last executing test programs: 7.355410376s ago: executing program 2 (id=28): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000340)=0x7ff, 0x4) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000380)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r1], 0x0) 6.686856916s ago: executing program 1 (id=34): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 5.55296808s ago: executing program 2 (id=36): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x7, 0x0, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0x9, "e7876714"}, @global=@item_012={0x2, 0x1, 0x0, "ed3f"}, @local=@item_4={0x3, 0x2, 0xe, "58a8d47e"}, @local=@item_012={0x2, 0x2, 0x2, "b089"}, @main=@item_4={0x3, 0x0, 0xb, "6edd69cb"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_012={0x2, 0x0, 0xb, "f76b"}]}}, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.777274131s ago: executing program 2 (id=44): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getrandom(&(0x7f00000000c0)=""/309, 0x135, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x25, 0x1, 0x0, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2"}) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) read$FUSE(r4, &(0x7f00000008c0)={0x2020}, 0x2020) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003d00090000000000f100000001080000040000000c000180080010800400f300080002008398531b48efc9241667b766cc", @ANYRES32, @ANYBLOB], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x21, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r10) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) 3.56199977s ago: executing program 1 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, &(0x7f0000000000)=0x20, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000001180)={&(0x7f0000000080)={0x50, 0x0, 0x9, {0x7, 0x2b, 0x1, 0x20001, 0x3, 0x7, 0xf, 0x6f72, 0x0, 0x0, 0x40, 0x1000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000740)={0x50, 0x0, r2, {0x7, 0x2b, 0x2000, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x78, 0x0, 0x3, {0x2, 0xcd, 0x0, {0x2, 0x0, 0x4, 0x1000, 0x5, 0x4, 0xf79c000, 0x2, 0x4000005, 0x8000, 0x538, 0x0, r3, 0x7, 0xefffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000001380)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xea68, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="4c2450c449", 0x5}], 0x1}}], 0x1, 0x24040880) sendto$inet6(r4, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000280)=ANY=[@ANYBLOB="cfff9c9e0c455e479d48ed7af033122e3677132c24a3a9343d60d833bbfffd3d037e508cdf58f483870b17acd4f8db1bb91abdf7b5484ee96737a26d083760b584e372183c995c0aa5562b5f521ae76f39007f4ecd356ff7340936404e5a5beb213f8fcce39aad410365d3257070297e94efcf747564", @ANYRESOCT=r0, @ANYRES32=r3, @ANYRESDEC=r4]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x2100088, &(0x7f0000000000)={[], [{@context={'context', 0x3d, 'unconfined_u'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) 3.484556337s ago: executing program 1 (id=46): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) (async) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x101, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f0000000140)={0x0, {0x6, 0xa}}) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f0000000140)={0x0, {0x6, 0xa}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) 3.21436646s ago: executing program 1 (id=49): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x42801, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6205010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000043}, 0x41090) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 3.08807675s ago: executing program 1 (id=50): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.886488731s ago: executing program 2 (id=51): ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000100)) syz_usb_connect(0x3, 0x7f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000044d6b2099042510f69c0000000109026d0001022440020904c20004a2f8ab000524060000052400f5ff0d240f01080000000700008036042402050524060000052400ec000d240301030000000600050081052401000309050904100000050f09058203ff03060c0309050a03300607"], 0x0) 1.591133633s ago: executing program 2 (id=54): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="faffffbf132eaeb3899666bd990156c5460004"], 0x0) r1 = socket(0x29, 0x5, 0x900) prctl$PR_GET_SECCOMP(0x15) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="202284000000842c99fb14393c1a8800a9bf7abf94503be9ba6990b0784d6baeb36c2cfcd256c67900af3641936c4e66581880483b3c817d6882e572bda28a5c67e84f42a94ffb9fc66e843b992ad0a3b3ee8988efbe1b86158350fcffa5ddbd0943285912f6182f1352aed082f55f3cfa77f7c219323bf674ef138c07fc00f70b24681deda31c9031ca"], &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00087800000095154e0cc153d00a901b35b1ebb4980dcef45444df5990986dd6459058562a03c3d3f954952c343851f8cd9cc93c3c86540a63720f0d720a16c0dffa0650b263a473cfac7b60258814ee26e4f562f356ea60a5d22a89c7e2ad3ddb82de85dd74d378083ecedf2f6f24935e7835f9d864cf56511e099b2382"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x6, 0x5, 0x9, 0x16, 0x32b4, 0x8, 0x2, 0x6, 0x3, 0x200, 0xc, 0x5}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d01090050001180"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x800, 0x400}) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r8, &(0x7f00000047c0)=[{{&(0x7f0000000140)=@caif=@rfm, 0x80, &(0x7f00000001c0)}, 0x1}, {{&(0x7f0000000b80)=@nfc_llcp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000c00)=""/223, 0xdf}, {&(0x7f0000000a40)=""/156, 0x9c}, {&(0x7f0000000dc0)=""/128, 0x80}, {&(0x7f0000000e40)=""/114, 0x72}, {&(0x7f0000000ec0)=""/128, 0x80}, {&(0x7f0000000f40)=""/72, 0x48}], 0x6, &(0x7f0000001040)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002040)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f00000020c0)=""/143, 0x8f}, {&(0x7f0000000300)=""/50, 0x32}], 0x2, &(0x7f0000002180)=""/27, 0x1b}, 0x7fff}, {{&(0x7f00000021c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004640)=[{&(0x7f0000002240)=""/135, 0x87}, {&(0x7f0000002300)=""/140, 0x8c}, {&(0x7f00000023c0)=""/175, 0xaf}, {&(0x7f0000002480)=""/184, 0xb8}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/204, 0xcc}, {&(0x7f00000048c0)=""/4108, 0x100c}], 0x7, &(0x7f0000000940)=""/209, 0xd1}, 0x8}], 0x4, 0x40000002, 0x0) bind$802154_raw(r6, &(0x7f0000000000)={0x24, @none={0x300, 0x2}}, 0x14) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYBLOB="d643602694a5bf92d403556a80b5bcae2a5489a65f00342b293fca2522b35675b098ffc6f4c23fa0a8e72670afdaba64ed96716be318ad4f54e2c1a9416c96da3c7b7b4587e421381882108c9e15b772c1307701efcbc54e6932fbd35c6448c32dde9466d91cab5c6a02c862be354086bfbd477597e39c49173f532aa7e7dacb"], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80602}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="28000000590dff84453c3d42089d776ded10d86e707c504bb517eb1a5f8866edb49041f8138b82637fdb1251381def677e42eb642c2b71b4828200a420299b6be0db6ad88a3a1278a926ef7b8fb0071b2f31c7dbb435434de2919ef666e1d8e53f5f47caac4edde285deeb8d44dbfff66eea294c7416ec35163069c29c3320ac633f5e2a44bab6008b0a44f68d015c31d9a88b01", @ANYRES16=r3, @ANYBLOB="00032abd7000fbdbdf257600000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000500000066000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20004000) r10 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r11 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) dup3(r11, r10, 0x0) finit_module(r11, 0x0, 0x1) close_range(r11, r10, 0x0) ioctl$USERFAULTFD_IOC_NEW(r11, 0xaa00) mmap$dsp(&(0x7f0000d63000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) 1.105723186s ago: executing program 0 (id=58): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xffffff7f, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188c0b62aa73772cc9f1ba1f848020000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000380)="f1", 0x1, 0x200400c5, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setuid(0xee01) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f1, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r3, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x40008081}, 0x4040002) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(0x3) r5 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r6, 0x1) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 888.221313ms ago: executing program 3 (id=60): syz_usb_connect(0x4, 0x26d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x33, 0x37, 0xf3, 0x10, 0x19d2, 0xff4b, 0x39aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25b, 0x1, 0x7, 0x3, 0x50, 0x8, [{{0x9, 0x4, 0x1d, 0x7e, 0x6, 0xff, 0xff, 0xff, 0x9c, [], [{{0x9, 0x5, 0x9, 0x3, 0x400, 0x9, 0x7a, 0x1, [@generic={0xac, 0x1, "d6bb05651dfaba6dfe76b5ea89850df478fe9c6700f707b61fb207e988684dac7f079d35f8fc5e69b9c2456f33d2e90531517243fa9cd755efa81d76164179de4a80a71035f22becd1d924d33a344de46edfafca2a45a3edd9b97611e103ee1a0a36c645e7414d84ccb93313ef393c7ca4fe79a88910cad7b46e53b1191319c393a8e0041d5f028359a82db663b2d78390d598a9418e455259067a86d257298c2d595cc883b4a281bbe7"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0xb1, 0xd5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xff81}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0xd, 0xda, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3}, @generic={0x2c, 0x3, "b2b89678f128158eab330929ebae73be11bfdee4290297ba975f158fb7f88f3f0730bc739b2490641b61"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x10, 0x67, 0xee}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x10, 0xdf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}, @generic={0xaf, 0x30, "5c5e73c23fd307ae8c870ffaab3bc49875a57371dfa124e27b6e062cf5a325150613774baad334c0c64087980ce61f3560fbaafa7cfa0471e70e8b8abac5d9c7ae0cd27caca5d9214c368ca51e6404eb1a9187ba2dbb4a7d1e092734bba4c6b7ed3f4abd1633e817173d4c0351891acd1ea089999fa7441d9d962b35f00b0b5cf276cb0f3c3482fd2c7567c683a65da16c61f2aebacf2db0a769423f721e7d495ab7d6c396409be2e1e4bf7338"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x9, 0x6, 0x80, [@generic={0x70, 0xd, "9d808fffa3f2b238e46a229e90e1f0c02f9ac1bff254ee50af3afd71bfb6c2bc1349ee821a0851afe8eb28edfd1f336d6728c030230030621673f6c79dacf88ff9071a9ec6c48b9ea9b56c2286704a264ef4d6fb8f87cac09e8329326615fba45300ea2379170a28e27ec876ef40"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x9}]}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x57, &(0x7f0000000000)=@string={0x57, 0x3, "e6e8c9dee9f79777a91a47d08d00e295a3bc9165950723f59e6711763b393c96c20019ea5f5e24ee9cdfa801b47e794ae356b902b8466d721bc69c00e94fd3635cf64035cf8df956a1fac7f313739a8eee12395822"}}, {0x92, &(0x7f0000000080)=@string={0x92, 0x3, "acc20f473a8f5134f885e1b6491518ab843670ce1764803d4286de650bbb099bb0d2a00b9b41e16d52b7c505bd4f832a0dbed7fd95227e071ac0f45ba51ab46ab126ec757ed5667ea59378279bb9c8c66af0348f1c2135f44864faf708542277442fed77e1dce451e8576ad8b7a107a43244a184119a7c48dbdfadf7fc3e24d0e7d35117bc985d64d70a7fa6c16041b7"}}]}) 850.705804ms ago: executing program 0 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x40000) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) 674.385709ms ago: executing program 0 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x29, 0x19, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003"], 0x54}}, 0x4800) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 527.145502ms ago: executing program 0 (id=63): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x2}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000600)="17", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0x2, 0x0, 0x1, 0xfffffffd}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0xbc4, 0x2}}, 0x30) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={0x40, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) 463.401416ms ago: executing program 0 (id=64): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x6, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}], 0x1, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000050000060900010073797a3100000000580004805400018009000100261a54f75d7753086d6574610000000044000280080001400000000c080003400000000d08000240000003ff100001400000000008000240000000010800034000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x20060814) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8401000017"], 0x184}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b005a00180001801400020073797a5f74756e0000000000000000000c0002802323a49caa48a0"], 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) 282.093414ms ago: executing program 3 (id=65): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f00000000c0)={0x2, 0x3f, 0x19, 0x15, 0x1b0, 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000008c0)="84", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 245.294013ms ago: executing program 3 (id=66): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x28, 0x1e, 0xa01, 0x3, 0x0, {0x7}, [@nested={0x14, 0x7c, 0x0, 0x1, [@nested={0x10, 0x4e, 0x0, 0x1, [@nested={0x4, 0x4a}, @nested={0x8, 0x41, 0x0, 0x1, [@typed={0x4, 0x33}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 225.195986ms ago: executing program 0 (id=67): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="78ccd2061be2bb9cf75dbcde8018a994b05d016cf5b04e143e2d3478cf370ede135c39f8aaf5fbd1cf59e70a6bc43fa53be4309e204e319950d903ef7b4e1ff9bfe386906af66d89a515203b67efde36f0e650312e16a856f125f2b3ae58862ee802be3144f899b2357b98531a8ca305764312fd", @ANYRESHEX, @ANYBLOB=',\x00']) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 150.316188ms ago: executing program 3 (id=68): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 130.712462ms ago: executing program 3 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d39"]) 88.392594ms ago: executing program 2 (id=70): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r2, 0x1, 0x0, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x401}}]}, 0x4c}}, 0x0) r3 = epoll_create1(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000), 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x80002, 0xa) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000)={0xe000001a}) read$FUSE(r5, &(0x7f0000003640)={0x2020}, 0x2020) epoll_wait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 34.256577ms ago: executing program 3 (id=71): syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb03200002020509050412ff"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 0s ago: executing program 1 (id=72): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000048c0)="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", 0x317}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2100, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0xf4, 0xdd, 0x8, 0x46d, 0x8b1, 0x6d2a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x15, 0xb3, 0x83}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 72.304513][ T5816] cgroup: Unknown subsys name 'net' [ 72.459799][ T5816] cgroup: Unknown subsys name 'cpuset' [ 72.468717][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.870203][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.444651][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.456967][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.464933][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.473095][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.480939][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.556016][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.564213][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.572279][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.580983][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.597566][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.669901][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.682524][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.690330][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.698363][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.718369][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.726880][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.762724][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.774284][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.784649][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.793426][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.040160][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 78.161980][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 78.206940][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.214186][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.222483][ T5825] bridge_slave_0: entered allmulticast mode [ 78.230181][ T5825] bridge_slave_0: entered promiscuous mode [ 78.238621][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.246033][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.253680][ T5825] bridge_slave_1: entered allmulticast mode [ 78.260798][ T5825] bridge_slave_1: entered promiscuous mode [ 78.339682][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.377405][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.453749][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.461106][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.468910][ T5829] bridge_slave_0: entered allmulticast mode [ 78.477247][ T5829] bridge_slave_0: entered promiscuous mode [ 78.509130][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.516289][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.523784][ T5829] bridge_slave_1: entered allmulticast mode [ 78.532170][ T5829] bridge_slave_1: entered promiscuous mode [ 78.553048][ T5825] team0: Port device team_slave_0 added [ 78.559510][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 78.601956][ T5825] team0: Port device team_slave_1 added [ 78.676105][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.707105][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.714051][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.740883][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.754764][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.768881][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 78.780216][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.787288][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.813312][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.902064][ T5829] team0: Port device team_slave_0 added [ 78.920077][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.927361][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.935098][ T5832] bridge_slave_0: entered allmulticast mode [ 78.942825][ T5832] bridge_slave_0: entered promiscuous mode [ 78.956863][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.964027][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.971648][ T5832] bridge_slave_1: entered allmulticast mode [ 78.979270][ T5832] bridge_slave_1: entered promiscuous mode [ 79.002827][ T5829] team0: Port device team_slave_1 added [ 79.085514][ T5825] hsr_slave_0: entered promiscuous mode [ 79.092166][ T5825] hsr_slave_1: entered promiscuous mode [ 79.101860][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.112394][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.119627][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.146280][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.189586][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.212544][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.220153][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.246152][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.258045][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.265218][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.273036][ T5833] bridge_slave_0: entered allmulticast mode [ 79.280145][ T5833] bridge_slave_0: entered promiscuous mode [ 79.320164][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.327651][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.334776][ T5833] bridge_slave_1: entered allmulticast mode [ 79.342124][ T5833] bridge_slave_1: entered promiscuous mode [ 79.350904][ T5832] team0: Port device team_slave_0 added [ 79.391267][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.414397][ T5832] team0: Port device team_slave_1 added [ 79.423582][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.522147][ T5833] team0: Port device team_slave_0 added [ 79.528945][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.535910][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.538631][ T5837] Bluetooth: hci0: command tx timeout [ 79.562124][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.583682][ T5829] hsr_slave_0: entered promiscuous mode [ 79.590024][ T5829] hsr_slave_1: entered promiscuous mode [ 79.596081][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 79.602228][ T5829] Cannot create hsr debugfs directory [ 79.615357][ T5833] team0: Port device team_slave_1 added [ 79.622310][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.629317][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.655255][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.697215][ T5837] Bluetooth: hci1: command tx timeout [ 79.731288][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.738485][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.764442][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.776831][ T5837] Bluetooth: hci2: command tx timeout [ 79.779864][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.789463][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.815640][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.856918][ T5837] Bluetooth: hci3: command tx timeout [ 79.958472][ T5832] hsr_slave_0: entered promiscuous mode [ 79.964773][ T5832] hsr_slave_1: entered promiscuous mode [ 79.971520][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 79.977532][ T5832] Cannot create hsr debugfs directory [ 80.000681][ T5833] hsr_slave_0: entered promiscuous mode [ 80.008014][ T5833] hsr_slave_1: entered promiscuous mode [ 80.014108][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 80.019994][ T5833] Cannot create hsr debugfs directory [ 80.182654][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.218615][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.250138][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.287521][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.448323][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.460581][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.471140][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.483238][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.555052][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.579743][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.608645][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.631596][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.715075][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.740784][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.750958][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.764332][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.802159][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.857976][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.893192][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.900520][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.913586][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.939127][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.946300][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.971462][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.984820][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.992052][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.040767][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.047961][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.124778][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.145604][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.192354][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.219823][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.235674][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.242907][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.282079][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.289308][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.319158][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.326445][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.341991][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.349216][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.594221][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.618363][ T5837] Bluetooth: hci0: command tx timeout [ 81.683806][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.777061][ T5837] Bluetooth: hci1: command tx timeout [ 81.823393][ T5825] veth0_vlan: entered promiscuous mode [ 81.857208][ T5837] Bluetooth: hci2: command tx timeout [ 81.893893][ T5825] veth1_vlan: entered promiscuous mode [ 81.930622][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.937200][ T5837] Bluetooth: hci3: command tx timeout [ 82.040526][ T5829] veth0_vlan: entered promiscuous mode [ 82.091915][ T5829] veth1_vlan: entered promiscuous mode [ 82.115114][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.132104][ T5825] veth0_macvtap: entered promiscuous mode [ 82.145480][ T5825] veth1_macvtap: entered promiscuous mode [ 82.153719][ T5832] veth0_vlan: entered promiscuous mode [ 82.181072][ T5832] veth1_vlan: entered promiscuous mode [ 82.224510][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.242885][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.275214][ T5833] veth0_vlan: entered promiscuous mode [ 82.282377][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.292466][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.304872][ T5829] veth0_macvtap: entered promiscuous mode [ 82.327532][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.341842][ T5829] veth1_macvtap: entered promiscuous mode [ 82.361530][ T5833] veth1_vlan: entered promiscuous mode [ 82.368889][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.399411][ T5832] veth0_macvtap: entered promiscuous mode [ 82.410161][ T5832] veth1_macvtap: entered promiscuous mode [ 82.435874][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.481446][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.491240][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.514806][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.523271][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.534175][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.558184][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.566134][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.575630][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.609385][ T5833] veth0_macvtap: entered promiscuous mode [ 82.609405][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.618216][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.627173][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.651830][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.662927][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.672938][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.690860][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.709428][ T5833] veth1_macvtap: entered promiscuous mode [ 82.731856][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.837105][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.855406][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.861690][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.873567][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.910782][ T75] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.926308][ T75] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.946031][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.960116][ T75] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.971051][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.000304][ T75] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.092321][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.117588][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.147682][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.167864][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.293717][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.326062][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.487057][ T5934] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 83.511611][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.530266][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.697056][ T5837] Bluetooth: hci0: command tx timeout [ 83.830944][ T5943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.857346][ T5837] Bluetooth: hci1: command tx timeout [ 83.937081][ T5837] Bluetooth: hci2: command tx timeout [ 84.017027][ T5837] Bluetooth: hci3: command tx timeout [ 84.574388][ T5894] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.625277][ T5971] openvswitch: netlink: Missing key (keys=40, expected=100) [ 84.662003][ T5971] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 84.757656][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 84.766412][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 84.792174][ T5894] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 84.817151][ T5894] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.842924][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.859188][ T5895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.860350][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.886738][ T5894] usb 4-1: SerialNumber: syz [ 84.902359][ T5956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.017937][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 85.041135][ T5895] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 85.065806][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.083571][ T5895] usb 1-1: Product: syz [ 85.096733][ T5895] usb 1-1: Manufacturer: syz [ 85.107876][ T5895] usb 1-1: SerialNumber: syz [ 85.156560][ T5894] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 85.157383][ T5895] r8152-cfgselector 1-1: Unknown version 0x0000 [ 85.192143][ T5895] r8152-cfgselector 1-1: config 0 descriptor?? [ 85.199930][ T5894] usb 4-1: USB disconnect, device number 2 [ 85.210639][ T5895] hub 1-1:0.0: bad descriptor, ignoring hub [ 85.216575][ T5895] hub 1-1:0.0: probe with driver hub failed with error -5 [ 85.340090][ T5993] syz.2.15: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 85.358240][ T5993] CPU: 1 UID: 0 PID: 5993 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 85.358269][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.358286][ T5993] Call Trace: [ 85.358296][ T5993] [ 85.358304][ T5993] dump_stack_lvl+0x189/0x250 [ 85.358336][ T5993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.358353][ T5993] ? __pfx__printk+0x10/0x10 [ 85.358369][ T5993] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 85.358395][ T5993] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 85.358422][ T5993] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 85.358450][ T5993] warn_alloc+0x214/0x310 [ 85.358468][ T5993] ? stack_depot_save_flags+0x436/0x860 [ 85.358495][ T5993] ? __pfx_warn_alloc+0x10/0x10 [ 85.358515][ T5993] ? kasan_save_track+0x3e/0x80 [ 85.358530][ T5993] ? __kasan_kmalloc+0x93/0xb0 [ 85.358548][ T5993] ? xsk_setsockopt+0x4dc/0x8d0 [ 85.358570][ T5993] ? do_sock_setsockopt+0x17c/0x1b0 [ 85.358586][ T5993] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 85.358601][ T5993] ? do_syscall_64+0xfa/0xfa0 [ 85.358618][ T5993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.358644][ T5993] __vmalloc_node_range_noprof+0x125/0x12d0 [ 85.358686][ T5993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.358702][ T5993] ? __kasan_kmalloc+0x93/0xb0 [ 85.358720][ T5993] vmalloc_user_noprof+0xad/0xf0 [ 85.358733][ T5993] ? xskq_create+0xbf/0x170 [ 85.358746][ T5993] xskq_create+0xbf/0x170 [ 85.358761][ T5993] xsk_init_queue+0xb0/0x110 [ 85.358776][ T5993] xsk_setsockopt+0x4dc/0x8d0 [ 85.358796][ T5993] ? __pfx_xsk_setsockopt+0x10/0x10 [ 85.358817][ T5993] ? __pfx_aa_sk_perm+0x10/0x10 [ 85.358831][ T5993] ? aa_sock_opt_perm+0xff/0x1b0 [ 85.358847][ T5993] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 85.358861][ T5993] ? __pfx_xsk_setsockopt+0x10/0x10 [ 85.358881][ T5993] do_sock_setsockopt+0x17c/0x1b0 [ 85.358898][ T5993] __x64_sys_setsockopt+0x13f/0x1b0 [ 85.358916][ T5993] do_syscall_64+0xfa/0xfa0 [ 85.358929][ T5993] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.358944][ T5993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.358956][ T5993] ? clear_bhb_loop+0x60/0xb0 [ 85.358972][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.358984][ T5993] RIP: 0033:0x7f81ccd8eec9 [ 85.359003][ T5993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.359013][ T5993] RSP: 002b:00007f81cdbee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 85.359030][ T5993] RAX: ffffffffffffffda RBX: 00007f81ccfe5fa0 RCX: 00007f81ccd8eec9 [ 85.359041][ T5993] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 85.359051][ T5993] RBP: 00007f81cce11f91 R08: 0000000000000004 R09: 0000000000000000 [ 85.359061][ T5993] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 85.359070][ T5993] R13: 00007f81ccfe6038 R14: 00007f81ccfe5fa0 R15: 00007fff46172ae8 [ 85.359099][ T5993] [ 85.359110][ T5993] Mem-Info: [ 85.602695][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.660357][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.678414][ T5993] active_anon:5958 inactive_anon:0 isolated_anon:0 [ 85.678414][ T5993] active_file:2186 inactive_file:39870 isolated_file:0 [ 85.678414][ T5993] unevictable:768 dirty:1628 writeback:0 [ 85.678414][ T5993] slab_reclaimable:10267 slab_unreclaimable:89885 [ 85.678414][ T5993] mapped:24320 shmem:1366 pagetables:1103 [ 85.678414][ T5993] sec_pagetables:0 bounce:0 [ 85.678414][ T5993] kernel_misc_reclaimable:0 [ 85.678414][ T5993] free:1343502 free_pcp:25054 free_cma:0 [ 85.713626][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.773011][ T5993] Node 0 active_anon:22108kB inactive_anon:0kB active_file:8744kB inactive_file:159280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97380kB dirty:6500kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11440kB pagetables:4180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 85.819424][ T5837] Bluetooth: hci0: command tx timeout [ 85.830021][ T5973] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12'. [ 85.867970][ T5993] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 85.937936][ T5993] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.938802][ T5837] Bluetooth: hci1: command tx timeout [ 85.967969][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.969289][ T5993] lowmem_reserve[]: [ 85.982253][ T5850] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 86.008295][ T5993] 0 2495 2497 2497 2497 [ 86.012620][ T5993] Node 0 DMA32 free:1473848kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22288kB inactive_anon:0kB active_file:8744kB inactive_file:159288kB unevictable:1536kB writepending:6516kB zspages:0kB present:3129332kB managed:2555848kB mlocked:0kB bounce:0kB free_pcp:72096kB local_pcp:58596kB free_cma:0kB [ 86.047639][ T982] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 86.056525][ T5837] Bluetooth: hci2: command tx timeout [ 86.067815][ T5993] lowmem_reserve[]: 0 0 1 1 1 [ 86.072567][ T5993] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 86.105462][ T5837] Bluetooth: hci3: command tx timeout [ 86.111086][ T5993] lowmem_reserve[]: 0 0 0 0 0 [ 86.115823][ T5993] Node 1 Normal free:3894008kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19972kB local_pcp:9540kB free_cma:0kB [ 86.148115][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.163894][ T5993] lowmem_reserve[]: 0 0 0 0 0 [ 86.169202][ T5993] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 86.183098][ T5993] Node 0 DMA32: 3*4kB (UM) 37*8kB (UM) 4*16kB (UME) 2*32kB (M) 2*64kB (ME) 2*128kB (ME) 2*256kB (M) 6*512kB (UME) 3*1024kB (M) 5*2048kB (UME) 353*4096kB (M) = 1463604kB [ 86.205928][ T5993] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 86.220572][ T5993] Node 1 Normal: 150*4kB (UE) 46*8kB (UME) 33*16kB (UME) 43*32kB (UME) 21*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3894008kB [ 86.238652][ T982] usb 2-1: Invalid ep0 maxpacket: 32 [ 86.245685][ T5993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.255995][ T5993] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.267228][ T5993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.276881][ T5993] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.286176][ T5993] 43412 total pagecache pages [ 86.290947][ T5993] 0 pages in swap cache [ 86.295103][ T5993] Free swap = 124996kB [ 86.299705][ T5993] Total swap = 124996kB [ 86.304360][ T5993] 2097051 pages RAM [ 86.308918][ T5895] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 86.317176][ T5993] 0 pages HighMem/MovableOnly [ 86.322201][ T5993] 426191 pages reserved [ 86.331492][ T5993] 0 pages cma reserved [ 86.370979][ T982] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 86.486196][ T5895] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 86.516647][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.537127][ T982] usb 2-1: Invalid ep0 maxpacket: 32 [ 86.542850][ T982] usb usb2-port1: attempt power cycle [ 86.550494][ T5895] usb 4-1: config 0 descriptor?? [ 86.594137][ T6030] binder_alloc: binder_alloc_mmap_handler: 6029 200000735000-200000736000 already mapped failed -16 [ 86.704972][ T30] audit: type=1326 audit(1760273239.428:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.0.21" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1cf098eec9 code=0x0 [ 86.819716][ T43] cfg80211: failed to load regulatory.db [ 86.906757][ T982] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 86.938239][ T982] usb 2-1: Invalid ep0 maxpacket: 32 [ 87.077012][ T982] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 87.111786][ T982] usb 2-1: Invalid ep0 maxpacket: 32 [ 87.117745][ T982] usb usb2-port1: unable to enumerate USB device [ 87.181228][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.350509][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.365680][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.375803][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.389829][ T5914] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.399869][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.418006][ T5914] usb 3-1: config 0 descriptor?? [ 87.517765][ T6069] netlink: 44 bytes leftover after parsing attributes in process `syz.0.24'. [ 87.534372][ T6069] netlink: 43 bytes leftover after parsing attributes in process `syz.0.24'. [ 87.546229][ T6069] netlink: 'syz.0.24': attribute type 6 has an invalid length. [ 87.554050][ T6069] netlink: 'syz.0.24': attribute type 5 has an invalid length. [ 87.565390][ T6069] netlink: 43 bytes leftover after parsing attributes in process `syz.0.24'. [ 87.578238][ T6069] Zero length message leads to an empty skb [ 87.591459][ T6011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.617191][ T6011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.636010][ T6011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.667656][ T6011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.890531][ T5914] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 88.697326][ T982] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.846849][ T982] usb 1-1: Using ep0 maxpacket: 16 [ 88.854940][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.866259][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.876051][ T982] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.889585][ T982] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.898689][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.915090][ T982] usb 1-1: config 0 descriptor?? [ 89.016890][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 89.102128][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 89.112350][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 89.126883][ T5895] asix 4-1:0.0: probe with driver asix failed with error -71 [ 89.138180][ T5895] usb 4-1: USB disconnect, device number 3 [ 89.167086][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 89.190678][ T5894] usb 2-1: config 148 has an invalid interface number: 46 but max is 0 [ 89.206743][ T5894] usb 2-1: config 148 has no interface number 0 [ 89.213080][ T5894] usb 2-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=30.8d [ 89.225419][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.331378][ T982] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.338931][ T982] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.346158][ T982] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.353424][ T982] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.360735][ T982] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.368001][ T982] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.375233][ T982] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.384601][ T982] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.391917][ T982] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.399325][ T982] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.413464][ T982] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input6 [ 89.439578][ T5894] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 89.450891][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 89.463396][ T5894] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 89.472118][ T5894] usb 2-1: media controller created [ 89.498889][ T982] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 89.526494][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.529696][ T6084] netlink: 76 bytes leftover after parsing attributes in process `syz.0.25'. [ 89.573526][ T5895] usb 1-1: USB disconnect, device number 3 [ 89.621726][ T6087] fido_id[6087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 89.660270][ T5894] DVB: Unable to find symbol dib7000p_attach() [ 89.686378][ T5894] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 89.701817][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.740086][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.860304][ T5894] rc_core: IR keymap rc-dib0700-rc5 not found [ 89.869861][ T5894] Registered IR keymap rc-empty [ 89.875470][ T5894] dvb-usb: could not initialize remote control. [ 89.882185][ T5894] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 89.897134][ T5894] usb 2-1: USB disconnect, device number 6 [ 89.942550][ T5894] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 90.187384][ T43] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 90.238728][ T6105] /dev/nullb0: Can't open blockdev [ 90.337896][ T5914] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.357297][ T43] usb 3-1: device firmware changed [ 90.364602][ T5915] usb 3-1: USB disconnect, device number 2 [ 90.488183][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.499317][ T5914] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 90.509124][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.517793][ T5895] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.526746][ T5915] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.530027][ T5914] usb 4-1: config 0 descriptor?? [ 90.648137][ T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 90.679286][ T5895] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.687403][ T5895] usb 1-1: config 0 has no interface number 0 [ 90.693592][ T5895] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.698511][ T5915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.704882][ T5895] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.715150][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.725226][ T5895] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 90.735152][ T5915] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.742633][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.754544][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.770172][ T5915] usb 3-1: SerialNumber: syz [ 90.776778][ T43] usb 2-1: device descriptor read/64, error -71 [ 90.797265][ T5895] usb 1-1: config 0 descriptor?? [ 90.977623][ T5837] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 90.986835][ T5837] Bluetooth: hci0: Injecting HCI hardware error event [ 90.989626][ T5915] usb 3-1: 0:2 : does not exist [ 90.994600][ T5837] Bluetooth: hci0: hardware error 0x00 [ 91.010252][ T5914] steelseries 0003:1038:12B6.0003: item fetching failed at offset 6/7 [ 91.019879][ T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 91.029420][ T5914] steelseries 0003:1038:12B6.0003: probe with driver steelseries failed with error -22 [ 91.067211][ T5915] usb 3-1: USB disconnect, device number 3 [ 91.103739][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.156987][ T43] usb 2-1: device descriptor read/64, error -71 [ 91.270742][ T5850] usb 4-1: USB disconnect, device number 4 [ 91.277501][ T43] usb usb2-port1: attempt power cycle [ 91.321516][ T5895] usbhid 1-1:0.1: can't add hid device: -71 [ 91.329379][ T5895] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 91.342095][ T5895] usb 1-1: USB disconnect, device number 4 [ 91.626776][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 91.647387][ T43] usb 2-1: device descriptor read/8, error -71 [ 91.816849][ T5915] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.856862][ T5850] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.886851][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 91.907191][ T43] usb 2-1: device descriptor read/8, error -71 [ 91.986820][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 91.993489][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.004500][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.008514][ T5850] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 92.014260][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.026805][ T43] usb usb2-port1: unable to enumerate USB device [ 92.038644][ T5915] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.054306][ T5850] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 92.055102][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.075888][ T5915] usb 3-1: config 0 descriptor?? [ 92.076259][ T5850] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.090372][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.100491][ T5850] usb 1-1: Product: syz [ 92.104671][ T5850] usb 1-1: Manufacturer: syz [ 92.109325][ T5850] usb 1-1: SerialNumber: syz [ 92.495658][ T5915] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 92.507929][ T5915] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 92.519559][ T5915] microsoft 0003:045E:07DA.0004: no inputs found [ 92.525903][ T5915] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 92.761111][ T5915] usb 3-1: USB disconnect, device number 4 [ 92.853193][ T6134] capability: warning: `syz.3.41' uses deprecated v2 capabilities in a way that may be insecure [ 92.864425][ T6134] program syz.3.41 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.056867][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 93.155978][ T5850] cdc_ncm 1-1:1.0: bind() failure [ 93.171909][ T5850] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 93.180804][ T5850] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 93.195747][ T5850] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 93.215991][ T5850] usb 1-1: USB disconnect, device number 5 [ 93.325352][ T5915] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 93.449838][ T6162] openvswitch: netlink: Tunnel attr 243 out of range max 16 [ 93.470487][ T5915] usb 4-1: device descriptor read/64, error -71 [ 93.550865][ T6166] afs: Unknown parameter ' E^GHz3.6w' [ 93.736791][ T5915] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 93.886806][ T5915] usb 4-1: device descriptor read/64, error -71 [ 94.007630][ T5915] usb usb4-port1: attempt power cycle [ 94.276885][ T5850] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 94.366771][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.376747][ T5915] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 94.397225][ T5915] usb 4-1: device descriptor read/8, error -71 [ 94.407004][ T5850] usb 2-1: device descriptor read/64, error -71 [ 94.446794][ T5894] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.518974][ T43] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 94.528155][ T43] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 94.539537][ T43] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 94.551103][ T43] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 94.562072][ T43] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 94.575183][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 94.584319][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.617015][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 94.623935][ T5894] usb 3-1: config 2 has an invalid interface number: 194 but max is 0 [ 94.632460][ T5894] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 94.642760][ T5915] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 94.646893][ T5850] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 94.650703][ T5894] usb 3-1: config 2 has no interface number 0 [ 94.664349][ T5894] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 94.675924][ T5894] usb 3-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 94.690290][ T5915] usb 4-1: device descriptor read/8, error -71 [ 94.696525][ T5894] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 94.705694][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.717128][ T6192] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 94.786820][ T5850] usb 2-1: device descriptor read/64, error -71 [ 94.797777][ T5915] usb usb4-port1: unable to enumerate USB device [ 94.801797][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.813143][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.823215][ T43] ath6kl: Failed to submit usb control message: -71 [ 94.830096][ T43] ath6kl: unable to send the bmi data to the device: -71 [ 94.837408][ T43] ath6kl: Unable to send get target info: -71 [ 94.844603][ T43] ath6kl: Failed to init ath6kl core: -71 [ 94.856437][ T43] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 94.875499][ T43] usb 1-1: USB disconnect, device number 6 [ 94.898740][ T5850] usb usb2-port1: attempt power cycle [ 94.928737][ T5894] usb 3-1: string descriptor 0 read error: -71 [ 94.938958][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.991344][ T5894] usb 3-1: USB disconnect, device number 5 [ 95.236858][ T5850] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 95.257188][ T5850] usb 2-1: device descriptor read/8, error -71 [ 95.497352][ T5850] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 95.537712][ T5850] usb 2-1: device descriptor read/8, error -71 [ 95.609663][ T6204] openvswitch: netlink: Message has 12 unknown bytes. [ 95.667102][ T5850] usb usb2-port1: unable to enumerate USB device [ 95.786788][ T5913] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.937090][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 95.945450][ T5913] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 95.954075][ T5913] usb 3-1: config 0 has no interface number 0 [ 95.964218][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 95.993744][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.003348][ T5913] usb 3-1: Product: syz [ 96.007771][ T5913] usb 3-1: Manufacturer: syz [ 96.012501][ T5913] usb 3-1: SerialNumber: syz [ 96.023261][ T5913] usb 3-1: config 0 descriptor?? [ 96.242023][ T5913] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 96.250983][ T5913] uvcvideo 3-1:0.105: No valid video chain found. [ 96.448405][ T5915] usb 3-1: USB disconnect, device number 6 [ 96.695767][ T6237] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 96.704963][ T6237] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 96.714534][ T6237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.64'. [ 96.725336][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 96.966942][ T6248] 9pnet: Unknown protocol version 9 [ 97.103388][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 97.114889][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 97.114914][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.114926][ T5837] Workqueue: hci3 hci_rx_work [ 97.114947][ T5837] Call Trace: [ 97.114955][ T5837] [ 97.114962][ T5837] dump_stack_lvl+0x189/0x250 [ 97.114987][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.115005][ T5837] ? __pfx__printk+0x10/0x10 [ 97.115029][ T5837] ? kernfs_path_from_node+0x250/0x290 [ 97.115052][ T5837] ? kernfs_path_from_node+0x2f/0x290 [ 97.115081][ T5837] sysfs_create_dir_ns+0x259/0x280 [ 97.115107][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 97.115134][ T5837] ? do_raw_spin_unlock+0x122/0x240 [ 97.115157][ T5837] kobject_add_internal+0x59f/0xb40 [ 97.115188][ T5837] kobject_add+0x155/0x220 [ 97.115216][ T5837] ? __pfx_kobject_add+0x10/0x10 [ 97.115239][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 97.115259][ T5837] ? get_device_parent+0x366/0x3a0 [ 97.115296][ T5837] device_add+0x408/0xb50 [ 97.115322][ T5837] hci_conn_add_sysfs+0xd5/0x1e0 [ 97.115351][ T5837] le_conn_complete_evt+0xf39/0x1500 [ 97.115387][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 97.115409][ T5837] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 97.115428][ T5837] ? __asan_memcpy+0x40/0x70 [ 97.115449][ T5837] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.115468][ T5837] ? skb_pull_data+0xfb/0x200 [ 97.115495][ T5837] hci_le_conn_complete_evt+0x187/0x450 [ 97.115523][ T5837] hci_event_packet+0x78f/0x1200 [ 97.115543][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 97.115566][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 97.115586][ T5837] ? kcov_remote_start+0x4d3/0x7f0 [ 97.115607][ T5837] ? local_clock_noinstr+0xe0/0xe0 [ 97.115628][ T5837] ? hci_send_to_monitor+0xe2/0x570 [ 97.115653][ T5837] hci_rx_work+0x46a/0xe80 [ 97.115680][ T5837] ? process_scheduled_works+0x9ef/0x17b0 [ 97.115705][ T5837] process_scheduled_works+0xae1/0x17b0 [ 97.115752][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 97.115788][ T5837] worker_thread+0x8a0/0xda0 [ 97.115810][ T5837] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.115835][ T5837] ? __kthread_parkme+0x7b/0x200 [ 97.115865][ T5837] kthread+0x711/0x8a0 [ 97.115884][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 97.115903][ T5837] ? __pfx_kthread+0x10/0x10 [ 97.115920][ T5837] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.115935][ T5837] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.115951][ T5837] ? __pfx_kthread+0x10/0x10 [ 97.115968][ T5837] ret_from_fork+0x4bc/0x870 [ 97.115992][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 97.116020][ T5837] ? __switch_to_asm+0x39/0x70 [ 97.116037][ T5837] ? __switch_to_asm+0x33/0x70 [ 97.116050][ T5837] ? __pfx_kthread+0x10/0x10 [ 97.116060][ T5837] ret_from_fork_asm+0x1a/0x30 [ 97.116080][ T5837] [ 97.116099][ T5837] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 97.256840][ T5915] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 97.259683][ T5913] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 97.270027][ T5837] Bluetooth: hci3: failed to register connection device [ 97.428182][ T5894] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 97.431762][ T5837] ================================================================== [ 97.443710][ T5837] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6e4/0x1040 [ 97.451673][ T5837] Read of size 8 at addr ffff88806e625480 by task kworker/u9:4/5837 [ 97.459623][ T5837] [ 97.461924][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 97.461935][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.461943][ T5837] Workqueue: hci3 hci_rx_work [ 97.461955][ T5837] Call Trace: [ 97.461961][ T5837] [ 97.461965][ T5837] dump_stack_lvl+0x189/0x250 [ 97.461977][ T5837] ? __kasan_check_byte+0x12/0x40 [ 97.461990][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.461999][ T5837] ? lock_release+0x4b/0x3e0 [ 97.462012][ T5837] ? __virt_addr_valid+0x4a5/0x5c0 [ 97.462022][ T5837] print_report+0xca/0x240 [ 97.462032][ T5837] ? l2cap_connect_cfm+0x6e4/0x1040 [ 97.462043][ T5837] kasan_report+0x118/0x150 [ 97.462054][ T5837] ? l2cap_connect_cfm+0x6e4/0x1040 [ 97.462067][ T5837] l2cap_connect_cfm+0x6e4/0x1040 [ 97.462080][ T5837] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 97.462092][ T5837] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 97.462103][ T5837] hci_connect_cfm+0x95/0x140 [ 97.462114][ T5837] le_conn_complete_evt+0xfb8/0x1500 [ 97.462128][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 97.462138][ T5837] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 97.462149][ T5837] ? __asan_memcpy+0x40/0x70 [ 97.462158][ T5837] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.462168][ T5837] ? skb_pull_data+0xfb/0x200 [ 97.462179][ T5837] hci_le_conn_complete_evt+0x187/0x450 [ 97.462191][ T5837] hci_event_packet+0x78f/0x1200 [ 97.462200][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 97.462210][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 97.462219][ T5837] ? kcov_remote_start+0x4d3/0x7f0 [ 97.462235][ T5837] ? local_clock_noinstr+0xe0/0xe0 [ 97.462245][ T5837] ? hci_send_to_monitor+0xe2/0x570 [ 97.462256][ T5837] hci_rx_work+0x46a/0xe80 [ 97.462266][ T5837] ? process_scheduled_works+0x9ef/0x17b0 [ 97.462279][ T5837] process_scheduled_works+0xae1/0x17b0 [ 97.462297][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 97.462312][ T5837] worker_thread+0x8a0/0xda0 [ 97.462324][ T5837] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.462335][ T5837] ? __kthread_parkme+0x7b/0x200 [ 97.462348][ T5837] kthread+0x711/0x8a0 [ 97.462357][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 97.462368][ T5837] ? __pfx_kthread+0x10/0x10 [ 97.462376][ T5837] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.462385][ T5837] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.462394][ T5837] ? __pfx_kthread+0x10/0x10 [ 97.462402][ T5837] ret_from_fork+0x4bc/0x870 [ 97.462414][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 97.462425][ T5837] ? __switch_to_asm+0x39/0x70 [ 97.462435][ T5837] ? __switch_to_asm+0x33/0x70 [ 97.462443][ T5837] ? __pfx_kthread+0x10/0x10 [ 97.462451][ T5837] ret_from_fork_asm+0x1a/0x30 [ 97.462464][ T5837] [ 97.462468][ T5837] [ 97.725316][ T5837] Allocated by task 5837: [ 97.729622][ T5837] kasan_save_track+0x3e/0x80 [ 97.734297][ T5837] __kasan_kmalloc+0x93/0xb0 [ 97.738871][ T5837] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 97.744221][ T5837] l2cap_chan_create+0x50/0x760 [ 97.749054][ T5837] l2cap_sock_new_connection_cb+0x182/0x2b0 [ 97.754924][ T5837] l2cap_connect_cfm+0x37a/0x1040 [ 97.759935][ T5837] hci_connect_cfm+0x95/0x140 [ 97.764589][ T5837] le_conn_complete_evt+0xfb8/0x1500 [ 97.769865][ T5837] hci_le_conn_complete_evt+0x187/0x450 [ 97.775384][ T5837] hci_event_packet+0x78f/0x1200 [ 97.780290][ T5837] hci_rx_work+0x46a/0xe80 [ 97.784678][ T5837] process_scheduled_works+0xae1/0x17b0 [ 97.790205][ T5837] worker_thread+0x8a0/0xda0 [ 97.794774][ T5837] kthread+0x711/0x8a0 [ 97.798902][ T5837] ret_from_fork+0x4bc/0x870 [ 97.803466][ T5837] ret_from_fork_asm+0x1a/0x30 [ 97.808216][ T5837] [ 97.810521][ T5837] Freed by task 6254: [ 97.814475][ T5837] kasan_save_track+0x3e/0x80 [ 97.819140][ T5837] __kasan_save_free_info+0x46/0x50 [ 97.824326][ T5837] __kasan_slab_free+0x5c/0x80 [ 97.829070][ T5837] kfree+0x19a/0x6d0 [ 97.832951][ T5837] l2cap_sock_cleanup_listen+0xea/0x3e0 [ 97.838476][ T5837] l2cap_sock_release+0x6a/0x210 [ 97.843391][ T5837] sock_close+0xc3/0x240 [ 97.847607][ T5837] __fput+0x44c/0xa70 [ 97.851598][ T5837] task_work_run+0x1d4/0x260 [ 97.856260][ T5837] exit_to_user_mode_loop+0xe9/0x130 [ 97.861536][ T5837] do_syscall_64+0x2bd/0xfa0 [ 97.866160][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.872038][ T5837] [ 97.874344][ T5837] The buggy address belongs to the object at ffff88806e625000 [ 97.874344][ T5837] which belongs to the cache kmalloc-2k of size 2048 [ 97.888379][ T5837] The buggy address is located 1152 bytes inside of [ 97.888379][ T5837] freed 2048-byte region [ffff88806e625000, ffff88806e625800) [ 97.902337][ T5837] [ 97.904645][ T5837] The buggy address belongs to the physical page: [ 97.911027][ T5837] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6e620 [ 97.919778][ T5837] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 97.928261][ T5837] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 97.936218][ T5837] page_type: f5(slab) [ 97.940181][ T5837] raw: 00fff00000000040 ffff88813fe27000 0000000000000000 0000000000000001 [ 97.948764][ T5837] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 97.957331][ T5837] head: 00fff00000000040 ffff88813fe27000 0000000000000000 0000000000000001 [ 97.966017][ T5837] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 97.974670][ T5837] head: 00fff00000000003 ffffea0001b98801 00000000ffffffff 00000000ffffffff [ 97.983315][ T5837] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 97.991953][ T5837] page dumped because: kasan: bad access detected [ 97.998347][ T5837] page_owner tracks the page as allocated [ 98.004031][ T5837] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5186, tgid 5186 (klogd), ts 86549283708, free_ts 74251367781 [ 98.024755][ T5837] post_alloc_hook+0x240/0x2a0 [ 98.029499][ T5837] get_page_from_freelist+0x2365/0x2440 [ 98.035018][ T5837] __alloc_frozen_pages_noprof+0x181/0x370 [ 98.040799][ T5837] alloc_pages_mpol+0x232/0x4a0 [ 98.045637][ T5837] allocate_slab+0x96/0x3a0 [ 98.050114][ T5837] ___slab_alloc+0xe94/0x18a0 [ 98.054762][ T5837] __slab_alloc+0x65/0x100 [ 98.059240][ T5837] __kmalloc_cache_noprof+0x411/0x6f0 [ 98.064584][ T5837] syslog_print+0xd2/0x590 [ 98.068975][ T5837] do_syslog+0x544/0x760 [ 98.073195][ T5837] __x64_sys_syslog+0x7c/0x90 [ 98.077848][ T5837] do_syscall_64+0xfa/0xfa0 [ 98.082325][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.088192][ T5837] page last free pid 5816 tgid 5816 stack trace: [ 98.094490][ T5837] free_unref_folios+0xdb3/0x14f0 [ 98.099486][ T5837] folios_put_refs+0x584/0x670 [ 98.104227][ T5837] free_pages_and_swap_cache+0x277/0x520 [ 98.109836][ T5837] tlb_flush_mmu+0x3a0/0x680 [ 98.114402][ T5837] tlb_finish_mmu+0xc3/0x1d0 [ 98.118966][ T5837] vms_clear_ptes+0x42c/0x540 [ 98.123622][ T5837] vms_complete_munmap_vmas+0x206/0x8a0 [ 98.129149][ T5837] do_vmi_align_munmap+0x364/0x440 [ 98.134261][ T5837] do_vmi_munmap+0x253/0x2e0 [ 98.138922][ T5837] __vm_munmap+0x207/0x380 [ 98.143331][ T5837] __x64_sys_munmap+0x60/0x70 [ 98.148008][ T5837] do_syscall_64+0xfa/0xfa0 [ 98.152497][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.158367][ T5837] [ 98.160686][ T5837] Memory state around the buggy address: [ 98.166306][ T5837] ffff88806e625380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.174356][ T5837] ffff88806e625400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.182416][ T5837] >ffff88806e625480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.190479][ T5837] ^ [ 98.194528][ T5837] ffff88806e625500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.198555][ T5915] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 98.202580][ T5837] ffff88806e625580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.211081][ T5915] usb 4-1: config 5 has no interface number 0 [ 98.218838][ T5837] ================================================================== [ 98.218924][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.225850][ T5915] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 98.236470][ T5837] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.236488][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 98.236510][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.236523][ T5837] Workqueue: hci3 hci_rx_work [ 98.236546][ T5837] Call Trace: [ 98.236554][ T5837] [ 98.236562][ T5837] dump_stack_lvl+0x99/0x250 [ 98.236582][ T5837] ? __asan_memcpy+0x40/0x70 [ 98.236599][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.236615][ T5837] ? __pfx__printk+0x10/0x10 [ 98.236636][ T5837] vpanic+0x237/0x6d0 [ 98.236661][ T5837] ? __pfx_vpanic+0x10/0x10 [ 98.236680][ T5837] ? preempt_schedule+0xae/0xc0 [ 98.236698][ T5837] ? __pfx_preempt_schedule+0x10/0x10 [ 98.236719][ T5837] panic+0xb9/0xc0 [ 98.236739][ T5837] ? __pfx_panic+0x10/0x10 [ 98.236760][ T5837] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 98.236788][ T5837] ? l2cap_connect_cfm+0x6e4/0x1040 [ 98.236811][ T5837] check_panic_on_warn+0x89/0xb0 [ 98.236830][ T5837] ? l2cap_connect_cfm+0x6e4/0x1040 [ 98.236851][ T5837] end_report+0x78/0x160 [ 98.236871][ T5837] kasan_report+0x129/0x150 [ 98.236891][ T5837] ? l2cap_connect_cfm+0x6e4/0x1040 [ 98.236916][ T5837] l2cap_connect_cfm+0x6e4/0x1040 [ 98.236941][ T5837] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 98.236965][ T5837] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 98.236986][ T5837] hci_connect_cfm+0x95/0x140 [ 98.237007][ T5837] le_conn_complete_evt+0xfb8/0x1500 [ 98.237033][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 98.237053][ T5837] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 98.237072][ T5837] ? __asan_memcpy+0x40/0x70 [ 98.237089][ T5837] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.237108][ T5837] ? skb_pull_data+0xfb/0x200 [ 98.237131][ T5837] hci_le_conn_complete_evt+0x187/0x450 [ 98.237158][ T5837] hci_event_packet+0x78f/0x1200 [ 98.237177][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 98.237197][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 98.237213][ T5837] ? kcov_remote_start+0x4d3/0x7f0 [ 98.237235][ T5837] ? local_clock_noinstr+0xe0/0xe0 [ 98.237254][ T5837] ? hci_send_to_monitor+0xe2/0x570 [ 98.237277][ T5837] hci_rx_work+0x46a/0xe80 [ 98.237297][ T5837] ? process_scheduled_works+0x9ef/0x17b0 [ 98.237320][ T5837] process_scheduled_works+0xae1/0x17b0 [ 98.237353][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.237381][ T5837] worker_thread+0x8a0/0xda0 [ 98.237404][ T5837] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 98.237425][ T5837] ? __kthread_parkme+0x7b/0x200 [ 98.237451][ T5837] kthread+0x711/0x8a0 [ 98.237469][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 98.237490][ T5837] ? __pfx_kthread+0x10/0x10 [ 98.237507][ T5837] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.237523][ T5837] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.237540][ T5837] ? __pfx_kthread+0x10/0x10 [ 98.237556][ T5837] ret_from_fork+0x4bc/0x870 [ 98.237578][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 98.237602][ T5837] ? __switch_to_asm+0x39/0x70 [ 98.237620][ T5837] ? __switch_to_asm+0x33/0x70 [ 98.237638][ T5837] ? __pfx_kthread+0x10/0x10 [ 98.237654][ T5837] ret_from_fork_asm+0x1a/0x30 [ 98.237680][ T5837] [ 98.239438][ T5837] Kernel Offset: disabled