_connmark={0x70, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x51c86cc0, 0x8}, 0x4}}]}, {0x21, 0x6, "2e0effe2dc3401cf98dcd68e067373e3a4d2459f025e438fe4508aede8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_tunnel_key={0x54, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0x21, 0x6, "28417639d3d068c482e4398d2dfe8f22a0b29bddf135cd5f6b247a9e24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x34, 0x20, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0xd0}, 0x40804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8m45.554308702s ago: executing program 3 (id=2034): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) userfaultfd(0x801) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x7, 0x4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008894}, 0x20008002) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x12100ca, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 8m43.247106528s ago: executing program 3 (id=2039): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x194) writev(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x204280, 0x24) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) mq_open(0x0, 0x800, 0x1fd, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d01020301090224000100000000090400000221efb000090502020000000000090582ea"], 0x0) getpriority(0x2, r1) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2105091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x1, 0x0, {0xe7ff, 0x8, 0x406, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount$cgroup2(0x0, &(0x7f0000000080)='./sys_mnt\x00', &(0x7f00000000c0), 0x4010, &(0x7f0000000400)=ANY=[@ANYBLOB="666176c13e68dcd62b4a40f0356b49fa6f7264796e6d6f64732c00e8650f5557418e8b7b36c9d5bdf787"]) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000003c0)=0x2) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1800, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f0000000380)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000400)=ANY=[], 0x1}}], 0x1, 0x0) r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x80) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000180)={{0x8, 0x1, &(0x7f0000000140)=[{0x8, 0x0, 0x1ff}]}, 0x9, 0x1, 0xf8, 0x0, 0x0, 0x10001, 0x3, 0x1, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00H', @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf2d4400000008000300", @ANYRESDEC=r7, @ANYBLOB="0c00238006001b0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x2004c8c4) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r4, 0xc0086448, &(0x7f0000000300)={r5}) 8m39.756745844s ago: executing program 3 (id=2044): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd00000000000003ff0000080009"], 0x34}}, 0x20) (fail_nth: 1) socketpair$unix(0x1, 0x2, 0x0, 0x0) 8m37.891011448s ago: executing program 3 (id=2050): memfd_create(&(0x7f00000013c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffff, r10}, 0x38) 43.247849747s ago: executing program 4 (id=3294): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163a0486f188c8cb1b9"], 0x5c}}, 0x4000) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000022c0)={{{@in=@loopback, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x801, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd}, 0x1c) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3QX\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xc9>\x88\xc9\xdc}\xcb\xf2R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00Gl\x97\x13,Uo\xed\t\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="800100001000010000000000000000007f0000010000000000000000000000007f00000100"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000200000000000000000000000000001234320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020002000000000000000000480002006469676573745f6e756c6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006369706865725f6e756c6c"], 0x180}}, 0x0) 42.991304172s ago: executing program 4 (id=3296): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 42.904086283s ago: executing program 4 (id=3298): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4003}) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000100)={0xffffff23, 0xffffffffffffffff}) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000640)="0bc3ffe43125e1cf5dc44c41e848952a37d0495cda9759141deaa4535e698b16f05d5813054270de7ec4ce2aae6463780f61bc0ae1866139248daefd231119adaf876e173bcd4a3ff90459e8c9ce202813f28ab5835e98a2c4fa92d6b0455226187d7aea48c33e9647cb8c168868cab7b6a021b3970d3a2b79937ce66d991aff59b42c1f", 0x84}, {&(0x7f0000000300)="009b6547ade5e896ef8e3ab9ac5fad408fd8587423a7a5a64c222acdfdbb544b7432fc231d4fc69ca371639e74d9d05b2b110bc35b11d3534a28e30c46754dd6dd8a7c1b85508facb85fdc58effb2277e273df16deb3827593c1cc000000000000eaa6ebdbd7209b178e7e19b48b33de491c639180b95057f9f52442a9c88babac3516", 0x83}, {&(0x7f0000000100)="0000000000008d34d3e2", 0xa}], 0x3) writev(r2, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b905d6f66b8261f87", 0x10}], 0x1) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:* rm!'], 0x9) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f023, 0x8}) r8 = io_uring_setup(0x2c49, &(0x7f0000000240)={0x0, 0x3640, 0x0, 0xfffffffc, 0x0, 0x0, r5}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x18, &(0x7f0000000000), 0x1) r9 = syz_open_dev$vim2m(&(0x7f0000000180), 0x800, 0x2) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 35.984249511s ago: executing program 4 (id=3313): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000", @ANYRES32=0x0, @ANYRES32=r0], 0x24}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000002f00090027bd7000000000000400000004001d00180009"], 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="110000000400000004000000e0"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000240), &(0x7f0000000140)=""/11}, 0x20) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r4, &(0x7f0000000340)={0x5, 0x90d, 0x0, 0x48ca9c27a8148f77}) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r6, 0x0) listen(r2, 0x80000003) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)={0x18, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3a080045000028006600000206907864010001ffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000890780005"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x311, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1, 0x80, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0xfff9, 0x8000, 0x9c}, {0x6, 0x24, 0x1a, 0x6, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6f, 0x8, 0x6f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xd4, 0x5a}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7f, 0x4, 0x7}}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000580)=@string={0x2}}, {0x7e, &(0x7f0000000000)=ANY=[@ANYRES64=r1]}]}) 14.046670495s ago: executing program 1 (id=3363): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000006b030000000000001d400500000000004704000001ed00007203020000000000bf44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="200902000000020c94e72f1367e1cc914a814a3beeeca79a12f29c5636c032cbb9d48a63115084eb4b51c60d61e556a0c9f4855c191a3ca011342dd66461ddce83cff76519"], 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() tkill(r5, 0x2a) openat$vcsu(0xffffffffffffff9c, 0x0, 0x600, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312006000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 12.144446128s ago: executing program 0 (id=3372): unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) fallocate(r0, 0x3, 0x4, 0x8100c64) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000600)=0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000080)={0x0, 0x0}) 11.970058767s ago: executing program 0 (id=3375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2000, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="05170000fffe0002140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10.602095533s ago: executing program 0 (id=3378): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000041000701feffffff0800000002efffffffff42800c000180060006008035"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f00000002c0)={0x0, 0xae0c, 0x10000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2100, 0x811c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x20, 0x0, 0x27}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x0, 0x0, 0x0}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_create(0x2, &(0x7f0000000a80)={0x0, 0x19, 0x0, @thr={&(0x7f0000000600)="b95f705a07d126b61df7e79ebb84f96927a49f14384e7ba836573cdc3092c66f5f6927b3d7b541ad004c2fd2805e3ca5493d32427c1f41527c5793e7b7e6f1da1bd0a782b0302eaddfb17b25cdfca08bc96d583d29f28b67603f2886a6866df221d179434d1c37352a35e50a305148366edb0616443e7110acff1ec9581cf9bf6fe37f0f2316fd7ca2b6c25751d7aaa92773558e6c20c6226f013dde737893ef37d3f8885200c37c1ada5b8d6a169f0c754263b685a0b018f6f65bf934a2870f54066830625935cc17f4d5fd60c0e453b9649ad1d2fc7331acd9f5fe796c80683f9f88b517427522af4fcc42c8f91c1168", &(0x7f0000000700)="6ce657f355ff2c55c23915d126230e84b24b484849a5681c51ea5035e87bd230b4833e3a44e0d1eb0746fc9929671b6e938904eb8079ce473a3661fab0b3dfe0250ad16a5b3626ab0744be76eac3563bd54bfa454b6532abb87aea3928bbaac21abba293c4d50fa7b672fc572de6d78556f8e5dbf3cce11eec7d70fcf6e5a0b0a80c32560d22d9097021efd6e206366b065ca4c9459c8635a58a8f660834792216c50478be29d28ec3b2d42d2c2f8192f8fa59256a98eb7b961201798a1b28808e145240856ce4b42e548a890aba8f75fb4a88caf32e2a5f98f43feef2ae67fc92353b6cb38cf3edc75b36ddf31f84ae65951ff867f7"}}, &(0x7f0000000ac0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, 0x0, &(0x7f0000000840)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102020000402505a1a440000102030109025c0002010080050904000001020d0000052406000105240022fe0d240f0104000000030002000306241200000c0905810320000101000904010000020d00000904010102020d000009058202100037070509050302ff03050009"], 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r7, 0x4068aea3, &(0x7f0000000200)) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000009b80)={0x40000012}) r9 = io_uring_setup(0x4129, &(0x7f00000007c0)={0x0, 0x0, 0x1000, 0x0, 0x1000000, 0x0, r7}) r10 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "41fad9231f9605db7317a505c9c6e3c54139a42fc3bb2674bd7c89e8d48b86b308fab237d6231b302b7421a260396f8c81ecc6c21d1ac02a49db9a9a20d2250d", 0x2f}, 0x48, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r10, 0x0, &(0x7f00000004c0)='\'@%\\\x00', &(0x7f0000000500)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x13, &(0x7f0000001bc0), 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xdc80ea85af82a79c, 0x0) 9.302850702s ago: executing program 2 (id=3384): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fanotify_init(0xef0, 0x2) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000008004002b8008001b0000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) 9.041385818s ago: executing program 2 (id=3385): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x1fc, 0x30, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{0x1e4, 0x1, [@m_connmark={0x74, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x51c86cc0, 0x8}, 0x4}}]}, {0x25, 0x6, "2e0effe2dc3401cf98dcd68e067373e3a4d2459f025e438fe4508aede8d700750a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_tunnel_key={0xa8, 0x0, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x10000000, 0x4, 0x100}, 0x1}}]}, {0x3d, 0x6, "28417639d3d068c482e4398d2dfe8f22a0b29bddf135cd5f6b247a9e24cf305fd4b84cac9cfd862aa24158ce9bcccc00445026b7c34e177601"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0xc4, 0x20, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x3, 0x0, 0xffff, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x10000008, 0xfff}, 0xfffc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffff, 0x8, 0x9, 0x2}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd51, 0xf6ec, 0x20000000, 0x8, 0x2}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xfffff2b7, 0x1, 0x8, 0x8}, 0x7f}}]}, {0x5, 0x6, "d8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4}]}, 0x1fc}, 0x1, 0x0, 0x0, 0xd0}, 0x40804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.60099057s ago: executing program 1 (id=3386): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) close(r1) 8.196293763s ago: executing program 2 (id=3387): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x12, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001800010000000000fedbdf258020000000040005001500"], 0x44}, 0x1, 0x0, 0x0, 0x24048005}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) 7.298432589s ago: executing program 0 (id=3389): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x200, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) preadv(r1, &(0x7f0000001680)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1, 0x80, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffb, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 7.284539612s ago: executing program 1 (id=3390): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x1d4, 0x30, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{0x1c0, 0x1, [@m_connmark={0x70, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x51c86cc0, 0x8}, 0x4}}]}, {0x21, 0x6, "2e0effe2dc3401cf98dcd68e067373e3a4d2459f025e438fe4508aede8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_tunnel_key={0xa4, 0x0, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x10000000, 0x4, 0x100}, 0x1}}]}, {0x31, 0x6, "28417639d3d068c482e4398d2dfe8f22a0b29bddf135cd5f6b247a9e24cf305fd4b84cac9cfd862aa24158ce9b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0xa8, 0x20, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x3, 0x0, 0xffff, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x10000008, 0xfff}, 0xfffc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffff, 0x8, 0x9, 0x2}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd51, 0xf6ec, 0x20000000, 0x8, 0x2}, 0x9}}]}, {0x5, 0x6, "d8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0xd0}, 0x40804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.218794359s ago: executing program 5 (id=3395): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fanotify_init(0xef0, 0x2) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000008004002b8008001b0000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) 5.039087228s ago: executing program 5 (id=3396): dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$amidi(0x0, 0x1, 0x2100) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x1c8, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x3, 0x1}, {0x18, 0x1}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x4, 0x3}, {0x5, 0x6}, {0x3, 0x3}, {0x7, 0x6}, {0x6, 0x1}, {0x7, 0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x5}, {0x7, 0x3}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x7, 0x1}, {0x6, 0x8}, {0x6, 0x6}, {0x6, 0x4}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x9}, {0x3, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x3, 0xa}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x2}, {0x5}, {0x7, 0x2}, {0x2, 0x2}, {0x3, 0x2}, {0x4, 0x7}, {0x7, 0xa}, {0x6, 0x2}, {0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6865, 0x2, 0x4000, 0x3, 0x600, 0xc, 0x9, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1ff, 0x0, 0x10, 0x6, 0xbb, 0x9, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x3}, {}, {0x0, 0x5}, {0x4, 0x8}, {0x2, 0x9}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0xc, 0x24, 0x24, 0x33, 0x12, 0x6, 0x13, 0x1b, 0x3, 0x30, 0x24, 0x2, 0x24, 0x5]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x36, 0x18, 0x9, 0x12, 0x6c, 0x30, 0x12, 0x6c, 0x0, 0x60, 0xb, 0x16, 0x6, 0xc, 0x18, 0x1b, 0x3, 0x3, 0x0, 0x48, 0x16, 0x36, 0x5, 0x60, 0x24, 0x9, 0x6c, 0x6c, 0x30, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9f2, 0x69, 0x9, 0x0, 0x0, 0x5, 0x9]}}]}]}, @NL80211_ATTR_MESH_SETUP={0xa0, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x7f, 0x3, "f1a5f71852f0e018b0bbb8d9992a29ce19b630ffdf574d03311b795ed357bec5c61dd9cbd0e864bc2e352b0d6a9885ac5fddf6e3d76cd87215d95ffc016c4d61cb8f802f17e64b2e9ee74920716d43c7788826e46a3598eecaaf0a605aa92dbb1a151c649c58e451bb92b256bdf7c74a9c6725a903b694fa39f10a"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x48020}, 0x44084) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.918106735s ago: executing program 1 (id=3397): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700202142"], 0x50) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x0, 0x0, 0x2c}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000340)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00'}, 0x94) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0xb9ddd000) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2) 4.902241665s ago: executing program 0 (id=3398): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000009c0)=0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) rename(0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.702408175s ago: executing program 5 (id=3399): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x1fc, 0x30, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{0x1e4, 0x1, [@m_connmark={0x74, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x51c86cc0, 0x8}, 0x4}}]}, {0x25, 0x6, "2e0effe2dc3401cf98dcd68e067373e3a4d2459f025e438fe4508aede8d700750a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_tunnel_key={0xa8, 0x0, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x10000000, 0x4, 0x100}, 0x1}}]}, {0x3d, 0x6, "28417639d3d068c482e4398d2dfe8f22a0b29bddf135cd5f6b247a9e24cf305fd4b84cac9cfd862aa24158ce9bcccc00445026b7c34e177601"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0xc4, 0x20, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x3, 0x0, 0xffff, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x10000008, 0xfff}, 0xfffc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffff, 0x8, 0x9, 0x2}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd51, 0xf6ec, 0x20000000, 0x8, 0x2}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xfffff2b7, 0x1, 0x8, 0x8}, 0x7f}}]}, {0x5, 0x6, "d8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4}]}, 0x1fc}, 0x1, 0x0, 0x0, 0xd0}, 0x40804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.43115946s ago: executing program 2 (id=3400): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000041000701feffffff0800000002efffffffff42800c000180060006008035"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f00000002c0)={0x0, 0xae0c, 0x10000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2100, 0x811c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x20, 0x0, 0x27}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x0, 0x0, 0x0}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_create(0x2, &(0x7f0000000a80)={0x0, 0x19, 0x0, @thr={&(0x7f0000000600)="b95f705a07d126b61df7e79ebb84f96927a49f14384e7ba836573cdc3092c66f5f6927b3d7b541ad004c2fd2805e3ca5493d32427c1f41527c5793e7b7e6f1da1bd0a782b0302eaddfb17b25cdfca08bc96d583d29f28b67603f2886a6866df221d179434d1c37352a35e50a305148366edb0616443e7110acff1ec9581cf9bf6fe37f0f2316fd7ca2b6c25751d7aaa92773558e6c20c6226f013dde737893ef37d3f8885200c37c1ada5b8d6a169f0c754263b685a0b018f6f65bf934a2870f54066830625935cc17f4d5fd60c0e453b9649ad1d2fc7331acd9f5fe796c80683f9f88b517427522af4fcc42c8f91c1168", &(0x7f0000000700)="6ce657f355ff2c55c23915d126230e84b24b484849a5681c51ea5035e87bd230b4833e3a44e0d1eb0746fc9929671b6e938904eb8079ce473a3661fab0b3dfe0250ad16a5b3626ab0744be76eac3563bd54bfa454b6532abb87aea3928bbaac21abba293c4d50fa7b672fc572de6d78556f8e5dbf3cce11eec7d70fcf6e5a0b0a80c32560d22d9097021efd6e206366b065ca4c9459c8635a58a8f660834792216c50478be29d28ec3b2d42d2c2f8192f8fa59256a98eb7b961201798a1b28808e145240856ce4b42e548a890aba8f75fb4a88caf32e2a5f98f43feef2ae67fc92353b6cb38cf3edc75b36ddf31f84ae65951ff867f7"}}, &(0x7f0000000ac0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, 0x0, &(0x7f0000000840)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102020000402505a1a440000102030109025c0002010080050904000001020d0000052406000105240022fe0d240f0104000000030002000306241200000c0905810320000101000904010000020d00000904010102020d000009058202100037070509050302ff03050009"], 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r7, 0x4068aea3, &(0x7f0000000200)) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000009b80)={0x40000012}) r9 = io_uring_setup(0x4129, &(0x7f00000007c0)={0x0, 0x0, 0x1000, 0x0, 0x1000000, 0x0, r7}) r10 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "41fad9231f9605db7317a505c9c6e3c54139a42fc3bb2674bd7c89e8d48b86b308fab237d6231b302b7421a260396f8c81ecc6c21d1ac02a49db9a9a20d2250d", 0x2f}, 0x48, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r10, 0x0, &(0x7f00000004c0)='\'@%\\\x00', &(0x7f0000000500)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x13, &(0x7f0000001bc0), 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xdc80ea85af82a79c, 0x0) 3.821730443s ago: executing program 1 (id=3401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000140)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2c3}, 0x1c) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xeac8c889cf11733e}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x1, 0x9, 0x5, 0x88}, {0x7, 0x2, 0xb, 0x8, 0xffff, 0x200001}, 0xc, 0x5, 0x1ff}}, @TCA_TBF_BURST={0x8, 0x6, 0x5}]}}]}, 0x6c}}, 0x10) 3.722584931s ago: executing program 5 (id=3402): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xe) r0 = getpid() ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, r0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffd) r2 = syz_pidfd_open(r1, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x100000001, 0x200100) ioctl$EVIOCGKEY(r4, 0x80404518, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000200)=""/104) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183000, 0x10a) getdents64(r7, 0x0, 0x0) lstat(&(0x7f0000001ec0)='./bus\x00', &(0x7f0000001f00)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r5, {0xee01}}, './file0\x00'}) fcntl$getownex(r7, 0x10, &(0x7f0000002180)) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000021c0)={{{@in, @in6=@private2}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f00000022c0)=0xe8) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/130, 0x82}, {&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f0000000480)=""/172, 0xac}, {&(0x7f0000000540)=""/113, 0x71}], 0x4, &(0x7f0000000600)=""/208, 0xd0}, 0xd2e}, {{&(0x7f0000000700)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f00000017c0)=""/206, 0xce}}, {{&(0x7f00000018c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001a00)=""/208, 0xd0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/28, 0x1c}, {0x0}], 0x4}, 0xffffff11}], 0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setns(r2, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.795008578s ago: executing program 0 (id=3403): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000f26c44204f080100b8e0010203010902120001010000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) getsockopt(r3, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 2.212447822s ago: executing program 5 (id=3404): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xc}, {0xf}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.08706879s ago: executing program 1 (id=3405): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) syz_usb_connect(0x0, 0x40, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005500)={0x0, 0x0, &(0x7f00000054c0)={&(0x7f00000016c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x55fdd7e50386e5c2}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) 261.537281ms ago: executing program 2 (id=3406): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 163.710339ms ago: executing program 5 (id=3407): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0) syz_usb_disconnect(r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r1, 0x319, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040005}, 0x44014) 0s ago: executing program 2 (id=3408): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x1d4, 0x30, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{0x1c0, 0x1, [@m_connmark={0x70, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x51c86cc0, 0x8}, 0x4}}]}, {0x21, 0x6, "2e0effe2dc3401cf98dcd68e067373e3a4d2459f025e438fe4508aede8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_tunnel_key={0xa4, 0x0, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x10000000, 0x4, 0x100}, 0x1}}]}, {0x31, 0x6, "28417639d3d068c482e4398d2dfe8f22a0b29bddf135cd5f6b247a9e24cf305fd4b84cac9cfd862aa24158ce9b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0xa8, 0x20, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x3, 0x0, 0xffff, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x10000008, 0xfff}, 0xfffc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffff, 0x8, 0x9, 0x2}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd51, 0xf6ec, 0x20000000, 0x8, 0x2}, 0x9}}]}, {0x5, 0x6, "d8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0xd0}, 0x40804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): tempt power cycle [ 755.595052][ T5717] usb 1-1: USB disconnect, device number 45 [ 755.653259][ T5593] usb 5-1: USB disconnect, device number 54 [ 755.733708][T14894] ubi31: scanning is finished [ 755.733725][T14894] ubi31: empty MTD device detected [ 755.958055][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 756.339532][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 756.339581][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 756.341924][ T9] usb 3-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 756.342012][ T9] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 756.408357][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.408384][ T9] usb 3-1: Product: syz [ 756.408398][ T9] usb 3-1: Manufacturer: syz [ 756.408421][ T9] usb 3-1: SerialNumber: syz [ 756.445950][ T31] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 756.595781][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3022'. [ 756.608061][ T31] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 756.609835][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.639204][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.639230][ T31] usb 2-1: Product: syz [ 756.639245][ T31] usb 2-1: Manufacturer: syz [ 756.639260][ T31] usb 2-1: SerialNumber: syz [ 756.698992][ T31] usb 2-1: config 0 descriptor?? [ 756.747502][ T31] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 756.845333][T14897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3017'. [ 757.101240][T14920] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3017'. [ 757.226406][T14908] binder: 14904:14908 ioctl c0306201 0 returned -14 [ 757.262233][ T31] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 757.262762][ T31] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 757.402331][T14924] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3023'. [ 760.677331][ T31] usb 2-1: USB disconnect, device number 58 [ 760.838228][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 761.044483][T14933] tipc: Enabling of bearer rejected, failed to enable media [ 761.415856][T14894] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 761.415900][T14894] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 761.415919][T14894] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 761.415934][T14894] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 761.415951][T14894] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 761.415966][T14894] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 761.415982][T14894] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1387540375 [ 761.416002][T14894] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 761.429247][T14940] ubi31: background thread "ubi_bgt31d" started, PID 14940 [ 761.544003][ T9] usb 3-1: USB disconnect, device number 85 [ 761.733385][T11060] udevd[11060]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.165447][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3028'. [ 762.620193][T14953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3033'. [ 762.620254][T14953] net_ratelimit: 36 callbacks suppressed [ 762.620266][T14953] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 762.885615][ T5593] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 762.992866][T14964] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3034'. [ 763.042367][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 763.150696][ T5593] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 763.256476][ T5593] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.256536][ T5593] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 763.256556][ T5593] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 763.256580][ T5593] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 763.256623][ T5593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.079624][ T37] kauditd_printk_skb: 54 callbacks suppressed [ 765.079643][ T37] audit: type=1326 audit(1787437229.146:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14952 comm="syz.2.3033" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f121c07e0d9 code=0x0 [ 765.386321][T14834] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 765.561807][T14834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 765.561864][T14834] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 765.569513][T14834] usb 1-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 765.569673][T14834] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 765.611453][T14834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.611484][T14834] usb 1-1: Product: syz [ 765.611554][T14834] usb 1-1: Manufacturer: syz [ 765.611569][T14834] usb 1-1: SerialNumber: syz [ 765.667201][T14969] tipc: Enabling of bearer rejected, failed to enable media [ 766.234404][T14966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3036'. [ 766.249838][ T5593] gud 6-1:1.0: USB-1: Failed to add properties (ret=-71) [ 766.251879][ T5593] gud 6-1:1.0: Failed to get connectors (error=-71) [ 766.251920][ T5593] gud 6-1:1.0: probe with driver gud failed with error -71 [ 766.303333][T14966] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3036'. [ 766.386647][ T5593] usb 6-1: USB disconnect, device number 33 [ 766.523668][T14834] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 766.622476][T14834] usb 1-1: USB disconnect, device number 46 [ 766.736802][T11060] udevd[11060]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.949402][T14976] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3039'. [ 767.177208][T14971] binder: 14970:14971 ioctl c0306201 0 returned -14 [ 767.401637][T14984] FAULT_INJECTION: forcing a failure. [ 767.401637][T14984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.401672][T14984] CPU: 1 UID: 0 PID: 14984 Comm: syz.5.3044 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 767.401697][T14984] Tainted: [L]=SOFTLOCKUP [ 767.401704][T14984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 767.401715][T14984] Call Trace: [ 767.401723][T14984] [ 767.401731][T14984] dump_stack_lvl+0xe8/0x150 [ 767.401765][T14984] should_fail_ex+0x46b/0x600 [ 767.401799][T14984] _copy_to_user+0x31/0xb0 [ 767.401822][T14984] simple_read_from_buffer+0xe1/0x170 [ 767.401853][T14984] proc_fail_nth_read+0x1be/0x230 [ 767.401893][T14984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.401922][T14984] ? rw_verify_area+0x250/0x4d0 [ 767.401948][T14984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.401973][T14984] vfs_read+0x219/0xa90 [ 767.402004][T14984] ? __pfx_vfs_read+0x10/0x10 [ 767.402030][T14984] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 767.402057][T14984] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 767.402080][T14984] ? mutex_lock_nested+0x152/0x1d0 [ 767.402097][T14984] ? fdget_pos+0x252/0x320 [ 767.402136][T14984] ksys_read+0x156/0x270 [ 767.402163][T14984] ? __pfx_ksys_read+0x10/0x10 [ 767.402198][T14984] do_syscall_64+0x166/0x520 [ 767.402220][T14984] ? trace_irq_disable+0x3b/0x140 [ 767.402240][T14984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.402260][T14984] ? clear_bhb_loop+0x70/0xc0 [ 767.402282][T14984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.402301][T14984] RIP: 0033:0x7f219147e90e [ 767.402318][T14984] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 767.402334][T14984] RSP: 002b:00007f218f715fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 767.402354][T14984] RAX: ffffffffffffffda RBX: 00007f218f7166c0 RCX: 00007f219147e90e [ 767.402368][T14984] RDX: 000000000000000f RSI: 00007f218f7160a0 RDI: 0000000000000005 [ 767.402379][T14984] RBP: 00007f218f716090 R08: 0000000000000000 R09: 0000000000000000 [ 767.402390][T14984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.402401][T14984] R13: 00007f2191746038 R14: 00007f2191745fa0 R15: 00007ffd98e80328 [ 767.402432][T14984] [ 767.997177][T14993] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3046'. [ 768.295669][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 768.295725][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 768.316481][ T9] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 768.316539][ T9] usb 3-1: chopping to 0 config(s) [ 768.316613][ T9] usb 3-1: can't read configurations, error -32 [ 768.896183][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 769.036048][ T9] usb 3-1: device descriptor read/64, error -32 [ 769.166623][ T9] usb usb3-port1: attempt power cycle [ 769.648364][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 769.689550][ T9] usb 3-1: device descriptor read/8, error -32 [ 770.028062][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 770.162265][ T9] usb 3-1: device descriptor read/8, error -32 [ 770.276369][ T9] usb usb3-port1: unable to enumerate USB device [ 771.184515][ T5589] Bluetooth: hci2: unexpected event 0x09 length: 6 > 3 [ 771.184763][T15002] tipc: Enabling of bearer rejected, already enabled [ 771.485821][ T31] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 771.533217][T15011] netlink: 'syz.0.3052': attribute type 2 has an invalid length. [ 771.636554][ T31] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 771.638576][ T31] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 771.638600][ T31] usb 3-1: config 0 has no interface number 0 [ 771.641500][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.641524][ T31] usb 3-1: Product: syz [ 771.641538][ T31] usb 3-1: Manufacturer: syz [ 771.641552][ T31] usb 3-1: SerialNumber: syz [ 771.652973][ T31] usb 3-1: config 0 descriptor?? [ 771.863213][ T31] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 771.891188][ T31] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 771.891442][ T31] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 771.891491][ T31] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 771.913641][ T31] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 772.450978][T15030] ubi: mtd0 is already attached to ubi31 [ 772.453324][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'. [ 773.593761][ T31] usb 3-1: USB disconnect, device number 90 [ 773.654888][ T31] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 773.668305][ T31] keyspan 3-1:0.133: device disconnected [ 773.777329][T14834] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 773.925694][T14834] usb 2-1: Using ep0 maxpacket: 32 [ 773.928525][T14834] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 773.963666][T14834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.963693][T14834] usb 2-1: Product: syz [ 773.963709][T14834] usb 2-1: Manufacturer: syz [ 773.963723][T14834] usb 2-1: SerialNumber: syz [ 774.018729][T14834] empeg 2-1:1.0: empeg converter detected [ 774.142495][T15031] binder: 15023:15031 ioctl c0306201 0 returned -14 [ 776.242257][T15051] tipc: Enabling of bearer rejected, already enabled [ 777.022551][T14834] empeg 2-1:1.0: probe with driver empeg failed with error -71 [ 777.520527][T14834] usb 2-1: USB disconnect, device number 59 [ 778.524877][T15066] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 778.603449][T15068] FAULT_INJECTION: forcing a failure. [ 778.603449][T15068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.603483][T15068] CPU: 0 UID: 0 PID: 15068 Comm: syz.4.3069 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 778.603510][T15068] Tainted: [L]=SOFTLOCKUP [ 778.603517][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.603528][T15068] Call Trace: [ 778.603537][T15068] [ 778.603545][T15068] dump_stack_lvl+0xe8/0x150 [ 778.603577][T15068] should_fail_ex+0x46b/0x600 [ 778.603611][T15068] _copy_to_user+0x31/0xb0 [ 778.603634][T15068] simple_read_from_buffer+0xe1/0x170 [ 778.603664][T15068] proc_fail_nth_read+0x1be/0x230 [ 778.603694][T15068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.603722][T15068] ? rw_verify_area+0x250/0x4d0 [ 778.603749][T15068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.603773][T15068] vfs_read+0x219/0xa90 [ 778.603806][T15068] ? __pfx_vfs_read+0x10/0x10 [ 778.603833][T15068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 778.603861][T15068] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 778.603884][T15068] ? mutex_lock_nested+0x152/0x1d0 [ 778.603901][T15068] ? fdget_pos+0x252/0x320 [ 778.603933][T15068] ksys_read+0x156/0x270 [ 778.603960][T15068] ? __pfx_ksys_read+0x10/0x10 [ 778.603996][T15068] do_syscall_64+0x166/0x520 [ 778.604018][T15068] ? trace_irq_disable+0x3b/0x140 [ 778.604037][T15068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.604056][T15068] ? clear_bhb_loop+0x70/0xc0 [ 778.604079][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.604098][T15068] RIP: 0033:0x7f53760ae90e [ 778.604115][T15068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 778.604135][T15068] RSP: 002b:00007f5374345fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 778.604156][T15068] RAX: ffffffffffffffda RBX: 00007f53743466c0 RCX: 00007f53760ae90e [ 778.604170][T15068] RDX: 000000000000000f RSI: 00007f53743460a0 RDI: 0000000000000004 [ 778.604182][T15068] RBP: 00007f5374346090 R08: 0000000000000000 R09: 0000000000000000 [ 778.604194][T15068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.604205][T15068] R13: 00007f5376376038 R14: 00007f5376375fa0 R15: 00007ffd8a5524d8 [ 778.604236][T15068] [ 778.962983][ T5593] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 779.575616][ T5593] usb 6-1: device descriptor read/64, error -71 [ 779.913781][ T5589] Bluetooth: hci2: unexpected event 0x09 length: 6 > 3 [ 779.913896][ T5593] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 779.931406][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 780.002711][T15079] sd 0:0:1:0: device reset [ 780.076892][ T9] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 780.079232][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 780.079262][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 780.083096][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.083121][ T9] usb 5-1: Product: syz [ 780.083135][ T9] usb 5-1: Manufacturer: syz [ 780.083150][ T9] usb 5-1: SerialNumber: syz [ 780.124029][ T5315] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 780.166496][ T5593] usb 6-1: device descriptor read/64, error -71 [ 780.276169][ T5593] usb usb6-port1: attempt power cycle [ 780.650827][T15081] binder: 15078:15081 ioctl c0306201 0 returned -14 [ 781.549482][ T5593] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 781.551531][ T5315] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 781.567329][ T5315] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 781.567358][ T5315] usb 3-1: config 0 has no interface number 0 [ 781.598110][ T5315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.598142][ T5315] usb 3-1: Product: syz [ 781.598157][ T5315] usb 3-1: Manufacturer: syz [ 781.598171][ T5315] usb 3-1: SerialNumber: syz [ 781.746995][ T5315] usb 3-1: config 0 descriptor?? [ 781.807472][ T5593] usb 6-1: device descriptor read/8, error -71 [ 781.877421][ T9] usb 5-1: Cannot retrieve CPort count: 0 [ 781.877468][ T9] usb 5-1: Cannot retrieve CPort count: -5 [ 781.877503][ T9] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 782.142819][ T5315] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 782.226109][ T5315] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 782.231589][ T5315] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 782.236497][ T5315] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 782.244947][T15088] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3075'. [ 785.105187][ T5315] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 785.538454][T15093] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3076'. [ 785.550026][T15093] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 785.550796][T15093] batman_adv: batadv0: Adding interface: gretap1 [ 785.550811][T15093] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.550844][T15093] batman_adv: batadv0: Interface activated: gretap1 [ 785.686984][T14834] usb 3-1: USB disconnect, device number 91 [ 785.822900][ T5315] usb 5-1: USB disconnect, device number 55 [ 785.901829][T14834] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 785.919525][T14834] keyspan 3-1:0.133: device disconnected [ 786.071636][ T5589] Bluetooth: hci2: unexpected event 0x09 length: 6 > 3 [ 786.946870][ T5589] Bluetooth: hci5: unexpected event 0x09 length: 6 > 3 [ 787.261372][T15116] binder: 15107:15116 ioctl c0306201 0 returned -14 [ 787.452032][T15122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3082'. [ 787.975922][ T6181] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 787.976336][T14834] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 788.039220][T15127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3086'. [ 788.159300][ T6181] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 788.201169][T14834] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 788.322252][ T6181] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 788.322320][ T6181] usb 2-1: config 0 has no interface number 0 [ 788.364605][T14834] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 788.364736][T14834] usb 3-1: config 0 has no interface number 0 [ 791.364550][ T6181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.375815][T14834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.375832][T14834] usb 3-1: Product: syz [ 791.418023][ T6181] usb 2-1: config 0 descriptor?? [ 791.420031][ T6181] usb 2-1: can't set config #0, error -71 [ 791.456522][T14834] usb 3-1: config 0 descriptor?? [ 791.460241][T14834] usb 3-1: can't set config #0, error -71 [ 791.480069][ T6181] usb 2-1: USB disconnect, device number 60 [ 791.484640][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3087'. [ 791.511333][T14834] usb 3-1: USB disconnect, device number 92 [ 791.895612][ T5718] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 792.046514][ T5718] usb 5-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice= 1.00 [ 792.050900][ T5718] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.051043][ T5718] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 792.051072][ T5718] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 792.051097][ T5718] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 792.051120][ T5718] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 792.051144][ T5718] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 792.051187][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.148652][T15135] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 792.149030][T15135] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 792.154578][ T5718] io_ti 5-1:1.0: required endpoints missing [ 792.275682][ T6181] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 792.550776][T15135] hugetlbfs: Bad value 'e' for mount option 'nr_inodes' [ 792.550776][T15135] [ 792.566000][ T5718] usb 5-1: USB disconnect, device number 56 [ 792.620765][ T6181] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 792.622466][ T6181] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 792.622492][ T6181] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 792.656017][ T6181] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.656044][ T6181] usb 6-1: Product: syz [ 792.656058][ T6181] usb 6-1: Manufacturer: syz [ 792.656072][ T6181] usb 6-1: SerialNumber: syz [ 793.773079][ T6181] usb 6-1: Cannot retrieve CPort count: -110 [ 793.773129][ T6181] usb 6-1: Cannot retrieve CPort count: -110 [ 793.773164][ T6181] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 794.056261][ T5593] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 794.216490][ T5593] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 794.220920][ T5593] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 794.220949][ T5593] usb 1-1: Product: syz [ 794.220964][ T5593] usb 1-1: Manufacturer: syz [ 794.220978][ T5593] usb 1-1: SerialNumber: syz [ 794.225706][T15152] binder: 15151:15152 ioctl c0306201 0 returned -14 [ 794.271888][ T5593] usb 1-1: config 0 descriptor?? [ 794.275772][ T5593] ch341 1-1:0.0: ch341-uart converter detected [ 795.098162][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3097'. [ 795.466991][ T5593] usb 1-1: failed to receive control message: -110 [ 795.467049][ T5593] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 795.605622][ T5315] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 795.911570][ T5315] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 795.931323][ T5315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.970850][T12600] usb 1-1: USB disconnect, device number 47 [ 796.002349][T12600] ch341 1-1:0.0: device disconnected [ 796.004983][ T5717] usb 6-1: USB disconnect, device number 38 [ 796.197550][ T5315] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 796.235654][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 796.395197][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 796.395255][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 796.400788][ T5589] Bluetooth: hci5: unexpected event 0x09 length: 6 > 3 [ 796.407325][ T9] usb 5-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 796.407420][ T9] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 796.435695][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.435732][ T9] usb 5-1: Product: syz [ 796.435747][ T9] usb 5-1: Manufacturer: syz [ 796.435761][ T9] usb 5-1: SerialNumber: syz [ 796.524196][ T5717] usb 3-1: USB disconnect, device number 93 [ 796.918204][T12600] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 797.014501][T15166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3100'. [ 797.082638][T15166] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3100'. [ 797.109259][T12600] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 797.114422][T12600] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 797.114450][T12600] usb 2-1: config 0 has no interface number 0 [ 797.142207][T12600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.142236][T12600] usb 2-1: Product: syz [ 797.142250][T12600] usb 2-1: Manufacturer: syz [ 797.142264][T12600] usb 2-1: SerialNumber: syz [ 797.198197][T12600] usb 2-1: config 0 descriptor?? [ 797.259218][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 797.450552][T12600] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 797.470911][T12600] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 797.471055][T12600] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 797.471195][T12600] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 797.560427][T12600] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 797.909478][ T9] usb 5-1: USB disconnect, device number 57 [ 798.198577][ T5589] Bluetooth: hci3: unexpected event 0x09 length: 6 > 3 [ 798.227408][T15202] ubi: mtd0 is already attached to ubi31 [ 798.234202][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3112'. [ 798.504899][T15141] udevd[15141]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 798.686271][ T5718] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 798.838425][ T5718] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 798.840878][ T5718] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 798.840907][ T5718] usb 6-1: config 0 has no interface number 0 [ 798.843986][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.844011][ T5718] usb 6-1: Product: syz [ 798.844027][ T5718] usb 6-1: Manufacturer: syz [ 798.844041][ T5718] usb 6-1: SerialNumber: syz [ 798.903128][ T5718] usb 6-1: config 0 descriptor?? [ 799.053381][ T5593] usb 2-1: USB disconnect, device number 61 [ 799.133043][ T5718] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 799.134768][ T5593] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 799.170325][ T5718] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 799.170478][ T5718] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 799.170619][ T5718] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 799.178669][T15190] binder: 15189:15190 ioctl c0306201 0 returned -14 [ 799.217770][ T5593] keyspan 2-1:0.133: device disconnected [ 799.287804][ T5718] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 799.647961][T12600] usb 6-1: USB disconnect, device number 39 [ 799.671898][T12600] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 799.673770][T12600] keyspan 6-1:0.133: device disconnected [ 799.765682][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 799.843919][ T5717] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 799.929494][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 799.931815][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.071210][ T5717] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 800.074867][ T5717] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.085301][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.085327][ T5717] usb 1-1: Product: syz [ 800.085340][ T5717] usb 1-1: Manufacturer: syz [ 800.085354][ T5717] usb 1-1: SerialNumber: syz [ 800.111526][ T5717] usb 1-1: config 0 descriptor?? [ 800.139612][ T5717] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 800.167594][ T9] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 800.516287][ T5593] usb 5-1: USB disconnect, device number 58 [ 801.345333][ T5717] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 801.345434][ T5717] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 801.585663][ T5718] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 801.745586][ T6181] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 801.746766][ T5718] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 801.762816][ T5718] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 801.762887][ T5718] usb 2-1: Product: syz [ 801.762924][ T5718] usb 2-1: Manufacturer: syz [ 801.762963][ T5718] usb 2-1: SerialNumber: syz [ 802.528719][ T6181] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 802.534027][ T5718] usb 2-1: config 0 descriptor?? [ 802.540786][ T6181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.540813][ T6181] usb 3-1: Product: syz [ 802.540827][ T6181] usb 3-1: Manufacturer: syz [ 802.540840][ T6181] usb 3-1: SerialNumber: syz [ 802.592497][ T5718] ch341 2-1:0.0: ch341-uart converter detected [ 802.617624][ T6181] usb 3-1: USB2VGA dongle found at address 94 [ 802.632427][ T6181] usb 3-1: Allocated 8 output buffers [ 802.795003][T14834] usb 1-1: USB disconnect, device number 48 [ 802.818331][ T6181] usb 3-1: Failed to early initialize device [ 802.861717][ T6181] usb 3-1: USB disconnect, device number 94 [ 802.890971][T15233] ubi: mtd0 is already attached to ubi31 [ 802.925612][ T5593] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 802.971604][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'. [ 803.140224][ T5593] usb 5-1: unable to get BOS descriptor or descriptor too short [ 803.140282][ T5593] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 803.142445][ T5593] usb 5-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 803.142607][ T5593] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 803.190831][ T5593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.190911][ T5593] usb 5-1: Product: syz [ 803.190927][ T5593] usb 5-1: Manufacturer: syz [ 803.190942][ T5593] usb 5-1: SerialNumber: syz [ 803.481659][T15231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3121'. [ 804.421225][T15231] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3121'. [ 804.453322][ T5718] usb 2-1: failed to receive control message: -110 [ 804.453412][ T5718] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 804.607579][ T9] usb 2-1: USB disconnect, device number 62 [ 804.614297][ T9] ch341 2-1:0.0: device disconnected [ 804.660981][ T5589] Bluetooth: hci3: unexpected event 0x09 length: 6 > 3 [ 804.900124][ T5593] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 804.975634][T12600] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 804.993916][ T5593] usb 5-1: USB disconnect, device number 59 [ 805.089612][T15141] udevd[15141]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 805.215906][T15258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3131'. [ 805.296829][T12600] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 805.299363][T12600] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 805.299392][T12600] usb 6-1: config 0 has no interface number 0 [ 805.302214][T12600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.302239][T12600] usb 6-1: Product: syz [ 805.302253][T12600] usb 6-1: Manufacturer: syz [ 805.302267][T12600] usb 6-1: SerialNumber: syz [ 805.314320][T12600] usb 6-1: config 0 descriptor?? [ 805.713260][ T6181] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 806.204567][T12600] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 806.231191][T12600] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 806.231772][T12600] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 806.240344][T12600] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 806.269993][T12600] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 806.366682][ T6181] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 806.368077][ T6181] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.368130][ T6181] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.368153][ T6181] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 806.368195][ T6181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.436521][ T5593] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 806.443913][ T6181] cxacru 2-1:1.0: cxacru_bind: interface has incorrect endpoints [ 806.444054][ T6181] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 806.475651][ T5724] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 806.586317][ T5593] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 806.589689][ T5593] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 806.589716][ T5593] usb 3-1: Product: syz [ 806.589731][ T5593] usb 3-1: Manufacturer: syz [ 806.589752][ T5593] usb 3-1: SerialNumber: syz [ 806.593070][ T5593] usb 3-1: config 0 descriptor?? [ 806.602093][ T5593] ch341 3-1:0.0: ch341-uart converter detected [ 806.646514][ T5724] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 806.648634][ T5724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.651072][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.651095][ T5724] usb 1-1: Product: syz [ 806.651110][ T5724] usb 1-1: Manufacturer: syz [ 806.651123][ T5724] usb 1-1: SerialNumber: syz [ 806.691849][ T5724] usb 1-1: config 0 descriptor?? [ 806.709268][ T5724] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 806.762213][ T6181] usb 6-1: USB disconnect, device number 40 [ 806.769331][ T5718] usb 2-1: USB disconnect, device number 63 [ 806.872922][ T6181] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 806.890435][ T6181] keyspan 6-1:0.133: device disconnected [ 807.481396][ T5724] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 807.481491][ T5724] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 807.512611][ T5724] usb 1-1: USB disconnect, device number 49 [ 807.889291][ T5593] usb 3-1: failed to receive control message: -110 [ 807.889351][ T5593] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -110 [ 808.677935][ T6181] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 808.818246][T12600] usb 3-1: USB disconnect, device number 95 [ 808.837077][T12600] ch341 3-1:0.0: device disconnected [ 808.856591][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.856658][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.935977][ T5718] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 809.046497][ T6181] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 809.064779][ T6181] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 809.064807][ T6181] usb 6-1: Product: syz [ 809.064822][ T6181] usb 6-1: Manufacturer: syz [ 809.064836][ T6181] usb 6-1: SerialNumber: syz [ 809.094321][ T5718] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 809.113993][ T5718] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 809.114021][ T5718] usb 2-1: Product: syz [ 809.114034][ T5718] usb 2-1: Manufacturer: syz [ 809.114048][ T5718] usb 2-1: SerialNumber: syz [ 809.143638][ T6181] usb 6-1: config 0 descriptor?? [ 809.154078][ T6181] ch341 6-1:0.0: ch341-uart converter detected [ 809.426360][ T5718] usb 2-1: config 0 descriptor?? [ 813.748879][ T6181] usb 6-1: failed to receive control message: -71 [ 813.748948][ T6181] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 813.971186][ T5718] ch341 2-1:0.0: ch341-uart converter detected [ 814.201016][ T6181] usb 6-1: USB disconnect, device number 41 [ 814.235826][ T6181] ch341 6-1:0.0: device disconnected [ 815.490082][T15299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3139'. [ 815.603397][ T5718] usb 2-1: failed to receive control message: -110 [ 815.603501][ T5718] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -110 [ 816.991108][ T5593] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 817.416107][ T5593] usb 5-1: unable to get BOS descriptor or descriptor too short [ 817.416144][ T5593] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 817.418733][ T5593] usb 5-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 817.418787][ T5593] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 817.424333][ T5593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.424356][ T5593] usb 5-1: Product: syz [ 817.424363][ T5593] usb 5-1: Manufacturer: syz [ 817.424371][ T5593] usb 5-1: SerialNumber: syz [ 817.626152][T15303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3144'. [ 817.745081][ T5589] Bluetooth: hci2: unexpected event 0x09 length: 6 > 3 [ 817.846976][T15301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3143'. [ 817.865764][ T6181] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 817.904211][T15301] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3143'. [ 818.004342][ T5593] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 818.015726][T12600] usb 2-1: USB disconnect, device number 64 [ 818.017204][ T6181] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 818.022820][ T6181] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.022872][ T6181] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.022885][ T6181] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 818.022910][ T6181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.074627][ T5717] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 818.094653][T12600] ch341 2-1:0.0: device disconnected [ 818.146391][ T6181] cxacru 1-1:1.0: cxacru_bind: interface has incorrect endpoints [ 818.146533][ T6181] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 818.236378][ T5717] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 818.237859][ T5717] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 818.237885][ T5717] usb 3-1: config 0 has no interface number 0 [ 818.241807][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.241832][ T5717] usb 3-1: Product: syz [ 818.241847][ T5717] usb 3-1: Manufacturer: syz [ 818.241861][ T5717] usb 3-1: SerialNumber: syz [ 818.248823][ T5593] usb 5-1: USB disconnect, device number 60 [ 818.308614][ T5717] usb 3-1: config 0 descriptor?? [ 818.401314][ T6181] usb 1-1: USB disconnect, device number 50 [ 818.491081][T15141] udevd[15141]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.562477][ T5717] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 818.599084][ T5717] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 818.604806][ T5717] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 818.604862][ T5717] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 818.659647][ T5717] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 819.060919][ T9] usb 3-1: USB disconnect, device number 97 [ 819.095733][ T6181] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 819.099830][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 819.122012][ T9] keyspan 3-1:0.133: device disconnected [ 819.246586][ T6181] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 819.248827][ T6181] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.253680][ T6181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.253703][ T6181] usb 5-1: Product: syz [ 819.253716][ T6181] usb 5-1: Manufacturer: syz [ 819.253729][ T6181] usb 5-1: SerialNumber: syz [ 819.415965][ T5717] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 819.526718][ T6181] usb 5-1: config 0 descriptor?? [ 819.554934][ T6181] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 819.570957][ T5717] usb 6-1: Using ep0 maxpacket: 32 [ 819.591340][ T5717] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 820.372056][ T6181] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 820.372154][ T6181] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 821.111058][T15333] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 821.111842][T15333] batman_adv: batadv0: Adding interface: gretap1 [ 821.111856][T15333] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.111891][T15333] batman_adv: batadv0: Interface activated: gretap1 [ 821.757983][T15335] netlink: 'syz.1.3154': attribute type 3 has an invalid length. [ 821.758005][T15335] netlink: 'syz.1.3154': attribute type 1 has an invalid length. [ 821.758018][T15335] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3154'. [ 821.758033][T15335] NCSI netlink: No device for ifindex 511 [ 821.925643][ T6181] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 822.015861][ T5590] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 822.078140][ T6181] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 822.079947][ T6181] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.080000][ T6181] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.080024][ T6181] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 822.080067][ T6181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.163729][ T6181] cxacru 3-1:1.0: cxacru_bind: interface has incorrect endpoints [ 822.163874][ T6181] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 822.216681][ T5590] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 822.219833][ T5590] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 822.219859][ T5590] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.221992][ T5590] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 822.222016][ T5590] usb 2-1: Manufacturer: syz [ 822.288986][ T5590] usb 2-1: config 0 descriptor?? [ 822.315811][ T5590] igorplugusb 2-1:0.0: incorrect number of endpoints [ 822.542690][ T5590] usb 2-1: USB disconnect, device number 65 [ 824.773938][ T6181] usb 3-1: USB disconnect, device number 98 [ 825.006339][ T5717] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 825.006379][ T5717] usb 6-1: can't read configurations, error -71 [ 825.272425][ T9] usb 5-1: USB disconnect, device number 61 [ 825.365020][ T5589] Bluetooth: hci4: unexpected event 0x09 length: 6 > 3 [ 825.466965][ T5718] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 825.578892][T15352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3161'. [ 825.618285][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 825.618345][ T5718] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 825.619567][ T5718] usb 3-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 825.619658][ T5718] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 825.622048][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.622083][ T5718] usb 3-1: Product: syz [ 825.622097][ T5718] usb 3-1: Manufacturer: syz [ 825.622111][ T5718] usb 3-1: SerialNumber: syz [ 825.745907][ T9] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 825.849899][ T5590] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 825.896598][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 825.915277][ T9] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 825.915306][ T9] usb 5-1: config 0 has no interface number 0 [ 825.929575][T15346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3158'. [ 825.942210][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.942238][ T9] usb 5-1: Product: syz [ 825.942253][ T9] usb 5-1: Manufacturer: syz [ 825.942267][ T9] usb 5-1: SerialNumber: syz [ 825.980692][ T9] usb 5-1: config 0 descriptor?? [ 826.187352][ T5590] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 826.190858][ T5590] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 826.190911][ T5590] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.191138][ T5590] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 826.191183][ T5590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.253291][T15346] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3158'. [ 826.315002][ T9] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 826.331986][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 826.332289][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 826.332429][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 826.524809][ T9] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 826.651130][ T5718] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 826.670193][ T5590] cxacru 2-1:1.0: cxacru_bind: interface has incorrect endpoints [ 826.670337][ T5590] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 827.601179][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 827.869407][ T5724] usb 2-1: USB disconnect, device number 66 [ 827.926416][ T9] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 827.930422][ T9] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 827.930449][ T9] usb 6-1: Product: syz [ 827.930463][ T9] usb 6-1: Manufacturer: syz [ 827.930477][ T9] usb 6-1: SerialNumber: syz [ 827.933979][ T6181] usb 5-1: USB disconnect, device number 62 [ 828.057168][ T37] audit: type=1326 audit(1787437292.126:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15366 comm="syz.2.3164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121c07e0d9 code=0x7ffc0000 [ 828.059589][ T9] usb 6-1: config 0 descriptor?? [ 828.061779][ T37] audit: type=1326 audit(1787437292.126:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15366 comm="syz.2.3164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121c07e0d9 code=0x7ffc0000 [ 828.068990][ T5718] usb 3-1: USB disconnect, device number 99 [ 828.126691][ T37] audit: type=1326 audit(1787437292.196:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15366 comm="syz.2.3164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121c07e0d9 code=0x7ffc0000 [ 828.126987][ T37] audit: type=1326 audit(1787437292.196:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15366 comm="syz.2.3164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121c07e0d9 code=0x7ffc0000 [ 828.127467][ T37] audit: type=1326 audit(1787437292.196:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15366 comm="syz.2.3164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f121c07e0d9 code=0x7ffc0000 [ 828.178132][ T6181] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 828.184065][ T37] audit: type=1326 audit(1787437292.246:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15366 comm="syz.2.3164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f121c03e90e code=0x7ffc0000 [ 828.184840][ T6181] keyspan 5-1:0.133: device disconnected [ 828.190406][ T37] audit: type=1326 audit(1787437292.256:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15366 comm="syz.2.3164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f121c03e90e code=0x7ffc0000 [ 828.204116][ T37] audit: type=1326 audit(1787437292.266:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15366 comm="syz.2.3164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f121c03e90e code=0x7ffc0000 [ 828.213133][ T37] audit: type=1326 audit(1787437292.276:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15366 comm="syz.2.3164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f121c03e90e code=0x7ffc0000 [ 828.216787][ T37] audit: type=1326 audit(1787437292.286:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15366 comm="syz.2.3164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f121c03e90e code=0x7ffc0000 [ 828.363681][ T9] ch341 6-1:0.0: ch341-uart converter detected [ 828.518212][T15141] udevd[15141]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 829.796603][T15383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3169'. [ 829.796639][T15383] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 830.795824][ T6181] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 831.824277][ T9] usb 6-1: failed to receive control message: -71 [ 831.824332][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 831.845522][ T9] usb 6-1: USB disconnect, device number 44 [ 831.854488][ T9] ch341 6-1:0.0: device disconnected [ 832.308944][ T9] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 832.516572][ T9] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 832.518164][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.522197][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.522223][ T9] usb 6-1: Product: syz [ 832.522237][ T9] usb 6-1: Manufacturer: syz [ 832.522252][ T9] usb 6-1: SerialNumber: syz [ 832.576386][ T9] usb 6-1: config 0 descriptor?? [ 832.605126][T15406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3172'. [ 832.633894][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 832.983715][ T6181] usb 1-1: unable to get BOS descriptor or descriptor too short [ 832.983772][ T6181] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 832.985115][ T6181] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 832.985148][ T6181] usb 1-1: can't read configurations, error -71 [ 833.276351][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3179'. [ 833.949692][ T6181] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 834.447117][ T9] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 834.447216][ T9] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 834.477575][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 834.556457][ T6181] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 834.649040][ T6181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.833422][T14834] usb 6-1: USB disconnect, device number 45 [ 839.620658][ T6181] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 839.715684][ T5590] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 839.716647][ T6181] usb 1-1: USB disconnect, device number 52 [ 840.175619][ T5724] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 840.454360][ T5589] Bluetooth: hci0: unexpected event 0x09 length: 6 > 3 [ 840.480656][ T5724] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 840.482042][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.620342][T15453] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3187'. [ 841.292519][ T5724] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 841.455114][ T5724] usb 3-1: USB disconnect, device number 100 [ 841.775635][T12600] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 842.349198][T12600] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 842.360334][T12600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.360361][T12600] usb 6-1: Product: syz [ 842.360375][T12600] usb 6-1: Manufacturer: syz [ 842.360389][T12600] usb 6-1: SerialNumber: syz [ 842.399439][T12600] usb 6-1: USB2VGA dongle found at address 46 [ 842.402522][T12600] usb 6-1: Allocated 8 output buffers [ 842.852158][T12600] usb 6-1: Failed to early initialize device [ 843.839920][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3194'. [ 846.290576][T12600] usb 6-1: USB disconnect, device number 46 [ 846.878350][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3204'. [ 846.980629][T15501] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3199'. [ 847.099633][T15507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3206'. [ 847.099663][T15507] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 847.100904][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3205'. [ 847.205678][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 847.378786][ T9] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 847.380934][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.380990][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.418704][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.418732][ T9] usb 2-1: Product: syz [ 847.418746][ T9] usb 2-1: Manufacturer: syz [ 847.418761][ T9] usb 2-1: SerialNumber: syz [ 847.473126][ T9] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 847.656474][ T6181] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 848.013910][T15496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.097140][T15524] tipc: Failed to remove unknown binding: 66,0,0/2130706433:2818112809/2818112810 [ 848.099468][T15524] tipc: Failed to remove unknown binding: 66,0,0/2130706433:2818112809/2818112810 [ 848.213770][T15496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.229681][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 848.229699][ T37] audit: type=1326 audit(1787437312.296:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15506 comm="syz.4.3206" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53760ee0d9 code=0x0 [ 848.360651][T15521] netlink: zone id is out of range [ 848.368175][T15521] netlink: zone id is out of range [ 848.368318][T15521] netlink: zone id is out of range [ 848.368372][T15521] netlink: zone id is out of range [ 848.368444][T15521] netlink: zone id is out of range [ 848.368514][T15521] netlink: zone id is out of range [ 848.368618][T15521] netlink: zone id is out of range [ 848.368725][T15521] netlink: zone id is out of range [ 848.368774][T15521] netlink: zone id is out of range [ 851.583752][ T5718] usb 2-1: USB disconnect, device number 67 [ 851.645641][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 851.796777][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 851.798351][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 851.798379][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.800708][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 851.800731][ T9] usb 3-1: Manufacturer: syz [ 851.854548][ T9] usb 3-1: config 0 descriptor?? [ 851.871699][T15540] sch_tbf: burst 5 is lower than device lo mtu (16) ! [ 851.893384][ T9] igorplugusb 3-1:0.0: incorrect number of endpoints [ 852.094783][ T9] usb 3-1: USB disconnect, device number 101 [ 852.375598][T12600] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 852.415589][ T6181] usb 5-1: device descriptor read/64, error -71 [ 852.465631][ T5718] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 852.536456][T12600] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 852.537623][T12600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.537716][T12600] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 852.537728][T12600] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.537753][T12600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.606750][T12600] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 852.617204][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 852.629408][ T5718] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 852.630594][ T5718] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 852.630618][ T5718] usb 1-1: config 0 has no interface number 0 [ 852.630662][ T5718] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 852.665621][ T6181] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 852.678218][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.678244][ T5718] usb 1-1: Product: syz [ 852.678258][ T5718] usb 1-1: Manufacturer: syz [ 852.678273][ T5718] usb 1-1: SerialNumber: syz [ 852.713296][ T5718] usb 1-1: config 0 descriptor?? [ 852.714211][T15548] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 852.818727][ T6181] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 852.824103][ T6181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.824120][ T6181] usb 5-1: Product: syz [ 852.824135][ T6181] usb 5-1: Manufacturer: syz [ 852.824143][ T6181] usb 5-1: SerialNumber: syz [ 852.885195][ T6181] usb 5-1: USB2VGA dongle found at address 65 [ 852.905730][ T6181] usb 5-1: Allocated 8 output buffers [ 853.138827][ T6181] usb 5-1: Failed to early initialize device [ 853.155849][T15548] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 854.142873][ T6181] usb 5-1: USB disconnect, device number 65 [ 854.401314][ T37] audit: type=1326 audit(1787437318.466:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.0.3216" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5902ce0d9 code=0x0 [ 854.403901][T15572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3223'. [ 854.403927][T15572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3223'. [ 854.483420][ T5718] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 854.566984][T15575] use of bytesused == 0 is deprecated and will be removed in the future, [ 854.567033][T15575] use the actual size instead. [ 854.838542][T15579] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3225'. [ 854.852725][T15579] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 854.853520][T15579] batman_adv: batadv0: Adding interface: gretap1 [ 854.853536][T15579] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.853570][T15579] batman_adv: batadv0: Interface activated: gretap1 [ 855.243697][ T6181] usb 2-1: USB disconnect, device number 68 [ 855.261146][T15583] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3226'. [ 856.276827][T12600] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 856.352545][ T5718] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 856.352575][ T5718] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 856.352974][ T5718] asix 1-1:0.188: probe with driver asix failed with error -71 [ 856.388306][ T5718] usb 1-1: USB disconnect, device number 53 [ 856.441184][ T5589] Bluetooth: hci0: unexpected event 0x30 length: 251 > 3 [ 856.538326][T12600] usb 2-1: unable to get BOS descriptor or descriptor too short [ 856.538384][T12600] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 856.539891][T12600] usb 2-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 856.539982][T12600] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 856.542887][T12600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.542912][T12600] usb 2-1: Product: syz [ 856.542927][T12600] usb 2-1: Manufacturer: syz [ 856.542942][T12600] usb 2-1: SerialNumber: syz [ 857.053901][T15590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3229'. [ 857.127274][T15590] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3229'. [ 857.288909][T12600] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 857.316246][T15607] sd 0:0:1:0: device reset [ 857.399143][T12600] usb 2-1: USB disconnect, device number 69 [ 857.425620][ T5593] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 857.435655][ T5718] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 857.540024][T15535] udevd[15535]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 857.578700][ T5593] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 857.580178][ T5593] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.587403][ T5718] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 857.604212][ T5593] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.604288][ T5593] usb 6-1: Product: syz [ 857.604303][ T5593] usb 6-1: Manufacturer: syz [ 857.604318][ T5593] usb 6-1: SerialNumber: syz [ 857.638461][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.638488][ T5718] usb 3-1: Product: syz [ 857.638502][ T5718] usb 3-1: Manufacturer: syz [ 857.638515][ T5718] usb 3-1: SerialNumber: syz [ 857.686022][ T5593] usb 6-1: config 0 descriptor?? [ 857.744313][ T5718] usb 3-1: USB2VGA dongle found at address 102 [ 857.749015][ T5718] usb 3-1: Allocated 8 output buffers [ 857.763407][ T5593] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 858.067158][T15618] ubi: mtd0 is already attached to ubi31 [ 858.074350][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 858.295827][T12600] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 858.399762][T15622] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3812585142/3812585143 [ 858.402060][T15622] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3812585142/3812585143 [ 858.431218][T15624] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3240'. [ 858.446797][T12600] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 858.454423][T12600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.454452][T12600] usb 1-1: Product: syz [ 858.454466][T12600] usb 1-1: Manufacturer: syz [ 858.454479][T12600] usb 1-1: SerialNumber: syz [ 858.546104][ T5593] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 858.546283][ T5593] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 858.818911][ T5724] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 858.840997][ T5593] usb 6-1: USB disconnect, device number 47 [ 860.288991][ T5724] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 860.309712][T12600] usb 1-1: USB disconnect, device number 54 [ 860.484511][ T5718] usb 3-1: Failed to early initialize device [ 860.508555][ T5589] Bluetooth: hci3: unexpected event 0x30 length: 251 > 3 [ 860.516398][ T5718] usb 3-1: USB disconnect, device number 102 [ 860.544067][ T5724] ath9k_htc: Failed to initialize the device [ 860.566130][T12600] usb 1-1: ath9k_htc: USB layer deinitialized [ 862.335994][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 862.494723][T15642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3246'. [ 862.733359][ T9] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 862.831634][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.831762][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.831797][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 862.831919][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.901347][ T9] cxacru 6-1:1.0: cxacru_bind: interface has incorrect endpoints [ 863.901501][ T9] cxacru 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 864.434400][ T5718] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 864.659848][T12600] usb 6-1: USB disconnect, device number 48 [ 865.665649][T12600] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 865.816610][T12600] usb 2-1: Using ep0 maxpacket: 32 [ 865.935341][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 865.958667][T12600] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 866.353927][T12600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.353956][T12600] usb 2-1: Product: syz [ 866.353971][T12600] usb 2-1: Manufacturer: syz [ 866.353986][T12600] usb 2-1: SerialNumber: syz [ 866.400986][T12600] empeg 2-1:1.0: empeg converter detected [ 866.715694][T15655] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3251'. [ 866.759529][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 866.759651][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 866.789789][ T9] usb 6-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 866.789941][ T9] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 866.829214][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.829241][ T9] usb 6-1: Product: syz [ 866.829255][ T9] usb 6-1: Manufacturer: syz [ 866.829270][ T9] usb 6-1: SerialNumber: syz [ 867.988215][T15651] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3249'. [ 868.079770][T15651] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3249'. [ 868.136672][ T5718] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 868.159821][T15665] tipc: Enabling of bearer rejected, already enabled [ 868.206970][ T9] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 868.286373][ T5718] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 868.288027][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.318086][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.318114][ T5718] usb 3-1: Product: syz [ 868.318128][ T5718] usb 3-1: Manufacturer: syz [ 868.318143][ T5718] usb 3-1: SerialNumber: syz [ 868.367585][ T5718] usb 3-1: config 0 descriptor?? [ 868.391840][ T5718] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 868.486335][ T9] usb 6-1: USB disconnect, device number 49 [ 868.624346][ T5589] Bluetooth: hci0: unexpected event 0x30 length: 251 > 3 [ 868.730079][T15670] udevd[15670]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 868.900985][ T5718] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 868.901094][ T5718] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 868.927728][ T5593] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 869.011964][T12600] empeg 2-1:1.0: probe with driver empeg failed with error -71 [ 869.034389][T12600] usb 2-1: USB disconnect, device number 70 [ 869.096340][ T5593] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 869.126297][ T5593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.126324][ T5593] usb 5-1: Product: syz [ 869.126336][ T5593] usb 5-1: Manufacturer: syz [ 869.126348][ T5593] usb 5-1: SerialNumber: syz [ 869.189012][ T5593] usb 5-1: USB2VGA dongle found at address 66 [ 869.203198][ T5593] usb 5-1: Allocated 8 output buffers [ 869.505650][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 869.635854][T12600] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 869.656528][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 869.658273][ T9] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 869.658304][ T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 869.658330][ T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 869.658373][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.720744][T15677] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 869.724458][ T37] audit: type=1326 audit(1787437333.786:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 869.726425][ T37] audit: type=1326 audit(1787437333.786:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 869.800895][T12600] usb 1-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b [ 869.815800][T12600] usb 1-1: config 4 has an invalid interface number: 201 but max is 0 [ 869.815828][T12600] usb 1-1: config 4 has no interface number 0 [ 869.815849][T12600] usb 1-1: config 4 interface 201 has no altsetting 0 [ 869.832171][ T37] audit: type=1326 audit(1787437333.896:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 869.837352][T12600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.838102][T12600] usb 1-1: Product: syz [ 869.838119][T12600] usb 1-1: Manufacturer: syz [ 869.838133][T12600] usb 1-1: SerialNumber: syz [ 870.012394][ T37] audit: type=1326 audit(1787437334.076:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 870.013225][ T37] audit: type=1326 audit(1787437334.076:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 870.071722][ T37] audit: type=1326 audit(1787437334.076:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 870.071830][ T37] audit: type=1326 audit(1787437334.136:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 870.071870][ T37] audit: type=1326 audit(1787437334.136:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 870.126874][ T37] audit: type=1326 audit(1787437334.136:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 870.169996][ T37] audit: type=1326 audit(1787437334.196:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15682 comm="syz.1.3260" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 870.213446][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.213577][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.549320][ T5718] usb 3-1: USB disconnect, device number 104 [ 871.165119][T15696] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3263'. [ 871.175668][ T5315] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 871.269521][ T5593] usb 5-1: Failed to early initialize device [ 871.291005][ T5593] usb 5-1: USB disconnect, device number 66 [ 871.359162][ T5315] usb 3-1: Using ep0 maxpacket: 16 [ 871.361223][ T5315] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 871.364199][ T5315] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 871.364215][ T5315] usb 3-1: config 0 has no interface number 0 [ 871.364241][ T5315] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.364254][ T5315] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.364312][ T5315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.388603][ T5315] usb 3-1: config 0 descriptor?? [ 872.824957][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 873.208346][ T9] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 873.294941][ T9] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input21 [ 873.340859][T15706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3266'. [ 873.482072][T12600] usb-storage 1-1:4.201: USB Mass Storage device detected [ 873.597111][ T5315] uclogic 0003:28BD:0071.0004: pen parameters not found [ 873.597167][ T5315] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 873.621703][T12600] usb-storage 1-1:4.201: Quirks match for vid 0781 pid 55e8: 800000 [ 873.647890][ T60] Bluetooth: hci0: unexpected event 0x30 length: 251 > 3 [ 873.663932][ T5315] usb 3-1: USB disconnect, device number 105 [ 873.765746][ T5724] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 873.811436][T15719] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3272'. [ 874.042335][ T5724] usb 5-1: unable to get BOS descriptor or descriptor too short [ 874.042391][ T5724] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 874.056744][ T5724] usb 5-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 874.056940][ T5724] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 874.065792][T12600] usb 1-1: USB disconnect, device number 55 [ 874.068562][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.068587][ T5724] usb 5-1: Product: syz [ 874.068601][ T5724] usb 5-1: Manufacturer: syz [ 874.068615][ T5724] usb 5-1: SerialNumber: syz [ 874.090687][ T9] usb 6-1: USB disconnect, device number 50 [ 874.090771][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 874.252606][T15722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3271'. [ 874.252641][T15722] net_ratelimit: 37 callbacks suppressed [ 874.252712][T15722] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 874.477357][T15708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3267'. [ 874.544378][T15708] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3267'. [ 874.924083][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 874.924099][ T37] audit: type=1326 audit(1787437338.986:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15720 comm="syz.0.3271" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5902ce0d9 code=0x0 [ 874.982762][ T5724] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 874.995657][ T5718] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 875.188960][ T1979] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 875.336747][ T5724] usb 5-1: USB disconnect, device number 67 [ 875.356656][ T1979] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 875.373819][ T1979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.373866][ T1979] usb 3-1: Product: syz [ 875.373882][ T1979] usb 3-1: Manufacturer: syz [ 875.373897][ T1979] usb 3-1: SerialNumber: syz [ 875.516547][ T1979] usb 3-1: USB2VGA dongle found at address 106 [ 875.522204][ T1979] usb 3-1: Allocated 8 output buffers [ 876.176865][T15535] udevd[15535]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.658671][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 877.816529][ T1979] usb 3-1: Failed to early initialize device [ 877.855614][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 877.856469][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 877.858466][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.920722][ T9] usb 6-1: config 0 descriptor?? [ 877.924965][ T1979] usb 3-1: USB disconnect, device number 106 [ 877.982579][ T60] Bluetooth: hci0: unexpected event 0x30 length: 251 > 3 [ 878.067127][T15749] kAFS: unable to lookup cell '(G' [ 878.125700][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 878.132788][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 878.135445][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 878.145763][T15760] IPVS: set_ctl: invalid protocol: 115 100.1.1.2:20003 [ 878.149901][T15760] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3283'. [ 878.179336][ T9] usb 6-1: media controller created [ 878.223158][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 878.333460][T15748] FAULT_INJECTION: forcing a failure. [ 878.333460][T15748] name failslab, interval 1, probability 0, space 0, times 0 [ 878.333500][T15748] CPU: 0 UID: 0 PID: 15748 Comm: syz.5.3279 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 878.333527][T15748] Tainted: [L]=SOFTLOCKUP [ 878.333534][T15748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 878.333545][T15748] Call Trace: [ 878.333553][T15748] [ 878.333562][T15748] dump_stack_lvl+0xe8/0x150 [ 878.333597][T15748] should_fail_ex+0x46b/0x600 [ 878.333632][T15748] should_failslab+0xa8/0x100 [ 878.333672][T15748] __kmalloc_noprof+0xfe/0x780 [ 878.333691][T15748] ? rcu_is_watching+0x16/0xb0 [ 878.333712][T15748] ? tomoyo_realpath_from_path+0xef/0x640 [ 878.333733][T15748] ? tomoyo_realpath_from_path+0xef/0x640 [ 878.333760][T15748] tomoyo_realpath_from_path+0xef/0x640 [ 878.333788][T15748] ? tomoyo_path_number_perm+0x219/0x5f0 [ 878.333812][T15748] tomoyo_path_number_perm+0x246/0x5f0 [ 878.333838][T15748] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 878.333860][T15748] ? __lock_acquire+0x683/0x2ce0 [ 878.333890][T15748] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 878.333916][T15748] ? hook_file_ioctl+0x1f5/0x610 [ 878.333958][T15748] ? __fget_files+0x2a/0x420 [ 878.333985][T15748] ? __fget_files+0x2a/0x420 [ 878.334006][T15748] ? __fget_files+0x3a8/0x420 [ 878.334027][T15748] ? __fget_files+0x2a/0x420 [ 878.334053][T15748] security_file_ioctl+0xc3/0x2a0 [ 878.334083][T15748] __se_sys_ioctl+0x47/0x170 [ 878.334104][T15748] do_syscall_64+0x166/0x520 [ 878.334126][T15748] ? trace_irq_disable+0x3b/0x140 [ 878.334146][T15748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.334174][T15748] ? clear_bhb_loop+0x70/0xc0 [ 878.334197][T15748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.334216][T15748] RIP: 0033:0x7f21914be0d9 [ 878.334234][T15748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.334251][T15748] RSP: 002b:00007f218f716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.334273][T15748] RAX: ffffffffffffffda RBX: 00007f2191745fa0 RCX: 00007f21914be0d9 [ 878.334287][T15748] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 878.334299][T15748] RBP: 00007f218f716090 R08: 0000000000000000 R09: 0000000000000000 [ 878.334311][T15748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.334322][T15748] R13: 00007f2191746038 R14: 00007f2191745fa0 R15: 00007ffd98e80328 [ 878.334353][T15748] [ 878.335249][T15748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 878.505657][ T1979] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 878.605187][T15763] input: syz0 as /devices/virtual/input/input22 [ 878.706248][ T1979] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 878.724929][ T1979] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.725071][ T1979] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 878.725094][ T1979] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.725138][ T1979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.776858][ T9] az6027: usb out operation failed. (-71) [ 878.777271][ T9] az6027: usb out operation failed. (-71) [ 878.777285][ T9] stb0899_attach: Driver disabled by Kconfig [ 878.777295][ T9] az6027: no front-end attached [ 878.777295][ T9] [ 878.777762][ T9] az6027: usb out operation failed. (-71) [ 878.777777][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 878.831237][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23 [ 878.877436][ T1979] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 878.955019][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 878.955044][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 878.981489][ T9] usb 6-1: USB disconnect, device number 51 [ 879.158479][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 879.285728][ T5315] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 879.392425][T15771] netlink: 'syz.5.3287': attribute type 29 has an invalid length. [ 879.518609][ T5315] usb 5-1: unable to get BOS descriptor or descriptor too short [ 879.518668][ T5315] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 879.520334][ T5315] usb 5-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 879.520431][ T5315] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 879.523655][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.523743][ T5315] usb 5-1: Product: syz [ 879.523759][ T5315] usb 5-1: Manufacturer: syz [ 879.523773][ T5315] usb 5-1: SerialNumber: syz [ 880.902874][T15769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3286'. [ 881.104514][T15769] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3286'. [ 881.259796][ T9] usb 3-1: USB disconnect, device number 107 [ 881.447943][ T5315] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 881.623961][ T5315] usb 5-1: USB disconnect, device number 68 [ 882.872381][T15535] udevd[15535]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 883.040838][T15802] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3294'. [ 883.290258][ T6181] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 883.365674][ T5593] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 883.435689][ T5315] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 883.556667][ T5718] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 884.247682][ T6181] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 884.249843][ T6181] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.249923][ T6181] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 884.249986][ T6181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.250217][ T5593] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 884.250595][ T5315] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 884.252391][ T5315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 884.301362][ T5593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.301391][ T5593] usb 3-1: Product: syz [ 884.301405][ T5593] usb 3-1: Manufacturer: syz [ 884.301419][ T5593] usb 3-1: SerialNumber: syz [ 884.305581][ T5315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.305607][ T5315] usb 2-1: Product: syz [ 884.305619][ T5315] usb 2-1: Manufacturer: syz [ 884.305631][ T5315] usb 2-1: SerialNumber: syz [ 884.356688][ T5718] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 884.358315][ T5718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.360522][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.360546][ T5718] usb 5-1: Product: syz [ 884.360560][ T5718] usb 5-1: Manufacturer: syz [ 884.360573][ T5718] usb 5-1: SerialNumber: syz [ 884.461895][ T5315] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 884.462200][ T5593] usb 3-1: USB2VGA dongle found at address 108 [ 884.472618][ T5718] usb 5-1: config 0 descriptor?? [ 884.475176][ T5593] usb 3-1: Allocated 8 output buffers [ 884.502627][ T5718] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 884.690640][ T5718] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 884.690898][ T5718] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 884.726587][ T5718] usb 5-1: USB disconnect, device number 69 [ 884.900628][T15819] netlink: zone id is out of range [ 884.905510][T15819] netlink: zone id is out of range [ 884.905623][T15819] netlink: zone id is out of range [ 884.905694][T15819] netlink: zone id is out of range [ 884.905762][T15819] netlink: zone id is out of range [ 884.905888][T15819] netlink: zone id is out of range [ 884.905957][T15819] netlink: zone id is out of range [ 884.905966][T15819] netlink: zone id is out of range [ 884.906082][T15819] netlink: zone id is out of range [ 884.906120][T15819] netlink: zone id is out of range [ 886.446618][ T1979] usb 1-1: USB disconnect, device number 57 [ 886.453806][ T5593] usb 3-1: Failed to early initialize device [ 886.607973][ T5593] usb 3-1: USB disconnect, device number 108 [ 886.626176][T15826] FAULT_INJECTION: forcing a failure. [ 886.626176][T15826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.626212][T15826] CPU: 1 UID: 0 PID: 15826 Comm: syz.0.3302 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 886.626238][T15826] Tainted: [L]=SOFTLOCKUP [ 886.626245][T15826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 886.626256][T15826] Call Trace: [ 886.626263][T15826] [ 886.626271][T15826] dump_stack_lvl+0xe8/0x150 [ 886.626303][T15826] should_fail_ex+0x46b/0x600 [ 886.626347][T15826] _copy_from_user+0x2d/0xb0 [ 886.626369][T15826] ___sys_sendmsg+0x1c6/0x360 [ 886.626408][T15826] ? __lock_acquire+0x683/0x2ce0 [ 886.626433][T15826] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.626486][T15826] ? __fget_files+0x2a/0x420 [ 886.626508][T15826] ? __fget_files+0x3a8/0x420 [ 886.626540][T15826] __x64_sys_sendmsg+0x1b7/0x290 [ 886.626563][T15826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 886.626603][T15826] do_syscall_64+0x166/0x520 [ 886.626625][T15826] ? trace_irq_disable+0x3b/0x140 [ 886.626645][T15826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.626664][T15826] ? clear_bhb_loop+0x70/0xc0 [ 886.626687][T15826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.626704][T15826] RIP: 0033:0x7fb5902ce0d9 [ 886.626721][T15826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.626737][T15826] RSP: 002b:00007fb58e526028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.626760][T15826] RAX: ffffffffffffffda RBX: 00007fb590555fa0 RCX: 00007fb5902ce0d9 [ 886.626774][T15826] RDX: 0000000000044050 RSI: 0000200000000180 RDI: 0000000000000003 [ 886.626786][T15826] RBP: 00007fb58e526090 R08: 0000000000000000 R09: 0000000000000000 [ 886.626798][T15826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.626810][T15826] R13: 00007fb590556038 R14: 00007fb590555fa0 R15: 00007ffc2fbe23a8 [ 886.626838][T15826] [ 886.631349][T15827] FAULT_INJECTION: forcing a failure. [ 886.631349][T15827] name failslab, interval 1, probability 0, space 0, times 0 [ 886.631378][T15827] CPU: 1 UID: 0 PID: 15827 Comm: syz.5.3300 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 886.631397][T15827] Tainted: [L]=SOFTLOCKUP [ 886.631402][T15827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 886.631411][T15827] Call Trace: [ 886.631417][T15827] [ 886.631423][T15827] dump_stack_lvl+0xe8/0x150 [ 886.631452][T15827] should_fail_ex+0x46b/0x600 [ 886.631477][T15827] should_failslab+0xa8/0x100 [ 886.631496][T15827] __kmalloc_noprof+0xfe/0x780 [ 886.631510][T15827] ? rcu_is_watching+0x16/0xb0 [ 886.631530][T15827] ? tomoyo_realpath_from_path+0xef/0x640 [ 886.631544][T15827] ? tomoyo_realpath_from_path+0xef/0x640 [ 886.631563][T15827] tomoyo_realpath_from_path+0xef/0x640 [ 886.631585][T15827] ? tomoyo_path_number_perm+0x219/0x5f0 [ 886.631605][T15827] tomoyo_path_number_perm+0x246/0x5f0 [ 886.631626][T15827] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 886.631644][T15827] ? __lock_acquire+0x683/0x2ce0 [ 886.631670][T15827] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 886.631688][T15827] ? hook_file_ioctl+0x1f5/0x610 [ 886.631720][T15827] ? __fget_files+0x2a/0x420 [ 886.631740][T15827] ? __fget_files+0x2a/0x420 [ 886.631757][T15827] ? __fget_files+0x3a8/0x420 [ 886.631776][T15827] ? __fget_files+0x2a/0x420 [ 886.631801][T15827] security_file_ioctl+0xc3/0x2a0 [ 886.631827][T15827] __se_sys_ioctl+0x47/0x170 [ 886.631844][T15827] do_syscall_64+0x166/0x520 [ 886.631861][T15827] ? trace_irq_disable+0x3b/0x140 [ 886.631879][T15827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.631897][T15827] ? clear_bhb_loop+0x70/0xc0 [ 886.631919][T15827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.631933][T15827] RIP: 0033:0x7f21914be0d9 [ 886.631947][T15827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.631959][T15827] RSP: 002b:00007f218f6f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.631974][T15827] RAX: ffffffffffffffda RBX: 00007f2191746090 RCX: 00007f21914be0d9 [ 886.631984][T15827] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000004 [ 886.631993][T15827] RBP: 00007f218f6f5090 R08: 0000000000000000 R09: 0000000000000000 [ 886.632001][T15827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.632009][T15827] R13: 00007f2191746128 R14: 00007f2191746090 R15: 00007ffd98e80328 [ 886.632030][T15827] [ 886.639258][T15827] ERROR: Out of memory at tomoyo_realpath_from_path. [ 887.080082][T15831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3303'. [ 887.678425][ T9] usb 2-1: USB disconnect, device number 71 [ 888.495902][T15843] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3306'. [ 888.923767][T15850] program syz.1.3310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 888.969779][T15851] netlink: 'syz.0.3311': attribute type 29 has an invalid length. [ 890.684115][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 890.888775][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 890.890277][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 890.890304][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.892892][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 890.892918][ T9] usb 1-1: Manufacturer: syz [ 891.218072][ T9] usb 1-1: config 0 descriptor?? [ 891.272956][ T9] igorplugusb 1-1:0.0: incorrect number of endpoints [ 891.480824][ T981] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.130875][ T6181] usb 1-1: USB disconnect, device number 58 [ 892.141783][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 892.189176][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 892.192178][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 892.200577][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 892.201537][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 892.316215][ T5593] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 892.721994][ T5593] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 892.747974][ T5593] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 892.748021][ T5593] usb 3-1: Product: syz [ 892.748035][ T5593] usb 3-1: Manufacturer: syz [ 892.748050][ T5593] usb 3-1: SerialNumber: syz [ 892.812183][T15882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3316'. [ 893.530554][ T1979] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 893.601115][ T5593] usb 3-1: config 0 descriptor?? [ 893.611716][ T5593] ch341 3-1:0.0: ch341-uart converter detected [ 893.685686][ T1979] usb 6-1: Using ep0 maxpacket: 32 [ 893.686729][ T1979] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 893.692048][ T1979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.692076][ T1979] usb 6-1: Product: syz [ 893.692089][ T1979] usb 6-1: Manufacturer: syz [ 893.692102][ T1979] usb 6-1: SerialNumber: syz [ 893.769809][ T1979] empeg 6-1:1.0: empeg converter detected [ 894.180416][T15892] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3321'. [ 894.436588][T15897] tipc: Failed to remove unknown binding: 66,0,0/0:1355547002/1355547003 [ 894.440160][T15897] tipc: Failed to remove unknown binding: 66,0,0/0:1355547002/1355547003 [ 894.574480][ T60] Bluetooth: hci1: command tx timeout [ 895.109222][ T5593] usb 3-1: failed to receive control message: -71 [ 895.112604][ T5593] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 895.486940][ T981] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.499582][ T5593] usb 3-1: USB disconnect, device number 109 [ 895.536515][ T5593] ch341 3-1:0.0: device disconnected [ 895.890872][ T5593] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 896.046845][ T5593] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 896.049770][ T5593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.085647][ T5718] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 896.239859][ T5718] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 896.241516][ T5718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.241569][ T5718] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.241649][ T5718] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 896.241691][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.332640][ T5593] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 896.351258][ T5718] cxacru 1-1:1.0: cxacru_bind: interface has incorrect endpoints [ 896.351408][ T5718] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 896.606993][ T60] Bluetooth: hci1: command tx timeout [ 896.614824][ T5593] usb 3-1: USB disconnect, device number 110 [ 896.617561][T15901] cdc_acm 3-1:1.0: acm_port_activate - usb_submit_urb(ctrl irq) failed [ 896.693200][ T9] usb 1-1: USB disconnect, device number 59 [ 896.706634][ T1979] empeg 6-1:1.0: probe with driver empeg failed with error -71 [ 896.769809][ T1979] usb 6-1: USB disconnect, device number 52 [ 896.945755][ T981] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.725688][T15929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3329'. [ 899.303837][ T60] Bluetooth: hci1: command tx timeout [ 899.434288][ T981] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.583790][ T1979] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 899.715787][T15935] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3333'. [ 899.751285][ T1979] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 899.752523][ T1979] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 899.752611][ T1979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.753872][ T1979] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 899.753896][ T1979] usb 1-1: Manufacturer: syz [ 899.805891][ T1979] usb 1-1: config 0 descriptor?? [ 899.821990][ T1979] igorplugusb 1-1:0.0: incorrect number of endpoints [ 899.925756][T15942] sch_tbf: burst 5 is lower than device lo mtu (16) ! [ 900.088762][ T1979] usb 1-1: USB disconnect, device number 60 [ 900.895793][ T1979] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 900.945099][T15953] ubi: mtd0 is already attached to ubi31 [ 900.955666][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3337'. [ 900.982791][ T37] audit: type=1326 audit(1787437365.036:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15954 comm="syz.1.3339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 900.984731][ T37] audit: type=1326 audit(1787437365.046:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15954 comm="syz.1.3339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 900.985376][ T37] audit: type=1326 audit(1787437365.046:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15954 comm="syz.1.3339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 900.989053][ T37] audit: type=1326 audit(1787437365.056:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15954 comm="syz.1.3339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 900.989101][ T37] audit: type=1326 audit(1787437365.056:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15954 comm="syz.1.3339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 900.989140][ T37] audit: type=1326 audit(1787437365.056:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15954 comm="syz.1.3339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 901.046541][ T1979] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 901.051490][ T1979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.051517][ T1979] usb 6-1: Product: syz [ 901.051531][ T1979] usb 6-1: Manufacturer: syz [ 901.051544][ T1979] usb 6-1: SerialNumber: syz [ 901.052877][ T37] audit: type=1326 audit(1787437365.116:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15954 comm="syz.1.3339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 901.053238][ T37] audit: type=1326 audit(1787437365.116:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15954 comm="syz.1.3339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 901.053305][ T37] audit: type=1326 audit(1787437365.116:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15954 comm="syz.1.3339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 901.061515][ T37] audit: type=1326 audit(1787437365.126:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15954 comm="syz.1.3339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 901.181044][ T1979] usb 6-1: USB2VGA dongle found at address 53 [ 901.199005][ T1979] usb 6-1: Allocated 8 output buffers [ 901.326015][ T60] Bluetooth: hci1: command tx timeout [ 901.466185][ T1979] usb 6-1: Failed to early initialize device [ 901.488651][ T1979] usb 6-1: USB disconnect, device number 53 [ 901.514552][T15535] udevd[15535]: setting owner of /dev/bus/usb/006/053 to uid=0, gid=0 failed: No such file or directory [ 901.545674][ T5315] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 901.646068][ T5593] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 901.696877][ T5315] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 901.698640][ T5315] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 901.698666][ T5315] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 901.698688][ T5315] usb 2-1: config 150 has no interface number 0 [ 901.698749][ T5315] usb 2-1: config 150 interface 204 has no altsetting 0 [ 901.698768][ T5315] usb 2-1: config 150 interface 1 has no altsetting 0 [ 901.704479][ T5315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.704554][ T5315] usb 2-1: Product: syz [ 901.704570][ T5315] usb 2-1: Manufacturer: syz [ 901.704584][ T5315] usb 2-1: SerialNumber: syz [ 901.797842][ T5593] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 901.800842][ T5593] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 901.800867][ T5593] usb 3-1: config 179 has no interface number 0 [ 901.800918][ T5593] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 901.800947][ T5593] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 901.800974][ T5593] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 901.800999][ T5593] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 901.801020][ T5593] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 901.801059][ T5593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.827017][T15957] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 901.833356][ T5593] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 901.895353][T15866] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.896691][T15866] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.896900][T15866] bridge_slave_0: entered allmulticast mode [ 901.957022][T15866] bridge_slave_0: entered promiscuous mode [ 902.048429][ T1979] usb 3-1: USB disconnect, device number 111 [ 902.124108][T15955] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 902.291943][T15866] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.292127][T15866] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.292445][T15866] bridge_slave_1: entered allmulticast mode [ 902.328462][T15866] bridge_slave_1: entered promiscuous mode [ 902.329657][ T5315] xr_serial 2-1:150.204: skipping garbage [ 902.329707][ T5315] xr_serial 2-1:150.204: xr_serial converter detected [ 902.361859][ T5315] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 902.361920][ T5315] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 902.384761][ T5315] usb 2-1: USB disconnect, device number 72 [ 902.410518][ T5315] xr_serial 2-1:150.204: device disconnected [ 902.584867][T15967] netlink: 'syz.5.3343': attribute type 29 has an invalid length. [ 903.354232][T15974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3344'. [ 903.371223][ T981] bridge_slave_1: left allmulticast mode [ 903.371259][ T981] bridge_slave_1: left promiscuous mode [ 903.371520][ T981] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.625291][T15976] netlink: 'syz.5.3346': attribute type 29 has an invalid length. [ 904.504388][ T981] bridge_slave_0: left allmulticast mode [ 904.504424][ T981] bridge_slave_0: left promiscuous mode [ 904.504700][ T981] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.783901][T15984] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 904.795900][ T981] batman_adv: batadv0: Interface deactivated: gretap1 [ 908.207803][ T981] batman_adv: batadv0: Removing interface: gretap1 [ 908.716428][ T981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.756282][ T981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.781201][ T981] bond0 (unregistering): Released all slaves [ 909.111948][T15989] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 909.134431][T15866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.152350][T15866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.155925][ T981] tipc: Disabling bearer [ 909.163753][ T981] tipc: Left network mode [ 909.383410][T15998] FAULT_INJECTION: forcing a failure. [ 909.383410][T15998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.383433][T15998] CPU: 1 UID: 0 PID: 15998 Comm: syz.2.3353 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 909.383448][T15998] Tainted: [L]=SOFTLOCKUP [ 909.383452][T15998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 909.383458][T15998] Call Trace: [ 909.383463][T15998] [ 909.383468][T15998] dump_stack_lvl+0xe8/0x150 [ 909.383488][T15998] should_fail_ex+0x46b/0x600 [ 909.383506][T15998] _copy_from_user+0x2d/0xb0 [ 909.383518][T15998] ___sys_sendmsg+0x1c6/0x360 [ 909.383530][T15998] ? __lock_acquire+0x683/0x2ce0 [ 909.383544][T15998] ? __pfx____sys_sendmsg+0x10/0x10 [ 909.383571][T15998] ? __fget_files+0x2a/0x420 [ 909.383584][T15998] ? __fget_files+0x3a8/0x420 [ 909.383600][T15998] __x64_sys_sendmsg+0x1b7/0x290 [ 909.383612][T15998] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 909.383632][T15998] do_syscall_64+0x166/0x520 [ 909.383645][T15998] ? trace_irq_disable+0x3b/0x140 [ 909.383656][T15998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.383666][T15998] ? clear_bhb_loop+0x70/0xc0 [ 909.383678][T15998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.383688][T15998] RIP: 0033:0x7f121c07e0d9 [ 909.383699][T15998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.383708][T15998] RSP: 002b:00007f121a2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.383719][T15998] RAX: ffffffffffffffda RBX: 00007f121c305fa0 RCX: 00007f121c07e0d9 [ 909.383726][T15998] RDX: 0000000020004004 RSI: 0000200000000280 RDI: 0000000000000003 [ 909.383733][T15998] RBP: 00007f121a2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 909.383739][T15998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.383745][T15998] R13: 00007f121c306038 R14: 00007f121c305fa0 R15: 00007ffd937c0118 [ 909.383760][T15998] [ 909.680214][T15866] team0: Port device team_slave_0 added [ 909.683615][T15866] team0: Port device team_slave_1 added [ 910.001111][T15866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.001127][T15866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.001152][T15866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.007074][T15866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.007090][T15866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.007112][T15866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.091096][T16019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3356'. [ 910.091133][T16019] net_ratelimit: 15 callbacks suppressed [ 910.091144][T16019] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 910.495627][T16032] netlink: 'syz.2.3359': attribute type 29 has an invalid length. [ 910.516027][T14834] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 910.716301][ T37] kauditd_printk_skb: 146 callbacks suppressed [ 910.716318][ T37] audit: type=1326 audit(1787437374.636:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16018 comm="syz.0.3356" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5902ce0d9 code=0x0 [ 911.555346][T16046] FAULT_INJECTION: forcing a failure. [ 911.555346][T16046] name failslab, interval 1, probability 0, space 0, times 0 [ 911.562578][T16046] CPU: 0 UID: 0 PID: 16046 Comm: syz.2.3361 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 911.562610][T16046] Tainted: [L]=SOFTLOCKUP [ 911.562617][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 911.562627][T16046] Call Trace: [ 911.562636][T16046] [ 911.562644][T16046] dump_stack_lvl+0xe8/0x150 [ 911.562686][T16046] should_fail_ex+0x46b/0x600 [ 911.562717][T16046] should_failslab+0xa8/0x100 [ 911.562737][T16046] __kmalloc_cache_noprof+0xa0/0x6b0 [ 911.562757][T16046] ? shrinker_alloc+0x59/0xb10 [ 911.562812][T16046] ? shrinker_alloc+0x59/0xb10 [ 911.562840][T16046] shrinker_alloc+0x59/0xb10 [ 911.562867][T16046] ? __rt_spin_lock_init+0x3e/0x50 [ 911.562904][T16046] sget_fc+0xe41/0x1a60 [ 911.562936][T16046] ? __pfx_set_anon_super_fc+0x10/0x10 [ 911.562962][T16046] ? __pfx_sget_fc+0x10/0x10 [ 911.562981][T16046] ? __kmalloc_cache_noprof+0x3da/0x6b0 [ 911.563000][T16046] ? vfs_parse_monolithic_sep+0xd0/0x360 [ 911.563028][T16046] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 911.563055][T16046] ? rcu_is_watching+0x16/0xb0 [ 911.563077][T16046] ? cap_capable+0x123/0x460 [ 911.563103][T16046] ? __pfx_proc_fill_super+0x10/0x10 [ 911.563125][T16046] get_tree_nodev+0x2a/0x150 [ 911.563151][T16046] vfs_get_tree+0x92/0x2a0 [ 911.563179][T16046] do_new_mount+0x319/0xdc0 [ 911.563200][T16046] ? cap_capable+0x123/0x460 [ 911.563229][T16046] ? __pfx_do_new_mount+0x10/0x10 [ 911.563253][T16046] ? ns_capable+0x89/0xe0 [ 911.563277][T16046] ? path_mount+0x647/0x1050 [ 911.563302][T16046] ? user_path_at+0xd4/0x160 [ 911.563329][T16046] __se_sys_mount+0x31d/0x420 [ 911.563357][T16046] ? __pfx___se_sys_mount+0x10/0x10 [ 911.563383][T16046] ? __x64_sys_mount+0x20/0xc0 [ 911.563406][T16046] do_syscall_64+0x166/0x520 [ 911.563429][T16046] ? trace_irq_disable+0x3b/0x140 [ 911.563448][T16046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.563466][T16046] ? clear_bhb_loop+0x70/0xc0 [ 911.563488][T16046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.563507][T16046] RIP: 0033:0x7f121c07e0d9 [ 911.563525][T16046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.563541][T16046] RSP: 002b:00007f121a2d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 911.563560][T16046] RAX: ffffffffffffffda RBX: 00007f121c305fa0 RCX: 00007f121c07e0d9 [ 911.563573][T16046] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 911.563586][T16046] RBP: 00007f121a2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 911.563597][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 911.563608][T16046] R13: 00007f121c306038 R14: 00007f121c305fa0 R15: 00007ffd937c0118 [ 911.563638][T16046] [ 911.903080][T15866] hsr_slave_0: entered promiscuous mode [ 911.905170][T15866] hsr_slave_1: entered promiscuous mode [ 911.937239][T15866] debugfs: 'hsr0' already exists in 'hsr' [ 911.937266][T15866] Cannot create hsr debugfs directory [ 912.226827][T16056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3364'. [ 912.432112][ T5244] 8021q: adding VLAN 0 to HW filter on device eth5 [ 913.380467][ T1979] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 913.472429][T16064] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 913.596684][ T1979] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 913.599028][ T1979] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 913.599084][ T1979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.747170][ T1979] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 913.771833][T16068] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 913.853011][T16074] trusted_key: encrypted_key: master key parameter is missing [ 913.901489][ T60] Bluetooth: hci2: unexpected event 0x30 length: 251 > 3 [ 914.491266][ T37] audit: type=1800 audit(1787437378.536:2633): pid=16097 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3374" name="bus" dev="tmpfs" ino=3038 res=0 errno=0 [ 914.766297][ T1979] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 914.766320][ T1979] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 914.767561][ T1979] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 914.767580][ T1979] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 914.899750][T16092] macsec1: entered allmulticast mode [ 914.899775][T16092] macvlan1: entered allmulticast mode [ 914.899788][T16092] veth1_vlan: entered allmulticast mode [ 914.982428][T16092] macvlan1: left allmulticast mode [ 914.982453][T16092] veth1_vlan: left allmulticast mode [ 915.473821][ T5244] 8021q: adding VLAN 0 to HW filter on device eth6 [ 915.616031][T16118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3378'. [ 915.616063][T16118] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 915.771026][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'. [ 915.900787][ T37] audit: type=1326 audit(1787437379.966:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16117 comm="syz.0.3378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5902ce0d9 code=0x0 [ 915.975656][T14834] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 916.780643][T16101] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 916.865919][ T5724] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 917.026446][ T5724] usb 6-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice= 1.00 [ 917.027863][ T5724] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.027889][ T5724] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 917.027925][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.347032][T16139] hugetlbfs: Bad value 'e' for mount option 'nr_inodes' [ 917.347032][T16139] [ 917.363920][ T5590] usb 2-1: USB disconnect, device number 73 [ 917.770042][ T1979] usb 6-1: USB disconnect, device number 54 [ 918.668111][ T981] hsr_slave_0: left promiscuous mode [ 918.712782][ T981] hsr_slave_1: left promiscuous mode [ 918.715040][ T981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.715066][ T981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.894913][ T981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.894939][ T981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.151922][ T981] veth1_macvtap: left promiscuous mode [ 919.152036][ T981] veth0_macvtap: left promiscuous mode [ 919.156405][ T981] veth1_vlan: left promiscuous mode [ 919.156621][ T981] veth0_vlan: left promiscuous mode [ 919.181639][T16168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3387'. [ 920.516187][ T981] team0 (unregistering): Port device team_slave_1 removed [ 920.546122][ T981] team0 (unregistering): Port device team_slave_0 removed [ 920.848264][T16181] FAULT_INJECTION: forcing a failure. [ 920.848264][T16181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.848298][T16181] CPU: 1 UID: 0 PID: 16181 Comm: syz.5.3394 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 920.848323][T16181] Tainted: [L]=SOFTLOCKUP [ 920.848329][T16181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 920.848339][T16181] Call Trace: [ 920.848356][T16181] [ 920.848364][T16181] dump_stack_lvl+0xe8/0x150 [ 920.848392][T16181] should_fail_ex+0x46b/0x600 [ 920.848421][T16181] _copy_to_user+0x31/0xb0 [ 920.848442][T16181] simple_read_from_buffer+0xe1/0x170 [ 920.848471][T16181] proc_fail_nth_read+0x1be/0x230 [ 920.848500][T16181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 920.848527][T16181] ? rw_verify_area+0x250/0x4d0 [ 920.848556][T16181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 920.848580][T16181] vfs_read+0x219/0xa90 [ 920.848610][T16181] ? __pfx_vfs_read+0x10/0x10 [ 920.848636][T16181] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 920.848664][T16181] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 920.848685][T16181] ? mutex_lock_nested+0x152/0x1d0 [ 920.848702][T16181] ? fdget_pos+0x252/0x320 [ 920.848732][T16181] ksys_read+0x156/0x270 [ 920.848758][T16181] ? __pfx_ksys_read+0x10/0x10 [ 920.848792][T16181] do_syscall_64+0x166/0x520 [ 920.848815][T16181] ? trace_irq_disable+0x3b/0x140 [ 920.848834][T16181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.848851][T16181] ? clear_bhb_loop+0x70/0xc0 [ 920.848874][T16181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.848892][T16181] RIP: 0033:0x7f219147e90e [ 920.848910][T16181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 920.848926][T16181] RSP: 002b:00007f218f715fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 920.848946][T16181] RAX: ffffffffffffffda RBX: 00007f218f7166c0 RCX: 00007f219147e90e [ 920.848959][T16181] RDX: 000000000000000f RSI: 00007f218f7160a0 RDI: 0000000000000004 [ 920.848970][T16181] RBP: 00007f218f716090 R08: 0000000000000000 R09: 0000000000000000 [ 920.848981][T16181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.848992][T16181] R13: 00007f2191746038 R14: 00007f2191745fa0 R15: 00007ffd98e80328 [ 920.849022][T16181] [ 921.244650][T16168] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 921.245188][T16168] batman_adv: batadv0: Adding interface: gretap1 [ 921.245198][T16168] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.245217][T16168] batman_adv: batadv0: Interface activated: gretap1 [ 921.283239][ T5244] 8021q: adding VLAN 0 to HW filter on device eth7 [ 921.345015][ T37] audit: type=1326 audit(1787437385.406:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16186 comm="syz.1.3397" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 921.346189][ T37] audit: type=1326 audit(1787437385.416:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16186 comm="syz.1.3397" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3827e0d9 code=0x7ffc0000 [ 921.820650][T16198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3400'. [ 921.820682][T16198] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 922.249934][ T37] audit: type=1326 audit(1787437386.316:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16196 comm="syz.2.3400" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f121c07e0d9 code=0x0 [ 922.305667][ T5724] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 922.774970][T16207] sch_tbf: burst 5 is lower than device lo mtu (16) ! [ 923.835698][ T6181] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 924.105774][ T6181] usb 1-1: Using ep0 maxpacket: 32 [ 924.111496][ T6181] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 924.120145][ T6181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.120172][ T6181] usb 1-1: Product: syz [ 924.120187][ T6181] usb 1-1: Manufacturer: syz [ 924.120202][ T6181] usb 1-1: SerialNumber: syz [ 924.168758][ T6181] empeg 1-1:1.0: empeg converter detected [ 924.573410][T14834] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 925.619768][T14834] usb 2-1: device descriptor read/64, error -71 [ 925.855713][T14834] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 925.985649][T14834] usb 2-1: device descriptor read/64, error -71 [ 926.108422][T14834] usb usb2-port1: attempt power cycle [ 926.227170][T12600] ================================================================== [ 926.227186][T12600] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 926.227220][T12600] Read of size 8 at addr ffffc90004651008 by task kworker/0:1/12600 [ 926.227235][T12600] [ 926.227249][T12600] CPU: 0 UID: 0 PID: 12600 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 926.227272][T12600] Tainted: [L]=SOFTLOCKUP [ 926.227278][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.227289][T12600] Workqueue: usb_hub_wq hub_event [ 926.227389][T12600] Call Trace: [ 926.227397][T12600] [ 926.227405][T12600] dump_stack_lvl+0xe8/0x150 [ 926.227430][T12600] print_address_description+0x55/0x1e0 [ 926.227468][T12600] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 926.227485][T12600] print_report+0x58/0x70 [ 926.227507][T12600] kasan_report+0x117/0x150 [ 926.227529][T12600] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 926.227551][T12600] __list_del_entry_valid_or_report+0xb5/0x190 [ 926.227569][T12600] kcov_remote_start+0x2aa/0x710 [ 926.227601][T12600] hub_event+0x15d/0x4cf0 [ 926.227617][T12600] ? rt_spin_unlock+0x165/0x200 [ 926.227637][T12600] ? __lock_acquire+0x683/0x2ce0 [ 926.227658][T12600] ? register_lock_class+0x31/0x2e0 [ 926.227679][T12600] ? __lock_acquire+0x683/0x2ce0 [ 926.227703][T12600] ? do_raw_spin_lock+0x12b/0x2f0 [ 926.227732][T12600] ? __pfx_hub_event+0x10/0x10 [ 926.227747][T12600] ? process_scheduled_works+0x97a/0x1630 [ 926.227769][T12600] ? rcu_is_watching+0x16/0xb0 [ 926.227792][T12600] ? process_scheduled_works+0x97a/0x1630 [ 926.227819][T12600] process_scheduled_works+0xc3d/0x1630 [ 926.227853][T12600] ? __pfx_process_scheduled_works+0x10/0x10 [ 926.227875][T12600] ? assign_work+0x3cf/0x5d0 [ 926.227896][T12600] worker_thread+0xa47/0xfb0 [ 926.227923][T12600] ? __kthread_parkme+0x71/0x1f0 [ 926.227947][T12600] kthread+0x38b/0x470 [ 926.227970][T12600] ? __pfx_worker_thread+0x10/0x10 [ 926.227988][T12600] ? __pfx_kthread+0x10/0x10 [ 926.228009][T12600] ret_from_fork+0x514/0xb70 [ 926.228046][T12600] ? __pfx_ret_from_fork+0x10/0x10 [ 926.228063][T12600] ? __switch_to+0xc89/0x1420 [ 926.228083][T12600] ? __pfx_kthread+0x10/0x10 [ 926.228103][T12600] ret_from_fork_asm+0x1a/0x30 [ 926.228125][T12600] [ 926.228131][T12600] [ 926.228136][T12600] The buggy address belongs to a vmalloc virtual mapping [ 926.228151][T12600] Memory state around the buggy address: [ 926.228159][T12600] ffffc90004650f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 926.228168][T12600] ffffc90004650f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 926.228177][T12600] >ffffc90004651000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 926.228184][T12600] ^ [ 926.228191][T12600] ffffc90004651080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 926.228200][T12600] ffffc90004651100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 926.228207][T12600] ================================================================== [ 926.228294][T12600] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 926.228308][T12600] CPU: 0 UID: 0 PID: 12600 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 926.228328][T12600] Tainted: [L]=SOFTLOCKUP [ 926.228333][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.228343][T12600] Workqueue: usb_hub_wq hub_event [ 926.228357][T12600] Call Trace: [ 926.228363][T12600] [ 926.228369][T12600] vpanic+0x56d/0xa60 [ 926.228383][T12600] ? rcu_is_watching+0x16/0xb0 [ 926.228400][T12600] ? __pfx_vpanic+0x10/0x10 [ 926.228421][T12600] panic+0xc5/0xd0 [ 926.228438][T12600] ? __pfx_panic+0x10/0x10 [ 926.228456][T12600] ? preempt_schedule_thunk+0x16/0x40 [ 926.228473][T12600] ? preempt_schedule_thunk+0x16/0x40 [ 926.228488][T12600] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 926.228507][T12600] check_panic_on_warn+0x89/0xb0 [ 926.228528][T12600] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 926.228542][T12600] end_report+0x73/0x170 [ 926.228558][T12600] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 926.228571][T12600] kasan_report+0x128/0x150 [ 926.228587][T12600] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 926.228604][T12600] __list_del_entry_valid_or_report+0xb5/0x190 [ 926.228619][T12600] kcov_remote_start+0x2aa/0x710 [ 926.228635][T12600] hub_event+0x15d/0x4cf0 [ 926.228648][T12600] ? rt_spin_unlock+0x165/0x200 [ 926.228665][T12600] ? __lock_acquire+0x683/0x2ce0 [ 926.228680][T12600] ? register_lock_class+0x31/0x2e0 [ 926.228695][T12600] ? __lock_acquire+0x683/0x2ce0 [ 926.228711][T12600] ? do_raw_spin_lock+0x12b/0x2f0 [ 926.228734][T12600] ? __pfx_hub_event+0x10/0x10 [ 926.228746][T12600] ? process_scheduled_works+0x97a/0x1630 [ 926.228763][T12600] ? rcu_is_watching+0x16/0xb0 [ 926.228781][T12600] ? process_scheduled_works+0x97a/0x1630 [ 926.228796][T12600] process_scheduled_works+0xc3d/0x1630 [ 926.228833][T12600] ? __pfx_process_scheduled_works+0x10/0x10 [ 926.228850][T12600] ? assign_work+0x3cf/0x5d0 [ 926.228867][T12600] worker_thread+0xa47/0xfb0 [ 926.228888][T12600] ? __kthread_parkme+0x71/0x1f0 [ 926.228907][T12600] kthread+0x38b/0x470 [ 926.228926][T12600] ? __pfx_worker_thread+0x10/0x10 [ 926.228941][T12600] ? __pfx_kthread+0x10/0x10 [ 926.228960][T12600] ret_from_fork+0x514/0xb70 [ 926.228980][T12600] ? __pfx_ret_from_fork+0x10/0x10 [ 926.228999][T12600] ? __switch_to+0xc89/0x1420 [ 926.229018][T12600] ? __pfx_kthread+0x10/0x10 [ 926.229039][T12600] ret_from_fork_asm+0x1a/0x30 [ 926.229059][T12600] [ 926.229785][T12600] Kernel Offset: disabled