last executing test programs: 39m53.583650305s ago: executing program 0 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002}) epoll_pwait2(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x221}], 0x1, 0x0, 0x0, 0x0) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x800001f}) socket$nl_generic(0x10, 0x3, 0x10) 39m52.939315495s ago: executing program 0 (id=664): memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%\x1f\xe0 @:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\x04\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01L\xfe\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV6\xa7\xfb2,\xac\x17@\x0e\xd7O\xd9oF?\xf3\xa1$ \xee\xaeQ\xad]r\x1f^\xe3p\x9f\xa4\xaa\x91\x00i\x9f\x87\xe4 \xc8\xc1\r\x9f\\|K\x8a\x03Q\xf3|\x03\xe2\xe9\xa3\xc5\xfbA\xb6LF5]x\xe1E2m|\x1bek\x12v\x193\xcc\xf9\xe0\xb9\xd5\xc7\xa9- \x9e\x95\xdf\xc8\x87\x95\xd3@ja\xb5\xdb>S\x1d\xfd\x02Da\x8fO`\xc2\xaa\x9fK\xc6\xb1\x98\xa9L\xc2i\xd6W7\x83\xa3F\x96j\x80U\xd7\x8dC\xc4\xc6w[\xc6\xc4\x0e.\xe27\x83\xb3\xa7\xc5j\x94\xcf\xdbS)\x18\xbf\x8f\xf5\xbf\x8c\x9d6\xf8\x8e\x87\x17\x87\x84/Y\x95\xd3\xab\x1cO\x17\xdes\xb6\"\xd2[\xf2\xd5\x8f\xcbC\xf3\x8a*G\xe8\xbaY\x92\x82k\xbf\xe3\x9d\xdf\xbd0e3\xff\x91\xe1\xddK\xfa\x83\xd8\x11\xf6\x87\x056\xf3%\xda\xad\b\'\x8d\xd7m\xfc\x01\xba)F+:\xeb\x95}H\x8d\xfb\xd7', 0x5) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0}, 0x18) 39m52.658049648s ago: executing program 0 (id=668): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x100000000]}, 0x8) 39m51.501195953s ago: executing program 0 (id=677): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @mcast2, 0x3}, 0x1c) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5e54e574da93883e8c628a600b17cbe584d2e73c681419f9ebbe9b65f3fbcf0e16db6e879c420151", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}}}], 0x28}}], 0x2, 0x30044080) 39m51.134867366s ago: executing program 0 (id=682): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x4040840, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 39m50.120676137s ago: executing program 0 (id=692): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) io_uring_setup(0x588f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x11, 0x80803, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) semop(0x0, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0xfffffffffffffe01, &(0x7f0000000040)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = syz_open_procfs(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 39m35.031742071s ago: executing program 32 (id=692): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) io_uring_setup(0x588f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x11, 0x80803, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) semop(0x0, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0xfffffffffffffe01, &(0x7f0000000040)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = syz_open_procfs(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 26.37804649s ago: executing program 3 (id=10201): r0 = request_key(&(0x7f00000005c0)='rxrpc\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='\x00', 0x0) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f0000000540)={0x0, "df3b98365272ca27523fa97ad6e1ccde679be88439cf637b6d51396d349ba0d21839abd90f936210a4925a2c838df116b7433119b705ef4b04ae4b1406696e69", 0x30}, 0x48, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32, @ANYBLOB="83040500000000002800128009000100"], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x104}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x26}, @RTA_EXPIRES={0x8, 0x17, 0x80000001}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x84) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={@local, @remote, @mcast1, 0x5, 0x4, 0x8, 0x400, 0x7f, 0x40c20210}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="0003030000001501"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2020}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xcb8fd4b973626b22}}, 0x4) 17.758174151s ago: executing program 3 (id=10208): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000006) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x20000402, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000100)={0x372, @tick=0x2, 0x8, {0x0, 0xfc}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x3e, 0x6, "06abf4e701c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x48068, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x3, 0x9fd, 0x84, 0x105}, 0x50) read$eventfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) readv(r1, 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r8, 0xc0086442, &(0x7f0000000980)) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d28f75d96a2566e506bce1e8", 0x14}], 0x1}, 0x0) 14.66153445s ago: executing program 3 (id=10219): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x103e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x4) 13.914294534s ago: executing program 2 (id=10221): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 13.9039276s ago: executing program 1 (id=10222): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000000"], 0xcd0}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac000905040310000607030905050308000e0e9a0905fdff"], 0x0) 13.749608332s ago: executing program 2 (id=10223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast2, @in=@private=0xa010101, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x1, 0x2, 0x8, 0x8000000000000005, 0x200000003, 0xd}, {0x7, 0xfffffffff7fffffd, 0x6, 0xffffffffffffbffe}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0xc, @loopback, 0xfffffffa}, 0x1c) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0)={0x2, 0x19, 0x7, 0xd1, 0x32, 0x10, 0xae, 0x6, 0xfd, 0x8, 0x6, 0x4, 0x9, 0xf9}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000040)=0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, &(0x7f0000000180)) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x1, {0x2, @sliced={0xa3, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x10, 0x10, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2005, 0x1, 0x0, 0x3, 0x0, 0x401, 0x2000, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3]}}, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x7, 0x2, {0x0}, 0x7000000}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r4, 0xdf}, 0x8) 13.182114676s ago: executing program 4 (id=10225): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000191004000140002001000140004"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x2, 0x770, 0x0, 0xbabd}, 0x1c) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)='(', 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000200008f7b000000000000800f00050000"], 0x18, 0x4000}, 0x28008841) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000000)=0xb, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1801}, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1000, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f00000002c0)={0x0, 0x9, 0x3002}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)}, 0xff55) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x32, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x5}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0xffffff08, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x44, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0xfd, 0xfe, 0x3, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x18, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2, @ANYBLOB="06001501100002"], 0x60}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000040)='fd', 0x0, r7) capset(&(0x7f0000000040)={0x19971634}, &(0x7f0000000080)={0x400006, 0xe, 0x13e, 0x40089, 0x854, 0x2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001600000061ad84227751406bf80038c6b477ad3292d816f8005afe0be6a3cd7e"], 0x1c}}, 0x0) unshare(0x20000400) openat$userio(0xffffffffffffff9c, 0x0, 0x840, 0x0) 12.26943294s ago: executing program 1 (id=10226): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) fsmount(r0, 0x0, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x40000000009) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100), 0x5, 0x412440) syz_usb_connect(0x3, 0x24, &(0x7f0000002080)={{0x12, 0x1, 0x300, 0xd6, 0xa8, 0x30, 0x40, 0x1de1, 0xf105, 0xbf64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x5, 0x40, 0xf3, "", [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0xe, 0x1, 0x0, 0x4}}]}}]}}, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x418}}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="020062a3b4a2dc369d1aed9a0378b1749eab4f80048e479017d24890ab30"]}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000048000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000115000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000742000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r5 = io_uring_setup(0x1197, &(0x7f0000000040)={0x0, 0x214c, 0xc000, 0x4003, 0xd0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 10.1810121s ago: executing program 1 (id=10228): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x7fff) syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) utimes(0x0, &(0x7f0000000000)={{0x6, 0xfffffffffffffffe}, {0x8, 0x4}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40002001}) poll(&(0x7f0000000180)=[{r1, 0x480}], 0x1, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="11000300000000002c0012800e0001006970366772657461700000001800028008000100", @ANYRES32=r4, @ANYBLOB="04001200060003001100000046ffaa99217450"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 6.04119848s ago: executing program 5 (id=10233): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 5.969206814s ago: executing program 5 (id=10234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfd6f}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x75f0, &(0x7f0000000240)={0x0, 0x4d5c, 0x80, 0x0, 0x383}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) r3 = io_uring_setup(0x5979, &(0x7f0000000140)={0x0, 0x52be, 0x1000, 0x0, 0x31d, 0x0, r2}) r4 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x1000) io_uring_enter(r4, 0x7fffdfe, 0xb08a, 0xd, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x46) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r8, &(0x7f00000000c0)=""/173, 0xad) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000200)={0x9f0000, 0x0, 0x41, r7, 0x0, &(0x7f0000000100)={0x9a0918, 0x80000000, '\x00', @string=&(0x7f00000001c0)=0x7}}) 5.88244998s ago: executing program 4 (id=10235): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) r1 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile &&'], 0xff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="810026bd70ddcb9017656496b72f34a4acf6", @ANYRES32=r6, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270002000000", @ANYBLOB="9cd8907a96268ede29c4b6ef909b5db1b9b3081991b3faca9ba3c6d0fd6adcaf41475b5d1d3688ecea5da396873a61812aa8dc203b38836a251d3f1e2f9113647f131828e5981c2267c1068863e037400e2f4595df45920900000000000000351169b77eec2d8ca4e5492759e61cd45c3c2b1074967b4c20fa4cbf84ea52dd8869be12dfa51d3bd23a3816c07d59fc59cccb10a27a93d9abce4dc6ebcb73d403ce636098c81f705c"], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmsg$nl_route(r3, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e008d2a00000100000020000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x9, 0x7e, 0x4, 0x10003, 0xc, 0x7, 0x1000, 0x99, 0x81, 0xc000000, 0x9, 0x7, 0x8, 0x3, 0x1, 0x1a00, 0x8, 0xeeea, 0x401, 0x10000, 0x8}}) socket(0x1f, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000380)={{r0}, "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"}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000002140)=0x20) ppoll(&(0x7f00000003c0)=[{r9, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r9, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) 5.881931182s ago: executing program 2 (id=10236): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240000000035000"], 0xcd0}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac000905040310000607030905050308000e0e9a0905fdff"], 0x0) 5.872929543s ago: executing program 1 (id=10237): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x50, "67856f081d9fc303c68bf9098547cc55cfcf22c9"}}) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r5) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = dup2(r6, r6) write$6lowpan_enable(r7, &(0x7f00000000c0)='1', 0x1) writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) syz_ublk_setup_io_uring(0x760, &(0x7f00000004c0)={0x0, 0x5387, 0x4000, 0x12, 0x9e, 0x0, r7}, &(0x7f0000000580), &(0x7f0000000400), &(0x7f0000000600)) pipe2$watch_queue(&(0x7f0000001180), 0x80) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) 5.789565488s ago: executing program 3 (id=10238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r2 = syz_usb_connect(0x7, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r6 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r6) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4f}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x323}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6f7d}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008080}, 0x801) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = syz_io_uring_setup(0x1d46, &(0x7f00000002c0)={0x0, 0x1992, 0x20, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000640)) io_uring_enter(r7, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 4.988815004s ago: executing program 4 (id=10239): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880), &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_ublk_setup_io_uring(0x1a3b, &(0x7f0000000540)={0x0, 0xbe8, 0x800, 0x3, 0x2af, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.885337845s ago: executing program 5 (id=10240): syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0xd2ba, 0x0, 0x3, 0x55}, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$kcm(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000c166a0108304341276ff010203010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4094, 0xffe}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a6", @ANYRES16=r3], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) 4.396398409s ago: executing program 1 (id=10241): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x214}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf70, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) socket(0xa, 0x1, 0x84) pipe(&(0x7f0000000040)) 4.25660563s ago: executing program 2 (id=10242): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000300)={r3, 0x0, 0x81}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mlockall(0x2) r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000200)=[0x2, 0x6], 0x2) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r7 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r6, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="6d433a3a92646108add89103433b184176fa31e78f66ae5797c32bf23577e3bad416918cb279bfc5f5b2eb666cde21960b6750eee094439dd2975095cf77794211df40650470a37ce0988e295f9f1c7507c11ad1f1f8039d09699f4cae6ed0cb85204ce02e04069e820ee961591155266a585756e9fd8fb08629b4e4c20f52ec7973fbe69325a10d7be48eb1a92c291bedf647da1a6b32d2bf18ff76e78bb0bf9b7f2c", 0xa3}, {0x0}], 0x3, &(0x7f0000000a40)=ANY=[], 0x2b8}, 0x2, 0x48000, 0x1, {0x2}}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0) close(r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r11, 0x80ad}], 0x1, 0x2) 3.585347365s ago: executing program 4 (id=10243): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r0, &(0x7f0000000040)=@in6={0xa, 0x4e23, 0x7, @mcast2, 0xffffffff}, 0x80) 3.384827939s ago: executing program 5 (id=10244): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.379379103s ago: executing program 4 (id=10245): socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES64=r0], 0x20) 3.248836644s ago: executing program 2 (id=10246): openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8040) shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$ARCH_MAP_VDSO_64(0x1e, r5, 0x2, 0x2003) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$NILFS_IOCTL_GET_VINFO(r7, 0xc0186e86, &(0x7f0000000200)={&(0x7f0000000040), 0x0, 0x20, 0x9, 0x5daf}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xfffffffffffffffd, 0x5479, 0x103d, 0x1, 0x1, 0x32a, 0xffffffffffffffff, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x6}, {0x28, 0xc, 0x85, 0xdffff038}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xfffbffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.150216701s ago: executing program 5 (id=10247): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect$uac2(0x2, 0x112, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x3061, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x3, 0x1, 0x7, 0x20, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0xf3, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x4, 0x19, 0xb}, [@input_terminal={0x10, 0x24, 0x2, 0x6, 0x100, 0x5, 0x0, 0x40, 0xfffffffc, 0x0, 0x9, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x8, 0x7, 0x3, 0x1001, 0x5, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x40, 0x1, 0x3, 0x1e, "52a4ea52b8e9cb08"}, @as_header={0x10, 0x24, 0x1, 0x2, 0x0, 0x2, 0x1002, 0x49, 0x252d9fe2, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7fff, 0x2, 0xf, 0xe}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7966, 0x2, 0x4a, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x0, 0x40, {0x8, 0x25, 0x1, 0x0, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0xfe, 0xff, "2df01233999b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x9, 0x10, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x40, 0x3, 0xf0, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0x1, "efd37c"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x3ff, 0x40, "20af146680aa"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0xff, 0x3, {0x8, 0x25, 0x1, 0x1, 0xc, 0x8, 0x78c7}}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x300, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x42, &(0x7f0000000bc0)={0x5, 0xf, 0x42, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "8264a179df4d031978df50b48f159ee6"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0xf, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x3, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "63c09600714812f9d34f6929520277ce"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xe, 0x3, 0x200}]}, 0x2, [{0x14, &(0x7f0000000c40)=@string={0x14, 0x3, "1937f7df893bafbb4e6511710e943d4259e7"}}, {0x6, &(0x7f0000000c80)=@string={0x6, 0x3, "125ec2b0"}}]}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x20, 0x31, 0xbb, {0xbb, 0x0, "7eac6ae53556e10c25f34fa6c459b977fa5b8414270a4bb86bc26a8d242e477b537877f14cc4a660d02e6524bbc90a80cbd5a96d7ab8d535ce6521c93b12b3eb85b709b0a345231484c7e0eea8924c4ed7ca24f5542f4560eb3026b72c2a16519416ec8a63891ab96c6ed1ff8a89ea5a0b2f4172dfbc463bdba30140104aea42faf2dd3a462c71d851effbfac04d35fe5a7568d65d45802b5f6513c8061106d5b6e597e931e19204471868f4c3da3c2b0a6bef9b84d42c6355"}}, &(0x7f00000001c0)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "093d88bb1671e318e9474bf95b17a5885c166ae93463ee327979e2b0e4842921b529f7edbeebd65f1a555a45bf96055a9d61d7de7a736ddb6ef94945"}}, &(0x7f0000000240)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xb, "d31d"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x614}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x40, 0x15, 0xef, "7c4574f4a0ddfcc08b5f806debdbfdd10ac0f89062614c36a44c75f0685cb2530d601f4ffadc137e2c5d86a91ec220bc7ce0f792e88a1d1495e402ea8d502e19b68779e9a27f46b1dc50b59fbb6003167a62c2960b7adf2042cd62007a31db1b2e2029aff6e3fe4b282ca6c5f7a840659c6f63b67a101018ad839f6d3287eff56216c5ec90786efbfc01500cc4e8b62c70ae54984d3950b5c8ae4e51c854eb219e7216324624ca04fcc1a9c324c00ef9cac5b6ffb9a202e739680e4a8435757522dd774018d06c1b72b9779cbca388db6e38edebab45d9a127410ea7dff8bad0d54b5d4f163fcd9cbc8c20c4ba4f2c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000480)={0x20, 0x1, 0x51, "cd4f75e3092c9ee9b65c02ce00532a58c5469436a22c697d45e454f7362de085591703ecf6793dbebbe40f3a79b25960913241eb7520bfaa09f18f541801c8a2d34638ade4d78c903f86ffb55a79d22249"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0xb}}) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f0000000580)={0x40, 0x2, 0xb3, {0xb3, 0xf, "32f5b137ade3b0769bee6479203643a523a35c66854ec46287b734554d47eca4bca2854d91173c962872d1e6dd1c2698d7c33b0fd3de90c4a711315d79151772576eb446f7b487fd6aec80d11bb4b1fa7aef37e694de7721e17bf5a181438a091ee272f1289f0e85ee851adfb55155e06e1f15cd31adfd4363cce7342af403e8c058d6da444736369d6815cd55ef804c8f3a68897c4d5e7080e752627303b2d49f04be5695d77448d82e1aa8859e85dd99"}}, &(0x7f0000000640)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "bf58c1d2a52729cb926e60ceb74d3ef704320e4b590f2d7db9aa0c8226cca44a5aeee94900f3494bbe0f1c24f9623e0c929749ced7bf4617eac1738739eead9eb4078dd92f6a6fdbf48907fde83615fd0a672048f810704c81278bb1210fbe56017296576a4470b21fcec23739416970db1490a06ebccf37e96bea"}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x40, 0x17, 0x99, "27a178f7050871d458c19fc33f5186280cfb71a397e1ecbdac2f3ecf88f034d12fc20a939dbb860111ff10d6dd0c676dd303781ade74423464f63c1af6c8344e9e8f3024e7c41b8376522e856b594a5d3b27b2c4559884076cf6459732db8355a9234f7774d098c7d294e5f60930d9b41b8240bb7678cd319318d0b49d52957149cab63bb8819ce83bb71391a8f18479e2d23bfd8a446d02b1"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000880)={0x20, 0x81, 0x1, "b0"}, &(0x7f00000008c0)={0x20, 0x82, 0x1, "da"}, &(0x7f0000000900)={0x20, 0x83, 0x3, "a11848"}, &(0x7f0000000940)={0x20, 0x84, 0x4, "0f60979c"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "ac2063"}}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000100)=0x8) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000500)={0x40, 0x13, 0x4, "eba01ef3"}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0xfffffe71) 3.149635368s ago: executing program 4 (id=10248): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x103e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x4) 2.613019332s ago: executing program 3 (id=10249): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYRES32=r2, @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xff46, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x32}]}, &(0x7f0000002100)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x4000800) close_range(r8, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800d1}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r11 = inotify_init1(0x0) inotify_add_watch(r11, &(0x7f0000000000)='.\x00', 0x50007a2) write$binfmt_elf64(r10, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5, @ANYRES64=r9, @ANYRES32, @ANYRESOCT=r7, @ANYRES16=r2, @ANYRES32=0x0], 0x123) close(r10) 2.162893497s ago: executing program 1 (id=10250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x800, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x800, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x100, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x2, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x5, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x46b, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x3, 0x0, 0x8, 0x8, 0x53, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0xfffffffe, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x5, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x2, 0x8, 0xf, 0x1, 0x8, 0xa, 0x3, 0x100, 0x2, 0x1, 0x40, 0x8, 0x9, 0x401, 0x80, 0xfffffff9, 0x4, 0x9, 0x7, 0x9273, 0xbf1f, 0x9, 0xef0, 0xd, 0x9, 0x9, 0x9, 0x4, 0x40, 0x6, 0x9, 0x8, 0x6, 0x4, 0x7, 0x4, 0x1, 0x81, 0x5, 0x2, 0x4, 0x7107, 0x3d3, 0x7fff, 0x3, 0x8000, 0x1, 0x1, 0x0, 0x8, 0x5, 0x3, 0xa6b7, 0x5, 0xfffffff8, 0x0, 0x148a00, 0xfffff000, 0x2, 0x200, 0xfffffa66, 0x9, 0x5, 0xd1, 0x32d3, 0x2, 0x3ff, 0x7fff, 0xe, 0x0, 0x2, 0x2, 0x7ff, 0xff, 0x2, 0x1, 0x3, 0x85ba, 0x8, 0xff, 0x79, 0x8001, 0x7, 0x3, 0x9, 0xf, 0x4, 0xa, 0xffff, 0x3, 0x8, 0x5, 0x0, 0xe, 0xb1, 0x2, 0x6, 0xff, 0x7, 0x3ff8, 0x5, 0x752, 0xc9, 0x6, 0x1, 0x9, 0x5, 0x370e, 0xfffffffc, 0x0, 0xc, 0x18, 0x6, 0x1eb6, 0x6, 0x9ce9def, 0xf, 0x2, 0x8, 0x1, 0x241, 0xfffffffb, 0x7, 0x1, 0x10, 0x2b4, 0x3ff, 0x8, 0x3, 0x54, 0x6, 0xf107, 0xaf, 0x1, 0xa, 0x1, 0x1, 0x3, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x9, 0xeaa, 0x7, 0x6, 0x0, 0x1, 0x4, 0x23, 0x0, 0x9, 0x544, 0x4, 0x7f, 0x5, 0x7, 0xffffffff, 0xffff, 0xffffff86, 0x9db7, 0x110c00, 0x0, 0x1, 0x1, 0x5, 0x7ff, 0x80, 0x7ff, 0x9, 0xacf, 0x8, 0xffff, 0x8, 0x6, 0xffe00000, 0x9, 0x2, 0xcaa, 0xedd, 0x8, 0x7fffffff, 0x1, 0x400, 0x6, 0x3, 0x0, 0x101, 0xa24, 0x3, 0x9, 0x8, 0x5, 0xfffffffe, 0x2, 0x26c, 0x72, 0x200, 0x800, 0xffffffff, 0x2, 0x1, 0x7fffffff, 0x7fffffff, 0x7115bd5f, 0xd15, 0x2, 0x1ff, 0x8001, 0x1, 0x4a16fb1d, 0x1, 0x6, 0x10, 0x4, 0x9, 0x2, 0xcd3, 0x4, 0x1442, 0x10001, 0x6, 0x6, 0x8, 0x7fff, 0x4, 0x401, 0x9, 0x5, 0xb, 0x0, 0x2, 0xd, 0x2, 0x10000, 0x8, 0x3ff, 0x6, 0x200, 0xe03e, 0x6, 0x5, 0x1, 0xfffffeff, 0x6, 0xe9, 0x77d, 0x2, 0x2, 0x1, 0x3, 0x0, 0x9, 0x8]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e, 0xffffffd9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1.583207861s ago: executing program 3 (id=10251): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x50, "67856f081d9fc303c68bf9098547cc55cfcf22c9"}}) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r5) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = dup2(r7, r7) write$6lowpan_enable(r8, &(0x7f00000000c0)='1', 0x1) writev(r7, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) syz_ublk_setup_io_uring(0x760, &(0x7f00000004c0)={0x0, 0x5387, 0x4000, 0x12, 0x9e, 0x0, r8}, &(0x7f0000000580)=0x0, &(0x7f0000000400), &(0x7f0000000600)) r10 = mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x0, 0x8010, r8, 0x0) syz_io_uring_submit(r9, r10, 0x0, &(0x7f0000000880)=@IORING_OP_FUTEX_WAKE={0x34, 0x8, 0x0, 0xfd, 0x4, &(0x7f0000000840)=[{&(0x7f0000000640)="40bceb1609f108f0c266c27f88044c2633b640cd49f21c1e86af9b9b22e6a2fea0d4fe04833e4f222a8a278659b7629050b7d9f5c5eb3a68e7a83fc8afd1c35ea88814e78295f929b2fb5211755ccb2f9ec6001035077a32a7389d7d5b955ba62481243037326a135d87d612eada1cb294ee92609f6f860b390ec6c1481ee00f03e2abfdbefc9065208d0c43445f9609ebd54231f718a950632aae4866de5d51f1b4b8f2d22655d694549b11cab1008e17b87efc1c615e8b163d33a436", 0xbd}, {&(0x7f0000000700)="3452f899753e", 0x6}, {&(0x7f0000000740)="e929c9dabebdea83090985950fffdebb105b2193ee1dd7e532477a9b5e125432cd5ca48f494f7232a0515a4f0da4996d65ba6a9ebca8667969a24314d57728be2d49bdfece7fbbaf2a3ea5b06c3a2c97b0ea545271ea6f51a5a315b7b07af0d6275039e156ea6b3a9e420a51eb50011a5d1726b162f38791bda2cc5a6a34d4687b3d9ba368567799a0735e80b1539cd6124d1f714a0267a2da96179935cb4dadc5807d54ab565fe2e493031e2651c9b9691ced173266f9aa9722119ef505a54de90a620b1b9e", 0xc6}], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x800}}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r6) pipe2$watch_queue(&(0x7f0000001180), 0x80) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) 1.370224821s ago: executing program 2 (id=10252): rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x28, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r2 = add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79"]) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) readv(r3, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f0000000600)=""/64, 0x40}, {&(0x7f0000000680)=""/109, 0x6d}], 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="150000007200010b2bbd7000fedbdf252700af00", @ANYRES32=0x0, @ANYBLOB="0800010001000000"], 0x20}}, 0x4040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={@loopback, 0x60, r5}) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="2c991661ee", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000002c0)={@remote, @rand_addr=0x64010100, 0x1, 0x2, [@empty, @multicast2]}, 0x18) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) ioctl$EXT4_IOC_MIGRATE(r12, 0xff02) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xfffffd9e, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r10, @ANYRES16=r2, @ANYBLOB="48e00e6c203b6a746669c8f420152defda7c399ba732d4dd870c3ef2eec674d06f4f3969d71a2781ab01ea1c86a879d9f44c0775f967b83ffc952fa8bdcbf46f02b0a1dae28bd4c44ab1fe759e6c4af359b94c58998897d9c087e68f80676ebd50fea71030bc65dc4ac4852b80398953d240638d2c439e9affbc276e8a22a2adb5108b4510640bbf6a1f070465e0f182278d4fe99dcc48f2f08ab0da419827b594adab80a5bcb082d987bf196ea27d61d1c4fe1803380200d9a448ec7ffcb92955b51e0b062ee38074920d", @ANYRESOCT=r1]) 0s ago: executing program 5 (id=10253): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x50, "67856f081d9fc303c68bf9098547cc55cfcf22c9"}}) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r5) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = dup2(r6, r6) write$6lowpan_enable(r7, &(0x7f00000000c0)='1', 0x1) writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) pipe2$watch_queue(&(0x7f0000001180), 0x80) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) kernel console output (not intermixed with test programs): 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2433.672686][T21911] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2433.686815][ T187] usb 3-1: device descriptor read/8, error -71 [ 2433.705054][T21911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2433.762552][ T8763] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2433.780334][T21911] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2433.956955][ T187] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2433.977869][ T187] usb 3-1: device descriptor read/8, error -71 [ 2433.993692][ T8763] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 2434.008156][T21911] usb 6-1: USB disconnect, device number 62 [ 2434.119808][ T187] usb usb3-port1: unable to enumerate USB device [ 2434.913452][ T8780] IPv6: Can't replace route, no match found [ 2435.217079][T21913] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2435.416163][T21913] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2435.441770][T21913] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 2435.457578][T21913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.493204][T21913] usb 4-1: config 0 has no interface number 0 [ 2435.514459][T21913] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2435.551777][T21913] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2435.587284][T21913] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2435.685157][T21913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.717004][T21913] usb 4-1: Product: syz [ 2435.736851][T21913] usb 4-1: Manufacturer: syz [ 2435.752475][T21913] usb 4-1: SerialNumber: syz [ 2435.773549][T21913] usb 4-1: config 0 descriptor?? [ 2436.402481][T21913] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.117/input/input181 [ 2436.621049][ T8020] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 2436.622440][T21913] usb 4-1: USB disconnect, device number 37 [ 2436.678516][ T8794] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9905'. [ 2437.072740][ T8796] netlink: 'syz.5.9905': attribute type 10 has an invalid length. [ 2437.722213][ T8820] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9911'. [ 2438.306936][T21913] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2438.433163][ T8832] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 2438.476886][T21913] usb 6-1: device descriptor read/64, error -71 [ 2438.588022][T21912] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 2438.737387][T21913] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2438.767641][T21912] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2438.791179][T21912] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2438.823979][T21912] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2438.853936][T21912] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2438.898031][T21913] usb 6-1: device descriptor read/64, error -71 [ 2438.910150][T21912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2438.934131][T21912] usb 4-1: SerialNumber: syz [ 2438.960759][T21912] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 2438.986793][T21912] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 2439.005080][T21912] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 2439.030046][T21913] usb usb6-port1: attempt power cycle [ 2439.180152][T21912] usb 4-1: USB disconnect, device number 38 [ 2439.261670][ T8846] FAULT_INJECTION: forcing a failure. [ 2439.261670][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 2439.280440][ T8846] CPU: 1 UID: 0 PID: 8846 Comm: syz.4.9919 Tainted: G L syzkaller #0 PREEMPT(full) [ 2439.280471][ T8846] Tainted: [L]=SOFTLOCKUP [ 2439.280475][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2439.280483][ T8846] Call Trace: [ 2439.280488][ T8846] [ 2439.280494][ T8846] dump_stack_lvl+0xe8/0x150 [ 2439.280519][ T8846] should_fail_ex+0x40c/0x560 [ 2439.280539][ T8846] should_failslab+0xa8/0x100 [ 2439.280559][ T8846] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 2439.280573][ T8846] ? d_alloc_parallel+0x152b/0x16a0 [ 2439.280590][ T8846] ? proc_alloc_inode+0x2a/0xc0 [ 2439.280607][ T8846] ? proc_alloc_inode+0x2a/0xc0 [ 2439.280626][ T8846] ? __pfx_proc_alloc_inode+0x10/0x10 [ 2439.280649][ T8846] proc_alloc_inode+0x2a/0xc0 [ 2439.280670][ T8846] alloc_inode+0x6a/0x1b0 [ 2439.280693][ T8846] new_inode+0x1f/0x170 [ 2439.280714][ T8846] ? proc_pid_make_inode+0x19/0x130 [ 2439.280733][ T8846] proc_pid_make_inode+0x21/0x130 [ 2439.280755][ T8846] proc_pident_instantiate+0x6d/0x2a0 [ 2439.280782][ T8846] proc_pident_lookup+0x1b7/0x270 [ 2439.280805][ T8846] __lookup_slow+0x1fb/0x2f0 [ 2439.280823][ T8846] lookup_slow+0x53/0x70 [ 2439.280842][ T8846] link_path_walk+0xd2a/0x1910 [ 2439.280868][ T8846] path_lookupat+0xe4/0x8c0 [ 2439.280891][ T8846] filename_lookup+0x265/0x5d0 [ 2439.280905][ T8846] ? do_syscall_64+0x174/0x580 [ 2439.280926][ T8846] ? __pfx_filename_lookup+0x10/0x10 [ 2439.280954][ T8846] ? __might_fault+0xaf/0x130 [ 2439.280967][ T8846] ? __might_fault+0xaf/0x130 [ 2439.280982][ T8846] filename_setxattr+0xc2/0x630 [ 2439.281003][ T8846] ? __pfx_filename_setxattr+0x10/0x10 [ 2439.281020][ T8846] ? do_getname+0x151/0x250 [ 2439.281034][ T8846] path_setxattrat+0x408/0x450 [ 2439.281051][ T8846] ? __pfx_path_setxattrat+0x10/0x10 [ 2439.281077][ T8846] ? ksys_write+0x242/0x270 [ 2439.281095][ T8846] ? __pfx_ksys_write+0x10/0x10 [ 2439.281114][ T8846] __x64_sys_setxattr+0xbc/0xe0 [ 2439.281130][ T8846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2439.281150][ T8846] do_syscall_64+0x174/0x580 [ 2439.281172][ T8846] ? trace_irq_disable+0x3b/0x140 [ 2439.281195][ T8846] ? clear_bhb_loop+0x70/0xc0 [ 2439.281218][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2439.281238][ T8846] RIP: 0033:0x7f023a19e0d9 [ 2439.281258][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2439.281274][ T8846] RSP: 002b:00007f023b085028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2439.281297][ T8846] RAX: ffffffffffffffda RBX: 00007f023a425fa0 RCX: 00007f023a19e0d9 [ 2439.281312][ T8846] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 2439.281325][ T8846] RBP: 00007f023b085090 R08: 0000000000000001 R09: 0000000000000000 [ 2439.281338][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2439.281349][ T8846] R13: 00007f023a426038 R14: 00007f023a425fa0 R15: 00007f023a54fa48 [ 2439.281382][ T8846] [ 2439.638954][T21913] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2439.667611][T21913] usb 6-1: device descriptor read/8, error -71 [ 2439.919830][T21913] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2439.958213][T21913] usb 6-1: device descriptor read/8, error -71 [ 2440.107055][T21913] usb usb6-port1: unable to enumerate USB device [ 2441.295260][ T8883] program syz.2.9928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2441.726257][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2441.757358][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2441.790727][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2441.819521][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2441.829871][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2442.217918][ T29] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2442.413723][ T5577] bond8: (slave syz_tun): Releasing active interface [ 2442.424101][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2442.454375][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 28265, setting to 1024 [ 2442.502177][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2442.526569][ T8893] syz_tun: entered allmulticast mode [ 2442.544044][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2442.582779][ T29] usb 3-1: Product: syz [ 2442.613125][ T29] usb 3-1: Manufacturer: syz [ 2442.644301][ T8888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2442.719386][ T29] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input182 [ 2442.948274][T21913] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2443.074210][ T29] usb 3-1: USB disconnect, device number 47 [ 2443.126811][T21913] usb 2-1: Using ep0 maxpacket: 8 [ 2443.148634][T21913] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2443.201457][T21913] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 2443.233458][T21913] usb 2-1: config 0 has no interface number 0 [ 2443.284589][T29534] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2443.285412][T21913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.314808][T21913] usb 2-1: Product: syz [ 2443.344618][T21913] usb 2-1: Manufacturer: syz [ 2443.373496][T21913] usb 2-1: SerialNumber: syz [ 2443.401567][T21913] usb 2-1: config 0 descriptor?? [ 2443.636859][ T8902] FAULT_INJECTION: forcing a failure. [ 2443.636859][ T8902] name failslab, interval 1, probability 0, space 0, times 0 [ 2443.695574][ T8904] netlink: 'syz.2.9934': attribute type 10 has an invalid length. [ 2443.705157][ T8904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9934'. [ 2443.717017][ T8902] CPU: 0 UID: 0 PID: 8902 Comm: syz.3.9933 Tainted: G L syzkaller #0 PREEMPT(full) [ 2443.717049][ T8902] Tainted: [L]=SOFTLOCKUP [ 2443.717057][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2443.717067][ T8902] Call Trace: [ 2443.717076][ T8902] [ 2443.717084][ T8902] dump_stack_lvl+0xe8/0x150 [ 2443.717120][ T8902] should_fail_ex+0x40c/0x560 [ 2443.717148][ T8902] should_failslab+0xa8/0x100 [ 2443.717175][ T8902] __kmalloc_cache_noprof+0xa8/0x660 [ 2443.717200][ T8902] ? __inet_diag_dump_start+0x90/0xbb0 [ 2443.717279][ T8902] ? __inet_diag_dump_start+0x90/0xbb0 [ 2443.717307][ T8902] __inet_diag_dump_start+0x90/0xbb0 [ 2443.717329][ T8902] ? netlink_lookup+0x30/0x200 [ 2443.717352][ T8902] ? netlink_lookup+0x30/0x200 [ 2443.717379][ T8902] __netlink_dump_start+0x442/0x7b0 [ 2443.717410][ T8902] inet_diag_rcv_msg_compat+0x214/0x420 [ 2443.717437][ T8902] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 2443.717465][ T8902] ? sock_diag_rcv_msg+0x184/0x5f0 [ 2443.717496][ T8902] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 2443.717518][ T8902] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 2443.717539][ T8902] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 2443.717568][ T8902] ? sock_diag_rcv_msg+0x184/0x5f0 [ 2443.717600][ T8902] sock_diag_rcv_msg+0x4b0/0x5f0 [ 2443.717632][ T8902] netlink_rcv_skb+0x226/0x4a0 [ 2443.717656][ T8902] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 2443.717686][ T8902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2443.717732][ T8902] ? netlink_deliver_tap+0x2e/0x1b0 [ 2443.717754][ T8902] ? netlink_deliver_tap+0x2e/0x1b0 [ 2443.717783][ T8902] netlink_unicast+0x7bb/0x940 [ 2443.717815][ T8902] netlink_sendmsg+0x813/0xb40 [ 2443.717848][ T8902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2443.717875][ T8902] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2443.717902][ T8902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2443.717923][ T8902] sock_sendmsg_nosec+0x13a/0x180 [ 2443.717954][ T8902] ____sys_sendmsg+0x54e/0x850 [ 2443.717981][ T8902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2443.718012][ T8902] ? import_iovec+0x73/0xa0 [ 2443.718042][ T8902] ___sys_sendmsg+0x2a5/0x360 [ 2443.718062][ T8902] ? __lock_acquire+0x683/0x2cf0 [ 2443.718094][ T8902] ? __pfx____sys_sendmsg+0x10/0x10 [ 2443.718152][ T8902] ? __fget_files+0x2a/0x420 [ 2443.718176][ T8902] ? __fget_files+0x3a2/0x420 [ 2443.718210][ T8902] __x64_sys_sendmsg+0x1b1/0x290 [ 2443.718235][ T8902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2443.718275][ T8902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2443.718298][ T8902] do_syscall_64+0x174/0x580 [ 2443.718324][ T8902] ? trace_irq_disable+0x3b/0x140 [ 2443.718347][ T8902] ? clear_bhb_loop+0x70/0xc0 [ 2443.718371][ T8902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2443.718397][ T8902] RIP: 0033:0x7f1e73d9e0d9 [ 2443.718418][ T8902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2443.718437][ T8902] RSP: 002b:00007f1e74c95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2443.718457][ T8902] RAX: ffffffffffffffda RBX: 00007f1e74025fa0 RCX: 00007f1e73d9e0d9 [ 2443.718472][ T8902] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 2443.718484][ T8902] RBP: 00007f1e74c95090 R08: 0000000000000000 R09: 0000000000000000 [ 2443.718496][ T8902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2443.718508][ T8902] R13: 00007f1e74026038 R14: 00007f1e74025fa0 R15: 00007f1e7414fa48 [ 2443.718541][ T8902] [ 2443.724888][ T8904] batadv0: entered promiscuous mode [ 2443.947305][ T5630] Bluetooth: hci0: command tx timeout [ 2444.137588][ T8904] batadv0: entered allmulticast mode [ 2444.146643][ T8904] bridge0: port 3(batadv0) entered blocking state [ 2444.165315][ T8904] bridge0: port 3(batadv0) entered disabled state [ 2444.183706][ T8904] bridge0: port 3(batadv0) entered blocking state [ 2444.190515][ T8904] bridge0: port 3(batadv0) entered forwarding state [ 2444.365110][ T493] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2444.365727][ T8920] IPv6: Can't replace route, no match found [ 2444.376205][ T493] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2444.454367][T29534] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2444.613181][T29534] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2444.687084][T21904] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2444.845828][T29534] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2444.868557][T21904] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2444.890873][T21904] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 2444.899279][T21904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.913154][T21904] usb 5-1: config 0 has no interface number 0 [ 2444.950332][T21904] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2445.023513][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state [ 2445.032873][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 2445.046320][T21904] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2445.046607][ T8889] bridge_slave_0: entered allmulticast mode [ 2445.087381][T21904] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2445.116013][ T8889] bridge_slave_0: entered promiscuous mode [ 2445.148823][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 2445.166538][T21904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2445.184707][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 2445.193210][T21904] usb 5-1: Product: syz [ 2445.200891][T21904] usb 5-1: Manufacturer: syz [ 2445.217648][T21904] usb 5-1: SerialNumber: syz [ 2445.230823][T21904] usb 5-1: config 0 descriptor?? [ 2445.242321][ T8889] bridge_slave_1: entered allmulticast mode [ 2445.259038][ T8889] bridge_slave_1: entered promiscuous mode [ 2445.391743][T21913] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 2445.431164][T21913] usb 2-1: USB disconnect, device number 101 [ 2445.467042][ T8889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2445.516477][ T8889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2445.808708][ T8889] team0: Port device team_slave_0 added [ 2445.815023][ T8944] trusted_key: encrypted_key: insufficient parameters specified [ 2445.831232][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 2445.831251][ T30] audit: type=1326 audit(1786268191.885:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.2.9943" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc45b9e0d9 code=0x0 [ 2445.878704][T21904] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.117/input/input183 [ 2445.932859][ T8889] team0: Port device team_slave_1 added [ 2446.050418][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2446.058005][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2446.087741][T21904] usb 5-1: USB disconnect, device number 66 [ 2446.149476][ T8889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2446.187728][ T5630] Bluetooth: hci0: command tx timeout [ 2446.278315][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2446.324882][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2446.371159][ T8889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2446.408282][T29534] bridge_slave_1: left allmulticast mode [ 2446.414344][T29534] bridge_slave_1: left promiscuous mode [ 2446.422343][T29534] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.448256][T29534] bridge_slave_0: left allmulticast mode [ 2446.468456][T29534] bridge_slave_0: left promiscuous mode [ 2446.509932][T29534] bridge0: port 1(bridge_slave_0) entered disabled state [ 2447.768242][T29534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2447.881425][T29534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2447.909804][T29534] bond0 (unregistering): Released all slaves [ 2447.956298][T29534] bond1 (unregistering): Released all slaves [ 2448.003417][T29534] bond2 (unregistering): Released all slaves [ 2448.043159][T29534] bond3 (unregistering): Released all slaves [ 2448.088039][T29534] bond4 (unregistering): Released all slaves [ 2448.138364][T29534] bond5 (unregistering): Released all slaves [ 2448.166868][T21911] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2448.204950][T29534] bond6 (unregistering): Released all slaves [ 2448.258555][ T5630] Bluetooth: hci0: command tx timeout [ 2448.265151][T29534] bond7 (unregistering): Released all slaves [ 2448.314789][T29534] bond8 (unregistering): Released all slaves [ 2448.326964][T21911] usb 5-1: Using ep0 maxpacket: 8 [ 2448.350017][T21911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2448.375729][T21911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2448.401995][T29534] bond9 (unregistering): Released all slaves [ 2448.411599][T21911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2448.440477][T21911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2448.463712][T21911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2448.496819][T21911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2448.807072][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2448.950240][T29534] tipc: Left network mode [ 2449.015243][ T8889] hsr_slave_0: entered promiscuous mode [ 2449.022979][ T8889] hsr_slave_1: entered promiscuous mode [ 2449.032969][ T8889] debugfs: 'hsr0' already exists in 'hsr' [ 2449.066574][ T8889] Cannot create hsr debugfs directory [ 2449.347014][ T9009] IPv6: Can't replace route, no match found [ 2449.608703][ T187] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2449.828172][ T187] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2449.839991][ T187] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2449.848894][ T187] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2449.860680][ T187] usb 2-1: config 0 has no interface number 0 [ 2449.875301][ T187] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2449.886932][ T187] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2449.897971][ T187] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2449.918165][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.926448][ T187] usb 2-1: Product: syz [ 2449.930767][ T187] usb 2-1: Manufacturer: syz [ 2449.936624][ T187] usb 2-1: SerialNumber: syz [ 2450.028666][ T187] usb 2-1: config 0 descriptor?? [ 2450.045419][T29534] hsr_slave_0: left promiscuous mode [ 2450.054186][T29534] hsr_slave_1: left promiscuous mode [ 2450.062764][T29534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2450.074206][T29534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2450.090635][T29534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2450.106905][T29534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2450.151561][T29534] veth1_macvtap: left promiscuous mode [ 2450.164088][T29534] veth0_macvtap: left promiscuous mode [ 2450.171715][T29534] veth1_vlan: left promiscuous mode [ 2450.179827][T29534] veth0_vlan: left promiscuous mode [ 2450.337927][ T5630] Bluetooth: hci0: command tx timeout [ 2450.652972][ T187] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.117/input/input184 [ 2450.767708][ T5678] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2450.850665][T29534] team0 (unregistering): Port device team_slave_1 removed [ 2450.875895][T29534] team0 (unregistering): Port device team_slave_0 removed [ 2450.890764][ T5630] Bluetooth: hci4: SCO packet for unknown connection handle 2850 [ 2450.891574][T21911] usb 5-1: usb_control_msg returned -71 [ 2450.915159][ T29] usb 2-1: USB disconnect, device number 102 [ 2450.934373][ T5678] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2450.940526][T21911] usbtmc 5-1:16.0: can't read capabilities [ 2450.955840][ T5678] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2450.980521][ T5678] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2450.993600][T21911] usb 5-1: USB disconnect, device number 67 [ 2451.006609][ T5678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2451.040391][ T9037] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2451.059405][ T5678] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2451.253610][ T9037] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 2451.278069][ T5678] usb 4-1: USB disconnect, device number 39 [ 2451.428913][ T9043] FAULT_INJECTION: forcing a failure. [ 2451.428913][ T9043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2451.450373][ T9043] CPU: 1 UID: 0 PID: 9043 Comm: syz.4.9962 Tainted: G L syzkaller #0 PREEMPT(full) [ 2451.450405][ T9043] Tainted: [L]=SOFTLOCKUP [ 2451.450412][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2451.450423][ T9043] Call Trace: [ 2451.450431][ T9043] [ 2451.450439][ T9043] dump_stack_lvl+0xe8/0x150 [ 2451.450473][ T9043] should_fail_ex+0x40c/0x560 [ 2451.450502][ T9043] prepare_alloc_pages+0x230/0x650 [ 2451.450545][ T9043] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2451.450573][ T9043] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2451.450602][ T9043] ? __pfx_policy_nodemask+0x10/0x10 [ 2451.450627][ T9043] ? __lock_acquire+0x683/0x2cf0 [ 2451.450657][ T9043] alloc_pages_mpol+0x212/0x380 [ 2451.450688][ T9043] alloc_pages_noprof+0xac/0x2a0 [ 2451.450715][ T9043] pte_alloc_one+0x22/0x370 [ 2451.450739][ T9043] __pte_alloc+0x25/0x1a0 [ 2451.450767][ T9043] do_pte_missing+0x2db7/0x34b0 [ 2451.450796][ T9043] ? do_raw_spin_unlock+0xf5/0x210 [ 2451.450818][ T9043] ? __pmd_alloc+0x40a/0x5c0 [ 2451.450840][ T9043] handle_mm_fault+0x1b36/0x3080 [ 2451.450873][ T9043] ? handle_mm_fault+0xec/0x3080 [ 2451.450901][ T9043] ? __pfx_handle_mm_fault+0x10/0x10 [ 2451.450935][ T9043] ? __lock_acquire+0x683/0x2cf0 [ 2451.450962][ T9043] ? lock_mm_and_find_vma+0xa7/0x340 [ 2451.450986][ T9043] do_user_addr_fault+0x744/0x1340 [ 2451.451026][ T9043] exc_page_fault+0x6a/0xc0 [ 2451.451052][ T9043] asm_exc_page_fault+0x26/0x30 [ 2451.451069][ T9043] RIP: 0010:strncpy_from_user+0xb7/0x2c0 [ 2451.451091][ T9043] Code: 00 00 4c 89 f6 e8 99 61 b7 fc 49 83 fe 07 0f 86 9d 00 00 00 4c 89 24 24 4c 89 74 24 08 48 c7 c5 f8 ff ff ff 45 31 ff 49 89 dc <4e> 8b 34 3b 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 06 4d 89 f5 49 [ 2451.451107][ T9043] RSP: 0018:ffffc90006517c38 EFLAGS: 00050246 [ 2451.451125][ T9043] RAX: ffffffff850fa4a7 RBX: 0000200000000040 RCX: ffff888026f8dd00 [ 2451.451140][ T9043] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000007 [ 2451.451152][ T9043] RBP: fffffffffffffff8 R08: ffffc90006517dff R09: 1ffff92000ca2fbf [ 2451.451165][ T9043] R10: dffffc0000000000 R11: fffff52000ca2fc0 R12: 0000200000000040 [ 2451.451178][ T9043] R13: 0000000000000001 R14: 0000000000000100 R15: 0000000000000000 [ 2451.451198][ T9043] ? strncpy_from_user+0x97/0x2c0 [ 2451.451226][ T9043] ? strncpy_from_user+0x97/0x2c0 [ 2451.451249][ T9043] path_setxattrat+0x191/0x450 [ 2451.451279][ T9043] ? __pfx_path_setxattrat+0x10/0x10 [ 2451.451325][ T9043] ? ksys_write+0x242/0x270 [ 2451.451353][ T9043] ? __pfx_ksys_write+0x10/0x10 [ 2451.451384][ T9043] __x64_sys_setxattr+0xbc/0xe0 [ 2451.451410][ T9043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.451430][ T9043] do_syscall_64+0x174/0x580 [ 2451.451453][ T9043] ? trace_irq_disable+0x3b/0x140 [ 2451.451481][ T9043] ? clear_bhb_loop+0x70/0xc0 [ 2451.451505][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.451534][ T9043] RIP: 0033:0x7f023a19e0d9 [ 2451.451553][ T9043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2451.451568][ T9043] RSP: 002b:00007f023b085028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2451.451586][ T9043] RAX: ffffffffffffffda RBX: 00007f023a425fa0 RCX: 00007f023a19e0d9 [ 2451.451599][ T9043] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 2451.451611][ T9043] RBP: 00007f023b085090 R08: 0000000000000001 R09: 0000000000000000 [ 2451.451623][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2451.451633][ T9043] R13: 00007f023a426038 R14: 00007f023a425fa0 R15: 00007f023a54fa48 [ 2451.451665][ T9043] [ 2451.931630][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2452.145985][ T29] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2452.337046][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 2452.345014][ T29] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2452.373333][ T29] usb 2-1: config index 0 descriptor too short (expected 260, got 27) [ 2452.392800][ T29] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2452.431574][ T29] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 2452.472068][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.710717][ T9063] syzkaller0: entered promiscuous mode [ 2452.744413][ T9063] syzkaller0: entered allmulticast mode [ 2453.390047][ T29] usb 2-1: string descriptor 0 read error: -71 [ 2453.420996][ T29] usb 2-1: USB disconnect, device number 103 [ 2453.428510][T29534] IPVS: stop unused estimator thread 0... [ 2453.611299][ T9072] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9969'. [ 2454.137288][ T187] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2454.281450][ T9092] IPv6: Can't replace route, no match found [ 2454.344865][ T187] usb 4-1: Using ep0 maxpacket: 8 [ 2454.353503][ T187] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 2454.365522][ T187] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2454.374739][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2454.399053][ T187] usb 4-1: config 0 descriptor?? [ 2454.417842][ T187] gspca_main: spca501-2.14.0 probing 0000:0000 [ 2454.427925][T21904] hid_parser_main: 107 callbacks suppressed [ 2454.427943][T21904] hid-generic 0006:0008:0005.0061: unknown main item tag 0x0 [ 2454.463110][T21904] hid-generic 0006:0008:0005.0061: unknown main item tag 0x0 [ 2454.483736][T21904] hid-generic 0006:0008:0005.0061: unknown main item tag 0x0 [ 2454.504954][T21904] hid-generic 0006:0008:0005.0061: unknown main item tag 0x0 [ 2454.522305][T21904] hid-generic 0006:0008:0005.0061: unknown main item tag 0x0 [ 2454.529890][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9974'. [ 2454.529937][ T9097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2454.577031][ T5678] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2454.624563][T21904] hid-generic 0006:0008:0005.0061: unknown main item tag 0x0 [ 2454.654853][T21904] hid-generic 0006:0008:0005.0061: unknown main item tag 0x0 [ 2454.755927][T21904] hid-generic 0006:0008:0005.0061: unknown main item tag 0x0 [ 2454.771860][ T5678] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2454.796650][T21904] hid-generic 0006:0008:0005.0061: unknown main item tag 0x0 [ 2454.828040][T21904] hid-generic 0006:0008:0005.0061: unknown main item tag 0x0 [ 2454.839593][ T5678] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2454.859004][ T5678] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.873765][ T5678] usb 2-1: config 0 has no interface number 0 [ 2454.887229][T21904] hid-generic 0006:0008:0005.0061: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 2454.951979][ T5678] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2455.002847][ T5678] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2455.047574][ T5678] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2455.118319][ T5678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2455.140296][ T5678] usb 2-1: Product: syz [ 2455.170510][ T5678] usb 2-1: Manufacturer: syz [ 2455.196227][ T5678] usb 2-1: SerialNumber: syz [ 2455.261616][ T9102] fido_id[9102]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2455.340833][ T5678] usb 2-1: config 0 descriptor?? [ 2455.474520][ T187] gspca_spca501: reg write: error -71 [ 2455.484331][ T187] spca501 4-1:0.0: Reg write failed for 0x01,0x16,0x11 [ 2455.499026][ T187] spca501 4-1:0.0: probe with driver spca501 failed with error -22 [ 2455.526419][ T187] usbhid 4-1:0.0: can't add hid device: -71 [ 2455.560439][ T187] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2455.624558][ T187] usb 4-1: USB disconnect, device number 40 [ 2455.764030][ T8889] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2455.811097][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2455.837519][ T8889] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2455.859629][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2455.887096][ T8889] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2455.927027][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2455.944954][ T8889] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2455.980134][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2455.998398][ T5678] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.117/input/input185 [ 2456.201464][ T5630] Bluetooth: hci4: SCO packet for unknown connection handle 2850 [ 2456.203714][T21912] usb 2-1: USB disconnect, device number 104 [ 2456.438670][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2456.496987][T21913] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2456.512367][ T8889] 8021q: adding VLAN 0 to HW filter on device team0 [ 2456.546824][T29534] bridge0: port 1(bridge_slave_0) entered blocking state [ 2456.554129][T29534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2456.579149][T29534] bridge0: port 2(bridge_slave_1) entered blocking state [ 2456.586441][T29534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2456.679945][T21913] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2456.695450][T21913] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2456.716765][T21913] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2456.741668][T21913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2456.780736][ T9127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2456.793184][ T9148] syzkaller0: entered promiscuous mode [ 2456.803007][ T9148] syzkaller0: entered allmulticast mode [ 2456.809164][T21913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2456.994922][ T9127] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 2457.087555][T21913] usb 5-1: USB disconnect, device number 68 [ 2457.198396][ T9156] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9980'. [ 2457.299867][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2457.440381][ T8889] veth0_vlan: entered promiscuous mode [ 2457.471024][ T8889] veth1_vlan: entered promiscuous mode [ 2457.589305][ T8889] veth0_macvtap: entered promiscuous mode [ 2457.606251][ T8889] veth1_macvtap: entered promiscuous mode [ 2457.685611][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2457.746069][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2457.849103][T17211] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2457.859125][T21912] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 2457.998531][ T6173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2458.035037][ T6173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2458.052614][T21912] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2458.093999][T21912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2458.133320][T21912] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 2458.267881][T21912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 2458.268261][ T6173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2458.321672][T21912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2458.391140][T17211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2458.414731][T17211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2458.445966][T21912] usb 4-1: config 0 descriptor?? [ 2458.631972][T24135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2458.671718][T24135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2458.717303][T14179] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2458.717436][T21912] ath6kl: Failed to submit usb control message: -71 [ 2458.782732][T21912] ath6kl: unable to send the bmi data to the device: -71 [ 2458.802581][T21912] ath6kl: Unable to send get target info: -71 [ 2458.827721][T21912] ath6kl: Failed to init ath6kl core: -71 [ 2458.866059][T21912] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2458.947178][T21912] usb 4-1: USB disconnect, device number 41 [ 2459.016893][T14179] usb 3-1: Using ep0 maxpacket: 8 [ 2459.024024][T14179] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 2459.091568][T14179] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 2459.118141][T14179] usb 3-1: config 8 has no interface number 0 [ 2459.136369][T14179] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 2459.194745][T14179] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2459.229870][T14179] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2459.270411][T14179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2459.287436][T14179] usb 3-1: Product: syz [ 2459.304551][T14179] usb 3-1: Manufacturer: syz [ 2459.330474][T14179] usb 3-1: SerialNumber: syz [ 2459.609253][T14179] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 2459.650233][T14179] vmk80xx 3-1:8.188: probe with driver vmk80xx failed with error -22 [ 2459.711641][T14179] usb 3-1: USB disconnect, device number 48 [ 2460.619323][T21912] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2460.788242][T21912] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2460.807120][T21912] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2460.833958][T21912] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2460.855229][T21912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2460.870777][ T9227] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2460.893160][T21912] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2461.007132][T14179] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2461.098789][ T9227] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 2461.149436][T21912] usb 6-1: USB disconnect, device number 67 [ 2461.166898][T21904] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2461.175186][T14179] usb 3-1: device descriptor read/64, error -71 [ 2461.347921][T21904] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2461.366872][T21904] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2461.404861][T21904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2461.429401][T21904] usb 2-1: Product: syz [ 2461.444304][T21904] usb 2-1: Manufacturer: syz [ 2461.449306][T14179] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2461.461823][T21904] usb 2-1: SerialNumber: syz [ 2461.596790][T14179] usb 3-1: device descriptor read/64, error -71 [ 2461.652850][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10001'. [ 2461.662500][ T9247] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2461.695487][T21904] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2461.711268][T14179] usb usb3-port1: attempt power cycle [ 2461.838296][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10003'. [ 2461.851023][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10003'. [ 2461.895283][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10003'. [ 2461.919762][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10003'. [ 2461.946839][T24135] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2461.954019][ T29] usb 2-1: USB disconnect, device number 105 [ 2461.972622][T24135] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2461.980573][ T9242] usblp0: removed [ 2461.997675][T24135] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2462.020636][T24135] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2462.077476][T14179] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2462.101220][T14179] usb 3-1: device descriptor read/8, error -71 [ 2462.367753][T14179] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2462.397661][T14179] usb 3-1: device descriptor read/8, error -71 [ 2462.466818][ T29] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2462.508400][T14179] usb usb3-port1: unable to enumerate USB device [ 2462.628550][ T29] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 2462.641522][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2462.681331][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2462.723972][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2462.742443][ T29] usb 5-1: Product: syz [ 2462.752563][ T29] usb 5-1: Manufacturer: syz [ 2462.764465][ T29] usb 5-1: SerialNumber: syz [ 2463.348004][T14179] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2463.537743][T14179] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2463.564428][T14179] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2463.598309][T14179] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2463.631019][T14179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2463.684731][ T9282] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2463.699316][T14179] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2463.911590][ T9282] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 2464.032717][T14179] usb 4-1: USB disconnect, device number 42 [ 2464.321842][ T187] usb 5-1: USB disconnect, device number 69 [ 2466.047024][ T187] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2466.261601][ T187] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2466.382129][ T187] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2466.437845][ T187] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2466.468830][ T187] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2466.504398][ T187] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2466.537583][T21912] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2466.553346][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2466.656465][ T187] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2466.686278][ T187] usb 2-1: invalid MIDI out EP 0 [ 2466.731229][T21912] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2466.788910][T21912] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 2466.823466][T21912] usb 4-1: config 0 has no interface number 0 [ 2466.848262][T21912] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2466.933640][T21912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.987701][T21912] usb 4-1: Product: syz [ 2467.027418][T21912] usb 4-1: Manufacturer: syz [ 2467.052285][T21912] usb 4-1: SerialNumber: syz [ 2467.112664][T21912] usb 4-1: config 0 descriptor?? [ 2467.145774][T21912] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 2467.187573][ T187] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2467.351677][T21911] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2467.394791][T21912] usb 4-1: USB disconnect, device number 43 [ 2467.420258][T21912] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 2467.529116][T21911] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 2467.549419][T21911] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2467.583255][T21911] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2467.624735][T21911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2467.637500][T21911] usb 6-1: Product: syz [ 2467.641823][T21911] usb 6-1: Manufacturer: syz [ 2467.649896][T21911] usb 6-1: SerialNumber: syz [ 2467.788510][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.796216][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.876846][T21912] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2468.046799][T21912] usb 3-1: Using ep0 maxpacket: 32 [ 2468.059818][T21912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2468.072917][T21912] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2468.091251][ T9358] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2468.105040][T21912] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 2468.119734][ T9358] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2468.126311][T21912] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 2468.143614][ T9358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2468.150856][ T9358] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2468.157265][T21912] usb 3-1: config 14 has no interface number 0 [ 2468.163548][T21912] usb 3-1: config 14 has no interface number 1 [ 2468.183711][T21912] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2468.211902][T21912] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 5, skipping [ 2468.237645][T21912] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2468.255312][T21912] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2468.303413][T21912] usb 3-1: config 14 interface 57 has no altsetting 0 [ 2468.314649][T21912] usb 3-1: config 14 interface 228 has no altsetting 0 [ 2468.326001][ T9358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2468.339858][ T9358] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2468.361087][T21912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2468.385985][T21912] usb 3-1: Product: syz [ 2468.392656][ T9358] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2468.409456][T21912] usb 3-1: Manufacturer: syz [ 2468.426749][T21912] usb 3-1: SerialNumber: syz [ 2468.435748][ T9358] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2468.458677][ T9358] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2468.488190][ T9358] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2468.807119][ T187] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 2468.886072][T21912] legousbtower 3-1:14.57: interrupt endpoints not found [ 2468.982749][ T187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2469.001662][ T187] usb 5-1: not running at top speed; connect to a high speed hub [ 2469.023931][ T187] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 2469.052649][ T187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2469.089409][ T187] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2469.107483][T21912] legousbtower 3-1:14.228: interrupt endpoints not found [ 2469.110762][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2469.142897][ T187] usb 5-1: Product: syz [ 2469.156074][ T187] usb 5-1: Manufacturer: syz [ 2469.166800][ T187] usb 5-1: SerialNumber: syz [ 2469.230501][T21921] usb 6-1: USB disconnect, device number 68 [ 2469.331126][T21912] usb 2-1: USB disconnect, device number 106 [ 2469.402971][ T9356] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2469.573318][ T187] usb 5-1: USB disconnect, device number 70 [ 2469.909463][T21912] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2470.097951][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 2470.106453][T21912] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2470.132543][T21912] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2470.182527][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 2470.190513][T21912] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2470.201748][T21912] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2470.211696][T21912] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2470.224734][T21912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2470.336910][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 2470.354227][T21912] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2470.407566][T21912] usb 2-1: invalid MIDI out EP 0 [ 2470.445957][ T9381] program syz.5.10047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2470.497804][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 2470.505722][ T9388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10050'. [ 2470.571665][ T9384] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2470.578222][ T9384] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2470.606397][ T9384] vhci_hcd vhci_hcd.0: Device attached [ 2470.658710][ T9391] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 2470.665305][ T9391] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2470.710079][ T9384] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12) [ 2470.716730][ T9384] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2470.745880][ T9391] vhci_hcd vhci_hcd.0: Device attached [ 2470.786143][ T9384] vhci_hcd vhci_hcd.0: Device attached [ 2470.803116][T21921] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 2470.840955][ T9397] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15) [ 2470.847632][ T9397] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2470.864365][T21912] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2470.876873][T21904] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 2470.891130][ T9397] vhci_hcd vhci_hcd.0: Device attached [ 2470.943550][ T9391] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(19) [ 2470.950314][ T9391] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2470.958595][ T9384] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 2470.965231][ T9384] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2470.976581][ T9391] vhci_hcd vhci_hcd.0: Device attached [ 2471.005610][ T9384] vhci_hcd vhci_hcd.0: Device attached [ 2471.023070][ T9397] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(17) [ 2471.029739][ T9397] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2471.049873][T21921] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2471.085936][T21912] usb 3-1: USB disconnect, device number 53 [ 2471.104007][T21921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 2471.133003][ T9384] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(18) [ 2471.139641][ T9384] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2471.161920][T21921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2471.202888][T21921] usb 5-1: config 0 descriptor?? [ 2471.216184][ T9397] vhci_hcd vhci_hcd.0: Device attached [ 2471.225248][ T9388] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2471.242415][ T9384] vhci_hcd vhci_hcd.0: Device attached [ 2471.274252][ T9410] syzkaller1: entered promiscuous mode [ 2471.284319][ T9410] syzkaller1: entered allmulticast mode [ 2471.322994][ T9387] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2471.358236][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10051'. [ 2471.441692][ T9404] vhci_hcd: connection closed [ 2471.441825][ T9407] vhci_hcd: connection closed [ 2471.446949][ T6173] vhci_hcd vhci_hcd.5: stop threads [ 2471.457573][ T9400] vhci_hcd: connection closed [ 2471.458919][ T9395] vhci_hcd: connection closed [ 2471.463771][ T9389] vhci_hcd: connection reset by peer [ 2471.465496][ T9392] vhci_hcd: connection closed [ 2471.474598][ T6173] vhci_hcd vhci_hcd.5: release socket [ 2471.493782][ T6173] vhci_hcd vhci_hcd.5: disconnect device [ 2471.496129][ T9398] vhci_hcd: connection closed [ 2471.500416][ T9401] vhci_hcd: connection closed [ 2471.520743][T21921] ath6kl: Failed to submit usb control message: -71 [ 2471.534418][ T6173] vhci_hcd vhci_hcd.5: stop threads [ 2471.544941][ T6173] vhci_hcd vhci_hcd.5: release socket [ 2471.558337][T21921] ath6kl: unable to send the bmi data to the device: -71 [ 2471.565667][ T6173] vhci_hcd vhci_hcd.5: disconnect device [ 2471.581909][T21921] ath6kl: Unable to send get target info: -71 [ 2471.588688][ T6173] vhci_hcd vhci_hcd.5: stop threads [ 2471.594370][ T6173] vhci_hcd vhci_hcd.5: release socket [ 2471.605735][ T6173] vhci_hcd vhci_hcd.5: disconnect device [ 2471.615542][T21921] ath6kl: Failed to init ath6kl core: -71 [ 2471.650563][T21921] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2471.661349][ T6173] vhci_hcd vhci_hcd.5: stop threads [ 2471.668410][ T6173] vhci_hcd vhci_hcd.5: release socket [ 2471.682366][T21921] usb 5-1: USB disconnect, device number 71 [ 2471.699084][ T6173] vhci_hcd vhci_hcd.5: disconnect device [ 2471.749521][ T6173] vhci_hcd vhci_hcd.5: stop threads [ 2471.766350][ T6173] vhci_hcd vhci_hcd.5: release socket [ 2471.772646][ T6173] vhci_hcd vhci_hcd.5: disconnect device [ 2471.836615][ T6173] vhci_hcd vhci_hcd.5: stop threads [ 2471.860816][ T6173] vhci_hcd vhci_hcd.5: release socket [ 2471.867857][ T6173] vhci_hcd vhci_hcd.5: disconnect device [ 2471.875610][ T6173] vhci_hcd vhci_hcd.5: stop threads [ 2471.883504][ T6173] vhci_hcd vhci_hcd.5: release socket [ 2471.890041][ T6173] vhci_hcd vhci_hcd.5: disconnect device [ 2471.896810][ T6173] vhci_hcd vhci_hcd.5: stop threads [ 2471.902242][ T6173] vhci_hcd vhci_hcd.5: release socket [ 2471.912976][ T6173] vhci_hcd vhci_hcd.5: disconnect device [ 2472.177434][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 2472.258504][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 2472.416893][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 2472.578154][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 2472.767024][T21921] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2472.821592][T14179] usb 2-1: USB disconnect, device number 107 [ 2472.937636][T21921] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2472.977939][T21921] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2473.004557][T21921] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2473.035863][T21921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.067794][ T9426] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2473.088078][T21921] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2473.277199][T14179] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2473.306889][ T9426] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 2473.425727][T14397] usb 5-1: USB disconnect, device number 72 [ 2473.439374][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10059'. [ 2473.519587][T14179] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 2473.576993][T14179] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2473.587509][T14179] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2473.640117][T14179] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2473.680133][T14179] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2473.722203][T14179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2474.258389][T21912] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2474.421466][T21912] usb 6-1: Using ep0 maxpacket: 32 [ 2474.426857][ T29] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2474.440090][T21912] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2474.453211][T21912] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2474.466263][T21912] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 2474.475515][T21912] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 2474.486916][T21912] usb 6-1: config 14 has no interface number 0 [ 2474.494715][T21912] usb 6-1: config 14 has no interface number 1 [ 2474.501396][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 2474.511718][T21912] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2474.523323][T21912] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 5, skipping [ 2474.535290][T21912] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2474.553516][T21912] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2474.568048][T21912] usb 6-1: config 14 interface 57 has no altsetting 0 [ 2474.575020][T21912] usb 6-1: config 14 interface 228 has no altsetting 0 [ 2474.586880][T21912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2474.595743][ T29] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2474.605366][T21912] usb 6-1: Product: syz [ 2474.610477][T21912] usb 6-1: Manufacturer: syz [ 2474.616018][T21912] usb 6-1: SerialNumber: syz [ 2474.621520][ T29] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 2474.631077][ T29] usb 5-1: config 1 has no interface number 0 [ 2474.638359][ T29] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2474.657601][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 2474.668939][ T29] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2474.680405][ T29] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 2474.690606][ T29] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2474.702511][ T29] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2474.716093][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2474.729211][ T29] usb 5-1: Product: syz [ 2474.738149][ T29] usb 5-1: Manufacturer: syz [ 2474.751090][ T29] usb 5-1: SerialNumber: syz [ 2474.778453][ T9444] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2474.786477][ T9444] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2474.986795][T14179] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2475.000861][ T9444] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2475.008930][ T9444] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2475.019185][ T29] usb 5-1: No status endpoint found [ 2475.073481][T21912] legousbtower 6-1:14.57: interrupt endpoints not found [ 2475.137011][T14179] usb 3-1: Using ep0 maxpacket: 32 [ 2475.143420][T14179] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2475.154169][T14179] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 2475.163013][T14179] usb 3-1: config 0 has no interface number 0 [ 2475.169229][T14179] usb 3-1: config 0 interface 12 has no altsetting 0 [ 2475.179698][T14179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2475.187785][T14179] usb 3-1: Product: syz [ 2475.191958][T14179] usb 3-1: Manufacturer: syz [ 2475.196564][T14179] usb 3-1: SerialNumber: syz [ 2475.213041][T14179] usb 3-1: config 0 descriptor?? [ 2475.226082][ T29] usb 5-1: USB disconnect, device number 73 [ 2475.274395][T21912] legousbtower 6-1:14.228: interrupt endpoints not found [ 2475.526914][ T9452] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2475.539482][ T9452] bond1 (unregistering): Released all slaves [ 2475.684702][ T5630] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 2475.720500][T14179] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2475.736021][T14179] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 2475.743970][T14179] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2475.752374][T14179] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 2475.772129][T14179] usb 3-1: USB disconnect, device number 54 [ 2475.928700][T14397] usb 2-1: USB disconnect, device number 108 [ 2476.019894][T21904] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2476.046863][T21912] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2476.196848][T21912] usb 5-1: Using ep0 maxpacket: 32 [ 2476.202775][T21912] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2476.214777][T21912] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 2476.236217][T21912] usb 5-1: config 0 has no interface number 0 [ 2476.245423][T21912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2476.253998][T21912] usb 5-1: Product: syz [ 2476.258533][T21912] usb 5-1: Manufacturer: syz [ 2476.263422][T21912] usb 5-1: SerialNumber: syz [ 2476.273779][T21912] usb 5-1: config 0 descriptor?? [ 2476.290953][T21912] hub 5-1:0.89: bad descriptor, ignoring hub [ 2476.297816][T21912] hub 5-1:0.89: probe with driver hub failed with error -5 [ 2476.306322][T21912] option 5-1:0.89: GSM modem (1-port) converter detected [ 2476.319682][T21912] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 2476.810525][ T9464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2476.817530][ T9464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2476.829024][ T9464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2476.835331][ T9464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2476.844676][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2476.858519][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2477.126940][ T29] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2477.263503][T21921] usb 6-1: USB disconnect, device number 69 [ 2477.277683][ T29] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2477.292471][T21911] usb usb44-port1: attempt power cycle [ 2477.310797][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 28265, setting to 1024 [ 2477.333914][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2477.347212][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2477.360662][ T29] usb 4-1: Product: syz [ 2477.371390][ T29] usb 4-1: Manufacturer: syz [ 2477.405599][ T9490] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2477.434047][ T29] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input186 [ 2477.675472][ T29] usb 4-1: USB disconnect, device number 44 [ 2477.716865][T21921] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 2477.881334][T21921] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2477.908238][T21911] usb usb44-port1: unable to enumerate USB device [ 2477.915348][T21921] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2477.949205][T21921] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2477.963746][ T9502] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10077'. [ 2477.995409][T21921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2478.004193][T21921] usb 6-1: Product: syz [ 2478.012542][T21921] usb 6-1: Manufacturer: syz [ 2478.027109][T21921] usb 6-1: SerialNumber: syz [ 2478.057185][T21921] usb 6-1: config 0 descriptor?? [ 2478.085544][T21921] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 2478.100611][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 2478.353602][T21921] usb 6-1: USB disconnect, device number 70 [ 2478.572808][ T9510] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 2478.649256][ T9513] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10079'. [ 2478.897371][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 2478.897392][ T8020] Bluetooth: hci1: command 0x0c1a tx timeout [ 2478.903464][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 2479.027061][T14397] usb 5-1: USB disconnect, device number 74 [ 2479.070115][T14397] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 2479.135907][T14397] option 5-1:0.89: device disconnected [ 2479.668554][ T29] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2479.918562][ T29] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 2479.942711][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2479.986106][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2480.044022][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.054574][ T29] usb 4-1: Product: syz [ 2480.064979][ T29] usb 4-1: Manufacturer: syz [ 2480.074433][ T29] usb 4-1: SerialNumber: syz [ 2481.306799][T21904] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2481.445186][ T9541] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10088'. [ 2481.476866][T21904] usb 2-1: Using ep0 maxpacket: 32 [ 2481.494567][T21904] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2481.522578][T21904] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2481.562400][T21904] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 2481.592301][T21904] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 2481.633002][T21904] usb 2-1: config 14 has no interface number 0 [ 2481.651359][T21904] usb 2-1: config 14 has no interface number 1 [ 2481.676340][T21904] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2481.694751][T21921] usb 4-1: USB disconnect, device number 45 [ 2481.718037][T21904] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 5, skipping [ 2481.756335][T21904] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2481.774977][T21904] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2481.817574][ T9543] syzkaller0: entered promiscuous mode [ 2481.826828][ T9543] syzkaller0: entered allmulticast mode [ 2481.835689][T21904] usb 2-1: config 14 interface 57 has no altsetting 0 [ 2481.850461][T21904] usb 2-1: config 14 interface 228 has no altsetting 0 [ 2481.862178][T21904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2481.870582][T21904] usb 2-1: Product: syz [ 2481.874819][T21904] usb 2-1: Manufacturer: syz [ 2481.881749][T21904] usb 2-1: SerialNumber: syz [ 2481.923929][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10090'. [ 2482.041196][ T30] audit: type=1326 audit(1786268228.095:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.4.10093" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023a19e0d9 code=0x7ffc0000 [ 2482.069883][ T30] audit: type=1326 audit(1786268228.095:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.4.10093" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023a19e0d9 code=0x7ffc0000 [ 2482.095076][ T30] audit: type=1326 audit(1786268228.095:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.4.10093" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f023a15add1 code=0x7ffc0000 [ 2482.095122][ T30] audit: type=1326 audit(1786268228.095:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.4.10093" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f023a19eec9 code=0x7ffc0000 [ 2482.095191][ T30] audit: type=1326 audit(1786268228.095:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.4.10093" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f023a15ae3b code=0x7ffc0000 [ 2482.095236][ T30] audit: type=1326 audit(1786268228.095:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.4.10093" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023a19e0d9 code=0x7ffc0000 [ 2482.095279][ T30] audit: type=1326 audit(1786268228.095:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.4.10093" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023a19e0d9 code=0x7ffc0000 [ 2482.095351][ T30] audit: type=1326 audit(1786268228.095:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.4.10093" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f023a15a52c code=0x7ffc0000 [ 2482.095397][ T30] audit: type=1326 audit(1786268228.095:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.4.10093" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f023a15a58e code=0x7ffc0000 [ 2482.095445][ T30] audit: type=1326 audit(1786268228.095:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.4.10093" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f023a19e0d9 code=0x7ffc0000 [ 2482.201543][ T29] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2482.356395][T21904] legousbtower 2-1:14.57: interrupt endpoints not found [ 2482.378404][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 2482.394651][ T29] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2482.422039][ T29] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 2482.433553][ T29] usb 3-1: config 0 has no interface number 0 [ 2482.465743][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2482.474087][ T29] usb 3-1: Product: syz [ 2482.482022][ T29] usb 3-1: Manufacturer: syz [ 2482.491777][ T29] usb 3-1: SerialNumber: syz [ 2482.567356][ T29] usb 3-1: config 0 descriptor?? [ 2482.583852][T21904] legousbtower 2-1:14.228: interrupt endpoints not found [ 2482.590188][ T29] hub 3-1:0.89: bad descriptor, ignoring hub [ 2482.613244][ T29] hub 3-1:0.89: probe with driver hub failed with error -5 [ 2482.642983][ T29] option 3-1:0.89: GSM modem (1-port) converter detected [ 2482.697924][ T29] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 2482.857850][T21912] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2482.886891][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2482.908660][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2483.027733][T21912] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2483.050828][T21912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2483.072815][T21912] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2483.094197][T21912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2483.142964][T21912] usb 6-1: config 0 descriptor?? [ 2483.369433][T21912] Bluetooth: Can't get state to change to load ram patch err [ 2483.391792][T21912] Bluetooth: Loading patch file failed [ 2483.410380][T21912] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 2483.441065][T21912] usb 6-1: USB disconnect, device number 71 [ 2484.103111][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10100'. [ 2484.273848][ T9583] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10101'. [ 2484.525885][ T9594] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10105'. [ 2484.542051][T21912] usb 2-1: USB disconnect, device number 109 [ 2484.874768][ T9604] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10106'. [ 2485.124722][T21921] usb 3-1: USB disconnect, device number 55 [ 2485.199429][T21921] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 2485.229574][T21921] option 3-1:0.89: device disconnected [ 2485.319885][ T9615] FAULT_INJECTION: forcing a failure. [ 2485.319885][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 2485.341031][ T9615] CPU: 1 UID: 0 PID: 9615 Comm: syz.4.10111 Tainted: G L syzkaller #0 PREEMPT(full) [ 2485.341064][ T9615] Tainted: [L]=SOFTLOCKUP [ 2485.341068][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2485.341076][ T9615] Call Trace: [ 2485.341081][ T9615] [ 2485.341087][ T9615] dump_stack_lvl+0xe8/0x150 [ 2485.341110][ T9615] should_fail_ex+0x40c/0x560 [ 2485.341126][ T9615] should_failslab+0xa8/0x100 [ 2485.341143][ T9615] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 2485.341157][ T9615] ? local_lock_release+0x9c/0x160 [ 2485.341175][ T9615] ? __alloc_skb+0x1d7/0x7a0 [ 2485.341185][ T9615] ? __alloc_skb+0x1d7/0x7a0 [ 2485.341198][ T9615] __alloc_skb+0x1d7/0x7a0 [ 2485.341211][ T9615] netlink_sendmsg+0x5d4/0xb40 [ 2485.341230][ T9615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2485.341245][ T9615] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2485.341259][ T9615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2485.341272][ T9615] sock_sendmsg_nosec+0x13a/0x180 [ 2485.341288][ T9615] ____sys_sendmsg+0x54e/0x850 [ 2485.341304][ T9615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2485.341321][ T9615] ? import_iovec+0x73/0xa0 [ 2485.341338][ T9615] ___sys_sendmsg+0x2a5/0x360 [ 2485.341350][ T9615] ? __lock_acquire+0x683/0x2cf0 [ 2485.341367][ T9615] ? __pfx____sys_sendmsg+0x10/0x10 [ 2485.341382][ T9615] ? kstrtouint+0x6e/0xe0 [ 2485.341408][ T9615] ? __fget_files+0x2a/0x420 [ 2485.341423][ T9615] ? __fget_files+0x3a2/0x420 [ 2485.341441][ T9615] __sys_sendmmsg+0x273/0x4d0 [ 2485.341460][ T9615] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2485.341478][ T9615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2485.341505][ T9615] ? ksys_write+0x242/0x270 [ 2485.341523][ T9615] ? __pfx_ksys_write+0x10/0x10 [ 2485.341542][ T9615] __x64_sys_sendmmsg+0xa0/0xc0 [ 2485.341555][ T9615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2485.341566][ T9615] do_syscall_64+0x174/0x580 [ 2485.341586][ T9615] ? trace_irq_disable+0x3b/0x140 [ 2485.341600][ T9615] ? clear_bhb_loop+0x70/0xc0 [ 2485.341614][ T9615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2485.341626][ T9615] RIP: 0033:0x7f023a19e0d9 [ 2485.341639][ T9615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2485.341649][ T9615] RSP: 002b:00007f023b085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2485.341663][ T9615] RAX: ffffffffffffffda RBX: 00007f023a425fa0 RCX: 00007f023a19e0d9 [ 2485.341672][ T9615] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 2485.341680][ T9615] RBP: 00007f023b085090 R08: 0000000000000000 R09: 0000000000000000 [ 2485.341687][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2485.341694][ T9615] R13: 00007f023a426038 R14: 00007f023a425fa0 R15: 00007f023a54fa48 [ 2485.341712][ T9615] [ 2486.107557][ T9628] netlink: 116 bytes leftover after parsing attributes in process `syz.5.10114'. [ 2486.503612][ T9630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2486.539535][T21904] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2486.653665][ T9640] FAULT_INJECTION: forcing a failure. [ 2486.653665][ T9640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2486.667606][ T9640] CPU: 1 UID: 0 PID: 9640 Comm: syz.2.10120 Tainted: G L syzkaller #0 PREEMPT(full) [ 2486.667628][ T9640] Tainted: [L]=SOFTLOCKUP [ 2486.667633][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2486.667640][ T9640] Call Trace: [ 2486.667645][ T9640] [ 2486.667650][ T9640] dump_stack_lvl+0xe8/0x150 [ 2486.667672][ T9640] should_fail_ex+0x40c/0x560 [ 2486.667689][ T9640] _copy_to_user+0x31/0xb0 [ 2486.667706][ T9640] simple_read_from_buffer+0xe1/0x170 [ 2486.667724][ T9640] proc_fail_nth_read+0x1bb/0x230 [ 2486.667741][ T9640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2486.667766][ T9640] ? rw_verify_area+0x24a/0x4c0 [ 2486.667794][ T9640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2486.667811][ T9640] vfs_read+0x213/0xa80 [ 2486.667830][ T9640] ? __pfx___mutex_lock+0x10/0x10 [ 2486.667846][ T9640] ? __pfx_vfs_read+0x10/0x10 [ 2486.667862][ T9640] ? __fget_files+0x2a/0x420 [ 2486.667879][ T9640] ? __fget_files+0x3a2/0x420 [ 2486.667892][ T9640] ? __fget_files+0x2a/0x420 [ 2486.667910][ T9640] ksys_read+0x150/0x270 [ 2486.667927][ T9640] ? __pfx_ksys_read+0x10/0x10 [ 2486.667947][ T9640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2486.667960][ T9640] do_syscall_64+0x174/0x580 [ 2486.667974][ T9640] ? trace_irq_disable+0x3b/0x140 [ 2486.667988][ T9640] ? clear_bhb_loop+0x70/0xc0 [ 2486.668002][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2486.668020][ T9640] RIP: 0033:0x7fbc45b5e90e [ 2486.668033][ T9640] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2486.668043][ T9640] RSP: 002b:00007fbc46aa4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2486.668058][ T9640] RAX: ffffffffffffffda RBX: 00007fbc46aa56c0 RCX: 00007fbc45b5e90e [ 2486.668066][ T9640] RDX: 000000000000000f RSI: 00007fbc46aa50a0 RDI: 0000000000000003 [ 2486.668074][ T9640] RBP: 00007fbc46aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 2486.668081][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2486.668088][ T9640] R13: 00007fbc45e26038 R14: 00007fbc45e25fa0 R15: 00007fbc45f4fa48 [ 2486.668105][ T9640] [ 2486.727121][T21904] usb 2-1: Using ep0 maxpacket: 32 [ 2486.863665][ T29] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2486.875660][T21904] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2486.913105][T21904] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2486.926338][T21904] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 2486.938138][T21904] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 2486.949313][T21904] usb 2-1: config 14 has no interface number 0 [ 2486.956865][T21904] usb 2-1: config 14 has no interface number 1 [ 2487.013510][T21904] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2487.038691][T21904] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 2487.070911][T21904] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2487.082476][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 2487.082919][T21904] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2487.118652][ T29] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 2487.156336][ T29] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2487.175333][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2487.193304][T21904] usb 2-1: config 14 interface 57 has no altsetting 0 [ 2487.209600][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2487.223692][T21904] usb 2-1: config 14 interface 228 has no altsetting 0 [ 2487.246333][T21904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2487.256853][T21904] usb 2-1: Product: syz [ 2487.272396][T21904] usb 2-1: Manufacturer: syz [ 2487.278422][ T29] usb 4-1: config 0 descriptor?? [ 2487.281116][T21904] usb 2-1: SerialNumber: syz [ 2487.703325][ T29] hid_parser_main: 7 callbacks suppressed [ 2487.703347][ T29] corsair-psu 0003:1B1C:1C09.0062: unknown main item tag 0x0 [ 2487.727900][ T29] corsair-psu 0003:1B1C:1C09.0062: unknown main item tag 0x0 [ 2487.738331][T21904] legousbtower 2-1:14.57: interrupt endpoints not found [ 2487.770932][ T29] corsair-psu 0003:1B1C:1C09.0062: unknown main item tag 0x0 [ 2487.797906][ T29] corsair-psu 0003:1B1C:1C09.0062: unknown main item tag 0x0 [ 2487.821431][ T29] corsair-psu 0003:1B1C:1C09.0062: unknown main item tag 0x0 [ 2487.849438][ T29] corsair-psu 0003:1B1C:1C09.0062: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 2487.939803][T21904] legousbtower 2-1:14.228: interrupt endpoints not found [ 2488.277819][ T29] corsair-psu 0003:1B1C:1C09.0062: unable to initialize device (-110) [ 2488.304351][ T29] corsair-psu 0003:1B1C:1C09.0062: probe with driver corsair-psu failed with error -110 [ 2489.166837][ T29] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2489.337533][ T29] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 2489.378274][ T29] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 2489.419831][ T29] usb 3-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 2489.454494][ T29] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 97, changing to 7 [ 2489.495153][ T29] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 25466, setting to 1024 [ 2489.533391][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2489.548852][ T29] usb 3-1: Product: syz [ 2489.554509][ T29] usb 3-1: Manufacturer: syz [ 2489.567887][ T29] usb 3-1: SerialNumber: syz [ 2489.581924][ T29] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2489.731095][T14397] usb 4-1: USB disconnect, device number 46 [ 2489.781233][ T29] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 2489.940623][T21904] usb 2-1: USB disconnect, device number 110 [ 2489.948353][ T29] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2490.014262][ T29] usb 3-1: USB disconnect, device number 56 [ 2490.051144][ T3761] udevd[3761]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2490.256912][T14397] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2490.270974][ T9670] IPv6: Can't replace route, no match found [ 2490.339530][T21904] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2490.427388][T14397] usb 4-1: Using ep0 maxpacket: 16 [ 2490.436433][T14397] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 2490.447889][T14397] usb 4-1: config 4 has an invalid interface number: 9 but max is 0 [ 2490.456183][T14397] usb 4-1: config 4 has no interface number 0 [ 2490.462408][T14397] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2490.472360][T14397] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 2490.483018][T14397] usb 4-1: config 4 interface 9 has no altsetting 0 [ 2490.492378][T14397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2490.500873][T14397] usb 4-1: Product: syz [ 2490.506892][T14397] usb 4-1: Manufacturer: syz [ 2490.512218][T21904] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2490.517105][ T29] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2490.526029][T14397] usb 4-1: SerialNumber: syz [ 2490.550101][T21904] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2490.561882][ T9664] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2490.574987][T21904] usb 2-1: config 0 has no interface number 0 [ 2490.584602][ T9664] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2490.591947][T21904] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2490.611036][T21904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2490.625225][T14397] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2490.636056][T21904] usb 2-1: Product: syz [ 2490.642267][T21904] usb 2-1: Manufacturer: syz [ 2490.654933][T21904] usb 2-1: SerialNumber: syz [ 2490.677722][T21904] usb 2-1: config 0 descriptor?? [ 2490.697590][ T29] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2490.711412][T21904] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 2490.720643][ T29] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 2490.735805][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2490.754275][ T29] usb 5-1: config 0 has no interface number 0 [ 2490.762043][ T29] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2490.773717][ T29] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2490.784124][ T29] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2490.808593][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2490.820535][ T29] usb 5-1: Product: syz [ 2490.825104][ T29] usb 5-1: Manufacturer: syz [ 2490.830161][ T29] usb 5-1: SerialNumber: syz [ 2490.864277][ T29] usb 5-1: config 0 descriptor?? [ 2491.021358][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 2491.483218][ T29] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.117/input/input187 [ 2491.712919][ T29] usb 5-1: USB disconnect, device number 75 [ 2491.727874][ T9480] usb 4-1: Failed to submit usb control message: -110 [ 2491.776040][ T9480] usb 4-1: unable to send the bmi data to the device: -110 [ 2491.800917][ T9480] usb 4-1: unable to get target info from device [ 2491.841209][ T9480] usb 4-1: could not get target info (-110) [ 2491.860248][ T9480] usb 4-1: could not probe fw (-110) [ 2492.037764][T21904] usb 2-1: USB disconnect, device number 111 [ 2492.114096][T21904] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 2492.907982][ T29] usb 4-1: USB disconnect, device number 47 [ 2493.656824][T21904] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2493.816783][T21904] usb 4-1: Using ep0 maxpacket: 32 [ 2493.829263][T21904] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2493.859175][T21904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2493.886078][T21904] usb 4-1: config 0 descriptor?? [ 2493.911210][T21904] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2495.331379][T21904] gspca_sunplus: reg_w_riv err -71 [ 2495.350355][T21904] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 2495.401289][T21904] usb 4-1: USB disconnect, device number 48 [ 2496.060743][ T4182] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 2496.093903][ T9747] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 2496.153062][ T9752] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2496.220210][ T9752] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2496.615130][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10151'. [ 2497.072189][ T9770] x_tables: duplicate entry at hook 3 [ 2497.141071][ T30] kauditd_printk_skb: 351 callbacks suppressed [ 2497.141092][ T30] audit: type=1326 audit(1786268243.195:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9775 comm="syz.3.10157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e73d9e0d9 code=0x0 [ 2497.208598][ T30] audit: type=1326 audit(1786268243.235:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9775 comm="syz.3.10157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e73d9e0d9 code=0x0 [ 2497.469832][ T9786] netlink: 'syz.1.10159': attribute type 1 has an invalid length. [ 2497.583948][ T9788] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10159'. [ 2497.740939][ T9786] macvlan2: entered promiscuous mode [ 2497.756765][ T9786] macvlan2: entered allmulticast mode [ 2497.767654][ T9786] bond1: entered promiscuous mode [ 2497.787688][ T9786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2497.822804][ T9786] bond1: left promiscuous mode [ 2498.118732][T21904] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2498.239489][ T4182] Bluetooth: hci1: SCO packet too small [ 2498.327264][T21904] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 2498.362424][T21904] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2498.383298][T21904] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2498.413089][T21904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2498.425609][T21904] usb 6-1: Product: syz [ 2498.431502][T21904] usb 6-1: Manufacturer: syz [ 2498.436407][T21904] usb 6-1: SerialNumber: syz [ 2498.487167][ T29] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 2498.646776][T21921] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2498.660828][ T29] usb 3-1: not running at top speed; connect to a high speed hub [ 2498.676204][ T29] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 2498.727825][ T29] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2498.738698][ T29] usb 3-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 2498.778966][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.810721][ T29] gspca_main: spca501-2.14.0 probing 0000:0000 [ 2498.829433][T21921] usb 2-1: Using ep0 maxpacket: 8 [ 2498.840235][T21921] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 2498.863489][T21921] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 2498.878090][T21921] usb 2-1: config 8 has no interface number 0 [ 2498.894567][T21921] usb 2-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 2498.929532][T21921] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2498.965044][T21921] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2498.990970][T21921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2499.008759][T21921] usb 2-1: Product: syz [ 2499.014722][T21921] usb 2-1: Manufacturer: syz [ 2499.019843][T21921] usb 2-1: SerialNumber: syz [ 2499.021376][ T29] gspca_spca501: reg write: error -71 [ 2499.057491][ T29] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 2499.088612][ T29] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 2499.111201][ T29] uvcvideo 3-1:1.0: Found UVC 1.00 device (0000:0000) [ 2499.132918][ T29] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 2499.155084][ T29] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 2499.169373][ T29] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 2499.210636][ T29] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 2499.238767][ T29] usb 3-1: USB disconnect, device number 57 [ 2499.398447][T21921] vmk80xx 2-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 2499.433959][T21921] vmk80xx 2-1:8.188: probe with driver vmk80xx failed with error -22 [ 2499.480582][T21921] usb 2-1: USB disconnect, device number 112 [ 2499.926795][T21904] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2500.032716][ T9819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10170'. [ 2500.057880][ T9819] FAULT_INJECTION: forcing a failure. [ 2500.057880][ T9819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2500.084788][ T9819] CPU: 0 UID: 0 PID: 9819 Comm: syz.1.10170 Tainted: G L syzkaller #0 PREEMPT(full) [ 2500.084810][ T9819] Tainted: [L]=SOFTLOCKUP [ 2500.084815][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2500.084822][ T9819] Call Trace: [ 2500.084828][ T9819] [ 2500.084834][ T9819] dump_stack_lvl+0xe8/0x150 [ 2500.084862][ T9819] should_fail_ex+0x40c/0x560 [ 2500.084879][ T9819] _copy_from_user+0x2d/0xb0 [ 2500.084896][ T9819] kstrtouint_from_user+0xd6/0x180 [ 2500.084911][ T9819] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2500.084934][ T9819] proc_fail_nth_write+0x8e/0x210 [ 2500.084950][ T9819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2500.084970][ T9819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2500.084985][ T9819] vfs_write+0x296/0xba0 [ 2500.085006][ T9819] ? __pfx_vfs_write+0x10/0x10 [ 2500.085023][ T9819] ? __fget_files+0x2a/0x420 [ 2500.085043][ T9819] ? __fget_files+0x3a2/0x420 [ 2500.085056][ T9819] ? __fget_files+0x2a/0x420 [ 2500.085075][ T9819] ksys_write+0x150/0x270 [ 2500.085093][ T9819] ? __pfx_ksys_write+0x10/0x10 [ 2500.085114][ T9819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2500.085127][ T9819] do_syscall_64+0x174/0x580 [ 2500.085142][ T9819] ? trace_irq_disable+0x3b/0x140 [ 2500.085157][ T9819] ? clear_bhb_loop+0x70/0xc0 [ 2500.085170][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2500.085181][ T9819] RIP: 0033:0x7f436cb5e90e [ 2500.085194][ T9819] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2500.085204][ T9819] RSP: 002b:00007f436da79fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2500.085218][ T9819] RAX: ffffffffffffffda RBX: 00007f436da7a6c0 RCX: 00007f436cb5e90e [ 2500.085226][ T9819] RDX: 0000000000000001 RSI: 00007f436da7a0a0 RDI: 0000000000000004 [ 2500.085234][ T9819] RBP: 00007f436da7a090 R08: 0000000000000000 R09: 0000000000000000 [ 2500.085241][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2500.085248][ T9819] R13: 00007f436ce26038 R14: 00007f436ce25fa0 R15: 00007f436cf4fa48 [ 2500.085266][ T9819] [ 2500.322279][ T29] usb 6-1: USB disconnect, device number 72 [ 2500.360157][T21904] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2500.371207][T21904] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2500.381751][T21904] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2500.391697][T21904] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2500.401704][T21904] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 2500.416086][T21904] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2500.429222][T21904] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2500.445173][T21904] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2500.455305][T21904] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 2500.471328][T21904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2500.479773][T21904] usb 3-1: Product: syz [ 2500.483967][T21904] usb 3-1: Manufacturer: syz [ 2500.488914][T21904] usb 3-1: SerialNumber: syz [ 2500.502492][T21904] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 2500.520694][T21904] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2500.533112][T21904] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2500.598767][ T9824] netlink: 'syz.1.10172': attribute type 8 has an invalid length. [ 2500.674405][ T9826] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2500.698344][ T9828] x_tables: duplicate underflow at hook 1 [ 2500.750644][ T9832] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10174'. [ 2500.754622][T21904] usb 3-1: USB disconnect, device number 58 [ 2500.793531][T21904] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2500.843343][T21904] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2500.882525][T21904] ti_usb_3410_5052 3-1:2.0: device disconnected [ 2501.376902][T28768] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2501.459280][ T29] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2501.547660][T28768] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2501.560425][T28768] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2501.576110][T28768] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2501.588521][T28768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2501.614798][ T9841] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2501.622166][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 2501.628181][ T29] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2501.646209][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2501.658493][T28768] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2501.668851][ T29] usb 5-1: config 0 has no interface number 0 [ 2501.680414][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2501.691664][ T29] usb 5-1: Product: syz [ 2501.701951][ T29] usb 5-1: Manufacturer: syz [ 2501.731555][ T29] usb 5-1: SerialNumber: syz [ 2501.764552][ T29] usb 5-1: config 0 descriptor?? [ 2501.790044][ T29] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2501.890832][ T9841] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 2501.913843][T21921] usb 4-1: USB disconnect, device number 49 [ 2502.432973][ T9861] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2502.441890][T28768] IPVS: starting estimator thread 0... [ 2502.549203][ T9862] IPVS: using max 30 ests per chain, 72000 per kthread [ 2502.596543][ T29] gspca_spca1528: reg_w err -71 [ 2502.627161][ T29] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 2502.643186][ T29] usb 5-1: USB disconnect, device number 76 [ 2503.516822][T21911] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2503.576913][T21921] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2503.666845][T21911] usb 5-1: Using ep0 maxpacket: 16 [ 2503.673924][T21911] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 2503.696223][T21911] usb 5-1: config 0 has no interfaces? [ 2503.716345][T21911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2503.735087][T21911] usb 5-1: Product: syz [ 2503.745263][T21911] usb 5-1: Manufacturer: syz [ 2503.755412][T21911] usb 5-1: SerialNumber: syz [ 2503.759167][T21921] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 2503.792580][T21911] usb 5-1: config 0 descriptor?? [ 2503.811900][T21921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2503.840622][T21921] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2503.883312][T21921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2503.891953][T21921] usb 6-1: Product: syz [ 2503.897009][T21921] usb 6-1: Manufacturer: syz [ 2503.901759][T21921] usb 6-1: SerialNumber: syz [ 2504.018545][ T9875] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10190'. [ 2504.049497][ T9875] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10190'. [ 2504.080541][T21904] usb 5-1: USB disconnect, device number 77 [ 2504.236796][T21921] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 2504.401437][T21921] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2504.436503][T21921] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2504.474391][T21921] usb 3-1: config 0 has no interface number 0 [ 2504.501361][T21921] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x57, changing to 0x7 [ 2504.551033][T21921] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 2504.595413][T21921] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2504.651175][T21921] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2504.681643][T21921] usb 3-1: Product: syz [ 2504.731465][T21921] usb 3-1: SerialNumber: syz [ 2504.805713][T21921] usb 3-1: config 0 descriptor?? [ 2504.863545][T21921] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 2505.507788][T21904] usb 6-1: USB disconnect, device number 73 [ 2505.645919][ T9911] syzkaller0: entered promiscuous mode [ 2505.661467][ T9911] syzkaller0: entered allmulticast mode [ 2505.857662][ T9918] IPv6: Can't replace route, no match found [ 2506.126981][T21911] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2506.317869][T21911] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2506.351810][T21911] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 2506.379220][T21911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2506.392821][T21911] usb 4-1: config 0 has no interface number 0 [ 2506.399607][T21911] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2506.413401][T21911] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2506.424071][T21911] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2506.490794][T21911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.521913][T21911] usb 4-1: Product: syz [ 2506.530590][T21911] usb 4-1: Manufacturer: syz [ 2506.540195][T21911] usb 4-1: SerialNumber: syz [ 2506.585023][T21911] usb 4-1: config 0 descriptor?? [ 2506.946787][ T29] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2507.117176][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 2507.134471][ T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2507.148704][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2507.159585][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2507.172756][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2507.225516][T21911] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.117/input/input188 [ 2507.237798][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.260648][ T29] usb 6-1: Product: syz [ 2507.276175][T21904] usb 3-1: USB disconnect, device number 59 [ 2507.318937][ T29] usb 6-1: Manufacturer: syz [ 2507.410519][ T29] usb 6-1: SerialNumber: syz [ 2507.443364][ T4182] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 2507.452684][ T29] usb 6-1: config 0 descriptor?? [ 2507.598219][ T29] mcba_usb 6-1:0.0: Can't find endpoints [ 2507.798253][T21904] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2508.001992][T21904] usb 3-1: Using ep0 maxpacket: 32 [ 2508.013854][T21904] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2508.030357][T21904] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2508.066494][T21904] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2508.083611][T21904] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2508.122233][T21904] usb 3-1: Product: syz [ 2508.128265][T21904] usb 3-1: Manufacturer: syz [ 2508.143672][T21904] hub 3-1:4.0: USB hub found [ 2508.355081][T21904] hub 3-1:4.0: 2 ports detected [ 2508.911140][T21904] hub 3-1:4.0: set hub depth failed [ 2508.958406][T21904] usb 3-1: USB disconnect, device number 60 [ 2509.490395][T21904] usb 6-1: USB disconnect, device number 74 [ 2509.936348][T21904] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2510.134187][T21904] usb 6-1: Using ep0 maxpacket: 16 [ 2510.141345][T21904] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 2510.181381][T21904] usb 6-1: config 0 has no interfaces? [ 2510.253828][T21904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2510.262210][T21904] usb 6-1: Product: syz [ 2510.288829][T21904] usb 6-1: Manufacturer: syz [ 2510.293638][T21904] usb 6-1: SerialNumber: syz [ 2510.323678][T21904] usb 6-1: config 0 descriptor?? [ 2510.562862][ T9931] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10205'. [ 2510.573267][ T9931] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10205'. [ 2510.585908][ T29] usb 6-1: USB disconnect, device number 75 [ 2511.433507][ T29] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2511.617081][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 2511.623405][ T29] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2511.634783][ T29] usb 6-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config [ 2511.645852][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 111, using maximum allowed: 30 [ 2511.657025][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 2511.670350][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2511.685404][ T29] usb 6-1: config 0 descriptor?? [ 2511.914302][ T9940] netlink: 'syz.5.10207': attribute type 10 has an invalid length. [ 2511.922519][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10207'. [ 2514.264100][ T187] usb 4-1: USB disconnect, device number 50 [ 2514.386909][ T9940] batadv0: entered promiscuous mode [ 2514.400387][ T9940] batadv0: entered allmulticast mode [ 2514.421364][ T9940] bridge0: port 3(batadv0) entered blocking state [ 2514.430557][ T9940] bridge0: port 3(batadv0) entered disabled state [ 2514.473500][ T9940] bridge0: port 3(batadv0) entered blocking state [ 2514.480188][ T9940] bridge0: port 3(batadv0) entered forwarding state [ 2514.615344][ T9946] fuse: Bad value for 'fd' [ 2514.622207][ T29] usb 6-1: string descriptor 0 read error: -71 [ 2514.647650][ T29] usb 6-1: USB disconnect, device number 76 [ 2514.748198][ T9485] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2514.757628][ T9485] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2514.772743][ T187] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2514.847068][T21911] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2514.920425][ T187] usb 4-1: device descriptor read/64, error -71 [ 2515.057135][T21921] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2515.060566][T21911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2515.079069][T21911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2515.093975][T21911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2515.104872][T21911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2515.118410][T21911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2515.138029][T21911] usb 5-1: config 0 descriptor?? [ 2515.208743][ T187] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2515.236788][T21921] usb 2-1: Using ep0 maxpacket: 8 [ 2515.242871][T21921] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2515.262268][T21921] usb 2-1: config index 0 descriptor too short (expected 260, got 27) [ 2515.276527][T21921] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2515.310402][T21921] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 2515.328956][T21921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2515.357877][ T187] usb 4-1: device descriptor read/64, error -71 [ 2515.502624][ T187] usb usb4-port1: attempt power cycle [ 2515.815100][ T9947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2515.848781][ T187] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2515.880026][ T187] usb 4-1: device descriptor read/8, error -71 [ 2516.136888][ T187] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2516.178453][ T187] usb 4-1: device descriptor read/8, error -71 [ 2516.299025][ T187] usb usb4-port1: unable to enumerate USB device [ 2516.543581][T21911] usbhid 5-1:0.0: can't add hid device: -71 [ 2516.572723][T21911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2516.627116][T21911] usb 5-1: USB disconnect, device number 78 [ 2516.758893][ T9964] 8021q: VLANs not supported on vcan0 [ 2517.157121][ T30] audit: type=1326 audit(1786268263.215:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.2.10216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc45b9e0d9 code=0x0 [ 2517.295870][T21921] usb 2-1: string descriptor 0 read error: -71 [ 2517.307365][T21921] usb 2-1: USB disconnect, device number 113 [ 2517.336869][ T187] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2517.485545][ T9976] syzkaller0: entered promiscuous mode [ 2517.491426][ T9976] syzkaller0: entered allmulticast mode [ 2517.517932][ T187] usb 6-1: Using ep0 maxpacket: 16 [ 2517.525083][ T187] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 2517.537133][ T187] usb 6-1: config 0 has no interfaces? [ 2517.546429][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2517.555365][ T187] usb 6-1: Product: syz [ 2517.560029][ T187] usb 6-1: Manufacturer: syz [ 2517.564817][ T187] usb 6-1: SerialNumber: syz [ 2517.574754][ T187] usb 6-1: config 0 descriptor?? [ 2517.608105][T21912] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2517.788846][ T9969] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10217'. [ 2517.806695][ T9969] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10217'. [ 2517.819546][ T187] usb 6-1: USB disconnect, device number 77 [ 2517.835172][T21912] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 2517.880803][T21912] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2517.891387][T21912] usb 5-1: config 2 has no interfaces? [ 2517.901468][T21912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2517.911757][T21912] usb 5-1: Product: syz [ 2517.919987][T21912] usb 5-1: Manufacturer: syz [ 2517.946061][T21912] usb 5-1: SerialNumber: syz [ 2518.218414][T21912] usb 5-1: USB disconnect, device number 79 [ 2518.477570][ T187] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2518.752147][ T187] usb 2-1: Using ep0 maxpacket: 8 [ 2518.777973][T14397] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2518.797848][ T187] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 2518.798894][T21911] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2518.848124][ T187] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 2518.856599][ T187] usb 2-1: config 8 has no interface number 0 [ 2518.864465][ T187] usb 2-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 2518.895629][ T187] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2518.915562][ T187] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2518.929957][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2518.938703][ T187] usb 2-1: Product: syz [ 2518.948435][ T187] usb 2-1: Manufacturer: syz [ 2518.958394][ T187] usb 2-1: SerialNumber: syz [ 2518.979354][ T9989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2519.025613][T14397] usb 3-1: Using ep0 maxpacket: 8 [ 2519.035468][T14397] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 2519.049178][T21911] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2519.056581][ T9990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10225'. [ 2519.060017][T21911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2519.072469][T14397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2519.079912][T21911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2519.095450][T14397] usb 3-1: Product: syz [ 2519.104757][T14397] usb 3-1: Manufacturer: syz [ 2519.125847][T21911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2519.143319][T14397] usb 3-1: SerialNumber: syz [ 2519.152875][T21911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.183334][T21911] usb 6-1: config 0 descriptor?? [ 2519.203786][ T187] vmk80xx 2-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 2519.240156][ T187] vmk80xx 2-1:8.188: probe with driver vmk80xx failed with error -22 [ 2519.312225][ T187] usb 2-1: USB disconnect, device number 114 [ 2519.612642][T14397] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 2519.626124][T14397] mxuport 3-1:254.0: probe with driver mxuport failed with error -5 [ 2519.678695][T14397] usb 3-1: USB disconnect, device number 61 [ 2519.831454][T21911] usbhid 6-1:0.0: can't add hid device: -71 [ 2519.848593][T21911] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2519.883286][T21911] usb 6-1: USB disconnect, device number 78 [ 2520.296343][T21912] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2520.459288][T21912] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2520.469277][T21912] usb 2-1: New USB device found, idVendor=1de1, idProduct=f105, bcdDevice=bf.64 [ 2520.485067][T21912] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 2520.494013][T21912] usb 2-1: config 0 has no interface number 0 [ 2520.500924][T21912] usb 2-1: config 0 interface 196 has no altsetting 0 [ 2520.611215][T21912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2520.630349][T21912] usb 2-1: config 0 descriptor?? [ 2521.240819][T21912] uvcvideo 2-1:0.196: Found UVC 0.00 device (1de1:f105) [ 2521.250924][T21912] uvcvideo 2-1:0.196: No valid video chain found. [ 2521.288917][T21912] usb 2-1: USB disconnect, device number 115 [ 2526.121799][ T9989] netlink: 'syz.4.10225': attribute type 3 has an invalid length. [ 2526.224051][ T30] audit: type=1400 audit(1786268272.275:3231): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26262F5083A0768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F6368616E676570726F66696C65203A2F2F26CCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=10020 comm="syz.4.10235" [ 2526.238665][T10021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10235'. [ 2526.427013][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10235'. [ 2526.627233][T14397] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2526.635391][T21904] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2526.786875][T14397] usb 3-1: Using ep0 maxpacket: 8 [ 2526.792868][T21904] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2526.802606][T14397] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 2526.813698][T21904] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 28265, setting to 1024 [ 2526.828072][T14397] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 2526.837503][T21904] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2526.847635][T14397] usb 3-1: config 8 has no interface number 0 [ 2526.854183][T14397] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 2526.867355][T14397] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 80, changing to 10 [ 2526.880071][T21904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2526.890926][T21904] usb 2-1: Product: syz [ 2526.895249][T21904] usb 2-1: Manufacturer: syz [ 2526.902044][T14397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2526.910471][T14397] usb 3-1: Product: syz [ 2526.915661][T14397] usb 3-1: Manufacturer: syz [ 2526.922964][T10024] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2526.926587][T14397] usb 3-1: SerialNumber: syz [ 2526.945892][T21904] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input189 [ 2527.206484][T14397] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 2527.240592][T21904] usb 2-1: USB disconnect, device number 116 [ 2527.268340][T14397] usb 3-1: USB disconnect, device number 62 [ 2527.576895][ T29] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2527.736849][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 2527.751512][ T29] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 2527.768523][ T29] usb 6-1: config 0 has no interfaces? [ 2527.782441][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2527.796210][ T29] usb 6-1: Product: syz [ 2527.809112][ T29] usb 6-1: Manufacturer: syz [ 2527.820491][ T29] usb 6-1: SerialNumber: syz [ 2527.842095][ T29] usb 6-1: config 0 descriptor?? [ 2527.987990][T14397] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2528.074201][T10044] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10240'. [ 2528.085725][T10044] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10240'. [ 2528.112312][ T29] usb 6-1: USB disconnect, device number 79 [ 2528.186863][T14397] usb 2-1: Using ep0 maxpacket: 8 [ 2528.196784][T14397] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2528.210689][T14397] usb 2-1: config index 0 descriptor too short (expected 260, got 27) [ 2528.219106][T14397] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2528.243130][T14397] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 2528.264506][T14397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.130361][T14397] usb 2-1: string descriptor 0 read error: -71 [ 2529.154426][T14397] usb 2-1: USB disconnect, device number 117 [ 2529.154801][T10065] syzkaller0: entered promiscuous mode [ 2529.176944][T10065] syzkaller0: entered allmulticast mode [ 2529.220339][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.230159][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.245809][T14179] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2529.419358][T14179] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2529.446690][T14179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.482483][T14179] usb 6-1: config 0 descriptor?? [ 2529.511474][T14179] cp210x 6-1:0.0: cp210x converter detected [ 2529.743195][T10064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2529.759046][T10064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2529.818831][T14179] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2529.830292][T14179] cp210x 6-1:0.0: querying part number failed [ 2529.868197][T14179] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2530.390193][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2530.442218][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2530.490440][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2530.510666][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2530.907715][ T187] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2531.078387][ T187] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2531.094251][ T187] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 28265, setting to 1024 [ 2531.108765][ T187] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2531.158688][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2531.168142][ T187] usb 4-1: Product: syz [ 2531.175432][ T187] usb 4-1: Manufacturer: syz [ 2531.232035][T10084] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 2531.237082][T14179] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2531.278856][ T187] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input190 [ 2531.436822][T14179] usb 3-1: Using ep0 maxpacket: 16 [ 2531.443411][T14179] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2531.459625][T14179] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2531.471963][T14179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2531.483392][T14179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2531.493205][T14179] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2531.506487][T14179] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2531.522224][T14179] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2531.530738][T14179] usb 3-1: Manufacturer: syz [ 2531.551894][T14179] usb 3-1: config 0 descriptor?? [ 2531.947865][T14179] rc_core: IR keymap rc-hauppauge not found [ 2531.960120][T14179] Registered IR keymap rc-empty [ 2531.969581][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2531.997117][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2532.035431][T14179] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2532.048151][T21904] usb 6-1: USB disconnect, device number 80 [ 2532.063897][T21904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2532.102837][T14179] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input191 [ 2532.115636][T21904] cp210x 6-1:0.0: device disconnected [ 2532.156140][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2532.189306][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2532.227689][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2532.269588][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2532.309422][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2532.375986][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2532.419997][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2532.448792][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2532.497435][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2532.527286][T14179] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2532.585022][T14179] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2532.603738][T14179] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2532.691274][T21904] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2532.934121][T21904] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2532.988752][T21904] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 28265, setting to 1024 [ 2533.000817][T21904] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2533.034719][T21904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2533.066821][T21904] usb 6-1: Product: syz [ 2533.071271][T21904] usb 6-1: Manufacturer: syz [ 2533.082769][T10095] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2533.110117][T21904] input: Samsung SUR40 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input192 [ 2534.321210][T21904] videodev: could not get a free minor [ 2534.326831][T21904] sur40 6-1:1.0: Unable to register video subdevice. [ 2534.333674][T21904] sur40 6-1:1.0: probe with driver sur40 failed with error -23 [ 2534.432946][ T4981] ================================================================== [ 2534.441114][ T4981] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 2534.448105][ T4981] Read of size 1 at addr ffff8880664f6c0a by task udevd/4981 [ 2534.455528][ T4981] [ 2534.457865][ T4981] CPU: 1 UID: 0 PID: 4981 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 2534.457885][ T4981] Tainted: [L]=SOFTLOCKUP [ 2534.457890][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2534.457897][ T4981] Call Trace: [ 2534.457908][ T4981] [ 2534.457917][ T4981] dump_stack_lvl+0xe8/0x150 [ 2534.457949][ T4981] print_address_description+0x55/0x1e0 [ 2534.457974][ T4981] ? string+0x216/0x2d0 [ 2534.457993][ T4981] print_report+0x58/0x70 [ 2534.458010][ T4981] kasan_report+0x117/0x150 [ 2534.458027][ T4981] ? string+0x216/0x2d0 [ 2534.458039][ T4981] string+0x216/0x2d0 [ 2534.458055][ T4981] vsnprintf+0x74a/0xef0 [ 2534.458077][ T4981] add_uevent_var+0x1ce/0x460 [ 2534.458107][ T4981] ? __pfx_add_uevent_var+0x10/0x10 [ 2534.458130][ T4981] input_dev_uevent+0x170/0x6e0 [ 2534.458258][ T4981] dev_uevent+0x537/0x870 [ 2534.458289][ T4981] ? __pfx_dev_uevent+0x10/0x10 [ 2534.458311][ T4981] ? __kmalloc_cache_noprof+0x32d/0x660 [ 2534.458333][ T4981] ? __kmalloc_cache_noprof+0x150/0x660 [ 2534.458348][ T4981] ? uevent_show+0x15c/0x310 [ 2534.458363][ T4981] uevent_show+0x1a0/0x310 [ 2534.458385][ T4981] dev_attr_show+0x58/0xc0 [ 2534.458406][ T4981] ? __pfx_dev_attr_show+0x10/0x10 [ 2534.458428][ T4981] sysfs_kf_seq_show+0x331/0x490 [ 2534.458463][ T4981] seq_read_iter+0x463/0xca0 [ 2534.458482][ T4981] vfs_read+0x595/0xa80 [ 2534.458500][ T4981] ? __pfx_vfs_read+0x10/0x10 [ 2534.458516][ T4981] ? do_sys_openat2+0x14e/0x200 [ 2534.458536][ T4981] ksys_read+0x150/0x270 [ 2534.458562][ T4981] ? __pfx_ksys_read+0x10/0x10 [ 2534.458589][ T4981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2534.458608][ T4981] do_syscall_64+0x174/0x580 [ 2534.458631][ T4981] ? clear_bhb_loop+0x70/0xc0 [ 2534.458644][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2534.458655][ T4981] RIP: 0033:0x7f197a8a7407 [ 2534.458668][ T4981] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2534.458678][ T4981] RSP: 002b:00007fff001d8ca0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 2534.458695][ T4981] RAX: ffffffffffffffda RBX: 00007f197afe4880 RCX: 00007f197a8a7407 [ 2534.458708][ T4981] RDX: 0000000000001000 RSI: 000055e8ceca6020 RDI: 000000000000000c [ 2534.458721][ T4981] RBP: 00007f197a9efff0 R08: 0000000000000000 R09: 0000000000000000 [ 2534.458733][ T4981] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 2534.458744][ T4981] R13: 00007f197a9efea0 R14: 0000000000000000 R15: 000055e8cec82280 [ 2534.458764][ T4981] [ 2534.458770][ T4981] [ 2534.710359][ T4981] Allocated by task 21904: [ 2534.714874][ T4981] kasan_save_track+0x3e/0x80 [ 2534.719576][ T4981] __kasan_kmalloc+0x93/0xb0 [ 2534.724241][ T4981] __kmalloc_cache_noprof+0x32d/0x660 [ 2534.729650][ T4981] sur40_probe+0x16d/0xfa0 [ 2534.734145][ T4981] usb_probe_interface+0x653/0xc60 [ 2534.739320][ T4981] really_probe+0x254/0xae0 [ 2534.743870][ T4981] __driver_probe_device+0x1e8/0x360 [ 2534.749155][ T4981] driver_probe_device+0x4f/0x240 [ 2534.754198][ T4981] __device_attach_driver+0x270/0x410 [ 2534.759609][ T4981] bus_for_each_drv+0x258/0x2f0 [ 2534.764485][ T4981] __device_attach+0x2c4/0x450 [ 2534.769365][ T4981] device_initial_probe+0xa1/0xd0 [ 2534.774409][ T4981] bus_probe_device+0x12a/0x220 [ 2534.779362][ T4981] device_add+0x7d7/0xb80 [ 2534.783712][ T4981] usb_set_configuration+0x1ad8/0x2180 [ 2534.789257][ T4981] usb_generic_driver_probe+0x8d/0x150 [ 2534.794832][ T4981] usb_probe_device+0x1c3/0x3b0 [ 2534.799702][ T4981] really_probe+0x254/0xae0 [ 2534.804242][ T4981] __driver_probe_device+0x1e8/0x360 [ 2534.809557][ T4981] driver_probe_device+0x4f/0x240 [ 2534.814596][ T4981] __device_attach_driver+0x270/0x410 [ 2534.819993][ T4981] bus_for_each_drv+0x258/0x2f0 [ 2534.824851][ T4981] __device_attach+0x2c4/0x450 [ 2534.829636][ T4981] device_initial_probe+0xa1/0xd0 [ 2534.834683][ T4981] bus_probe_device+0x12a/0x220 [ 2534.839557][ T4981] device_add+0x7d7/0xb80 [ 2534.843972][ T4981] usb_new_device+0x9aa/0x1690 [ 2534.848774][ T4981] hub_event+0x28e8/0x4d30 [ 2534.853235][ T4981] process_scheduled_works+0xa8e/0x14e0 [ 2534.858899][ T4981] worker_thread+0xa47/0xfb0 [ 2534.863498][ T4981] kthread+0x388/0x470 [ 2534.867576][ T4981] ret_from_fork+0x514/0xb70 [ 2534.872269][ T4981] ret_from_fork_asm+0x1a/0x30 [ 2534.877037][ T4981] [ 2534.879371][ T4981] Freed by task 21904: [ 2534.883443][ T4981] kasan_save_track+0x3e/0x80 [ 2534.888134][ T4981] kasan_save_free_info+0x40/0x50 [ 2534.893157][ T4981] __kasan_slab_free+0x5c/0x80 [ 2534.898915][ T4981] kfree+0x1c5/0x640 [ 2534.902857][ T4981] sur40_probe+0x918/0xfa0 [ 2534.907318][ T4981] usb_probe_interface+0x653/0xc60 [ 2534.912586][ T4981] really_probe+0x254/0xae0 [ 2534.917112][ T4981] __driver_probe_device+0x1e8/0x360 [ 2534.922416][ T4981] driver_probe_device+0x4f/0x240 [ 2534.927445][ T4981] __device_attach_driver+0x270/0x410 [ 2534.932909][ T4981] bus_for_each_drv+0x258/0x2f0 [ 2534.937760][ T4981] __device_attach+0x2c4/0x450 [ 2534.942647][ T4981] device_initial_probe+0xa1/0xd0 [ 2534.947697][ T4981] bus_probe_device+0x12a/0x220 [ 2534.952581][ T4981] device_add+0x7d7/0xb80 [ 2534.957057][ T4981] usb_set_configuration+0x1ad8/0x2180 [ 2534.963095][ T4981] usb_generic_driver_probe+0x8d/0x150 [ 2534.968703][ T4981] usb_probe_device+0x1c3/0x3b0 [ 2534.973610][ T4981] really_probe+0x254/0xae0 [ 2534.978137][ T4981] __driver_probe_device+0x1e8/0x360 [ 2534.983698][ T4981] driver_probe_device+0x4f/0x240 [ 2534.988748][ T4981] __device_attach_driver+0x270/0x410 [ 2534.994186][ T4981] bus_for_each_drv+0x258/0x2f0 [ 2534.999154][ T4981] __device_attach+0x2c4/0x450 [ 2535.003943][ T4981] device_initial_probe+0xa1/0xd0 [ 2535.008984][ T4981] bus_probe_device+0x12a/0x220 [ 2535.014103][ T4981] device_add+0x7d7/0xb80 [ 2535.018439][ T4981] usb_new_device+0x9aa/0x1690 [ 2535.023242][ T4981] hub_event+0x28e8/0x4d30 [ 2535.027679][ T4981] process_scheduled_works+0xa8e/0x14e0 [ 2535.033420][ T4981] worker_thread+0xa47/0xfb0 [ 2535.038125][ T4981] kthread+0x388/0x470 [ 2535.042307][ T4981] ret_from_fork+0x514/0xb70 [ 2535.046935][ T4981] ret_from_fork_asm+0x1a/0x30 [ 2535.051810][ T4981] [ 2535.054160][ T4981] The buggy address belongs to the object at ffff8880664f6000 [ 2535.054160][ T4981] which belongs to the cache kmalloc-4k of size 4096 [ 2535.068327][ T4981] The buggy address is located 3082 bytes inside of [ 2535.068327][ T4981] freed 4096-byte region [ffff8880664f6000, ffff8880664f7000) [ 2535.082494][ T4981] [ 2535.084830][ T4981] The buggy address belongs to the physical page: [ 2535.091344][ T4981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x664f0 [ 2535.100140][ T4981] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2535.108682][ T4981] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2535.116248][ T4981] page_type: f5(slab) [ 2535.120268][ T4981] raw: 00fff00000000040 ffff88801b005140 dead000000000100 dead000000000122 [ 2535.128863][ T4981] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 2535.137469][ T4981] head: 00fff00000000040 ffff88801b005140 dead000000000100 dead000000000122 [ 2535.146255][ T4981] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 2535.154945][ T4981] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2535.163732][ T4981] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2535.172412][ T4981] page dumped because: kasan: bad access detected [ 2535.178842][ T4981] page_owner tracks the page as allocated [ 2535.184676][ T4981] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5635, tgid 5635 (syz-executor), ts 234951566702, free_ts 234900276415 [ 2535.205539][ T4981] post_alloc_hook+0x1f9/0x250 [ 2535.210335][ T4981] get_page_from_freelist+0x21fa/0x2270 [ 2535.215921][ T4981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2535.221757][ T4981] allocate_slab+0x79/0x5e0 [ 2535.226281][ T4981] refill_objects+0x2d5/0x350 [ 2535.231136][ T4981] __pcs_replace_empty_main+0x2bf/0x6b0 [ 2535.236697][ T4981] __kmalloc_noprof+0x485/0x720 [ 2535.241566][ T4981] tomoyo_realpath_from_path+0xef/0x640 [ 2535.247153][ T4981] tomoyo_path_perm+0x283/0x560 [ 2535.252035][ T4981] security_inode_getattr+0x12b/0x310 [ 2535.257428][ T4981] vfs_getattr+0x23/0x70 [ 2535.261670][ T4981] vfs_statx_path+0x2b/0x230 [ 2535.266303][ T4981] vfs_statx+0x12e/0x200 [ 2535.270640][ T4981] vfs_fstatat+0x11b/0x170 [ 2535.275145][ T4981] __x64_sys_newfstatat+0x151/0x200 [ 2535.280531][ T4981] do_syscall_64+0x174/0x580 [ 2535.285157][ T4981] page last free pid 13 tgid 13 stack trace: [ 2535.291319][ T4981] __free_frozen_pages+0xc1e/0xd10 [ 2535.296721][ T4981] skb_release_data+0x8db/0xab0 [ 2535.301631][ T4981] __kfree_skb+0x5d/0x210 [ 2535.306078][ T4981] batadv_forw_packet_free+0x65/0x1f0 [ 2535.311571][ T4981] process_scheduled_works+0xa8e/0x14e0 [ 2535.317144][ T4981] worker_thread+0xa47/0xfb0 [ 2535.321847][ T4981] kthread+0x388/0x470 [ 2535.326017][ T4981] ret_from_fork+0x514/0xb70 [ 2535.330621][ T4981] ret_from_fork_asm+0x1a/0x30 [ 2535.335414][ T4981] [ 2535.337756][ T4981] Memory state around the buggy address: [ 2535.343400][ T4981] ffff8880664f6b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2535.351560][ T4981] ffff8880664f6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2535.359815][ T4981] >ffff8880664f6c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2535.368023][ T4981] ^ [ 2535.372372][ T4981] ffff8880664f6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2535.380440][ T4981] ffff8880664f6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2535.388522][ T4981] ================================================================== [ 2535.416367][ T4981] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2535.423736][ T4981] CPU: 1 UID: 0 PID: 4981 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 2535.434366][ T4981] Tainted: [L]=SOFTLOCKUP [ 2535.438725][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2535.448898][ T4981] Call Trace: [ 2535.452204][ T4981] [ 2535.455148][ T4981] vpanic+0x56c/0xa60 [ 2535.459159][ T4981] ? __pfx_vpanic+0x10/0x10 [ 2535.463683][ T4981] ? __pfx___schedule+0x10/0x10 [ 2535.468562][ T4981] panic+0xc5/0xd0 [ 2535.472293][ T4981] ? __pfx_panic+0x10/0x10 [ 2535.476715][ T4981] ? preempt_schedule_thunk+0x16/0x40 [ 2535.482099][ T4981] ? string+0x216/0x2d0 [ 2535.486265][ T4981] check_panic_on_warn+0x89/0xb0 [ 2535.491229][ T4981] ? string+0x216/0x2d0 [ 2535.495398][ T4981] end_report+0x73/0x170 [ 2535.499658][ T4981] ? string+0x216/0x2d0 [ 2535.503824][ T4981] kasan_report+0x128/0x150 [ 2535.508342][ T4981] ? string+0x216/0x2d0 [ 2535.512515][ T4981] string+0x216/0x2d0 [ 2535.516593][ T4981] vsnprintf+0x74a/0xef0 [ 2535.520860][ T4981] add_uevent_var+0x1ce/0x460 [ 2535.525543][ T4981] ? __pfx_add_uevent_var+0x10/0x10 [ 2535.530766][ T4981] input_dev_uevent+0x170/0x6e0 [ 2535.535714][ T4981] dev_uevent+0x537/0x870 [ 2535.540059][ T4981] ? __pfx_dev_uevent+0x10/0x10 [ 2535.545009][ T4981] ? __kmalloc_cache_noprof+0x32d/0x660 [ 2535.550582][ T4981] ? __kmalloc_cache_noprof+0x150/0x660 [ 2535.556131][ T4981] ? uevent_show+0x15c/0x310 [ 2535.560735][ T4981] uevent_show+0x1a0/0x310 [ 2535.565337][ T4981] dev_attr_show+0x58/0xc0 [ 2535.569843][ T4981] ? __pfx_dev_attr_show+0x10/0x10 [ 2535.574971][ T4981] sysfs_kf_seq_show+0x331/0x490 [ 2535.579917][ T4981] seq_read_iter+0x463/0xca0 [ 2535.584516][ T4981] vfs_read+0x595/0xa80 [ 2535.588682][ T4981] ? __pfx_vfs_read+0x10/0x10 [ 2535.593370][ T4981] ? do_sys_openat2+0x14e/0x200 [ 2535.598231][ T4981] ksys_read+0x150/0x270 [ 2535.602482][ T4981] ? __pfx_ksys_read+0x10/0x10 [ 2535.607267][ T4981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2535.613348][ T4981] do_syscall_64+0x174/0x580 [ 2535.618119][ T4981] ? clear_bhb_loop+0x70/0xc0 [ 2535.622890][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2535.628895][ T4981] RIP: 0033:0x7f197a8a7407 [ 2535.633315][ T4981] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2535.653030][ T4981] RSP: 002b:00007fff001d8ca0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 2535.661505][ T4981] RAX: ffffffffffffffda RBX: 00007f197afe4880 RCX: 00007f197a8a7407 [ 2535.669575][ T4981] RDX: 0000000000001000 RSI: 000055e8ceca6020 RDI: 000000000000000c [ 2535.677554][ T4981] RBP: 00007f197a9efff0 R08: 0000000000000000 R09: 0000000000000000 [ 2535.685533][ T4981] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 2535.693508][ T4981] R13: 00007f197a9efea0 R14: 0000000000000000 R15: 000055e8cec82280 [ 2535.701503][ T4981] [ 2535.704897][ T4981] Kernel Offset: disabled [ 2535.709229][ T4981] Rebooting in 86400 seconds..