last executing test programs: 8.356720622s ago: executing program 2 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x442100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000480)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0xfffffffffffffffe, 0x40, 0x0, 0x4, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x49, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0xb5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 8.172307986s ago: executing program 2 (id=122): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="000104deffffe0e0271c8c961787"], 0x0, 0x0}) 7.850308163s ago: executing program 1 (id=124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = socket$kcm(0x10, 0x2, 0x0) fchown(r4, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) socket$inet6(0xa, 0x2, 0x8) 7.39454923s ago: executing program 1 (id=127): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000040)={0x0, 0xe, 0x5, {0x5, 0x23, "00a7c1"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000380)={0x0, 0x22, 0x19, {[@main=@item_4={0x3, 0x0, 0xa, "c1cc3d3a"}, @main=@item_012={0x2, 0x0, 0xb, "818f"}, @main=@item_012={0x1, 0x0, 0x9, "d9"}, @local=@item_4={0x3, 0x2, 0x1, "ca84b65f"}, @local=@item_4={0x3, 0x2, 0xa, "9418758b"}, @global=@item_4={0x3, 0x1, 0xb, "c35200a8"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x37a}}}}, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x20, 0xd, 0x2, '_2'}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x41}, &(0x7f0000000680)={0x20, 0x1, 0xbe, "d1025bb41dd691002f1d23f2688f763a9c6685bee93a407f8cf9d73c331c27795c0097cee028b20f1b7e3389fc12e5e8fc860fe81aff72bee9d537dbf32c4deea1a03f58a51e710b1869a2c9b4ae86f176bd6461b4158221b5af009a276a26eca19713c4dc57fd79480f64a8d3f21380eeb81459a7c9e9f2a62abb06a8e6c57dd90118d49253928623637dc264e79c89645fd7b0912c021b305c4f83903f8f1ba380bf36f7a2ade428bb0cbf7faf9f0b9da08b74ad00bfa48253b2f0fbfc"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x4}}) 6.330957162s ago: executing program 2 (id=128): kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0xcc9dd, 0x0, 0x1000}], 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000040)=0xfffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x402c5342, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000240)={r4, &(0x7f0000000100)='SEG6\x00', 0x82280, &(0x7f0000000140)={@align=0xfffffffffffffffe, {0x2, 0x6, 0x6, 0x8001}}, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x7}) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000380)=0xc6, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8000, 0x9, 0x0, 0x77, 0x0, 0x3, 0xc002004c4, 0x4000001004, 0x4, 0x8, 0x4000000000000000, 0x7f, 0x366817b8, 0x2800000000000000, 0x5, 0x7], 0xe000, 0x3013d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setresuid(0x0, 0x0, 0xee00) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.55919496s ago: executing program 2 (id=132): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x40, 0x10, 0x5, 0x5, {{0x10, 0x4, 0x2, 0x1e, 0x40, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0xb, 0x8b, [@broadcast, @rand_addr=0x64010102]}, @end, @timestamp_prespec={0x44, 0xc, 0x8e, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x8487}]}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x0, 0xb, "b3b5e1886bdf3cad2c"}]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000400)={&(0x7f0000000140)=[{0x1e, 0xa011, 0x0, 0x0}, {0x8, 0x1000, 0x0, 0x0}], 0x2}) 5.32017414s ago: executing program 1 (id=134): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) 5.220354227s ago: executing program 1 (id=135): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000000c0)={0x3, "a8df7802c53b418126a7aed1c00000000000e7ffffffffdeffff0000df00", 0x2, 0x7, 0x1, 0x200000, 0x4000000, 0x2}) (fail_nth: 4) 5.074287918s ago: executing program 1 (id=136): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea002090425070013fd42fb"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)={0x20, 0x14, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000000000000900020073797a30000000000500040000000000050001000700e9ff0d0003006269746d61703a6970000000050005000a0000000900020073797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080), 0xf0000000000000, 0x6c0480) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x4}]}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086610, 0x0) read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) r5 = socket(0xa, 0x3, 0x3a) listen(r5, 0x6) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000000)={0x19ebe14d, "a8df7802c53b418126a7aed1c00000000000e7ffffffffdeffff0000df00", 0x2, 0x7, 0x0, 0x4, 0x7010400, 0x2}) 4.24937654s ago: executing program 0 (id=138): syz_usb_connect$uac3(0x0, 0xba, &(0x7f0000000140)=ANY=[@ANYBLOB="1201300100000040820582054000010203010902a8000301ffc010080b0002010130070904000000010130000a2401104400120d00001324030301040604020600000005007f00800014240202050203ff03000000080008000100000013240303010561037893", @ANYBLOB="c0dd77b0203ee9d6"], 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x2}, 0x18, 0x1) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000003d40), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) 4.110232469s ago: executing program 0 (id=139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x442100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000480)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0xfffffffffffffffe, 0x40, 0x0, 0x4, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x49, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0xb5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 4.031240876s ago: executing program 0 (id=141): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f5000905820200"], 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) (fail_nth: 3) 3.885649698s ago: executing program 2 (id=142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x2, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @multicast2, @local}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@generic={0x13, 0x2}]}}}}}}, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xfffffffd}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000500)={'bridge_slave_0\x00', {0x2, 0x0, @empty}}) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a80)={0x14, 0x1a, 0x229, 0x0, 0x56, {0x2}}, 0x14}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0xfffffff6}, 0xc) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) r9 = creat(&(0x7f0000000380)='./file0\x00', 0x80) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xcb, &(0x7f0000000440)={0x0, 0x1, 0xe, 0x0, 0x6b7}, 0xc) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18010000", @ANYRES16, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x810}, 0x20000801) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRESHEX=r8], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$lan78xx(r10, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) syz_usb_control_io$hid(r10, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="070000001f004edee43b9cd105752715303ebc8c1b2053689470bbf12266bca0461ea87ffd264feaaecc0e736c12e218274086d0a9e61f594b8564118f197441f2c7809f7870"], 0x0}, 0x0) 3.247574505s ago: executing program 3 (id=144): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000040)={0x0, 0xe, 0x5, {0x5, 0x23, "00a7c1"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000380)={0x0, 0x22, 0x19, {[@main=@item_4={0x3, 0x0, 0xa, "c1cc3d3a"}, @main=@item_012={0x2, 0x0, 0xb, "818f"}, @main=@item_012={0x1, 0x0, 0x9, "d9"}, @local=@item_4={0x3, 0x2, 0x1, "ca84b65f"}, @local=@item_4={0x3, 0x2, 0xa, "9418758b"}, @global=@item_4={0x3, 0x1, 0xb, "c35200a8"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x37a}}}}, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x20, 0xd, 0x2, '_2'}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x41}, &(0x7f0000000680)={0x20, 0x1, 0xbe, "d1025bb41dd691002f1d23f2688f763a9c6685bee93a407f8cf9d73c331c27795c0097cee028b20f1b7e3389fc12e5e8fc860fe81aff72bee9d537dbf32c4deea1a03f58a51e710b1869a2c9b4ae86f176bd6461b4158221b5af009a276a26eca19713c4dc57fd79480f64a8d3f21380eeb81459a7c9e9f2a62abb06a8e6c57dd90118d49253928623637dc264e79c89645fd7b0912c021b305c4f83903f8f1ba380bf36f7a2ade428bb0cbf7faf9f0b9da08b74ad00bfa48253b2f0fbfc"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x4}}) 2.46635088s ago: executing program 0 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0xdff}) socket$alg(0x26, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x87) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x406180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000aa2000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f01c4", 0x30}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000001040), 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.224980715s ago: executing program 1 (id=146): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4f4741494e20274c69988cdc6b4acc7485667a5765681562136e652043617074757265205377"], 0x37) close(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040396371"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) (async) write$proc_mixer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4f4741494e20274c69988cdc6b4acc7485667a5765681562136e652043617074757265205377"], 0x37) (async) close(r0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0) (async) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040396371"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 1.843284205s ago: executing program 0 (id=147): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000180), &(0x7f00000003c0)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r2, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10005}, @any, 0x0, 0x1, 0xa, 0xfffffffffffffffd, 0x0, 0x8, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '@\'#*\\$]]\',\x00'}]}, 0x17) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000098000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002e5400128028000180090001006c617374000000001800028008000140ffff00000c000240ffffffffecffffff140001800c000100636f756e7465720004000280140001800c0001006e6f747261636b000400028008000340000001"], 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003980)=[{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000400)="efd90e78e5e1a1d565f0ac7afb3d00ace6796dff1fc569ed823ccb7a2cc404d09c94c9cb011723a8d251fccbc4ba27d414991dcd4f9ebc9e3354b270d97efaa946caf5ca9ba911c5e80b101b3325888184b58c6dc70c6e119940fdc5bd30012a935428905c68f90ca2bc9b992f9dcbf7819530a9eb91a00d62e9d854531fadd838088c0c8a81e6571ff3e9", 0x8b}, {&(0x7f00000004c0)="e26b3c505db2eb0ee994329aecd0d3b9452f5af91d1fd1d9333c", 0x1a}, {&(0x7f00000007c0)="67d40bf490b3befc77816943d0e8135484eada46036111b97b5ec03cc8704eb7d71e7fd88720973841127d399c61bc44cfef891d1d2ea1f995f8fe30c7b12b2404214096b5d3936b74f9b111833e8e80de596dd5e401c1ba8ad7a22611875a907756e44f6772ff78dcfbb08e826ff3e2ffdb3c2e7bc5944202e546fa5c929344c1ecd39f2db01cd0d71ae292227c4765c39e9bb898bb35e7b900acb210071cd90df9142e95d8b3c9b00488c64cbc7cf61ae9450ca7a4adfa1439fd7fd067a99a81126df36820be3b555bbfca7509ad2ace90bca1e0d6f9edbbacffd55b040536119b", 0xe2}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="9965038979df53f51bec0b66660eae3c1489cf251b4276126dd45186bcd21c6444b4bbb9e0f775fcdfbb3a5793ccfbe223af38e13f8f40803601126914a4205cc0d79082cc9c7bc4d6de19dc39bc346cb713971ea62dd2e4cc0488663f553247322ec6e423dcac3e9851e353546f55e495467e3b98bf02ad76a60f7a99c5120463328b303377cfd109d009cee4fdfe0714236588", 0x94}], 0x5, &(0x7f00000025c0)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xc0, 0x117, 0x2, 0xa8, "4807d686f7091452b1f3c1b824e6299771adee014af45201febbfe7095db789e21399f7390c14e8874e907df2c1f88f3df9bbeef654456a108b6ebd43e697b0dcb2fdabeb5374f8941da64e85c817207dae5a4c834991a7c77f58e0d0ee725bdd00eebd0cbfac451dc9bf2e4c9be9d6f58e198bfc4f530b66d387b95816384d8922decf2758ce1dbc3d205b5f21aefd08fc4a63fec3aa9b90292a4fc0b11769d22d3bdb95249215c"}, @iv={0x78, 0x117, 0x2, 0x61, "6de36e307b8446a1089fd68666bd560a35fb3c7a9413d44c9c93293bd9f765003070c61995adbc1ba14cee58a3c12169ff3b687b9e47e3e0d809789d76ba79705f7347cbba4dda6b6de1f54c5cc00e5dd143f03c0124efd1a3080c4e18688a8162"}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x80, 0x117, 0x2, 0x69, "3e8a63a812dd75d601cefac4bf3ca3282b25e5128b80f7644032f0fa8cc6be49e972493dbfae30f5fde5369088ec75454fb201b6ba7f3c6d865fc7de080a309854e6ce4ed3bf007555cc5bc1555477f4cb2059680732318c1a765898552f1b3bf3bd7b9d4fa607296e"}], 0x1e8, 0x4}, {0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000027c0)="27efbbd73b5588eeb70d8171f4220103a7332278b3de997d5c673ba4a980184c3252f9f8b377a34883ec3ac38ba0ae82c01babe4721f61c514e9492a817f297c81a961719b09ebb6a99ca371b8d5a04e46cbb686ed43e27eda6177d581446355827c5bc19208645dc1f61cc11799b81dadbb8bda7318", 0x76}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000003840)="127317a59956cea346b1bad82a5b6d8c9be4155f74d78b57f23c295638377757f5dd5fd73a9bcadba37249b6eb62ef31bf1148bca997e9f26459c4a7cb12ab1c7b35a7bbecc386f0346e8b2e05c2fa8f4b43a06c1cf110055dddee8c733ec5f9b6f050d987fde3049ed35361f4603c51fae3d449aef9c2be349a603a816a0e02ad0aab5c428ae7a8d4e60ac3a63c695bee75f727f8b4420b9f58751a49b4efd9c67210cdd3e254897eedb65b1c7b01c6d8a1525191c17ee7896187adcea3c6defdef99e3e9d97fed2fc25f814802dbab98cd6555aad75005f7f24dd62c2947eef0dd71093f787659357a781a13324c4981f899", 0xf3}], 0x3, 0x0, 0x0, 0x20008000}], 0x2, 0x4008880) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000000380)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x1d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r11, 0x40045532, &(0x7f0000000100)) r12 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r12, 0x4112, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="020027bd7000fedbdf256d0000000c0099007f0004001d000100cf5875414b0d4ae7246736142f9c4af8ed3ee9071f16d75dffdd5e52c7087f8ad7f30e9b6ac967"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x84) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f0000000080)) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0xa, 0x801, 0x84) 1.430927802s ago: executing program 3 (id=148): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x402c000) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x480102) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x0, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r1 = socket$inet6(0xa, 0x1, 0xffffffff) r2 = syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x18a3c85) read$FUSE(r3, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) migrate_pages(r2, 0x4, 0x0, &(0x7f0000000180)=0x200080000a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x2, 0x3, 0xe}, 0xfffffffffffffe59) 990.778281ms ago: executing program 3 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x442100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000480)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0xfffffffffffffffe, 0x40, 0x0, 0x4, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x49, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0xb5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 930.076532ms ago: executing program 0 (id=150): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000a40)={r0, &(0x7f0000000180)='\x00', 0xc8000, &(0x7f0000000900)={@_ha_fsid={[0x0, 0x4]}, {0xf800, 0x4, 0x0, 0xfffffffffffffff8}}, 0x3, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000a00)=0xfffff000}) write$binfmt_script(r3, &(0x7f0000000a80)={'#! ', './file0', [{0x20, '+#\x05))\'\xca'}, {0x20, '/dev/full\x00'}, {0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, ')'}, {0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '\xbb\xbb\xbb\xbb\xbb\xbb'}, {0x20, 'net/tcp6\x00'}, {0x20, '%,&'}], 0xa, "a871d23d0dbc086f514bfed625f4a2980c596b5fc5b1169953bcd2f940be7ca356beea6a8c7c8f8c5fdff24a76b0b21297f955b0b7093a5bd494b9b57a1940aef6c265d4b6b60eb97e44edcfcc1adba117a4c37df77a07d0ada3824b889d43"}, 0xa2) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) read$FUSE(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000a00)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400280, 0x0) ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000000140)={0x1, 0x2}) (async) syz_usb_control_io(r4, &(0x7f00000002c0)={0x2c, &(0x7f0000000980)={0x0, 0xc, 0x6f, {0x6f, 0x6, "47b34d51498a04e0c8e256eed963000000000000004c4f52273dbf1dd6cf35f7a6bfe38babc0ff12a5eaeae8518ab6904983b231353b9fe3f497d08f8fa2a3c28598854643986f07c21a868c76300bb76ca4ad362b002909ed3cfb3dafbdf5105f0e0691433d021f8ef2e75936"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0x30, 0xa1, {0xa1, 0x24, "9a246ea9702e90ff9c4a23b041ca5ff9e494168facc963bc5cae21cca2301176f8e05b33fb61984a578c562fe37f116422cf636cac72d12375fc83cedca2fb066fd8d139b590b74df804aa869f3251ba3674814f9d97629220721733c5a9c6440cd015b650ffcdb3c5353f70ad79b7f717998e74d8095aeab03466f6c816c57eb7866ad1b095abe8b95610c7d4c6e11cfd5843d047601c0bf0c0c92d0a19f6"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="00039b0000009b036be2fe0e3f62de950a6e8796fe55acd1acaab506bfd46fe9a4f0cd24ac76c6e88af9c4f199381e983b062ac290a89c2ed3c7e7cb33e280a0429bc5243bc1129df765414f22de238144bebbcb6b10c8cfc61b0f40f553bf1777c803f5db39be382365c4cb77f24f9977103f751e2302d90000dd87424db9b18b1d05dfea529643425fbf879dab2a19b8f454dca764c976ce8f80ffffff3a2a12"], &(0x7f0000000280)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf2, 0x8, 0x1, 0x1, "0dcfae8b", "7f66f0b1"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x2, 0x1, 0x2, 0xfff7, 0x2}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x40, 0xc, 0xd4, "58e2c40e40d2ea7e1f5b8eca59a1a77ed292d7248f23391e6ada6ad56f3f84806199659328b50bde6ff084fc5d60d7876bd9ba5ceba11001fb60e7b628862f2f94a67a8dc0b10dfde386eb518ca80b433b320d52d7a3f1f7fb0171428746e35ea1f107c05e652e2462070236b2e4cfda73038cfff56685e03351c27ab666214fa9bd4882b184bcb0b0448b6f8aae26edb4cebb6a3bdbf7887c8adb50656b8749a7e9c264954e8c055aa4b3a2f9f44a8f091b645087e65d387358fe89728c18c4ec7bb51a2a26ba62a6d55c038dc6afdd60b111f4"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x14}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x10, 0x4, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000600)={0x40, 0xb, 0x2, "4ca6"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "a8df"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000780)={0x40, 0x1c, 0x5e, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xbe}}) 811.386161ms ago: executing program 3 (id=151): kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0xcc9dd, 0x0, 0x1000}], 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000040)=0xfffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x402c5342, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000240)={r4, &(0x7f0000000100)='SEG6\x00', 0x82280, &(0x7f0000000140)={@align=0xfffffffffffffffe, {0x2, 0x6, 0x6, 0x8001}}, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x7}) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000380)=0xc6, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8000, 0x9, 0x0, 0x77, 0x0, 0x3, 0xc002004c4, 0x4000001004, 0x4, 0x8, 0x4000000000000000, 0x7f, 0x366817b8, 0x2800000000000000, 0x5, 0x7], 0xe000, 0x3013d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setresuid(0x0, 0x0, 0xee00) ioctl$KVM_RUN(r4, 0xae80, 0x0) 602.26699ms ago: executing program 3 (id=152): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xb9a, 0x0, 0x8001}]}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, 0xee01, &(0x7f0000000000)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000240)=""/234) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000080)=0x40000001) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000210000000010ff020000000000000000000000000001", @ANYRES16=r4], 0x340a) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x105c00) ioctl$BLKCLOSEZONE(r7, 0x40101287, &(0x7f0000000380)={0x8, 0x4}) r8 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r6, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="34a9de6bd7bf6861118f95f1f8e5e8f18261e600e62712f1627bfff46fb8cff18515f5c6855b6de7e907186049b489cb4deb83ce69f22808fdab041f50311c50e1ee8ccede125d11e0682c", 0x4b}, {&(0x7f0000000180)="80526345ed25dcb502741b2277fe7b926fbb8e90d1eb2cc8734a6b456f03667269d32f9a3adf67022fadbf79ef333b3d705a9d6e0b9b863ab227e12b99e2558932ee7485f12048def3e745aa0d77336a6aaa4cfa352760a83694eecfa5fe1e33e92d9a33c7455b4019bbd312add6a8cf4d2f58e302bdc8f0956c5bca26b40e0000000000000000", 0x87}, {&(0x7f0000000780)="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", 0x1cf}], 0x3}}], 0x2, 0x20004840) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 386.345346ms ago: executing program 2 (id=153): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41dee000000003a49490834eb160000020023"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=154): getpriority(0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 80.538476][ T5604] cgroup: Unknown subsys name 'net' [ 80.769879][ T5604] cgroup: Unknown subsys name 'cpuset' [ 80.835001][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.795038][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.255866][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.281079][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.301474][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.326495][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.340289][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.352787][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.353667][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.374484][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.386632][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.388821][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.396947][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.398358][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.400725][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.402043][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.403651][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.403888][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.404285][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.417678][ T4936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.418830][ T4936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.441356][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.033730][ T32] cfg80211: failed to load regulatory.db [ 87.476012][ T60] Bluetooth: hci1: command tx timeout [ 87.476211][ T60] Bluetooth: hci0: command tx timeout [ 87.554198][ T4936] Bluetooth: hci2: command tx timeout [ 87.554352][ T4936] Bluetooth: hci3: command tx timeout [ 87.775154][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.776382][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.776549][ T5617] bridge_slave_0: entered allmulticast mode [ 87.779141][ T5617] bridge_slave_0: entered promiscuous mode [ 87.837251][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.837545][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.837809][ T5617] bridge_slave_1: entered allmulticast mode [ 87.839841][ T5617] bridge_slave_1: entered promiscuous mode [ 87.909333][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.909522][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.909679][ T5614] bridge_slave_0: entered allmulticast mode [ 87.911844][ T5614] bridge_slave_0: entered promiscuous mode [ 87.915859][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.916157][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.916734][ T5618] bridge_slave_0: entered allmulticast mode [ 87.919972][ T5618] bridge_slave_0: entered promiscuous mode [ 87.967360][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.968675][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.969320][ T5614] bridge_slave_1: entered allmulticast mode [ 87.972767][ T5614] bridge_slave_1: entered promiscuous mode [ 87.978149][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.978439][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.980931][ T5618] bridge_slave_1: entered allmulticast mode [ 87.984986][ T5618] bridge_slave_1: entered promiscuous mode [ 88.021715][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.075979][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.165908][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.166335][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.166957][ T5616] bridge_slave_0: entered allmulticast mode [ 88.168980][ T5616] bridge_slave_0: entered promiscuous mode [ 88.205225][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.211605][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.212039][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.212407][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.212680][ T5616] bridge_slave_1: entered allmulticast mode [ 88.215513][ T5616] bridge_slave_1: entered promiscuous mode [ 88.262630][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.274458][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.296032][ T5617] team0: Port device team_slave_0 added [ 88.360530][ T5617] team0: Port device team_slave_1 added [ 88.402907][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.426408][ T5614] team0: Port device team_slave_0 added [ 88.429726][ T5618] team0: Port device team_slave_0 added [ 88.433903][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.470051][ T5614] team0: Port device team_slave_1 added [ 88.473303][ T5618] team0: Port device team_slave_1 added [ 88.500009][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.500022][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.500038][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.575076][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.575096][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.575113][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.630061][ T5616] team0: Port device team_slave_0 added [ 88.661455][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.661474][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.661504][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.666570][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.666585][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.666610][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.675510][ T5616] team0: Port device team_slave_1 added [ 88.681864][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.681878][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.681904][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.685427][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.685455][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.685479][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.805531][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.805548][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.805574][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.840418][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.840437][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.840462][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.856287][ T5617] hsr_slave_0: entered promiscuous mode [ 88.858642][ T5617] hsr_slave_1: entered promiscuous mode [ 88.987962][ T5614] hsr_slave_0: entered promiscuous mode [ 88.989348][ T5614] hsr_slave_1: entered promiscuous mode [ 88.990767][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 88.990843][ T5614] Cannot create hsr debugfs directory [ 89.001703][ T5618] hsr_slave_0: entered promiscuous mode [ 89.007625][ T5618] hsr_slave_1: entered promiscuous mode [ 89.009874][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 89.009897][ T5618] Cannot create hsr debugfs directory [ 89.137234][ T5616] hsr_slave_0: entered promiscuous mode [ 89.138572][ T5616] hsr_slave_1: entered promiscuous mode [ 89.139658][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 89.139684][ T5616] Cannot create hsr debugfs directory [ 89.555388][ T60] Bluetooth: hci0: command tx timeout [ 89.555427][ T60] Bluetooth: hci1: command tx timeout [ 89.635500][ T60] Bluetooth: hci3: command tx timeout [ 89.635539][ T60] Bluetooth: hci2: command tx timeout [ 90.533496][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.599295][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.605422][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.631676][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.638104][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.682067][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.706358][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.741739][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.876004][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.918117][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.932084][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.960407][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.963128][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.001989][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.024817][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.059677][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.212963][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.251706][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.264913][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.308226][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.313300][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.349389][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.381990][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.412472][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.558004][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.600845][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.606439][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.634348][ T60] Bluetooth: hci0: command tx timeout [ 91.635029][ T4936] Bluetooth: hci1: command tx timeout [ 91.650321][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.670480][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.700132][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.711813][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.714261][ T60] Bluetooth: hci3: command tx timeout [ 91.714392][ T4936] Bluetooth: hci2: command tx timeout [ 91.745898][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.790574][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.939288][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.999796][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.000070][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.066510][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.067084][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.095188][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.196833][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.262986][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.263138][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.288373][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.333471][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.333597][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.423330][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.452957][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.581671][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.581914][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.683437][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.683656][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.728211][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.785931][ T1564] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.786083][ T1564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.826323][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.826599][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.570961][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.719598][ T4936] Bluetooth: hci1: command tx timeout [ 93.719635][ T4936] Bluetooth: hci0: command tx timeout [ 93.794661][ T60] Bluetooth: hci2: command tx timeout [ 93.795257][ T60] Bluetooth: hci3: command tx timeout [ 94.026774][ T5617] veth0_vlan: entered promiscuous mode [ 94.113010][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.123865][ T5617] veth1_vlan: entered promiscuous mode [ 94.431977][ T5617] veth0_macvtap: entered promiscuous mode [ 94.500116][ T5617] veth1_macvtap: entered promiscuous mode [ 94.543710][ T5618] veth0_vlan: entered promiscuous mode [ 94.560541][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.617756][ T5618] veth1_vlan: entered promiscuous mode [ 94.623253][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.646459][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.683342][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.738718][ T3444] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.765578][ T3444] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.772184][ T3444] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.802259][ T3444] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.019609][ T5618] veth0_macvtap: entered promiscuous mode [ 95.028369][ T5616] veth0_vlan: entered promiscuous mode [ 95.160033][ T5618] veth1_macvtap: entered promiscuous mode [ 95.241052][ T5616] veth1_vlan: entered promiscuous mode [ 95.252679][ T5614] veth0_vlan: entered promiscuous mode [ 95.349211][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.350574][ T5614] veth1_vlan: entered promiscuous mode [ 95.372524][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.372548][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.414316][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.487684][ T2982] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499219][ T2982] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.507618][ T2982] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.513743][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.513763][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.514673][ T2982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.633433][ T5616] veth0_macvtap: entered promiscuous mode [ 95.739840][ T5616] veth1_macvtap: entered promiscuous mode [ 95.945039][ T5614] veth0_macvtap: entered promiscuous mode [ 96.101254][ T5614] veth1_macvtap: entered promiscuous mode [ 96.283451][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.319683][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.319707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.355796][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.384764][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.412376][ T168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.427548][ T168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.444716][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.451013][ T168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.482126][ T168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.565864][ T168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.600304][ T168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.600755][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.600772][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.609178][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.612396][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.615822][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.961902][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10121, setting to 1024 [ 96.961964][ T32] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 96.961990][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.317523][ T32] usb 4-1: config 0 descriptor?? [ 97.417281][ T5771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.828631][ T5771] 9p: Bad value for 'rfdno' [ 97.856277][ T5775] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.892253][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.892275][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.340257][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.340281][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.416162][ T3444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.416182][ T3444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.486824][ T32] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 98.486870][ T32] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 98.486914][ T32] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 98.486940][ T32] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 98.486964][ T32] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 98.487080][ T32] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 98.487106][ T32] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 98.487129][ T32] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 98.487154][ T32] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 98.487178][ T32] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 98.489617][ T32] asus 0003:0B05:1ABE.0001: unexpected long global item [ 98.492605][ T32] asus 0003:0B05:1ABE.0001: Asus hid parse failed: -22 [ 98.492804][ T32] asus 0003:0B05:1ABE.0001: probe with driver asus failed with error -22 [ 98.809760][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.809784][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.121220][ T824] usb 4-1: USB disconnect, device number 2 [ 99.740210][ T5784] binder: BINDER_SET_CONTEXT_MGR already set [ 99.740227][ T5784] binder: 5781:5784 ioctl 4018620d 200000001000 returned -16 [ 99.955226][ T5772] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 100.259287][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.259328][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.259372][ T5772] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 100.259396][ T5772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.380636][ T5772] usb 1-1: config 0 descriptor?? [ 101.304130][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.689103][ T5804] bridge_slave_0 (unregistering): left allmulticast mode [ 101.689140][ T5804] bridge_slave_0 (unregistering): left promiscuous mode [ 101.689271][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.755328][ T5772] usbhid 1-1:0.0: can't add hid device: -71 [ 101.755451][ T5772] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.813466][ T5772] usb 1-1: USB disconnect, device number 2 [ 101.850431][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.022678][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.022708][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.025414][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.025443][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.025462][ T10] usb 4-1: SerialNumber: syz [ 102.533518][ T10] usb 4-1: 0:2 : does not exist [ 102.817924][ T5824] binder: 5823:5824 ioctl c0306201 200000000080 returned -14 [ 103.527072][ T10] usb 4-1: USB disconnect, device number 3 [ 104.209093][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.417942][ T824] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.494236][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.598009][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.598048][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.598156][ T824] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 104.598182][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.649715][ T824] usb 1-1: config 0 descriptor?? [ 104.659426][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.659487][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.659512][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.717900][ T10] usb 4-1: config 0 descriptor?? [ 104.783218][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 104.794166][ T32] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.964462][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.964528][ T32] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.964616][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.024699][ T32] usb 2-1: config 0 descriptor?? [ 105.061838][ T32] pwc: Askey VC010 type 2 USB webcam detected. [ 105.136482][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 105.137681][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 105.139042][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 105.140830][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 105.141954][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 105.145725][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 105.148239][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 105.156780][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 105.268410][ T824] playstation 0003:054C:0BA0.0002: item fetching failed at offset 5/7 [ 105.272935][ T824] playstation 0003:054C:0BA0.0002: Parse failed [ 105.273229][ T824] playstation 0003:054C:0BA0.0002: probe with driver playstation failed with error -22 [ 105.530441][ T32] pwc: recv_control_msg error -32 req 02 val 2b00 [ 105.545468][ T32] pwc: recv_control_msg error -32 req 02 val 2700 [ 105.551027][ T32] pwc: recv_control_msg error -32 req 02 val 2c00 [ 105.565606][ T32] pwc: recv_control_msg error -32 req 04 val 1000 [ 105.804881][ T32] pwc: recv_control_msg error -32 req 04 val 1300 [ 105.822828][ T9] usb 1-1: USB disconnect, device number 3 [ 105.834696][ T32] pwc: recv_control_msg error -32 req 04 val 1400 [ 105.848154][ T32] pwc: recv_control_msg error -32 req 02 val 2000 [ 105.866075][ T32] pwc: recv_control_msg error -32 req 02 val 2100 [ 105.868404][ T32] pwc: recv_control_msg error -32 req 04 val 1500 [ 105.884211][ T32] pwc: recv_control_msg error -32 req 02 val 2500 [ 105.887520][ T32] pwc: recv_control_msg error -32 req 02 val 2400 [ 105.937167][ T32] pwc: recv_control_msg error -32 req 02 val 2600 [ 105.943301][ T32] pwc: recv_control_msg error -32 req 02 val 2900 [ 105.955657][ T32] pwc: recv_control_msg error -32 req 02 val 2800 [ 106.068711][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 106.069321][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 106.069781][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 106.075894][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 106.076855][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 106.079114][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 106.081484][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 106.118814][ T10] pwc: Registered as video103. [ 106.133911][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 106.227716][ T32] pwc: recv_control_msg error -71 req 04 val 1200 [ 106.227878][ T32] videodev: could not get a free minor [ 106.227887][ T32] pwc: Failed to register as video device (-23). [ 106.257484][ T32] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -23 [ 106.348436][ T32] usb 2-1: USB disconnect, device number 2 [ 106.367182][ T10] usb 4-1: USB disconnect, device number 4 [ 106.444519][ T5856] netlink: 64 bytes leftover after parsing attributes in process `syz.2.24'. [ 106.531805][ T5858] netlink: 'syz.0.25': attribute type 12 has an invalid length. [ 106.531830][ T5858] netlink: 172 bytes leftover after parsing attributes in process `syz.0.25'. [ 107.199214][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c436400: rx timeout, send abort [ 107.344225][ T824] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 107.516633][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.516673][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.516716][ T824] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 107.516742][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.585327][ T824] usb 3-1: config 0 descriptor?? [ 107.700762][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036e01800: rx timeout, send abort [ 107.700927][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c436400: abort rx timeout. Force session deactivation [ 108.084490][ T5733] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.194709][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cadac00: rx timeout, send abort [ 108.200871][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036e01800: abort rx timeout. Force session deactivation [ 108.236634][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.236673][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.236715][ T5733] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 108.236742][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.245624][ T5733] usb 1-1: config 0 descriptor?? [ 108.696714][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cadac00: abort rx timeout. Force session deactivation [ 108.947772][ T5733] usbhid 1-1:0.0: can't add hid device: -71 [ 108.947902][ T5733] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 109.010921][ T5733] usb 1-1: USB disconnect, device number 4 [ 109.532128][ T5893] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 109.642811][ T5733] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.797098][ T5733] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.797161][ T5733] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.797187][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.804212][ T10] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 109.839012][ T5733] usb 2-1: config 0 descriptor?? [ 109.868887][ T824] usbhid 3-1:0.0: can't add hid device: -71 [ 109.869007][ T824] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 109.914688][ T824] usb 3-1: USB disconnect, device number 2 [ 109.921273][ T5733] pwc: Askey VC010 type 2 USB webcam detected. [ 109.934127][ T10] usb 4-1: device descriptor read/64, error -71 [ 110.247289][ T10] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 110.281222][ T5733] pwc: recv_control_msg error -32 req 02 val 2b00 [ 110.282761][ T5733] pwc: recv_control_msg error -32 req 02 val 2700 [ 110.283660][ T5733] pwc: recv_control_msg error -32 req 02 val 2c00 [ 110.305252][ T5733] pwc: recv_control_msg error -32 req 04 val 1000 [ 110.310811][ T5733] pwc: recv_control_msg error -32 req 04 val 1300 [ 110.311406][ T5733] pwc: recv_control_msg error -32 req 04 val 1400 [ 110.312013][ T5733] pwc: recv_control_msg error -32 req 02 val 2000 [ 110.312569][ T5733] pwc: recv_control_msg error -32 req 02 val 2100 [ 110.326152][ T5733] pwc: recv_control_msg error -32 req 04 val 1500 [ 110.326847][ T5733] pwc: recv_control_msg error -32 req 02 val 2500 [ 110.327855][ T5733] pwc: recv_control_msg error -32 req 02 val 2400 [ 110.328509][ T5733] pwc: recv_control_msg error -32 req 02 val 2600 [ 110.331365][ T5733] pwc: recv_control_msg error -32 req 02 val 2900 [ 110.332094][ T5733] pwc: recv_control_msg error -32 req 02 val 2800 [ 110.346149][ T5733] pwc: recv_control_msg error -71 req 04 val 1100 [ 110.346635][ T5733] pwc: recv_control_msg error -71 req 04 val 1200 [ 110.394196][ T10] usb 4-1: device descriptor read/64, error -71 [ 110.448147][ T5733] pwc: Registered as video103. [ 110.525519][ T5733] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 110.531294][ T10] usb usb4-port1: attempt power cycle [ 110.650517][ T5733] usb 2-1: USB disconnect, device number 3 [ 110.904616][ T10] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 110.925371][ T10] usb 4-1: device descriptor read/8, error -71 [ 111.030988][ T5915] netlink: 'syz.1.44': attribute type 12 has an invalid length. [ 111.031012][ T5915] netlink: 172 bytes leftover after parsing attributes in process `syz.1.44'. [ 111.164441][ T824] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 111.195901][ T10] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 111.215327][ T10] usb 4-1: device descriptor read/8, error -71 [ 111.325004][ T10] usb usb4-port1: unable to enumerate USB device [ 111.340054][ T824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.340111][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.340140][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.340162][ T824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.340209][ T824] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 111.340233][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.372494][ T824] usb 3-1: config 0 descriptor?? [ 111.580951][ T5921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.643241][ T5922] FAULT_INJECTION: forcing a failure. [ 111.643241][ T5922] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.643278][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.1.45 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 111.643303][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.643316][ T5922] Call Trace: [ 111.643324][ T5922] [ 111.643333][ T5922] dump_stack_lvl+0xe8/0x150 [ 111.643368][ T5922] should_fail_ex+0x46b/0x600 [ 111.643409][ T5922] _copy_to_user+0x31/0xb0 [ 111.643439][ T5922] simple_read_from_buffer+0xe1/0x170 [ 111.643476][ T5922] proc_fail_nth_read+0x1be/0x230 [ 111.643511][ T5922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.643545][ T5922] ? rw_verify_area+0x2ac/0x4e0 [ 111.643579][ T5922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.643613][ T5922] vfs_read+0x212/0xa80 [ 111.643651][ T5922] ? __pfx_vfs_read+0x10/0x10 [ 111.643675][ T5922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 111.643706][ T5922] ? lockdep_hardirqs_on+0x7a/0x110 [ 111.643737][ T5922] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 111.643769][ T5922] ? mutex_lock_nested+0x152/0x1d0 [ 111.643794][ T5922] ? fdget_pos+0x252/0x320 [ 111.643834][ T5922] ksys_read+0x156/0x270 [ 111.643858][ T5922] ? __pfx_ksys_read+0x10/0x10 [ 111.643886][ T5922] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 111.643922][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.643948][ T5922] do_syscall_64+0x15f/0xf80 [ 111.643977][ T5922] ? trace_irq_disable+0x3b/0x140 [ 111.644005][ T5922] ? clear_bhb_loop+0x40/0x90 [ 111.644031][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.644052][ T5922] RIP: 0033:0x7fa2c495d60e [ 111.644073][ T5922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.644091][ T5922] RSP: 002b:00007fa2c2bccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.644113][ T5922] RAX: ffffffffffffffda RBX: 00007fa2c2bcd6c0 RCX: 00007fa2c495d60e [ 111.644126][ T5922] RDX: 000000000000000f RSI: 00007fa2c2bcd0a0 RDI: 0000000000000004 [ 111.644136][ T5922] RBP: 00007fa2c2bcd090 R08: 0000000000000000 R09: 0000000000000000 [ 111.644147][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.644156][ T5922] R13: 00007fa2c4c16128 R14: 00007fa2c4c16090 R15: 00007ffdc53759b8 [ 111.644185][ T5922] [ 112.020285][ T824] hid_parser_main: 176 callbacks suppressed [ 112.020304][ T824] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 112.020323][ T824] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 112.020337][ T824] hid-u2fzero 0003:10C4:8ACF.0003: item fetching failed at offset 2/5 [ 112.023010][ T824] hid-u2fzero 0003:10C4:8ACF.0003: probe with driver hid-u2fzero failed with error -22 [ 112.235264][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.389909][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.389950][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.389992][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 112.390018][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.436257][ T10] usb 2-1: config 0 descriptor?? [ 112.887015][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 112.887157][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 112.937631][ T10] usb 2-1: USB disconnect, device number 4 [ 113.924356][ T5006] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 113.988733][ T824] usb 3-1: USB disconnect, device number 3 [ 114.084153][ T5006] usb 4-1: Using ep0 maxpacket: 16 [ 114.086756][ T5006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 114.117604][ T5006] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 114.117626][ T5006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.117638][ T5006] usb 4-1: Product: syz [ 114.117647][ T5006] usb 4-1: Manufacturer: syz [ 114.117656][ T5006] usb 4-1: SerialNumber: syz [ 114.159413][ T5006] usb 4-1: config 0 descriptor?? [ 114.218547][ T5006] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 114.218588][ T5006] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 114.808864][ T5006] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 114.851206][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.851843][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.264200][ T5728] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.310662][ T5954] Zero length message leads to an empty skb [ 115.440391][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.440430][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.440470][ T5728] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 115.440491][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.460080][ T5006] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 115.460111][ T5006] em28xx 4-1:0.0: board has no eeprom [ 115.514658][ T5728] usb 1-1: config 0 descriptor?? [ 115.649656][ T5006] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 115.649690][ T5006] em28xx 4-1:0.0: dvb set to bulk mode. [ 115.649962][ T824] em28xx 4-1:0.0: Binding DVB extension [ 115.765431][ T5006] usb 4-1: USB disconnect, device number 9 [ 115.778530][ T5006] em28xx 4-1:0.0: Disconnecting em28xx [ 116.031502][ T5728] usbhid 1-1:0.0: can't add hid device: -71 [ 116.031623][ T5728] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 116.118945][ T824] em28xx 4-1:0.0: Registering input extension [ 116.132649][ T5006] em28xx 4-1:0.0: Closing input extension [ 116.176734][ T5728] usb 1-1: USB disconnect, device number 5 [ 116.248709][ T6010] netlink: 'syz.3.65': attribute type 12 has an invalid length. [ 116.248733][ T6010] netlink: 172 bytes leftover after parsing attributes in process `syz.3.65'. [ 116.285145][ T824] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.488369][ T824] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 116.488406][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.488428][ T824] usb 3-1: Product: syz [ 116.488443][ T824] usb 3-1: Manufacturer: syz [ 116.488458][ T824] usb 3-1: SerialNumber: syz [ 116.620139][ T6014] FAULT_INJECTION: forcing a failure. [ 116.620139][ T6014] name failslab, interval 1, probability 0, space 0, times 1 [ 116.620194][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.1.66 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.620223][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.620236][ T6014] Call Trace: [ 116.620244][ T6014] [ 116.620252][ T6014] dump_stack_lvl+0xe8/0x150 [ 116.620284][ T6014] should_fail_ex+0x46b/0x600 [ 116.620322][ T6014] should_failslab+0xa8/0x100 [ 116.620340][ T6014] __kmalloc_noprof+0xdf/0x7b0 [ 116.620351][ T6014] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 116.620363][ T6014] ? alloc_pipe_info+0x1fc/0x4d0 [ 116.620376][ T6014] ? alloc_pipe_info+0xe8/0x4d0 [ 116.620391][ T6014] alloc_pipe_info+0x1fc/0x4d0 [ 116.620405][ T6014] splice_direct_to_actor+0xa19/0xc80 [ 116.620427][ T6014] ? kstrtouint+0x6e/0xe0 [ 116.620446][ T6014] ? __pfx_direct_splice_actor+0x10/0x10 [ 116.620466][ T6014] ? __pfx_aa_file_perm+0x10/0x10 [ 116.620480][ T6014] ? __lock_acquire+0x6b5/0x2cf0 [ 116.620498][ T6014] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 116.620523][ T6014] do_splice_direct+0x19b/0x2a0 [ 116.620542][ T6014] ? __pfx_do_splice_direct+0x10/0x10 [ 116.620561][ T6014] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 116.620583][ T6014] ? rw_verify_area+0x25b/0x4e0 [ 116.620605][ T6014] do_sendfile+0x547/0x7e0 [ 116.620621][ T6014] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 116.620644][ T6014] ? __pfx_do_sendfile+0x10/0x10 [ 116.620667][ T6014] __se_sys_sendfile64+0x144/0x1a0 [ 116.620684][ T6014] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 116.620704][ T6014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.620717][ T6014] do_syscall_64+0x15f/0xf80 [ 116.620736][ T6014] ? clear_bhb_loop+0x40/0x90 [ 116.620751][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.620763][ T6014] RIP: 0033:0x7fa2c499cdd9 [ 116.620776][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.620787][ T6014] RSP: 002b:00007fa2c2bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 116.620801][ T6014] RAX: ffffffffffffffda RBX: 00007fa2c4c15fa0 RCX: 00007fa2c499cdd9 [ 116.620813][ T6014] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 116.620825][ T6014] RBP: 00007fa2c2bee090 R08: 0000000000000000 R09: 0000000000000000 [ 116.620837][ T6014] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 116.620850][ T6014] R13: 00007fa2c4c16038 R14: 00007fa2c4c15fa0 R15: 00007ffdc53759b8 [ 116.620881][ T6014] [ 116.672287][ T5006] em28xx 4-1:0.0: Freeing device [ 117.018641][ T824] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 117.018689][ T824] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 117.102205][ T824] usb 3-1: USB disconnect, device number 4 [ 117.658439][ T6032] FAULT_INJECTION: forcing a failure. [ 117.658439][ T6032] name failslab, interval 1, probability 0, space 0, times 0 [ 117.658465][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.2.72 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.658480][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.658488][ T6032] Call Trace: [ 117.658492][ T6032] [ 117.658498][ T6032] dump_stack_lvl+0xe8/0x150 [ 117.658520][ T6032] should_fail_ex+0x46b/0x600 [ 117.658544][ T6032] should_failslab+0xa8/0x100 [ 117.658559][ T6032] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 117.658580][ T6032] ? alloc_vmap_area+0x229/0x1480 [ 117.658602][ T6032] alloc_vmap_area+0x229/0x1480 [ 117.658628][ T6032] ? __pfx_alloc_vmap_area+0x10/0x10 [ 117.658648][ T6032] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 117.658662][ T6032] ? __get_vm_area_node+0x171/0x350 [ 117.658679][ T6032] ? copy_process+0x89b/0x4460 [ 117.658696][ T6032] __get_vm_area_node+0x226/0x350 [ 117.658718][ T6032] __vmalloc_node_range_noprof+0x36a/0x1750 [ 117.658738][ T6032] ? copy_process+0x89b/0x4460 [ 117.658752][ T6032] ? percpu_ref_get_many+0x19/0x140 [ 117.658783][ T6032] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.658806][ T6032] ? rcu_is_watching+0x15/0xb0 [ 117.658818][ T6032] ? memcpy_and_pad+0x48/0x80 [ 117.658841][ T6032] __vmalloc_node_noprof+0xc2/0x100 [ 117.658860][ T6032] ? copy_process+0x89b/0x4460 [ 117.658874][ T6032] ? copy_process+0x89b/0x4460 [ 117.658890][ T6032] dup_task_struct+0x298/0x840 [ 117.658905][ T6032] ? rt_spin_unlock+0x160/0x200 [ 117.658922][ T6032] copy_process+0x89b/0x4460 [ 117.658954][ T6032] ? __pfx_copy_process+0x10/0x10 [ 117.658976][ T6032] vhost_task_create+0x1f9/0x380 [ 117.658996][ T6032] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 117.659015][ T6032] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 117.659034][ T6032] ? __pfx_vhost_task_create+0x10/0x10 [ 117.659058][ T6032] ? __pfx_vhost_task_fn+0x10/0x10 [ 117.659088][ T6032] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.659106][ T6032] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.659124][ T6032] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 117.659141][ T6032] ? mutex_lock_nested+0x152/0x1d0 [ 117.659155][ T6032] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 117.659169][ T6032] kvm_mmu_post_init_vm+0x147/0x2d0 [ 117.659188][ T6032] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 117.659213][ T6032] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 117.659230][ T6032] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.659253][ T6032] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.659271][ T6032] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.659288][ T6032] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 117.659306][ T6032] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 117.659325][ T6032] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 117.659341][ T6032] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.659359][ T6032] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.659376][ T6032] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 117.659394][ T6032] ? rt_write_unlock+0x190/0x230 [ 117.659411][ T6032] kvm_vcpu_ioctl+0xa65/0xfe0 [ 117.659434][ T6032] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.659465][ T6032] ? __fget_files+0x2a/0x420 [ 117.659485][ T6032] ? __fget_files+0x2a/0x420 [ 117.659501][ T6032] ? __fget_files+0x3a6/0x420 [ 117.659517][ T6032] ? __fget_files+0x2a/0x420 [ 117.659536][ T6032] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.659553][ T6032] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.659572][ T6032] __se_sys_ioctl+0xff/0x170 [ 117.659585][ T6032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.659599][ T6032] do_syscall_64+0x15f/0xf80 [ 117.659616][ T6032] ? trace_irq_disable+0x3b/0x140 [ 117.659633][ T6032] ? clear_bhb_loop+0x40/0x90 [ 117.659649][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.659661][ T6032] RIP: 0033:0x7fa27a1bcdd9 [ 117.659674][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.659685][ T6032] RSP: 002b:00007fa27840e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.659700][ T6032] RAX: ffffffffffffffda RBX: 00007fa27a435fa0 RCX: 00007fa27a1bcdd9 [ 117.659709][ T6032] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 117.659716][ T6032] RBP: 00007fa27840e090 R08: 0000000000000000 R09: 0000000000000000 [ 117.659723][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.659731][ T6032] R13: 00007fa27a436038 R14: 00007fa27a435fa0 R15: 00007fff5fdf9698 [ 117.659750][ T6032] [ 117.659973][ T6032] syz.2.72: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 117.660151][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.2.72 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.660166][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.660172][ T6032] Call Trace: [ 117.660177][ T6032] [ 117.660182][ T6032] dump_stack_lvl+0xe8/0x150 [ 117.660201][ T6032] warn_alloc+0x263/0x3e0 [ 117.660216][ T6032] ? kasan_quarantine_put+0xbb/0x1f0 [ 117.660236][ T6032] ? __pfx_warn_alloc+0x10/0x10 [ 117.660250][ T6032] ? __get_vm_area_node+0x23f/0x350 [ 117.660267][ T6032] ? __get_vm_area_node+0x171/0x350 [ 117.660285][ T6032] ? copy_process+0x89b/0x4460 [ 117.660301][ T6032] ? __get_vm_area_node+0x23f/0x350 [ 117.660323][ T6032] __vmalloc_node_range_noprof+0x38f/0x1750 [ 117.660342][ T6032] ? percpu_ref_get_many+0x19/0x140 [ 117.660373][ T6032] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.660395][ T6032] ? rcu_is_watching+0x15/0xb0 [ 117.660408][ T6032] ? memcpy_and_pad+0x48/0x80 [ 117.660428][ T6032] __vmalloc_node_noprof+0xc2/0x100 [ 117.660447][ T6032] ? copy_process+0x89b/0x4460 [ 117.660460][ T6032] ? copy_process+0x89b/0x4460 [ 117.660476][ T6032] dup_task_struct+0x298/0x840 [ 117.660491][ T6032] ? rt_spin_unlock+0x160/0x200 [ 117.660507][ T6032] copy_process+0x89b/0x4460 [ 117.660540][ T6032] ? __pfx_copy_process+0x10/0x10 [ 117.660562][ T6032] vhost_task_create+0x1f9/0x380 [ 117.660581][ T6032] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 117.660600][ T6032] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 117.660619][ T6032] ? __pfx_vhost_task_create+0x10/0x10 [ 117.660643][ T6032] ? __pfx_vhost_task_fn+0x10/0x10 [ 117.660664][ T6032] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.660682][ T6032] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.660699][ T6032] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 117.660717][ T6032] ? mutex_lock_nested+0x152/0x1d0 [ 117.660730][ T6032] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 117.660745][ T6032] kvm_mmu_post_init_vm+0x147/0x2d0 [ 117.660759][ T6032] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 117.660783][ T6032] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 117.660799][ T6032] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.660823][ T6032] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.660844][ T6032] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.660861][ T6032] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 117.660883][ T6032] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 117.660902][ T6032] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 117.660918][ T6032] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.660935][ T6032] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.660953][ T6032] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 117.660970][ T6032] ? rt_write_unlock+0x190/0x230 [ 117.660987][ T6032] kvm_vcpu_ioctl+0xa65/0xfe0 [ 117.661010][ T6032] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.661041][ T6032] ? __fget_files+0x2a/0x420 [ 117.661060][ T6032] ? __fget_files+0x2a/0x420 [ 117.661083][ T6032] ? __fget_files+0x3a6/0x420 [ 117.661099][ T6032] ? __fget_files+0x2a/0x420 [ 117.661118][ T6032] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.661135][ T6032] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.661153][ T6032] __se_sys_ioctl+0xff/0x170 [ 117.661166][ T6032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.661180][ T6032] do_syscall_64+0x15f/0xf80 [ 117.661197][ T6032] ? trace_irq_disable+0x3b/0x140 [ 117.661213][ T6032] ? clear_bhb_loop+0x40/0x90 [ 117.661229][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.661241][ T6032] RIP: 0033:0x7fa27a1bcdd9 [ 117.661253][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.661263][ T6032] RSP: 002b:00007fa27840e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.661275][ T6032] RAX: ffffffffffffffda RBX: 00007fa27a435fa0 RCX: 00007fa27a1bcdd9 [ 117.661284][ T6032] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 117.661291][ T6032] RBP: 00007fa27840e090 R08: 0000000000000000 R09: 0000000000000000 [ 117.661298][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.661305][ T6032] R13: 00007fa27a436038 R14: 00007fa27a435fa0 R15: 00007fff5fdf9698 [ 117.661324][ T6032] [ 117.661420][ T6032] Mem-Info: [ 117.661426][ T6032] active_anon:6501 inactive_anon:0 isolated_anon:0 [ 117.661426][ T6032] active_file:2824 inactive_file:39938 isolated_file:0 [ 117.661426][ T6032] unevictable:768 dirty:196 writeback:0 [ 117.661426][ T6032] slab_reclaimable:11631 slab_unreclaimable:94829 [ 117.661426][ T6032] mapped:25498 shmem:1840 pagetables:1110 [ 117.661426][ T6032] sec_pagetables:0 bounce:0 [ 117.661426][ T6032] kernel_misc_reclaimable:0 [ 117.661426][ T6032] free:1343921 free_pcp:6047 free_cma:0 [ 117.661460][ T6032] Node 0 active_anon:26004kB inactive_anon:0kB active_file:11296kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101992kB dirty:780kB writeback:0kB shmem:5824kB kernel_stack:13096kB pagetables:4296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 117.661490][ T6032] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 117.661518][ T6032] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.661554][ T6032] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 117.661576][ T6032] Node 0 DMA32 free:1435088kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26004kB inactive_anon:0kB active_file:11296kB inactive_file:159544kB unevictable:1536kB writepending:780kB zspages:0kB present:3129332kB managed:2552828kB mlocked:0kB bounce:0kB free_pcp:24180kB local_pcp:11784kB free_cma:0kB [ 117.661614][ T6032] lowmem_reserve[]: 0 0 0 0 0 [ 117.661633][ T6032] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 117.661667][ T6032] lowmem_reserve[]: 0 0 0 0 0 [ 117.661686][ T6032] Node 1 Normal free:3925236kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.661722][ T6032] lowmem_reserve[]: 0 0 0 0 0 [ 117.661742][ T6032] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 117.662070][ T6032] Node 0 DMA32: 1482*4kB (U) 871*8kB (UE) 323*16kB (UE) 26*32kB (ME) 35*64kB (UME) 22*128kB (UM) 18*256kB (UM) 19*512kB (M) 14*1024kB (UME) 9*2048kB (UM) 333*4096kB (M) = 1435024kB [ 117.662173][ T6032] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 117.662232][ T6032] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 13*16kB (UM) 13*32kB (UM) 9*64kB (UM) 6*128kB (UM) 1*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 957*4096kB (M) = 3925236kB [ 117.662322][ T6032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.662333][ T6032] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.662342][ T6032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.662352][ T6032] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.662361][ T6032] 44598 total pagecache pages [ 117.662366][ T6032] 0 pages in swap cache [ 117.662370][ T6032] Free swap = 124996kB [ 117.662374][ T6032] Total swap = 124996kB [ 117.662379][ T6032] 2097051 pages RAM [ 117.662383][ T6032] 0 pages HighMem/MovableOnly [ 117.662387][ T6032] 427004 pages reserved [ 117.662392][ T6032] 0 pages cma reserved [ 118.798750][ T824] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.828492][ T6047] netlink: 'syz.1.77': attribute type 12 has an invalid length. [ 118.828513][ T6047] netlink: 172 bytes leftover after parsing attributes in process `syz.1.77'. [ 118.905626][ T5720] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 118.947162][ T824] usb 3-1: device descriptor read/64, error -71 [ 119.070967][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.071004][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.071040][ T5720] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 119.071062][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.104530][ T5720] usb 4-1: config 0 descriptor?? [ 119.184244][ T824] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.238872][ T6055] FAULT_INJECTION: forcing a failure. [ 119.238872][ T6055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.238904][ T6055] CPU: 1 UID: 0 PID: 6055 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.238919][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.238927][ T6055] Call Trace: [ 119.238931][ T6055] [ 119.238936][ T6055] dump_stack_lvl+0xe8/0x150 [ 119.238958][ T6055] should_fail_ex+0x46b/0x600 [ 119.238982][ T6055] _copy_from_user+0x2d/0xb0 [ 119.238997][ T6055] vcs_write+0x4fa/0x11c0 [ 119.239020][ T6055] ? __pfx_vcs_write+0x10/0x10 [ 119.239035][ T6055] ? rw_verify_area+0x25b/0x4e0 [ 119.239057][ T6055] vfs_writev+0x4c6/0x9a0 [ 119.239073][ T6055] ? __pfx_vcs_write+0x10/0x10 [ 119.239089][ T6055] ? __pfx_vfs_writev+0x10/0x10 [ 119.239112][ T6055] ? __fget_files+0x2a/0x420 [ 119.239140][ T6055] ? __fget_files+0x3a6/0x420 [ 119.239156][ T6055] ? __fget_files+0x2a/0x420 [ 119.239178][ T6055] do_writev+0x15a/0x2e0 [ 119.239195][ T6055] ? __pfx_do_writev+0x10/0x10 [ 119.239215][ T6055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.239228][ T6055] do_syscall_64+0x15f/0xf80 [ 119.239246][ T6055] ? trace_irq_disable+0x3b/0x140 [ 119.239262][ T6055] ? clear_bhb_loop+0x40/0x90 [ 119.239277][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.239289][ T6055] RIP: 0033:0x7fbf1fbfcdd9 [ 119.239302][ T6055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.239312][ T6055] RSP: 002b:00007fbf1de4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 119.239326][ T6055] RAX: ffffffffffffffda RBX: 00007fbf1fe75fa0 RCX: 00007fbf1fbfcdd9 [ 119.239335][ T6055] RDX: 0000000000000002 RSI: 00002000000017c0 RDI: 0000000000000003 [ 119.239343][ T6055] RBP: 00007fbf1de4e090 R08: 0000000000000000 R09: 0000000000000000 [ 119.239350][ T6055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.239357][ T6055] R13: 00007fbf1fe76038 R14: 00007fbf1fe75fa0 R15: 00007ffe02e6ff18 [ 119.239375][ T6055] [ 119.344991][ T824] usb 3-1: device descriptor read/64, error -71 [ 119.485258][ T824] usb usb3-port1: attempt power cycle [ 119.652898][ T5720] playstation 0003:054C:0BA0.0004: item fetching failed at offset 5/7 [ 119.659461][ T5720] playstation 0003:054C:0BA0.0004: Parse failed [ 119.659537][ T5720] playstation 0003:054C:0BA0.0004: probe with driver playstation failed with error -22 [ 119.811849][ T5728] usb 4-1: USB disconnect, device number 10 [ 119.844227][ T5006] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.884520][ T5772] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 119.944211][ T824] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.965712][ T824] usb 3-1: device descriptor read/8, error -71 [ 120.017493][ T5006] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 120.017559][ T5006] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 120.017585][ T5006] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.019854][ T5006] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.019880][ T5006] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 120.019900][ T5006] usb 2-1: Product: syz [ 120.019915][ T5006] usb 2-1: Manufacturer: syz [ 120.019928][ T5006] usb 2-1: SerialNumber: syz [ 120.034145][ T5006] usb 2-1: config 0 descriptor?? [ 120.038908][ T5006] hub 2-1:0.0: bad descriptor, ignoring hub [ 120.038945][ T5006] hub 2-1:0.0: probe with driver hub failed with error -5 [ 120.049742][ T5006] usb 2-1: selecting invalid altsetting 0 [ 120.076363][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.076397][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.076433][ T5772] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 120.076455][ T5772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.111462][ T5772] usb 1-1: config 0 descriptor?? [ 120.215978][ T824] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.246918][ T824] usb 3-1: device descriptor read/8, error -71 [ 120.362145][ T824] usb usb3-port1: unable to enumerate USB device [ 120.472503][ T5006] usb 2-1: USB disconnect, device number 5 [ 122.050191][ T6093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.90'. [ 122.094565][ T5772] usbhid 1-1:0.0: can't add hid device: -71 [ 122.094682][ T5772] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 122.126637][ T5772] usb 1-1: USB disconnect, device number 6 [ 122.160981][ T6097] FAULT_INJECTION: forcing a failure. [ 122.160981][ T6097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.161007][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.3.92 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.161022][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.161030][ T6097] Call Trace: [ 122.161035][ T6097] [ 122.161040][ T6097] dump_stack_lvl+0xe8/0x150 [ 122.161061][ T6097] should_fail_ex+0x46b/0x600 [ 122.161085][ T6097] _copy_to_user+0x31/0xb0 [ 122.161101][ T6097] simple_read_from_buffer+0xe1/0x170 [ 122.161123][ T6097] proc_fail_nth_read+0x1be/0x230 [ 122.161143][ T6097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.161171][ T6097] ? rw_verify_area+0x2ac/0x4e0 [ 122.161190][ T6097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.161209][ T6097] vfs_read+0x212/0xa80 [ 122.161226][ T6097] ? __pfx_vfs_read+0x10/0x10 [ 122.161239][ T6097] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.161258][ T6097] ? lockdep_hardirqs_on+0x7a/0x110 [ 122.161277][ T6097] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 122.161295][ T6097] ? mutex_lock_nested+0x152/0x1d0 [ 122.161308][ T6097] ? fdget_pos+0x252/0x320 [ 122.161330][ T6097] ksys_read+0x156/0x270 [ 122.161344][ T6097] ? __pfx_ksys_read+0x10/0x10 [ 122.161355][ T6097] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 122.161379][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.161393][ T6097] do_syscall_64+0x15f/0xf80 [ 122.161410][ T6097] ? trace_irq_disable+0x3b/0x140 [ 122.161427][ T6097] ? clear_bhb_loop+0x40/0x90 [ 122.161442][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.161454][ T6097] RIP: 0033:0x7f67f77ad60e [ 122.161467][ T6097] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.161477][ T6097] RSP: 002b:00007f67f5a45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.161497][ T6097] RAX: ffffffffffffffda RBX: 00007f67f5a466c0 RCX: 00007f67f77ad60e [ 122.161506][ T6097] RDX: 000000000000000f RSI: 00007f67f5a460a0 RDI: 0000000000000004 [ 122.161513][ T6097] RBP: 00007f67f5a46090 R08: 0000000000000000 R09: 0000000000000000 [ 122.161520][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.161527][ T6097] R13: 00007f67f7a66038 R14: 00007f67f7a65fa0 R15: 00007ffd09b34858 [ 122.161546][ T6097] [ 122.350901][ T5786] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.474215][ T5728] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.511209][ T5786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.511249][ T5786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.511288][ T5786] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 122.511314][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.540140][ T5786] usb 3-1: config 0 descriptor?? [ 122.646307][ T5728] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 122.648491][ T5728] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 122.648527][ T5728] usb 2-1: can't read configurations, error -61 [ 122.774247][ T5728] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.956688][ T5728] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 122.959071][ T5728] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 122.959119][ T5728] usb 2-1: can't read configurations, error -61 [ 122.959724][ T5728] usb usb2-port1: attempt power cycle [ 123.068382][ T5786] playstation 0003:054C:0BA0.0005: item fetching failed at offset 5/7 [ 123.069243][ T5786] playstation 0003:054C:0BA0.0005: Parse failed [ 123.069325][ T5786] playstation 0003:054C:0BA0.0005: probe with driver playstation failed with error -22 [ 123.220988][ T823] usb 3-1: USB disconnect, device number 9 [ 123.314610][ T5728] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.336086][ T5728] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 123.338207][ T5728] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 123.338247][ T5728] usb 2-1: can't read configurations, error -61 [ 123.459973][ T6119] batadv_slave_0: entered promiscuous mode [ 123.465352][ T5728] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 123.487353][ T5728] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 123.490186][ T5728] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 123.490224][ T5728] usb 2-1: can't read configurations, error -61 [ 123.499150][ T5728] usb usb2-port1: unable to enumerate USB device [ 123.612521][ T6119] warning: `syz.3.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.805361][ T6118] batadv_slave_0: left promiscuous mode [ 124.062472][ T6138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.106'. [ 124.204289][ T5728] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 124.356506][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.356544][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.356586][ T5728] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 124.356610][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.363102][ T5728] usb 3-1: config 0 descriptor?? [ 125.492785][ T6152] process 'syz.0.110' launched './file0' with NULL argv: empty string added [ 125.590559][ T5786] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 125.665775][ T5006] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 125.756845][ T5786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.756885][ T5786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.756929][ T5786] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 125.756953][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.815173][ T5786] usb 4-1: config 0 descriptor?? [ 125.840615][ T5006] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.840680][ T5006] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 125.840706][ T5006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.918692][ T5006] usb 2-1: config 0 descriptor?? [ 125.962845][ T5006] pwc: Askey VC010 type 2 USB webcam detected. [ 126.350995][ T5006] pwc: recv_control_msg error -32 req 02 val 2b00 [ 126.352716][ T5006] pwc: recv_control_msg error -32 req 02 val 2700 [ 126.353691][ T5006] pwc: recv_control_msg error -32 req 02 val 2c00 [ 126.370276][ T5006] pwc: recv_control_msg error -32 req 04 val 1000 [ 126.427995][ T5006] pwc: recv_control_msg error -32 req 04 val 1300 [ 126.429874][ T5006] pwc: recv_control_msg error -32 req 04 val 1400 [ 126.430767][ T5006] pwc: recv_control_msg error -32 req 02 val 2000 [ 126.432100][ T5786] playstation 0003:054C:0BA0.0006: item fetching failed at offset 5/7 [ 126.435705][ T5728] usbhid 3-1:0.0: can't add hid device: -71 [ 126.435824][ T5728] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 126.461047][ T5728] usb 3-1: USB disconnect, device number 10 [ 126.462715][ T6168] ======================================================= [ 126.462715][ T6168] WARNING: The mand mount option has been deprecated and [ 126.462715][ T6168] and is ignored by this kernel. Remove the mand [ 126.462715][ T6168] option from the mount to silence this warning. [ 126.462715][ T6168] ======================================================= [ 126.517990][ T5006] pwc: recv_control_msg error -32 req 02 val 2100 [ 126.518932][ T5006] pwc: recv_control_msg error -32 req 04 val 1500 [ 126.519654][ T5006] pwc: recv_control_msg error -32 req 02 val 2500 [ 126.522209][ T5006] pwc: recv_control_msg error -32 req 02 val 2400 [ 126.558465][ T5006] pwc: recv_control_msg error -32 req 02 val 2600 [ 126.561031][ T5006] pwc: recv_control_msg error -32 req 02 val 2900 [ 126.563465][ T5786] playstation 0003:054C:0BA0.0006: Parse failed [ 126.585768][ T5786] playstation 0003:054C:0BA0.0006: probe with driver playstation failed with error -22 [ 126.618461][ T5786] usb 4-1: USB disconnect, device number 11 [ 126.735748][ T4936] Bluetooth: Wrong link type (-57) [ 126.807402][ T5006] pwc: recv_control_msg error -71 req 04 val 1100 [ 126.808534][ T5006] pwc: recv_control_msg error -71 req 04 val 1200 [ 126.869262][ T5006] pwc: Registered as video103. [ 126.882015][ T5006] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 126.929735][ T5006] usb 2-1: USB disconnect, device number 10 [ 127.774194][ T5728] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 127.928442][ T5728] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.928506][ T5728] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.928532][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.002226][ T5728] usb 3-1: config 0 descriptor?? [ 128.022981][ T5728] pwc: Askey VC010 type 2 USB webcam detected. [ 128.160036][ T6201] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 128.160068][ T6201] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 128.243637][ T6204] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 128.243670][ T6204] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 128.246189][ T6201] vhci_hcd vhci_hcd.0: Device attached [ 128.246285][ T6204] vhci_hcd vhci_hcd.0: Device attached [ 128.264184][ T823] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.380326][ T6205] vhci_hcd: connection closed [ 128.396739][ T6202] vhci_hcd: connection closed [ 128.426781][ T5728] pwc: recv_control_msg error -32 req 02 val 2b00 [ 128.430543][ T5728] pwc: recv_control_msg error -32 req 02 val 2700 [ 128.431116][ T5728] pwc: recv_control_msg error -32 req 02 val 2c00 [ 128.431701][ T5728] pwc: recv_control_msg error -32 req 04 val 1000 [ 128.432862][ T5728] pwc: recv_control_msg error -32 req 04 val 1300 [ 128.444153][ T823] usb 1-1: Using ep0 maxpacket: 8 [ 128.444375][ T5728] pwc: recv_control_msg error -32 req 04 val 1400 [ 128.456423][ T5728] pwc: recv_control_msg error -32 req 02 val 2000 [ 128.468033][ T3444] vhci_hcd vhci_hcd.3: stop threads [ 128.468817][ T3444] vhci_hcd vhci_hcd.3: release socket [ 128.473886][ T823] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 128.512990][ T823] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 128.513020][ T823] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 128.513095][ T823] usb 1-1: Product: syz [ 128.513110][ T823] usb 1-1: Manufacturer: syz [ 128.513123][ T823] usb 1-1: SerialNumber: syz [ 128.563525][ T3444] vhci_hcd vhci_hcd.3: disconnect device [ 128.569249][ T3444] vhci_hcd vhci_hcd.3: stop threads [ 128.569274][ T3444] vhci_hcd vhci_hcd.3: release socket [ 128.616526][ T3444] vhci_hcd vhci_hcd.3: disconnect device [ 128.712162][ T5728] pwc: recv_control_msg error -71 req 04 val 1500 [ 128.717377][ T5728] pwc: recv_control_msg error -71 req 02 val 2500 [ 128.719787][ T5728] pwc: recv_control_msg error -71 req 02 val 2400 [ 128.727715][ T5728] pwc: recv_control_msg error -71 req 02 val 2600 [ 128.729671][ T5728] pwc: recv_control_msg error -71 req 02 val 2900 [ 128.730300][ T5728] pwc: recv_control_msg error -71 req 02 val 2800 [ 128.734687][ T5728] pwc: recv_control_msg error -71 req 04 val 1100 [ 128.736262][ T5728] pwc: recv_control_msg error -71 req 04 val 1200 [ 128.802272][ T5728] pwc: Registered as video103. [ 128.823647][ T5728] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 128.854122][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 128.932780][ T823] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 128.932810][ T823] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 128.932830][ T823] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 128.955288][ T5728] usb 3-1: USB disconnect, device number 11 [ 129.016278][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.016305][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.016374][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 129.016389][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.067055][ T9] usb 2-1: config 0 descriptor?? [ 129.141501][ T823] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 129.291891][ T5720] usb usb40-port1: attempt power cycle [ 129.374463][ T823] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 129.623374][ T823] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 129.638332][ T9] playstation 0003:054C:0BA0.0007: item fetching failed at offset 5/7 [ 129.639123][ T9] playstation 0003:054C:0BA0.0007: Parse failed [ 129.639193][ T9] playstation 0003:054C:0BA0.0007: probe with driver playstation failed with error -22 [ 129.699507][ T823] usb 1-1: USB disconnect, device number 7 [ 129.749845][ T823] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 129.785419][ T5772] usb 2-1: USB disconnect, device number 11 [ 129.951708][ T5720] usb usb40-port1: unable to enumerate USB device [ 130.030021][ T823] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 130.031012][ T823] visor 1-1:1.0: device disconnected [ 130.414250][ T824] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 130.488102][ T6239] FAULT_INJECTION: forcing a failure. [ 130.488102][ T6239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.488129][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.1.135 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.488144][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.488151][ T6239] Call Trace: [ 130.488156][ T6239] [ 130.488161][ T6239] dump_stack_lvl+0xe8/0x150 [ 130.488181][ T6239] should_fail_ex+0x46b/0x600 [ 130.488205][ T6239] _copy_to_user+0x31/0xb0 [ 130.488222][ T6239] video_usercopy+0xe0a/0x1450 [ 130.488239][ T6239] ? __pfx___video_do_ioctl+0x10/0x10 [ 130.488252][ T6239] ? __pfx_video_usercopy+0x10/0x10 [ 130.488270][ T6239] ? __fget_files+0x2a/0x420 [ 130.488289][ T6239] ? __fget_files+0x2a/0x420 [ 130.488305][ T6239] ? __fget_files+0x3a6/0x420 [ 130.488324][ T6239] v4l2_ioctl+0x190/0x1e0 [ 130.488343][ T6239] ? __pfx_v4l2_ioctl+0x10/0x10 [ 130.488362][ T6239] __se_sys_ioctl+0xff/0x170 [ 130.488375][ T6239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.488388][ T6239] do_syscall_64+0x15f/0xf80 [ 130.488405][ T6239] ? trace_irq_disable+0x3b/0x140 [ 130.488422][ T6239] ? clear_bhb_loop+0x40/0x90 [ 130.488437][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.488449][ T6239] RIP: 0033:0x7fa2c499cdd9 [ 130.488461][ T6239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.488476][ T6239] RSP: 002b:00007fa2c2bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.488491][ T6239] RAX: ffffffffffffffda RBX: 00007fa2c4c15fa0 RCX: 00007fa2c499cdd9 [ 130.488500][ T6239] RDX: 00002000000000c0 RSI: 00000000c050561a RDI: 0000000000000003 [ 130.488508][ T6239] RBP: 00007fa2c2bee090 R08: 0000000000000000 R09: 0000000000000000 [ 130.488515][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.488522][ T6239] R13: 00007fa2c4c16038 R14: 00007fa2c4c15fa0 R15: 00007ffdc53759b8 [ 130.488540][ T6239] [ 130.804193][ T824] usb 3-1: Using ep0 maxpacket: 32 [ 130.806528][ T824] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.806555][ T824] usb 3-1: config 0 has no interface number 0 [ 130.809098][ T824] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 130.809129][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.809151][ T824] usb 3-1: Product: syz [ 130.809165][ T824] usb 3-1: Manufacturer: syz [ 130.809179][ T824] usb 3-1: SerialNumber: syz [ 130.813492][ T824] usb 3-1: config 0 descriptor?? [ 130.881932][ T824] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 130.881960][ T824] usb 3-1: selecting invalid altsetting 1 [ 130.881976][ T824] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 130.942157][ T824] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.973166][ T824] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 130.974755][ T823] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 130.999932][ T824] usb 3-1: media controller created [ 131.028163][ T824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.101217][ T824] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 131.101256][ T824] zl10353_read_register: readreg error (reg=127, ret==-71) [ 131.120698][ T824] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 131.137410][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.138368][ T823] usb 2-1: not running at top speed; connect to a high speed hub [ 131.139602][ T823] usb 2-1: config 61 has an invalid interface number: 37 but max is 0 [ 131.139629][ T823] usb 2-1: config 61 has no interface number 0 [ 131.139663][ T823] usb 2-1: config 61 interface 37 has no altsetting 0 [ 131.150913][ T823] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 131.150945][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.150967][ T823] usb 2-1: Product: syz [ 131.150982][ T823] usb 2-1: Manufacturer: syz [ 131.150998][ T823] usb 2-1: SerialNumber: syz [ 131.308406][ T824] usb 3-1: USB disconnect, device number 12 [ 131.463600][ T6248] capability: warning: `syz.0.138' uses deprecated v2 capabilities in a way that may be insecure [ 131.655672][ T823] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 131.906956][ T6255] syz.2.142 uses obsolete (PF_INET,SOCK_PACKET) [ 132.054277][ T6210] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.214491][ T6210] usb 1-1: Using ep0 maxpacket: 32 [ 132.219022][ T6210] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 132.219054][ T6210] usb 1-1: config 0 has no interface number 0 [ 132.219171][ T6210] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.219196][ T6210] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 132.244318][ T824] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 132.273930][ T6210] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 132.274768][ T6210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.274794][ T6210] usb 1-1: Product: syz [ 132.274809][ T6210] usb 1-1: Manufacturer: syz [ 132.274825][ T6210] usb 1-1: SerialNumber: syz [ 132.354346][ T6210] usb 1-1: config 0 descriptor?? [ 132.384279][ T824] usb 3-1: device descriptor read/64, error -71 [ 132.386166][ T6210] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 132.562380][ T6253] FAULT_INJECTION: forcing a failure. [ 132.562380][ T6253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.562417][ T6253] CPU: 1 UID: 0 PID: 6253 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.562441][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.562453][ T6253] Call Trace: [ 132.562462][ T6253] [ 132.562470][ T6253] dump_stack_lvl+0xe8/0x150 [ 132.562504][ T6253] should_fail_ex+0x46b/0x600 [ 132.562548][ T6253] _copy_from_user+0x2d/0xb0 [ 132.562573][ T6253] wext_handle_ioctl+0xc7/0x1d0 [ 132.562594][ T6253] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 132.562626][ T6253] sock_ioctl+0x15c/0x7f0 [ 132.562652][ T6253] ? __pfx_sock_ioctl+0x10/0x10 [ 132.562675][ T6253] ? __fget_files+0x2a/0x420 [ 132.562703][ T6253] ? __fget_files+0x3a6/0x420 [ 132.562728][ T6253] ? __fget_files+0x2a/0x420 [ 132.562756][ T6253] ? bpf_lsm_file_ioctl+0x9/0x20 [ 132.562773][ T6253] ? __pfx_sock_ioctl+0x10/0x10 [ 132.562785][ T6253] __se_sys_ioctl+0xff/0x170 [ 132.562805][ T6253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.562829][ T6253] do_syscall_64+0x15f/0xf80 [ 132.562859][ T6253] ? trace_irq_disable+0x3b/0x140 [ 132.562886][ T6253] ? clear_bhb_loop+0x40/0x90 [ 132.562911][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.562935][ T6253] RIP: 0033:0x7fbf1fbfcdd9 [ 132.562948][ T6253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.562958][ T6253] RSP: 002b:00007fbf1de4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.562977][ T6253] RAX: ffffffffffffffda RBX: 00007fbf1fe75fa0 RCX: 00007fbf1fbfcdd9 [ 132.562993][ T6253] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000003 [ 132.563006][ T6253] RBP: 00007fbf1de4e090 R08: 0000000000000000 R09: 0000000000000000 [ 132.563020][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.563032][ T6253] R13: 00007fbf1fe76038 R14: 00007fbf1fe75fa0 R15: 00007ffe02e6ff18 [ 132.563065][ T6253] [ 132.602404][ T6210] usb 1-1: qt2_attach - failed to power on unit: -71 [ 132.617578][ T6210] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 132.644141][ T824] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 132.657034][ T38] audit: type=1326 audit(1777317598.778:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.1.136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2c499cdd9 code=0x0 [ 132.774097][ T824] usb 3-1: device descriptor read/64, error -71 [ 132.794159][ T823] gp8psk: usb out operation failed. [ 132.794184][ T823] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 132.794208][ T823] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 132.858640][ T823] usb 2-1: USB disconnect, device number 12 [ 132.865873][ T6210] usb 1-1: USB disconnect, device number 8 [ 132.884450][ T824] usb usb3-port1: attempt power cycle [ 132.904135][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 133.058154][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.058183][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.058276][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 133.058302][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.061584][ T9] usb 4-1: config 0 descriptor?? [ 133.079329][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.079477][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.237730][ T824] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 133.265912][ T824] usb 3-1: device descriptor read/8, error -71 [ 133.503195][ T9] playstation 0003:054C:0BA0.0008: item fetching failed at offset 5/7 [ 133.514216][ T824] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 133.514782][ T9] playstation 0003:054C:0BA0.0008: Parse failed [ 133.514834][ T9] playstation 0003:054C:0BA0.0008: probe with driver playstation failed with error -22 [ 133.538876][ T824] usb 3-1: device descriptor read/8, error -71 [ 133.656111][ T824] usb usb3-port1: unable to enumerate USB device [ 133.703134][ T824] usb 4-1: USB disconnect, device number 12 [ 133.846451][ T5720] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 133.873897][ T6272] netlink: 'syz.0.147': attribute type 11 has an invalid length. [ 133.985855][ T5720] usb 2-1: device descriptor read/64, error -71 [ 134.224204][ T5720] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 134.369928][ T5720] usb 2-1: device descriptor read/64, error -71 [ 134.484449][ T5720] usb usb2-port1: attempt power cycle [ 134.824421][ T5720] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 134.845813][ T5720] usb 2-1: device descriptor read/8, error -71 [ 135.054399][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.107790][ T5720] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 135.125191][ T5720] usb 2-1: device descriptor read/8, error -71 [ 135.184452][ T9] usb 1-1: device descriptor read/64, error -71 [ 135.239621][ T5720] usb usb2-port1: unable to enumerate USB device [ 135.322687][ T6291] (syz.3.152,6291,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 135.434220][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.544141][ T6210] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 135.564155][ T9] usb 1-1: device descriptor read/64, error -71 [ 135.677404][ T9] usb usb1-port1: attempt power cycle [ 135.698416][ T6210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.698479][ T6210] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 135.698505][ T6210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.713628][ T6210] usb 3-1: config 0 descriptor?? [ 135.751601][ T6210] pwc: Askey VC010 type 2 USB webcam detected. [ 135.751699][ T4936] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 135.751722][ T4936] CPU: 1 UID: 0 PID: 4936 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.751747][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.751761][ T4936] Workqueue: hci2 hci_rx_work [ 135.751798][ T4936] Call Trace: [ 135.751806][ T4936] [ 135.751816][ T4936] dump_stack_lvl+0xe8/0x150 [ 135.751848][ T4936] sysfs_create_dir_ns+0x271/0x2a0 [ 135.751877][ T4936] ? __pfx_[ 135.751877][ T4936] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 135.751904][ T4936] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 135.751937][ T4936] ? rt_spin_unlock+0x160/0x200 [ 135.751961][ T4936] kobject_add_internal+0x631/0xd10 [ 135.751992][ T4936] kobject_add+0x163/0x240 [ 135.752018][ T4936] ? __pfx_kobject_add+0x10/0x10 [ 135.752044][ T4936] ? get_device_parent+0x370/0x3a0 [ 135.752082][ T4936] device_add+0x408/0xbb0 [ 135.752108][ T4936] hci_conn_add_sysfs+0xd5/0x210 [ 135.752140][ T4936] le_conn_complete_evt+0x10e6/0x16b0 [ 135.752173][ T4936] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 135.752196][ T4936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.752225][ T4936] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.752255][ T4936] ? skb_pull_data+0xfb/0x200 [ 135.752280][ T4936] hci_le_conn_complete_evt+0x187/0x470 [ 135.752308][ T4936] hci_event_packet+0x659/0xef0 [ 135.752343][ T4936] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 135.752365][ T4936] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 135.752385][ T4936] ? __pfx_hci_event_packet+0x10/0x10 [ 135.752412][ T4936] ? rt_spin_unlock+0x14f/0x200 [ 135.752444][ T4936] ? hci_send_to_monitor+0xe2/0x590 [ 135.752471][ T4936] hci_rx_work+0x3ee/0x1040 [ 135.752511][ T4936] ? process_one_work+0x8b7/0x1710 [ 135.752534][ T4936] process_one_work+0x9a3/0x1710 [ 135.752580][ T4936] ? __pfx_process_one_work+0x10/0x10 [ 135.752601][ T4936] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.752644][ T4936] worker_thread+0xba8/0x11e0 [ 135.752678][ T4936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.752709][ T4936] ? __kthread_parkme+0x7a/0x1f0 [ 135.752735][ T4936] ? __kthread_parkme+0x19c/0x1f0 [ 135.752767][ T4936] kthread+0x388/0x470 [ 135.752806][ T4936] ? __pfx_worker_thread+0x10/0x10 [ 135.752829][ T4936] ? __pfx_kthread+0x10/0x10 [ 135.752861][ T4936] ret_from_fork+0x514/0xb70 [ 135.752888][ T4936] ? __pfx_ret_from_fork+0x10/0x10 [ 135.752912][ T4936] ? __switch_to+0xc79/0x1410 [ 135.752937][ T4936] ? __pfx_kthread+0x10/0x10 [ 135.752968][ T4936] ret_from_fork_asm+0x1a/0x30 [ 135.753014][ T4936] [ 135.753050][ T4936] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 135.753099][ T4936] Bluetooth: hci2: failed to register connection device [ 135.841792][ T4936] ================================================================== [ 135.841812][ T4936] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xe3/0x180 [ 135.841863][ T4936] Read of size 8 at addr ffff88804a87c200 by task kworker/u9:1/4936 [ 135.841889][ T4936] [ 135.841903][ T4936] CPU: 1 UID: 0 PID: 4936 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.841931][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.841947][ T4936] Workqueue: hci2 hci_rx_work [ 135.841982][ T4936] Call Trace: [ 135.841992][ T4936] [ 135.842002][ T4936] dump_stack_lvl+0xe8/0x150 [ 135.842032][ T4936] print_address_description+0x55/0x1e0 [ 135.842063][ T4936] ? l2cap_sock_ready_cb+0xe3/0x180 [ 135.842091][ T4936] print_report+0x58/0x70 [ 135.842117][ T4936] kasan_report+0x117/0x150 [ 135.842141][ T4936] ? l2cap_sock_ready_cb+0xe3/0x180 [ 135.842176][ T4936] l2cap_sock_ready_cb+0xe3/0x180 [ 135.842206][ T4936] l2cap_le_start+0x25b/0x1960 [ 135.842234][ T4936] ? __pfx_l2cap_le_start+0x10/0x10 [ 135.842260][ T4936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.842293][ T4936] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.842326][ T4936] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.842359][ T4936] ? mutex_lock_nested+0x152/0x1d0 [ 135.842382][ T4936] ? l2cap_connect_cfm+0x894/0x1560 [ 135.842410][ T4936] l2cap_connect_cfm+0x8d5/0x1560 [ 135.842441][ T4936] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 135.842467][ T4936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.842501][ T4936] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.842531][ T4936] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.842562][ T4936] ? mutex_lock_nested+0x152/0x1d0 [ 135.842586][ T4936] ? hci_connect_cfm+0x2c/0x140 [ 135.842606][ T4936] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 135.842631][ T4936] hci_connect_cfm+0x95/0x140 [ 135.842652][ T4936] le_conn_complete_evt+0x1134/0x16b0 [ 135.842679][ T4936] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 135.842701][ T4936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.842732][ T4936] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.842763][ T4936] ? skb_pull_data+0xfb/0x200 [ 135.842785][ T4936] hci_le_conn_complete_evt+0x187/0x470 [ 135.842809][ T4936] hci_event_packet+0x659/0xef0 [ 135.842841][ T4936] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 135.842873][ T4936] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 135.842893][ T4936] ? __pfx_hci_event_packet+0x10/0x10 [ 135.842922][ T4936] ? rt_spin_unlock+0x14f/0x200 [ 135.842950][ T4936] ? hci_send_to_monitor+0xe2/0x590 [ 135.842975][ T4936] hci_rx_work+0x3ee/0x1040 [ 135.843009][ T4936] ? process_one_work+0x8b7/0x1710 [ 135.843033][ T4936] process_one_work+0x9a3/0x1710 [ 135.843068][ T4936] ? __pfx_process_one_work+0x10/0x10 [ 135.843091][ T4936] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.843124][ T4936] worker_thread+0xba8/0x11e0 [ 135.843153][ T4936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.843184][ T4936] ? __kthread_parkme+0x7a/0x1f0 [ 135.843210][ T4936] ? __kthread_parkme+0x19c/0x1f0 [ 135.843239][ T4936] kthread+0x388/0x470 [ 135.843270][ T4936] ? __pfx_worker_thread+0x10/0x10 [ 135.843294][ T4936] ? __pfx_kthread+0x10/0x10 [ 135.843325][ T4936] ret_from_fork+0x514/0xb70 [ 135.843352][ T4936] ? __pfx_ret_from_fork+0x10/0x10 [ 135.843377][ T4936] ? __switch_to+0xc79/0x1410 [ 135.843400][ T4936] ? __pfx_kthread+0x10/0x10 [ 135.843431][ T4936] ret_from_fork_asm+0x1a/0x30 [ 135.843464][ T4936] [ 135.843472][ T4936] [ 135.843477][ T4936] Allocated by task 6295: [ 135.843487][ T4936] kasan_save_track+0x3e/0x80 [ 135.843517][ T4936] __kasan_kmalloc+0x93/0xb0 [ 135.843545][ T4936] __kmalloc_noprof+0x3e7/0x7b0 [ 135.843564][ T4936] sk_prot_alloc+0xe7/0x210 [ 135.843591][ T4936] sk_alloc+0x3a/0x390 [ 135.843616][ T4936] bt_sock_alloc+0x3b/0x310 [ 135.843646][ T4936] l2cap_sock_create+0x147/0x330 [ 135.843670][ T4936] bt_sock_create+0x163/0x240 [ 135.843688][ T4936] __sock_create+0x4e3/0x960 [ 135.843708][ T4936] __sys_socket+0xd9/0x330 [ 135.843730][ T4936] __x64_sys_socket+0x7a/0x90 [ 135.843752][ T4936] do_syscall_64+0x15f/0xf80 [ 135.843780][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.843799][ T4936] [ 135.843804][ T4936] Freed by task 6294: [ 135.843813][ T4936] kasan_save_track+0x3e/0x80 [ 135.843840][ T4936] kasan_save_free_info+0x46/0x50 [ 135.843874][ T4936] __kasan_slab_free+0x5c/0x80 [ 135.843904][ T4936] kfree+0x1c5/0x6c0 [ 135.843931][ T4936] __sk_destruct+0x74b/0x9d0 [ 135.843957][ T4936] l2cap_sock_release+0x1c1/0x270 [ 135.843978][ T4936] __sock_release+0xb9/0x250 [ 135.843997][ T4936] sock_close+0x1c/0x30 [ 135.844014][ T4936] __fput+0x461/0xa70 [ 135.844038][ T4936] task_work_run+0x1d9/0x270 [ 135.844053][ T4936] exit_to_user_mode_loop+0xed/0x480 [ 135.844082][ T4936] do_syscall_64+0x33e/0xf80 [ 135.844109][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.844128][ T4936] [ 135.844133][ T4936] The buggy address belongs to the object at ffff88804a87c000 [ 135.844133][ T4936] which belongs to the cache kmalloc-2k of size 2048 [ 135.844150][ T4936] The buggy address is located 512 bytes inside of [ 135.844150][ T4936] freed 2048-byte region [ffff88804a87c000, ffff88804a87c800) [ 135.844172][ T4936] [ 135.844177][ T4936] The buggy address belongs to the physical page: [ 135.844188][ T4936] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804a878000 pfn:0x4a878 [ 135.844210][ T4936] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 135.844228][ T4936] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 135.844246][ T4936] page_type: f5(slab) [ 135.844265][ T4936] raw: 0080000000000240 ffff88813fea4000 ffffea00012a2210 ffffea00012a1c10 [ 135.844282][ T4936] raw: ffff88804a878000 0000000800080005 00000000f5000000 0000000000000000 [ 135.844300][ T4936] head: 0080000000000240 ffff88813fea4000 ffffea00012a2210 ffffea00012a1c10 [ 135.844318][ T4936] head: ffff88804a878000 0000000800080005 00000000f5000000 0000000000000000 [ 135.844337][ T4936] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 135.844355][ T4936] head: 00000007f94d1850 0000000000000000 00000000ffffffff 0000000000000008 [ 135.844364][ T4936] page dumped because: kasan: bad access detected [ 135.844375][ T4936] page_owner tracks the page as allocated [ 135.844382][ T4936] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3440, tgid 3440 (kworker/u8:20), ts 94033054009, free_ts 83292693437 [ 135.844418][ T4936] post_alloc_hook+0x22d/0x280 [ 135.844449][ T4936] get_page_from_freelist+0x27d6/0x2850 [ 135.844480][ T4936] __alloc_frozen_pages_noprof+0x18d/0x380 [ 135.844501][ T4936] allocate_slab+0x77/0x660 [ 135.844525][ T4936] refill_objects+0x33c/0x3d0 [ 135.844547][ T4936] __pcs_replace_empty_main+0x373/0x720 [ 135.844573][ T4936] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 135.844594][ T4936] __alloc_skb+0x2c1/0x7d0 [ 135.844619][ T4936] inet6_ifinfo_notify+0x70/0x120 [ 135.844647][ T4936] addrconf_notify+0xca0/0x1050 [ 135.844667][ T4936] notifier_call_chain+0x1ad/0x3d0 [ 135.844696][ T4936] netif_state_change+0x27d/0x3a0 [ 135.844733][ T4936] __linkwatch_run_queue+0x575/0x850 [ 135.844766][ T4936] linkwatch_event+0x4c/0x60 [ 135.844784][ T4936] process_one_work+0x9a3/0x1710 [ 135.844807][ T4936] worker_thread+0xba8/0x11e0 [ 135.844831][ T4936] page last free pid 5604 tgid 5604 stack trace: [ 135.844844][ T4936] free_unref_folios+0xd6f/0x1aa0 [ 135.844871][ T4936] folios_put_refs+0x7cb/0x8d0 [ 135.844897][ T4936] free_pages_and_swap_cache+0x2b9/0x490 [ 135.844924][ T4936] tlb_flush_mmu+0x6d3/0xa30 [ 135.844947][ T4936] tlb_finish_mmu+0xf9/0x230 [ 135.844969][ T4936] unmap_region+0x2a5/0x330 [ 135.844991][ T4936] vms_complete_munmap_vmas+0x493/0xc60 [ 135.845017][ T4936] do_vmi_align_munmap+0x3bd/0x4d0 [ 135.845039][ T4936] do_vmi_munmap+0x252/0x2d0 [ 135.845062][ T4936] __vm_munmap+0x22c/0x3d0 [ 135.845087][ T4936] __x64_sys_munmap+0x60/0x70 [ 135.845105][ T4936] do_syscall_64+0x15f/0xf80 [ 135.845134][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.845155][ T4936] [ 135.845160][ T4936] Memory state around the buggy address: [ 135.845172][ T4936] ffff88804a87c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.845187][ T4936] ffff88804a87c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.845200][ T4936] >ffff88804a87c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.845212][ T4936] ^ [ 135.845222][ T4936] ffff88804a87c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.845236][ T4936] ffff88804a87c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.845246][ T4936] ================================================================== [ 135.850029][ T4936] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.850052][ T4936] CPU: 1 UID: 0 PID: 4936 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.850078][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.850092][ T4936] Workqueue: hci2 hci_rx_work [ 135.850124][ T4936] Call Trace: [ 135.850133][ T4936] [ 135.850141][ T4936] vpanic+0x56c/0xa60 [ 135.850177][ T4936] ? __pfx_vpanic+0x10/0x10 [ 135.850215][ T4936] panic+0xc5/0xd0 [ 135.850245][ T4936] ? __pfx_panic+0x10/0x10 [ 135.850276][ T4936] ? preempt_schedule_thunk+0x16/0x30 [ 135.850300][ T4936] ? preempt_schedule_thunk+0x16/0x30 [ 135.850319][ T4936] ? l2cap_sock_ready_cb+0xe3/0x180 [ 135.850348][ T4936] check_panic_on_warn+0x89/0xb0 [ 135.850383][ T4936] ? l2cap_sock_ready_cb+0xe3/0x180 [ 135.850409][ T4936] end_report+0x73/0x170 [ 135.850430][ T4936] ? l2cap_sock_ready_cb+0xe3/0x180 [ 135.850457][ T4936] kasan_report+0x128/0x150 [ 135.850481][ T4936] ? l2cap_sock_ready_cb+0xe3/0x180 [ 135.850514][ T4936] l2cap_sock_ready_cb+0xe3/0x180 [ 135.850544][ T4936] l2cap_le_start+0x25b/0x1960 [ 135.850570][ T4936] ? __pfx_l2cap_le_start+0x10/0x10 [ 135.850596][ T4936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.850628][ T4936] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.850657][ T4936] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.850688][ T4936] ? mutex_lock_nested+0x152/0x1d0 [ 135.850712][ T4936] ? l2cap_connect_cfm+0x894/0x1560 [ 135.850738][ T4936] l2cap_connect_cfm+0x8d5/0x1560 [ 135.850767][ T4936] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 135.850793][ T4936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.850823][ T4936] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.850865][ T4936] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.850896][ T4936] ? mutex_lock_nested+0x152/0x1d0 [ 135.850917][ T4936] ? hci_connect_cfm+0x2c/0x140 [ 135.850938][ T4936] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 135.850965][ T4936] hci_connect_cfm+0x95/0x140 [ 135.850989][ T4936] le_conn_complete_evt+0x1134/0x16b0 [ 135.851017][ T4936] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 135.851042][ T4936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.851074][ T4936] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.851106][ T4936] ? skb_pull_data+0xfb/0x200 [ 135.851129][ T4936] hci_le_conn_complete_evt+0x187/0x470 [ 135.851153][ T4936] hci_event_packet+0x659/0xef0 [ 135.851186][ T4936] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 135.851211][ T4936] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 135.851232][ T4936] ? __pfx_hci_event_packet+0x10/0x10 [ 135.851259][ T4936] ? rt_spin_unlock+0x14f/0x200 [ 135.851288][ T4936] ? hci_send_to_monitor+0xe2/0x590 [ 135.851313][ T4936] hci_rx_work+0x3ee/0x1040 [ 135.851347][ T4936] ? process_one_work+0x8b7/0x1710 [ 135.851371][ T4936] process_one_work+0x9a3/0x1710 [ 135.851404][ T4936] ? __pfx_process_one_work+0x10/0x10 [ 135.851428][ T4936] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.851463][ T4936] worker_thread+0xba8/0x11e0 [ 135.851494][ T4936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.851528][ T4936] ? __kthread_parkme+0x7a/0x1f0 [ 135.851562][ T4936] ? __kthread_parkme+0x19c/0x1f0 [ 135.851592][ T4936] kthread+0x388/0x470 [ 135.851623][ T4936] ? __pfx_worker_thread+0x10/0x10 [ 135.851648][ T4936] ? __pfx_kthread+0x10/0x10 [ 135.851678][ T4936] ret_from_fork+0x514/0xb70 [ 135.851708][ T4936] ? __pfx_ret_from_fork+0x10/0x10 [ 135.851733][ T4936] ? __switch_to+0xc79/0x1410 [ 135.851754][ T4936] ? __pfx_kthread+0x10/0x10 [ 135.851786][ T4936] ret_from_fork_asm+0x1a/0x30 [ 135.851823][ T4936] [ 135.852347][ T4936] Kernel Offset: disabled