last executing test programs: 7.213444706s ago: executing program 1 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0x40045731, &(0x7f0000000040)={0x1}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0xd4) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) setns(r2, 0x2000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x3, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) r8 = epoll_create1(0x80000) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000140)={0xe000200c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) syz_usb_connect(0x2, 0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) splice(r10, 0x0, r11, 0x0, 0xffffffffffffffff, 0x0) 5.64963155s ago: executing program 1 (id=122): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x21, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x5, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x88, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010063797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100e00000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xe) (async) connect$bt_l2cap(r5, &(0x7f00000006c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0x34) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x10, 0x2, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x608, 0xfd, 0x0, 0x2}}}}}]}}]}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0xfffffe27) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff}) (async) close_range(r0, 0xffffffffffffffff, 0x2) (async) inotify_init1(0x800) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x800000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}}) 5.288809034s ago: executing program 3 (id=124): syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109022400010000000009040000022ec25d000905ff49"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00'}) userfaultfd(0x1) r4 = syz_clone(0x80000011, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x18, r9, 0x311, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4ec, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x754}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3bc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x28b, @mcast1, 0x200}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc47}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22d76421}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x408}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x915}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff25}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfaa}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3dd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3400091a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf5f4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x869d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x20008084}, 0x10) r10 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r10, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) ptrace$getsig(0x4202, r4, 0x23c, &(0x7f0000000080)) r11 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) 4.725125398s ago: executing program 2 (id=129): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x409, 0x1) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsopen(&(0x7f0000000000)='udf\x00', 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) 4.251636577s ago: executing program 2 (id=131): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) listen(0xffffffffffffffff, 0x6) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003f80)="d0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="37a8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000006840)=[{&(0x7f00000045c0)="13", 0x1}], 0x1}}], 0x4, 0x0) mount(0x0, 0x0, 0x0, 0x4405, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4.144932728s ago: executing program 2 (id=132): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000e73fde2842110000000000ffffff0300000000000000e6000001030022050009058103377b078b3c0c593682e620b090990213c485c3553eb98b671674a1e5838840e24504b33438416a00000000000000002dc8c9fc6b0bc83b5038"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0xe3, 0x222542) 3.847974973s ago: executing program 0 (id=137): add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000400)="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"/472, 0x1d8, 0xfffffffffffffffd) fsopen(&(0x7f0000000080)='xfs\x00', 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000180)={@id={0x2, 0x0, @auto="63903ad51a7a5c0b0c7118b00dd7493d"}}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='dax\x00W\xe7\t\x00)x\xdc\xed\xafl\x97Y\x99\xcd\xe6:\x88\x00\x00\xa1\vSVZ\xdc\x87\xea6/\x9bkcC%\x894\xb6\xc7/\xd0G\xfd\xe2\xfd\b\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', &(0x7f00000000e0)=']l\xff\x03\x00\x00\x02', 0x0) 3.747279558s ago: executing program 1 (id=138): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r1 = socket(0x10, 0x803, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00'], 0x20) sendto$inet6(r3, &(0x7f0000000240)='\x00', 0x1, 0x4000057, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x6, &(0x7f0000000040)=0xcb, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r1, @ANYRES64=r0], 0x128}, 0x4048040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000040)={0x0, 0xbe, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x10000, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003c002, 0x2b9, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904"], 0x0) 3.677190741s ago: executing program 3 (id=139): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x409, 0x1) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) 3.635432105s ago: executing program 0 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) creat(&(0x7f0000000080)='./trace/error_log\x00', 0x118) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.491866504s ago: executing program 0 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000002f0009002abd7000060000000400000043001180e796bd6dd42541affac6ff414f2f07d4fba5"], 0x58}}, 0x4084) 3.429980055s ago: executing program 3 (id=142): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0) write(r1, 0x0, 0x1100) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), 0x0, r1}, 0x68) (async) sendmmsg$sock(r0, &(0x7f0000009080)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x7ffe}, 0x80, &(0x7f00000026c0), 0x0, &(0x7f0000002740)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}}], 0x1, 0x5) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="a000004ef3b11f948ef66b0ee0b3d41b1b84"]) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c7837718", @ANYRES16=r4, @ANYBLOB="03062cbd7000ffdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x10) 3.308830639s ago: executing program 0 (id=143): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='.', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x5, 0xe) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in=@loopback, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@remote, @in=@broadcast, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x5003, 0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 3.167466496s ago: executing program 0 (id=144): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c00028005000100000000000800074000000000080008"], 0xd8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x20000) fdatasync(r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x408c004}, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4c4781, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0x3, 0x2}) 1.967892119s ago: executing program 3 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6f7378fdc210"]) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='- 0 -', 0x5) lstat(&(0x7f0000000300)='./sys\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x1000201, &(0x7f00000003c0)={[{@inode64}, {}, {@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x78, 0x70, 0x38, 0x78, 0x30, 0x35, 0x2d]}}, {@gid={'gid', 0x3d, r1}}, {@nr_inodes={'nr_inodes', 0x3d, [0x32, 0x65, 0x78, 0x25, 0x70]}}, {@huge_advise}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x25, 0x33, 0x67]}}, {@noswap}], [{@euid_eq}, {@flag='dirsync'}]}) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./sys\x00', &(0x7f0000000200), &(0x7f0000000240)={'L-', 0x1}, 0x16, 0x0) 1.791759559s ago: executing program 3 (id=146): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMGETBADBLOCK(r0, 0x40084d0b, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xb2980) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000ac0)={0x0, [{0x2, 0x0, 0x75, &(0x7f00000000c0)}, {0x1, 0x5c0, 0x9, &(0x7f00000001c0)="b2815c7a2c290c8d5f46dc7f360274932e75dad582771fb0c72a62718bd49e573689d0195b418bf3a606f094ba879be4574b2d45db485bfadd1c1539d7d50d41715041f54dab5381d91a0d90800dcb0ba62392bbc38830baef6d4729937564079fc97f04f12471f3602b9095d9dc33f8afc1b4125a1c1fc4a47f581e5d4d810289f8e3f489ac5a299c7889e4addbee20263b7758e2e5f371301e9a1be3ab8b4b28900b695e08b9773a651fea04755f517f17382d13941fa6"}, {0x2, 0x300, 0x7, &(0x7f0000000280)="e6f509740841cb3b007986b9b2a2dade036f68c2927d6f4055e4e0101ebc088a0532787775ef42ce619f8c9b9f697a47a23beb243ef7846fabf30604620e3078292a5ae2c4d3268b5bb333b8d53e1a2c02232973dc67a24dd0f8040c92481e16"}, {0x1, 0x348, 0xf9, &(0x7f0000000300)="afc0c8e1f4a73d7248629581eb331407a3e794cf717fd0b3ae06763590304d0370a37aa270b7e11ef5cb6b3ed79bdf0ed860cbbc49ca33264514e5e428959d1dabe879c2f1dd8ee1e4d19ecf5d835d478be980e19767043b5dc113a87a7012999c93d795cffe5742c6"}, {0x0, 0x550, 0x5, &(0x7f0000000380)="e632fe29f54f01681dcecc28afd472214647d00dce2f73915c5e2102a32d4e6c917544cc8c8a4638169048c8ae2bc3917a8931fda5f8b708131b2c28155cde70c89a1e4d426e8e43713d03fe6e3baa02a4e1fa3931aefdb96976b7ecee8925f03dd96d3cdddfcfb331a42d20c453aa570ce6c444a448173a890978cb8f7de2f4bb00e8e1fbfd211da4bcc1f07011d184bec239cfc8ba195f525bc5092c89550725ae762bfae3f1fb185c"}, {0x3, 0x5a0, 0x8, &(0x7f0000000440)="37cddc13fb8b7f762b543b5732dc6a027e67bc510352ce0b9c5f132a03def91788058efbc9b29c225522dfc4aa2fb1c964038e721875cf4704e4a6643ef842538b001ebf6274bb49667995eef42346835237a99084c265f7d9b70414c33aed90cd2f2c907f93c9d296c612671b08b84a9e1cb733196c6464f3c8029e1bfb83baf9ccc6de7425147d26360320671bd4a4627a7cc9743df970cc5aa7bc57065caa62280f9e659fbb0c9ffde91d2a5021b844cc19be"}, {0x2, 0x7a8, 0xa, &(0x7f0000000500)="843610552d0736c5877bdfee58dbae3aeb7fc132615971ec64eb055b4e8b0f7a4bcb61fd24f307b19ecefd4ecb0e8f9785804fd9d00ebfb718867410554dd76c8b7caaa56ebab9e3f358e2a070c0ca15fb2a988c8d2ba90b5f7a6344691ed900ad3bd3f589a2dfda36b16d8ebadf69f936393cfbfeb8d70e12d9b1d2985d34750e42cc24d5be3974d6b24169e5cd2e71d6a0816987b4a55131ce03fba74f0f8074c3aa0879ddbddf99b1e0e5d60a9020091f60789b71662395c56394a2cb80b31f3754ca26789c4372b0b49817918e9bc436b6ecc593103802f6f80de0bd5d2563fb7367efbfcec3c48b232f0b7ed54956e636ad89"}, {0x1, 0x5a8, 0x4329, &(0x7f0000000600)="ba1e03869d0e75cfe7b55ea1ef04c98a36121f2cc69a2fd2f0c01a1486e93d55337fd45fee8cb6b0de73e8bdb394d5a8f72f797140ef49b6d2f46cfdd1ad2feea2bed0fc1279888a4cc6b01c3b54b57af05ebf6f75a3be43bc3f2c917676bb4335711fe4af67f5e2aad2266ffb46d5c6ce831d90871301510f45867d1ff6a0b3aa426c6220f795dcf0fc830e38057a0f0b6184c692b6a5d8f0e7e378abf86edb988ce9bcbb82cebe502acdc5762cf8a559f2cc9407"}, {0x2, 0x1f0, 0x4, &(0x7f00000006c0)="29ff2d263c7b601767eda926606a40a6c3e286fe78b4fd3bab66c8e9b009444f4d7aab4e3496f2e19dc6511699f9e32404953933aef2f398a57b7d9522e5"}, {0xb5feb3317a510bdd, 0x498, 0xd23, &(0x7f0000000700)="417f0edbcf76a40c65fd9a67f299d578bee7d33a2cbc0eeb6b363e2e096ff2cff82e653c9bd179621adb676e4c9e7c6689c76ef67f7c596f4ceb2989de298e3d912e73d2f977b1b2b6778ae0c4f53c2a206d9a96c5f45a0e2ae042854adabaf16fbd8075b599c2599b805094ad325affc835f5cebb34039d691d90b66bc8a66c05eead223ee85077e753a224530fb99c58bc1b"}, {0x0, 0x6c0, 0x7, &(0x7f00000007c0)="d5cec525b7ba3ba5cc62047f980f892c1a683599b8dc5a087ff5b3c3d4d9d6528986ef80a278b5f88f5acd3022e4cb7098dbb0542ed947fd865d9466e44fbe8d5cb48529624b7aaa72e33f0ee2d6617295bcfda6e0bf717f687646eecbc58482346ab13482e779456a2dd59e035809c8a3957e07a86fcda9923b2f309409183c3cefbbae6c710e4cbc018a37befb25c142192764e98a6732b908a49a14a7450b540e8ace97c294b5be55fc1754efdf43fd2c14dba0a443baaed552a2ba411416d71469f0bb9c6d87860f6f94141e98b9c9af1adffb733053"}, {0x3, 0x0, 0x612, &(0x7f00000008c0)}, {0x2, 0x248, 0x7f, &(0x7f0000000900)="f4b3758dad9ce578f3d2ffc66dd558b038f8bdacb92d6a4d0672d2b9758c8194f6e80f783755a6f5136806359cf3d7d11ca2430ad3b238e469d63f5e522a5719457140ac3109cad540"}, {0x3, 0x198, 0x2, &(0x7f0000000980)="a3a335d626a2459753121a637070b54dbbdf71e916908b193aa8e49145c3a204d96cb8b0c05cc7684fbfcdb0dcc2879330c15e"}, {0x2, 0x1e0, 0xb, &(0x7f00000009c0)="2234aeeb4fd250c4f5c92996717ba5d3422707ab99a84845380f01cd8a9c5b749ea19607423592afaffe28fa1eedec989f2ca8e7672bd1f3516faf21"}, {0x2, 0x488, 0x1, &(0x7f0000000a00)="40536ed30a99514c0c83c83a6470f5026235a7d28e52505a1a08b2b0012db37b74616deb6f906270e0542701fbd6bd9b763df66dfabba85af003906e745e5f6258655f7dbadda4372bff26df6b28fae7d6d62dd9c041c6c40797229afa09e19db7498534aeb712cc4267babfb3451ceacfb6fc12c776f7e5d4084c66a1eab9b9e79cee207f1ef7a31fa178272e3cb7325b"}]}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x400b1) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f00000008c0)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c, 0x0, 0xffffffffffffffff}]}) 1.791208508s ago: executing program 0 (id=147): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffff0040950b90170001000000010902270001010080fa0904000003ffff000007058102000200070502020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0xfe, &(0x7f0000000200)="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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x6002}, @val={0x2, 0x80, 0x6, 0x4, 0x7, 0xe}, @arp=@generic={0x13, 0x8863, 0x6, 0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, "7d87f6dbe75b0e487578", @random="4bb7933ff6db"}}, 0x2c) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r2 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000240)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002580)='pagemap\x00') read$FUSE(r3, &(0x7f00000025c0)={0x2020}, 0x2020) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="40031800000056e7"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000300)={0x0, 0x31, 0x5b, {0x5b, 0x1, "9700102a3bc224c7662768fa80751eb461c77fdf589b9c6b72fc6f915c8d84e70da07182ed426eff3bf37b9b85324ca37ad3f637dda7252be0ccd52a82d98de6ef8701cc2288530d3a5db6af2a595f692637593bdb49b7b19f"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x20, 0xe, 0xef, "bca4f07b6a2e8ac25df08b91aa4eb1c88aa0f127fd4fc288c1462bccf5d94da6748eb1d595e5a1e6ee1e25585d02466432e2d9251c23fc2b92931d073570674efc50cb09c424a804128e7b2ec98f006f1142c934f80cd87808fb3769f7b6f1024d7426dba8872ff490f482fd1e091c3958e3012dfb9874d858a4ad979aa3dc8165e2754c415b68700789a1de727851be32b14ff12fc7eb798bbd238699313705a0789b29109c4236728633c716e50729a9f0c175c9a04901471aab14a7e0177a868b9a793c07cdaeda07c169d7a6076676aa3500051288e8554b2f8c1ac03cef0db385b365039eeaa706ef7011610d"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x0, 0xd, {0xb, "a120065d96a3d88f9d3382"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0xd}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x9}}) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x4, 0x200) 1.766451131s ago: executing program 3 (id=148): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x40010, r2, 0x22395000) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x468e03, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000408c0d140000000000000196170d1a01000020810904000600030009210100400122180009058103000010040d"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @vbi={0x2, 0x1, 0x1, 0x34343459, [0xf, 0x7], [0xffffff80], 0x108}}) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000200)="48d07e3a45a6a2b59e8243ddaf86e5f81cbe61f4f36c8b697f897b41d8e19efe5a3c800ddda31486c7ff31a800f4a6f30ee055fcdf4362", 0x37}], 0x1, 0x8, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100020000004086048601030109022400010104000109040003020100008009210200060122450309058103000204810400000000"], &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x7, 0x2, 0x8, 0x40, 0x80}, 0x2c, &(0x7f0000000540)={0x5, 0xf, 0x2c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x9, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x7f, 0x1, 0x6, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4a, 0x5, 0x6, 0x6, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x6, 0xfffc}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x83e}}]}) r5 = socket(0x28, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, 0x0, 0x0) r6 = open$dir(&(0x7f0000000500)='./dev\x00', 0x10100, 0x30b40d18f96d925b) mkdirat(r6, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r7, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x8002, 0x1, 0x5}, &(0x7f00000001c0)=0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x2) syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x422881, 0x0) r9 = openat(r8, &(0x7f0000000340)='./dev/file1\x00', 0x2, 0x11c) write$vhost_msg_v2(r9, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) 1.100578918s ago: executing program 2 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000500)={0x18, 0x0, {0x1, @empty, 'wg0\x00'}}, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r5, &(0x7f00000003c0)={0x2c, 0x2, r7, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r5, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x9c2a}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0x300, 0xa, 0x9}, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0xff}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @mcast1, 0x40}}}, 0x88) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x402440, 0x0) ioctl(r8, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCDISCONN(r8, 0x7439) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f00000017c0)={&(0x7f00000000c0)={0x50, 0x7fffffffffffffed, 0x3, {0x7, 0x2b, 0x9, 0xffffffffd0065de0, 0x4, 0x6, 0xfffffffc, 0x10, 0x0, 0x0, 0x35, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x586}, 0x18) 557.225593ms ago: executing program 1 (id=150): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x409, 0x1) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) 419.646903ms ago: executing program 1 (id=151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x20}, 0x0) 382.571567ms ago: executing program 1 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000040)={0xb000, 0x1}) (async, rerun: 64) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80400, 0x0) (rerun: 64) close(r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f5543707241301"], 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 177.484078ms ago: executing program 2 (id=153): r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0xdc) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='dyn']) read(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x2, 0x0) getdents64(r1, 0x0, 0x22) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000100)=0xa) 0s ago: executing program 2 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open$dir(&(0x7f0000000100)='./mnt\x00', 0x391040, 0x121) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000080)=0x4) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x2, 0x5, 0x4, 0x0, 0x0, 0x6, 0xb}]}) r6 = syz_ublk_setup_io_uring(0x1a30, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r10, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000780)={0x10000, 0x1, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) write$uinput_user_dev(r10, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x487, 0xd6, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4cfc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x8, 0x0, 0x3, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x806, 0x8003, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x801, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x80000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x2, 0x0, 0xb04, 0x0, 0x1, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) write$uinput_user_dev(r10, &(0x7f0000000300)={'syz0\x00', {0x2, 0xe5be, 0xe2, 0x7f}, 0x47, [0x5, 0xef2, 0x0, 0x4, 0x9, 0xfffffb53, 0x0, 0x6ce, 0x2f7d, 0x9, 0x2, 0x80000001, 0x400, 0x5, 0xa, 0x0, 0xffff, 0x3, 0x4, 0x3, 0x6, 0xcb2, 0x401, 0x0, 0x9, 0x9, 0x9, 0x1, 0x8, 0x7f, 0x1, 0x6, 0x4, 0x9, 0x6, 0x2ac, 0xd8, 0x4, 0xe3, 0x400, 0x3, 0x3ff, 0x7, 0x86, 0x4, 0x4, 0x9, 0x2, 0x5, 0x1, 0xe2, 0x4, 0x5, 0x3, 0x1ff, 0x10, 0x2, 0x2, 0x8001, 0x2, 0x2, 0x2, 0x1, 0x6], [0x7, 0x8, 0x8, 0x9, 0x8, 0x5, 0x10001, 0x8001, 0x10001, 0x1a2c, 0x9, 0x80000000, 0xcdd, 0x8, 0x4, 0x8, 0x8000, 0x4, 0x9, 0x6, 0x10, 0x7, 0x3, 0x2, 0x6, 0x9165, 0x3, 0x401, 0x3, 0x6, 0x9, 0x8, 0x5, 0x80, 0x7fff, 0x1ff, 0x7, 0x1, 0x40, 0x4, 0x5, 0x2, 0x80000000, 0x7, 0x5, 0x4552, 0x25d, 0xd, 0x100, 0x2, 0x7, 0x8, 0xfffffffb, 0x7, 0x858, 0x5, 0x60, 0x7, 0x3, 0x7, 0x6, 0x401, 0x4, 0x7], [0x1, 0xffff, 0x2, 0x4, 0x7, 0x1, 0x0, 0x4, 0x5, 0x6, 0x4, 0xf, 0x8, 0x1, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x2, 0x3, 0x0, 0xda, 0x8, 0x1, 0x2, 0x8, 0xed4d, 0x4, 0x200, 0x9, 0x56, 0x8, 0x6, 0x0, 0x400, 0x18000, 0x0, 0x40000, 0x1, 0x4, 0x15e, 0x7, 0x8, 0x5, 0x9, 0x4, 0x5, 0xfe, 0x9, 0x2, 0x40, 0x8, 0x9, 0x3, 0x3, 0x6, 0x100, 0x0, 0x5, 0x9, 0x1, 0x2, 0x7fff], [0x8d, 0x401, 0x6, 0x4, 0x4, 0xa0, 0x2, 0x8, 0x80, 0x5, 0x5, 0x3, 0x2, 0x7, 0x1, 0x8000, 0x4, 0x200, 0x101, 0x5, 0x1, 0xffffffff, 0xfffffffa, 0x792, 0x40000007, 0x6, 0xffff, 0x5, 0x0, 0x5, 0xac2, 0x8, 0xfff, 0xf0a, 0x5, 0x100, 0x3, 0x4, 0x0, 0x9, 0xb9ab, 0x1ff, 0x1, 0x401, 0x8, 0x6, 0x76, 0x490, 0x3, 0x80000001, 0x7, 0x1000, 0x8, 0xd, 0x78, 0x8, 0x9b, 0x7ff, 0xf, 0x7fff, 0x1, 0xf, 0x2, 0x3]}, 0x45c) mkdirat(r2, &(0x7f0000000140)='./mnt/file0\x00', 0x141) r11 = socket$nl_route(0x10, 0x3, 0x0) write(r11, &(0x7f0000000000)="50000000100005060100000000000000000000000000000001000000010000000c00030076786c616e300000240012000a00010076786c616e00000014000200080001002a0000000600050012b50000", 0x50) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)={0x79, 0x0, 0x2000000000b14}) r12 = open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) ioctl$PPPIOCSMRU(r12, 0x40047452, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 73.629603][ T5601] cgroup: Unknown subsys name 'net' [ 73.760356][ T5601] cgroup: Unknown subsys name 'cpuset' [ 73.769393][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.374449][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.638145][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.640001][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.640347][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.641705][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.641828][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.642401][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.644428][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.645113][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.645647][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.646378][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.655713][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.656078][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.664715][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.680803][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.680929][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.683921][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.684505][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.692671][ T4930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.719766][ T4930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.728757][ T4930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.354801][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.354906][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.355019][ T5612] bridge_slave_0: entered allmulticast mode [ 79.356594][ T5612] bridge_slave_0: entered promiscuous mode [ 79.404427][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.404545][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.404679][ T5612] bridge_slave_1: entered allmulticast mode [ 79.406206][ T5612] bridge_slave_1: entered promiscuous mode [ 79.422179][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.422285][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.422402][ T5613] bridge_slave_0: entered allmulticast mode [ 79.424620][ T5613] bridge_slave_0: entered promiscuous mode [ 79.428454][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.428557][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.428966][ T5613] bridge_slave_1: entered allmulticast mode [ 79.430739][ T5613] bridge_slave_1: entered promiscuous mode [ 79.463903][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.468025][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.512293][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.512395][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.512508][ T5611] bridge_slave_0: entered allmulticast mode [ 79.514173][ T5611] bridge_slave_0: entered promiscuous mode [ 79.534992][ T5613] team0: Port device team_slave_0 added [ 79.552936][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.553239][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.553420][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.553555][ T5611] bridge_slave_1: entered allmulticast mode [ 79.555164][ T5611] bridge_slave_1: entered promiscuous mode [ 79.565391][ T5613] team0: Port device team_slave_1 added [ 79.590637][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.590743][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.591187][ T5614] bridge_slave_0: entered allmulticast mode [ 79.593286][ T5614] bridge_slave_0: entered promiscuous mode [ 79.601148][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.615563][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.616445][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.617035][ T5614] bridge_slave_1: entered allmulticast mode [ 79.620430][ T5614] bridge_slave_1: entered promiscuous mode [ 79.637628][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.637644][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.637667][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.712085][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.712103][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.712129][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.714340][ T5612] team0: Port device team_slave_0 added [ 79.717536][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.721220][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.734156][ T5612] team0: Port device team_slave_1 added [ 79.737915][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.740514][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.757911][ T5616] Bluetooth: hci1: command tx timeout [ 79.758065][ T5616] Bluetooth: hci3: command tx timeout [ 79.758262][ T4930] Bluetooth: hci0: command tx timeout [ 79.826979][ T4930] Bluetooth: hci2: command tx timeout [ 79.858614][ T5611] team0: Port device team_slave_0 added [ 79.859407][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.859421][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.859446][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.861799][ T5611] team0: Port device team_slave_1 added [ 79.863959][ T5614] team0: Port device team_slave_0 added [ 79.871955][ T5613] hsr_slave_0: entered promiscuous mode [ 79.873069][ T5613] hsr_slave_1: entered promiscuous mode [ 79.903908][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.903924][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.903948][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.918527][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.918543][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.918565][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.922744][ T5614] team0: Port device team_slave_1 added [ 80.045389][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.045409][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.045433][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.118465][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.118478][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.118493][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.147946][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.147964][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.147986][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.158162][ T5612] hsr_slave_0: entered promiscuous mode [ 80.159416][ T5612] hsr_slave_1: entered promiscuous mode [ 80.160991][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 80.161056][ T5612] Cannot create hsr debugfs directory [ 80.253348][ T5611] hsr_slave_0: entered promiscuous mode [ 80.254009][ T5611] hsr_slave_1: entered promiscuous mode [ 80.254446][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 80.254466][ T5611] Cannot create hsr debugfs directory [ 80.340845][ T5614] hsr_slave_0: entered promiscuous mode [ 80.341497][ T5614] hsr_slave_1: entered promiscuous mode [ 80.341982][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 80.342002][ T5614] Cannot create hsr debugfs directory [ 80.691149][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.700791][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.702424][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.710027][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.711087][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.722176][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.724248][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.735520][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.815074][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.826305][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.833943][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.843232][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.844958][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.851540][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.855047][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.863976][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.965826][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.971491][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.972371][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.976335][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.998333][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.001500][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.004919][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.009650][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.064235][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.143093][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.145763][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.165857][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.166147][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.178827][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.181310][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.194930][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.205950][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.211079][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.230495][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.230584][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.238514][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.238628][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.249799][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.331700][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.380275][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.380345][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.413153][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.413226][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.511350][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.528173][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.594171][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.611813][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.637267][ T238] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.637384][ T238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.642906][ T238] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.643022][ T238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.691050][ T238] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.691172][ T238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.695002][ T238] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.695115][ T238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.827996][ T5623] Bluetooth: hci3: command tx timeout [ 81.828032][ T5623] Bluetooth: hci1: command tx timeout [ 81.828265][ T4930] Bluetooth: hci0: command tx timeout [ 81.907798][ T4930] Bluetooth: hci2: command tx timeout [ 82.766908][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.982657][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.026469][ T5613] veth0_vlan: entered promiscuous mode [ 83.060275][ T5613] veth1_vlan: entered promiscuous mode [ 83.087571][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.136769][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.182043][ T5612] veth0_vlan: entered promiscuous mode [ 83.221824][ T5612] veth1_vlan: entered promiscuous mode [ 83.230096][ T5613] veth0_macvtap: entered promiscuous mode [ 83.235217][ T5613] veth1_macvtap: entered promiscuous mode [ 83.270241][ T5611] veth0_vlan: entered promiscuous mode [ 83.287688][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.293486][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.340443][ T5611] veth1_vlan: entered promiscuous mode [ 83.347181][ T278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.347685][ T278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.347758][ T278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.347826][ T278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.385801][ T5614] veth0_vlan: entered promiscuous mode [ 83.396018][ T5614] veth1_vlan: entered promiscuous mode [ 83.452420][ T5612] veth0_macvtap: entered promiscuous mode [ 83.479740][ T5612] veth1_macvtap: entered promiscuous mode [ 83.540075][ T278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.540099][ T278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.561870][ T5614] veth0_macvtap: entered promiscuous mode [ 83.578609][ T5611] veth0_macvtap: entered promiscuous mode [ 83.583367][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.618692][ T5614] veth1_macvtap: entered promiscuous mode [ 83.621032][ T5611] veth1_macvtap: entered promiscuous mode [ 83.623874][ T238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.623892][ T238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.630693][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.640647][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.640828][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.641044][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.641226][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.733345][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.763290][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.772463][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.810229][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.813829][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.908218][ T5616] Bluetooth: hci1: command tx timeout [ 83.910612][ T5616] Bluetooth: hci3: command tx timeout [ 83.910775][ T4930] Bluetooth: hci0: command tx timeout [ 83.948268][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.948626][ T238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.948666][ T238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.948704][ T238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.948741][ T238] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.948777][ T238] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.948814][ T238] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.948850][ T238] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.994949][ T4930] Bluetooth: hci2: command tx timeout [ 83.997229][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.997246][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.112404][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.112427][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.154167][ T5769] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.163187][ T5769] FAULT_INJECTION: forcing a failure. [ 84.163187][ T5769] name failslab, interval 1, probability 0, space 0, times 1 [ 84.163216][ T5769] CPU: 0 UID: 0 PID: 5769 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 84.163237][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 84.163249][ T5769] Call Trace: [ 84.163257][ T5769] [ 84.163265][ T5769] dump_stack_lvl+0xe8/0x150 [ 84.163292][ T5769] should_fail_ex+0x3eb/0x540 [ 84.163317][ T5769] ? __alloc_skb+0x1db/0x7a0 [ 84.163336][ T5769] should_failslab+0xa8/0x100 [ 84.163357][ T5769] ? __alloc_skb+0x1db/0x7a0 [ 84.163373][ T5769] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 84.163393][ T5769] ? __alloc_skb+0x18d/0x7a0 [ 84.163412][ T5769] ? __alloc_skb+0x1db/0x7a0 [ 84.163436][ T5769] __alloc_skb+0x1db/0x7a0 [ 84.163459][ T5769] cfg80211_del_sta_sinfo+0x1e8/0x6a0 [ 84.163486][ T5769] ? __pfx_cfg80211_del_sta_sinfo+0x10/0x10 [ 84.163548][ T5769] ? drv_sta_state+0xddf/0x1790 [ 84.163585][ T5769] __sta_info_destroy_part2+0x316/0x410 [ 84.163610][ T5769] __sta_info_flush+0x5b6/0x700 [ 84.163639][ T5769] ? __pfx___sta_info_flush+0x10/0x10 [ 84.163660][ T5769] ? queue_delayed_work_on+0x171/0x1e0 [ 84.163686][ T5769] ieee80211_ibss_disconnect+0x316/0x800 [ 84.163717][ T5769] ieee80211_ibss_leave+0x47/0x140 [ 84.163738][ T5769] cfg80211_leave_ibss+0x1d7/0x410 [ 84.163767][ T5769] cfg80211_ibss_wext_siwessid+0x135/0x320 [ 84.163793][ T5769] cfg80211_wext_siwessid+0xd8/0x130 [ 84.163817][ T5769] ioctl_standard_iw_point+0x84e/0xdc0 [ 84.163852][ T5769] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 84.163872][ T5769] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 84.163893][ T5769] ? _printk+0xdd/0x130 [ 84.163911][ T5769] ? __pfx___mutex_lock+0x10/0x10 [ 84.163933][ T5769] ? __pfx__printk+0x10/0x10 [ 84.163957][ T5769] ioctl_standard_call+0xa6/0x160 [ 84.163976][ T5769] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 84.163993][ T5769] ? __pfx_ioctl_standard_call+0x10/0x10 [ 84.164013][ T5769] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 84.164030][ T5769] wext_ioctl_dispatch+0xee/0x410 [ 84.164047][ T5769] ? __pfx_ioctl_standard_call+0x10/0x10 [ 84.164070][ T5769] wext_handle_ioctl+0x110/0x1d0 [ 84.164093][ T5769] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 84.164110][ T5769] ? do_futex+0x458/0x4e0 [ 84.164145][ T5769] sock_ioctl+0x159/0x7e0 [ 84.164165][ T5769] ? __fget_files+0x2a/0x420 [ 84.164184][ T5769] ? __pfx_sock_ioctl+0x10/0x10 [ 84.164203][ T5769] ? __fget_files+0x2a/0x420 [ 84.164222][ T5769] ? __fget_files+0x2a/0x420 [ 84.164244][ T5769] ? bpf_lsm_file_ioctl+0x9/0x20 [ 84.164263][ T5769] ? __pfx_sock_ioctl+0x10/0x10 [ 84.164282][ T5769] __se_sys_ioctl+0xfc/0x170 [ 84.164304][ T5769] do_syscall_64+0x166/0x520 [ 84.164322][ T5769] ? trace_irq_disable+0x3b/0x140 [ 84.164338][ T5769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.164358][ T5769] ? clear_bhb_loop+0x70/0xc0 [ 84.164380][ T5769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.164399][ T5769] RIP: 0033:0x7fde3ef9e159 [ 84.164417][ T5769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.164432][ T5769] RSP: 002b:00007fde3d15a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.164453][ T5769] RAX: ffffffffffffffda RBX: 00007fde3f226090 RCX: 00007fde3ef9e159 [ 84.164467][ T5769] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000005 [ 84.164480][ T5769] RBP: 00007fde3f03506b R08: 0000000000000000 R09: 0000000000000000 [ 84.164492][ T5769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.164503][ T5769] R13: 00007fde3f226128 R14: 00007fde3f226090 R15: 00007fff4b5937e8 [ 84.164534][ T5769] [ 84.333760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.333780][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.443517][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.443537][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.539984][ T238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.540002][ T238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.645726][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.645747][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.213786][ T5795] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.902054][ T5817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.912515][ T5817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.947121][ T5619] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.987446][ T5623] Bluetooth: hci3: command tx timeout [ 85.987486][ T5623] Bluetooth: hci1: command tx timeout [ 85.987544][ T4930] Bluetooth: hci0: command tx timeout [ 85.995728][ T5821] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5613] was attempted by ""[5821] [ 86.067870][ T4930] Bluetooth: hci2: command tx timeout [ 86.088356][ T5619] usb 1-1: device descriptor read/64, error -71 [ 86.304776][ T5836] WARNING! power/level is deprecated; use power/control instead [ 86.326885][ T5619] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.363442][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 86.363462][ T5838] netlink: 88 bytes leftover after parsing attributes in process `syz.2.24'. [ 86.456918][ T5619] usb 1-1: device descriptor read/64, error -71 [ 86.500071][ T5843] ======================================================= [ 86.500071][ T5843] WARNING: The mand mount option has been deprecated and [ 86.500071][ T5843] and is ignored by this kernel. Remove the mand [ 86.500071][ T5843] option from the mount to silence this warning. [ 86.500071][ T5843] ======================================================= [ 86.505675][ T5843] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 86.567358][ T5619] usb usb1-port1: attempt power cycle [ 86.593763][ T5845] faux_driver vgem: [drm] Unknown color mode 65540; guessing buffer size. [ 86.602171][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 86.865380][ T5843] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 86.907060][ T5619] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.928418][ T5619] usb 1-1: device descriptor read/8, error -71 [ 87.116751][ T10] cfg80211: failed to load regulatory.db [ 87.166888][ T5619] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.189629][ T5619] usb 1-1: device descriptor read/8, error -71 [ 87.299077][ T5619] usb usb1-port1: unable to enumerate USB device [ 87.456732][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.609144][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 87.611735][ T32] usb 4-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 87.615126][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.615190][ T32] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 87.615218][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 87.615244][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 87.615272][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 87.615298][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 87.615320][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.702894][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.702920][ T32] usb 4-1: Product: syz [ 87.702934][ T32] usb 4-1: Manufacturer: syz [ 87.702947][ T32] usb 4-1: SerialNumber: syz [ 87.714427][ T32] usb 4-1: config 0 descriptor?? [ 87.716390][ T5857] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 87.724774][ T32] ati_remote 4-1:0.0: Initializing ati_remote hardware failed. [ 87.725289][ T32] ati_remote 4-1:0.0: probe with driver ati_remote failed with error -5 [ 87.877540][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.936759][ T5705] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.941266][ T27] usb 4-1: USB disconnect, device number 2 [ 88.016836][ T10] usb 2-1: device descriptor read/64, error -71 [ 88.096755][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 88.097249][ T5705] usb 3-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 88.098124][ T5705] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.098143][ T5705] usb 3-1: config 0 interface 0 has no altsetting 0 [ 88.099774][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.099788][ T5705] usb 3-1: Product: syz [ 88.099796][ T5705] usb 3-1: Manufacturer: syz [ 88.099805][ T5705] usb 3-1: SerialNumber: syz [ 88.102139][ T5705] usb 3-1: config 0 descriptor?? [ 88.256744][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.314508][ T5705] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 88.387291][ T10] usb 2-1: device descriptor read/64, error -71 [ 88.498222][ T10] usb usb2-port1: attempt power cycle [ 88.628561][ T5705] rc_core: IR keymap rc-imon-pad not found [ 88.628584][ T5705] Registered IR keymap rc-empty [ 88.628843][ T5705] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 88.628862][ T5705] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 88.731696][ T5705] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 88.733485][ T5705] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 88.739642][ T5705] imon 3-1:0.0: iMON device (15c2:0041) on usb<3:2> initialized [ 88.841913][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.857651][ T10] usb 2-1: device descriptor read/8, error -71 [ 88.877024][ T5705] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 89.028055][ T5705] usb 4-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 89.031266][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.031290][ T5705] usb 4-1: Product: syz [ 89.031304][ T5705] usb 4-1: Manufacturer: syz [ 89.031336][ T5705] usb 4-1: SerialNumber: syz [ 89.033637][ T5705] usb 4-1: config 0 descriptor?? [ 89.086728][ T32] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 89.096811][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 89.113426][ T5867] Bluetooth: MGMT ver 1.23 [ 89.113460][ T5867] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 89.115069][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 89.119751][ T10] usb 2-1: device descriptor read/8, error -71 [ 89.142243][ T191] usb 3-1: USB disconnect, device number 2 [ 89.227328][ T10] usb usb2-port1: unable to enumerate USB device [ 89.249510][ T32] usb 1-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 89.251420][ T32] usb 1-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.259556][ T32] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 89.259581][ T32] usb 1-1: Manufacturer: syz [ 89.259597][ T32] usb 1-1: SerialNumber: syz [ 89.271995][ T5705] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 003 [ 89.516118][ T32] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 89.527799][ T32] usb 1-1: USB disconnect, device number 6 [ 89.956779][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.053984][ T5892] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.43'. [ 90.088341][ T5891] ALSA: mixer_oss: invalid OSS volume 'u' [ 90.109372][ T32] usb 1-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 90.110432][ T32] usb 1-1: config index 0 descriptor too short (expected 27, got 18) [ 90.110482][ T32] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.112552][ T32] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 90.112578][ T32] usb 1-1: Manufacturer: syz [ 90.112593][ T32] usb 1-1: SerialNumber: syz [ 90.175638][ T5619] usb 4-1: USB disconnect, device number 3 [ 90.389788][ T32] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 90.392764][ T32] usb 1-1: USB disconnect, device number 7 [ 90.406726][ T5705] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.422356][ T5626] udevd[5626]: setting mode of /dev/bus/usb/001/007 to 020664 failed: No such file or directory [ 90.422496][ T5626] udevd[5626]: setting owner of /dev/bus/usb/001/007 to uid=0, gid=0 failed: No such file or directory [ 90.556792][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 90.557378][ T5705] usb 3-1: New USB device found: idVendor=05ac, idProduct=0254, bcdDevice=56.17 [ 90.558455][ T5705] usb 3-1: config 10 has an invalid interface number: 157 but max is 0 [ 90.558474][ T5705] usb 3-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 90.558485][ T5705] usb 3-1: config 10 has no interface number 0 [ 90.558516][ T5705] usb 3-1: config 10 interface 157 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 90.558532][ T5705] usb 3-1: config 10 interface 157 has no altsetting 0 [ 90.561346][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.561362][ T5705] usb 3-1: Product: syz [ 90.561371][ T5705] usb 3-1: Manufacturer: syz [ 90.561380][ T5705] usb 3-1: SerialNumber: syz [ 90.695269][ T5896] process 'syz.1.45' launched '/dev/fd/3' with NULL argv: empty string added [ 90.805571][ T5705] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:10.157/input/input9 [ 90.819923][ T4965] bcm5974 3-1:10.157: could not read from device [ 90.840571][ T4965] bcm5974 3-1:10.157: could not read from device [ 90.851408][ T4965] bcm5974 3-1:10.157: could not read from device [ 90.861651][ T5705] usb 3-1: USB disconnect, device number 3 [ 90.907730][ T5628] udevd[5628]: setting mode of /dev/bus/usb/003/003 to 020664 failed: No such file or directory [ 90.907876][ T5628] udevd[5628]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 91.193170][ T5916] random: crng reseeded on system resumption [ 91.273493][ T5920] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 91.327288][ T5619] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 91.395383][ T5923] FAULT_INJECTION: forcing a failure. [ 91.395383][ T5923] name failslab, interval 1, probability 0, space 0, times 0 [ 91.395419][ T5923] CPU: 1 UID: 0 PID: 5923 Comm: syz.2.56 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.395448][ T5923] Tainted: [L]=SOFTLOCKUP [ 91.395457][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.395468][ T5923] Call Trace: [ 91.395476][ T5923] [ 91.395485][ T5923] dump_stack_lvl+0xe8/0x150 [ 91.395515][ T5923] should_fail_ex+0x3eb/0x540 [ 91.395558][ T5923] should_failslab+0xa8/0x100 [ 91.395582][ T5923] __kvmalloc_node_noprof+0x171/0x820 [ 91.395604][ T5923] ? do_dentry_open+0x80e/0x1360 [ 91.395624][ T5923] ? path_openat+0x14a6/0x1da0 [ 91.395643][ T5923] ? do_file_open+0x23e/0x4a0 [ 91.395661][ T5923] ? do_sys_openat2+0x115/0x200 [ 91.395682][ T5923] ? v4l2_ctrl_new+0xa5a/0x1820 [ 91.395703][ T5923] ? v4l2_ctrl_new+0xa5a/0x1820 [ 91.395731][ T5923] v4l2_ctrl_new+0xa5a/0x1820 [ 91.395767][ T5923] v4l2_ctrl_new_std+0x24e/0x300 [ 91.395805][ T5923] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 91.395824][ T5923] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 91.395851][ T5923] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 91.395877][ T5923] ? __kvmalloc_node_noprof+0x340/0x820 [ 91.395909][ T5923] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0 [ 91.395935][ T5923] vicodec_open+0x219/0xbf0 [ 91.395966][ T5923] v4l2_open+0x1bc/0x3a0 [ 91.395992][ T5923] chrdev_open+0x4d9/0x600 [ 91.396017][ T5923] ? __pfx_chrdev_open+0x10/0x10 [ 91.396040][ T5923] ? devcgroup_check_permission+0x31/0x8f0 [ 91.396067][ T5923] ? __pfx_chrdev_open+0x10/0x10 [ 91.396086][ T5923] do_dentry_open+0x80e/0x1360 [ 91.396119][ T5923] vfs_open_consume+0x4a/0x350 [ 91.396138][ T5923] ? path_openat+0x148a/0x1da0 [ 91.396162][ T5923] path_openat+0x14a6/0x1da0 [ 91.396204][ T5923] do_file_open+0x23e/0x4a0 [ 91.396231][ T5923] ? __pfx_do_file_open+0x10/0x10 [ 91.396276][ T5923] ? _raw_spin_unlock+0x28/0x50 [ 91.396296][ T5923] ? alloc_fd+0x6af/0x760 [ 91.396330][ T5923] do_sys_openat2+0x115/0x200 [ 91.396351][ T5923] ? __se_sys_futex+0x3a8/0x450 [ 91.396374][ T5923] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.396403][ T5923] ? rcu_is_watching+0x16/0xb0 [ 91.396431][ T5923] __x64_sys_openat+0x138/0x170 [ 91.396458][ T5923] do_syscall_64+0x166/0x520 [ 91.396479][ T5923] ? trace_irq_disable+0x3b/0x140 [ 91.396497][ T5923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.396519][ T5923] ? clear_bhb_loop+0x70/0xc0 [ 91.396552][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.396574][ T5923] RIP: 0033:0x7fde3ef9e159 [ 91.396594][ T5923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.396612][ T5923] RSP: 002b:00007fde3fdb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.396636][ T5923] RAX: ffffffffffffffda RBX: 00007fde3f225fa0 RCX: 00007fde3ef9e159 [ 91.396651][ T5923] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 91.396665][ T5923] RBP: 00007fde3f03506b R08: 0000000000000000 R09: 0000000000000000 [ 91.396678][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.396692][ T5923] R13: 00007fde3f226038 R14: 00007fde3f225fa0 R15: 00007fff4b5937e8 [ 91.396727][ T5923] [ 91.575732][ T5619] usb 1-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 91.615983][ T5930] ucma_write: process 60 (syz.2.58) changed security contexts after opening file descriptor, this is not allowed. [ 91.707550][ T191] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.709223][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.709249][ T5619] usb 1-1: Product: syz [ 91.709263][ T5619] usb 1-1: Manufacturer: syz [ 91.709278][ T5619] usb 1-1: SerialNumber: syz [ 91.790870][ T5619] usb 1-1: config 0 descriptor?? [ 91.797813][ T5705] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 91.810345][ T5619] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 91.816180][ T5619] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.836810][ T5619] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 91.836877][ T5619] usb 1-1: media controller created [ 91.867921][ T191] usb 4-1: Using ep0 maxpacket: 8 [ 91.869075][ T5619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.869624][ T191] usb 4-1: New USB device found: idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 91.879792][ T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.879816][ T191] usb 4-1: Product: syz [ 91.879829][ T191] usb 4-1: Manufacturer: syz [ 91.879842][ T191] usb 4-1: SerialNumber: syz [ 91.930825][ T191] usb 4-1: config 0 descriptor?? [ 91.945611][ T191] gspca_main: se401-2.14.0 probing 047d:5003 [ 91.948150][ T5705] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 91.953573][ T5705] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 91.953596][ T5705] usb 2-1: config 1 has no interface number 0 [ 91.966149][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.966172][ T5705] usb 2-1: Product: syz [ 91.966186][ T5705] usb 2-1: Manufacturer: syz [ 91.966199][ T5705] usb 2-1: SerialNumber: syz [ 92.027275][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 92.030298][ T5705] usb 2-1: 3:0 : does not exist [ 92.030322][ T5705] usb 2-1: 3:0 : does not exist [ 92.042974][ T5619] DVB: Unable to find symbol mt352_attach() [ 92.136155][ T5941] input: syz1 as /devices/virtual/input/input11 [ 92.169250][ T5619] DVB: Unable to find symbol nxt6000_attach() [ 92.169269][ T5619] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 92.200027][ T5619] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 92.229774][ T5619] dvb-usb: schedule remote query interval to 1000 msecs. [ 92.229800][ T5619] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 92.229841][ T5619] dvb-usb: bulk message failed: -22 (7/0) [ 92.229857][ T5619] dvb-usb: bulk message failed: -22 (7/0) [ 92.232908][ T5619] usb 1-1: USB disconnect, device number 8 [ 92.353511][ T191] gspca_se401: Wrong descriptor type [ 92.353995][ T5619] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 92.413422][ T5944] gfs2: not a GFS2 filesystem [ 92.423480][ T5705] usb 2-1: USB disconnect, device number 6 [ 92.483187][ T5948] comedi comedi0: ni_at_a2150: I/O base address or length out of range [ 92.566171][ T5712] usb 4-1: USB disconnect, device number 4 [ 92.619308][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.663707][ T5952] overlayfs: missing 'lowerdir' [ 92.748932][ T5956] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 92.748956][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 92.754565][ T5956] jffs2: notice: (5956) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 93.013229][ T5966] MTD: Couldn't look up '/dev/rnullb0': -2 [ 93.046810][ T5712] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 93.211533][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.212217][ T5712] usb 1-1: not running at top speed; connect to a high speed hub [ 93.212253][ T5712] usb 1-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40 [ 93.213975][ T5712] usb 1-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 93.214000][ T5712] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.235445][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.235474][ T5712] usb 1-1: Product: syz [ 93.235498][ T5712] usb 1-1: Manufacturer: syz [ 93.235513][ T5712] usb 1-1: SerialNumber: syz [ 93.393197][ T5976] overlayfs: failed to resolve './file1/file0': -2 [ 93.500852][ T5958] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 93.552763][ T5712] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 93.565414][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 2 (id 3) [ 93.565435][ T5712] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 93.565446][ T5712] usb 1-1: [3] FU [LFE Playback Volume] ch = 2, val = 0/1/1 [ 93.592154][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 2 (id 3) [ 93.592185][ T5712] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 93.592203][ T5712] usb 1-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 93.593675][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 3 (id 3) [ 93.595514][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 3 (id 3) [ 93.621485][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 4 (id 3) [ 93.645786][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 5 (id 3) [ 93.656467][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 5 (id 3) [ 93.665669][ T5712] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 93.675200][ T5712] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 93.684421][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 11 (id 3) [ 93.686136][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 11 (id 3) [ 93.696775][ T32] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 93.710085][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 12 (id 3) [ 93.711271][ T5712] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 93.736536][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 3 (id 3) [ 93.740193][ T5712] usb 1-1: 3:0: cannot get RANGE values for control 5 (id 3) [ 93.769581][ T5712] usb 1-1: USB disconnect, device number 9 [ 93.810247][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.849341][ T32] usb 4-1: not running at top speed; connect to a high speed hub [ 93.849379][ T32] usb 4-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 93.850440][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.854152][ T32] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 93.854180][ T32] usb 4-1: Product: syz [ 93.854195][ T32] usb 4-1: Manufacturer: syz [ 93.914873][ T32] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 93.967837][ T5619] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.044005][ T5987] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 94.044021][ T5987] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.79'. [ 94.096759][ T5619] usb 3-1: device descriptor read/64, error -71 [ 94.119079][ T32] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 94.119847][ T32] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 94.119907][ T32] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 94.121080][ T32] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 94.175506][ T32] usb 4-1: USB disconnect, device number 5 [ 94.258165][ T5993] FAULT_INJECTION: forcing a failure. [ 94.258165][ T5993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.258197][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.0.82 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.258216][ T5993] Tainted: [L]=SOFTLOCKUP [ 94.258221][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.258228][ T5993] Call Trace: [ 94.258234][ T5993] [ 94.258240][ T5993] dump_stack_lvl+0xe8/0x150 [ 94.258258][ T5993] should_fail_ex+0x3eb/0x540 [ 94.258275][ T5993] prepare_alloc_pages+0x21e/0x5f0 [ 94.258292][ T5993] __alloc_frozen_pages_noprof+0x17a/0x400 [ 94.258308][ T5993] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 94.258325][ T5993] ? policy_nodemask+0x2cc/0x8e0 [ 94.258341][ T5993] alloc_pages_mpol+0x21e/0x390 [ 94.258357][ T5993] folio_alloc_mpol_noprof+0x39/0x160 [ 94.258371][ T5993] shmem_alloc_and_add_folio+0x43e/0xf60 [ 94.258384][ T5993] ? filemap_get_entry+0xcd/0x3f0 [ 94.258401][ T5993] ? __futex_wait+0x3c7/0x470 [ 94.258413][ T5993] ? __pfx_filemap_get_entry+0x10/0x10 [ 94.258425][ T5993] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 94.258441][ T5993] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 94.258458][ T5993] shmem_get_folio_gfp+0x594/0x1330 [ 94.258481][ T5993] shmem_fallocate+0x996/0xf10 [ 94.258505][ T5993] ? __pfx_shmem_fallocate+0x10/0x10 [ 94.258519][ T5993] ? lock_acquire+0x115/0x350 [ 94.258543][ T5993] vfs_fallocate+0x65a/0x7e0 [ 94.258562][ T5993] ? __fget_files+0x2a/0x420 [ 94.258577][ T5993] ? __pfx_vfs_fallocate+0x10/0x10 [ 94.258587][ T5993] ? __fget_files+0x2a/0x420 [ 94.258601][ T5993] ? fdget+0x1ac/0x250 [ 94.258614][ T5993] __x64_sys_fallocate+0xbf/0x110 [ 94.258627][ T5993] do_syscall_64+0x166/0x520 [ 94.258639][ T5993] ? trace_irq_disable+0x3b/0x140 [ 94.258650][ T5993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.258663][ T5993] ? clear_bhb_loop+0x70/0xc0 [ 94.258677][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.258689][ T5993] RIP: 0033:0x7f694039e159 [ 94.258702][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.258713][ T5993] RSP: 002b:00007f69412bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 94.258728][ T5993] RAX: ffffffffffffffda RBX: 00007f6940625fa0 RCX: 00007f694039e159 [ 94.258737][ T5993] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 94.258744][ T5993] RBP: 00007f694043506b R08: 0000000000000000 R09: 0000000000000000 [ 94.258752][ T5993] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 94.258760][ T5993] R13: 00007f6940626038 R14: 00007f6940625fa0 R15: 00007fff074fe578 [ 94.258779][ T5993] [ 94.337014][ T5619] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.337187][ T5698] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 94.466940][ T5619] usb 3-1: device descriptor read/64, error -71 [ 94.488221][ T5698] usb 2-1: New USB device found: idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 94.491745][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.491767][ T5698] usb 2-1: Product: syz [ 94.491780][ T5698] usb 2-1: Manufacturer: syz [ 94.491793][ T5698] usb 2-1: SerialNumber: syz [ 94.494573][ T5698] usb 2-1: config 0 descriptor?? [ 94.512799][ T4930] Bluetooth: hci4: urb ffff88802c3f1b00 submission failed (2) [ 94.577158][ T5619] usb usb3-port1: attempt power cycle [ 94.588558][ T5712] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 94.672777][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 94.746800][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 94.747675][ T5712] usb 1-1: New USB device found: idVendor=05ac, idProduct=0269, bcdDevice=0.00 [ 94.750771][ T5712] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.750827][ T5712] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.750854][ T5712] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.750889][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.756984][ T5712] usb 1-1: config 0 descriptor?? [ 94.825909][ T5997] raw_sendmsg: syz.3.84 forgot to set AF_INET. Fix it! [ 94.839778][ T5617] usb 2-1: USB disconnect, device number 7 [ 94.919868][ T5619] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 94.948494][ T5619] usb 3-1: device descriptor read/8, error -71 [ 95.186891][ T5619] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 95.207819][ T5619] usb 3-1: device descriptor read/8, error -71 [ 95.243820][ T5712] input: HID 05ac:0269 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:0269.0001/input/input14 [ 95.319113][ T5619] usb usb3-port1: unable to enumerate USB device [ 95.319755][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 95.421226][ T5993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.428340][ T5993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.467140][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 95.477154][ T10] usb 4-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 95.493358][ T10] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 95.495944][ T10] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 95.495979][ T10] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.496007][ T10] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 95.515561][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.515587][ T10] usb 4-1: Product: syz [ 95.515601][ T10] usb 4-1: Manufacturer: syz [ 95.515614][ T10] usb 4-1: SerialNumber: syz [ 95.605998][ T5712] magicmouse 0003:05AC:0269.0001: input,hidraw0: USB HID vff.fd Joystick [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 95.613230][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 95.631327][ T5712] usb 1-1: USB disconnect, device number 10 [ 95.658565][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input15 [ 95.726885][ T5705] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 95.788732][ T6005] fido_id[6005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 95.819559][ T10] imon:send_packet: packet tx failed (-71) [ 95.847666][ T10] imon 4-1:155.0: panel buttons/knobs setup failed [ 95.847691][ T10] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 95.847705][ T10] (id 0x00) [ 95.887716][ T5705] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 95.891491][ T5705] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 95.891520][ T5705] usb 2-1: config 1 has no interface number 0 [ 95.901791][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.901816][ T5705] usb 2-1: Product: syz [ 95.901829][ T5705] usb 2-1: Manufacturer: syz [ 95.901842][ T5705] usb 2-1: SerialNumber: syz [ 95.950963][ T5705] usb 2-1: skipping empty audio interface (v1) [ 96.026764][ T10] rc_core: IR keymap rc-imon-pad not found [ 96.026786][ T10] Registered IR keymap rc-empty [ 96.026869][ T10] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 96.026888][ T10] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 96.028165][ T10] imon:send_packet: packet tx failed (-71) [ 96.040756][ T5705] snd-usb-audio 2-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 96.056912][ T10] imon 4-1:155.0: remote input dev register failed [ 96.057132][ T10] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 96.095139][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.156125][ T10] imon 4-1:155.0: unable to initialize intf0, err 0 [ 96.172930][ T10] usb 4-1: USB disconnect, device number 6 [ 96.196898][ T5705] usb 2-1: USB disconnect, device number 8 [ 96.846185][ T6016] comedi comedi0: ni_at_a2150: I/O base address or length out of range [ 97.096747][ T5617] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 97.249009][ T5617] usb 3-1: Using ep0 maxpacket: 32 [ 97.251178][ T5617] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 97.252567][ T5617] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 97.252593][ T5617] usb 3-1: config 0 has an invalid descriptor of length 175, skipping remainder of the config [ 97.252613][ T5617] usb 3-1: config 0 has no interface number 0 [ 97.252661][ T5617] usb 3-1: config 0 interface 12 altsetting 6 endpoint 0x2 has invalid maxpacket 59792, setting to 64 [ 97.252688][ T5617] usb 3-1: config 0 interface 12 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.252713][ T5617] usb 3-1: config 0 interface 12 has no altsetting 0 [ 97.256187][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.256211][ T5617] usb 3-1: Product: syz [ 97.256226][ T5617] usb 3-1: Manufacturer: syz [ 97.256240][ T5617] usb 3-1: SerialNumber: syz [ 97.346328][ T32] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 97.378795][ T5617] usb 3-1: config 0 descriptor?? [ 97.397288][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 97.515226][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 97.536866][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.536923][ T32] usb 1-1: New USB device found: idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 97.558443][ T32] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 97.558485][ T32] usb 1-1: can't read configurations, error -71 [ 97.570450][ T10] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.570490][ T10] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 97.576138][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.579495][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.580472][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.585831][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.592970][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.594163][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.598805][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.604941][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.604991][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.612684][ T10] usb 2-1: config 0 descriptor?? [ 97.631563][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 97.631577][ T10] pwc: Warning: more than 1 configuration available. [ 97.724115][ T5617] f81534 3-1:0.12: required endpoints missing [ 97.856392][ T10] pwc: send_video_command error -71 [ 97.856413][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 97.856527][ T10] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 97.871910][ T10] usb 2-1: USB disconnect, device number 9 [ 98.796949][ T6084] fuse: Unknown parameter '00000000000000000000' [ 99.106825][ T4930] Bluetooth: hci0: command tx timeout [ 99.172073][ T6096] FAULT_INJECTION: forcing a failure. [ 99.172073][ T6096] name failslab, interval 1, probability 0, space 0, times 0 [ 99.172109][ T6096] CPU: 0 UID: 0 PID: 6096 Comm: syz.1.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.172137][ T6096] Tainted: [L]=SOFTLOCKUP [ 99.172145][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.172156][ T6096] Call Trace: [ 99.172164][ T6096] [ 99.172173][ T6096] dump_stack_lvl+0xe8/0x150 [ 99.172201][ T6096] should_fail_ex+0x3eb/0x540 [ 99.172227][ T6096] should_failslab+0xa8/0x100 [ 99.172250][ T6096] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 99.172274][ T6096] ? __d_alloc+0x37/0x7f0 [ 99.172292][ T6096] ? __d_alloc+0x37/0x7f0 [ 99.172317][ T6096] __d_alloc+0x37/0x7f0 [ 99.172342][ T6096] d_alloc_pseudo+0x21/0xc0 [ 99.172362][ T6096] alloc_path_pseudo+0x107/0x220 [ 99.172387][ T6096] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 99.172408][ T6096] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.172435][ T6096] alloc_file_pseudo+0xa8/0x1e0 [ 99.172458][ T6096] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 99.172480][ T6096] ? _raw_spin_unlock+0x28/0x50 [ 99.172509][ T6096] sock_alloc_file+0xb8/0x2e0 [ 99.172528][ T6096] ? __sys_socket+0x12b/0x1b0 [ 99.172550][ T6096] __sys_socket+0x13f/0x1b0 [ 99.172573][ T6096] __x64_sys_socket+0x7a/0x90 [ 99.172594][ T6096] do_syscall_64+0x166/0x520 [ 99.172614][ T6096] ? trace_irq_disable+0x3b/0x140 [ 99.172633][ T6096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.172654][ T6096] ? clear_bhb_loop+0x70/0xc0 [ 99.172677][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.172699][ T6096] RIP: 0033:0x7f26eef9e159 [ 99.172719][ T6096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.172736][ T6096] RSP: 002b:00007f26efe0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 99.172759][ T6096] RAX: ffffffffffffffda RBX: 00007f26ef226090 RCX: 00007f26eef9e159 [ 99.172774][ T6096] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 99.172786][ T6096] RBP: 00007f26ef03506b R08: 0000000000000000 R09: 0000000000000000 [ 99.172798][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.172810][ T6096] R13: 00007f26ef226128 R14: 00007f26ef226090 R15: 00007ffcafcaa708 [ 99.172844][ T6096] [ 99.846733][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 99.910606][ T5712] usb 3-1: USB disconnect, device number 8 [ 100.019537][ T10] usb 2-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=9.00 [ 100.031586][ T10] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 100.031615][ T10] usb 2-1: Product: syz [ 100.038505][ T10] usb 2-1: config 0 descriptor?? [ 100.044408][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 100.074306][ T10] usb 2-1: Detected FT232H [ 100.127024][ T5619] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 100.245026][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 100.250771][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 100.253126][ T10] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 100.257379][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.262970][ T10] usb 2-1: USB disconnect, device number 10 [ 100.277249][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 100.281408][ T10] ftdi_sio 2-1:0.0: device disconnected [ 100.317686][ T5619] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 100.318778][ T5619] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.318828][ T5619] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 100.322937][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.322963][ T5619] usb 4-1: Product: syz [ 100.322978][ T5619] usb 4-1: Manufacturer: syz [ 100.322992][ T5619] usb 4-1: SerialNumber: syz [ 100.386187][ T5619] cdc_mbim 4-1:1.0: skipping garbage [ 100.553932][ T6123] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 100.621990][ T6136] i2c i2c-0: delete_device: Can't find device in list [ 100.658623][ T5712] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 100.828205][ T5712] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 100.830031][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.830088][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.845884][ T5712] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 100.846148][ T5712] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 100.846220][ T5712] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 100.851067][ T5712] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 100.851158][ T5712] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 100.856732][ T5712] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 100.872323][ T5712] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 100.872414][ T5712] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 100.884401][ T5712] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 101.027841][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 101.173995][ T6123] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 101.174485][ T5619] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 101.178070][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 101.179266][ T10] usb 1-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 101.181594][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 101.181615][ T10] usb 1-1: config 0 has no interface number 0 [ 101.184491][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.184515][ T10] usb 1-1: Product: syz [ 101.184529][ T10] usb 1-1: Manufacturer: syz [ 101.184543][ T10] usb 1-1: SerialNumber: syz [ 101.195836][ T10] usb 1-1: config 0 descriptor?? [ 101.208301][ T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 101.259052][ T32] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 101.375963][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 101.406391][ T5619] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 101.415303][ T32] usb 2-1: not running at top speed; connect to a high speed hub [ 101.415341][ T32] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 101.426978][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 101.445787][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.445858][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.445882][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 101.445925][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.472012][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 101.517439][ T32] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 101.522286][ T32] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 101.522418][ T32] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 101.526253][ T5619] wwan wwan0: port wwan0mbim0 attached [ 101.559252][ T32] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB4 [ 101.565934][ T32] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 101.566101][ T32] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 101.603675][ T32] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB5 [ 101.634408][ C0] quatech-serial ttyUSB2: qt2_process_read_urb - unsupported command 11 [ 101.662568][ T5619] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 4e:09:81:1e:4e:db [ 101.709039][ T5619] usb 4-1: USB disconnect, device number 7 [ 101.738723][ T5619] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 101.747990][ T10] usb 2-1: USB disconnect, device number 11 [ 101.869667][ T10] keyspan_2 ttyUSB4: Keyspan 2 port adapter converter now disconnected from ttyUSB4 [ 101.875246][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 101.889104][ T10] keyspan_2 ttyUSB5: Keyspan 2 port adapter converter now disconnected from ttyUSB5 [ 101.889696][ T5712] usb 1-1: USB disconnect, device number 13 [ 101.898950][ T10] keyspan 2-1:1.0: device disconnected [ 101.942705][ T5712] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 101.961424][ T5619] wwan wwan0: port wwan0mbim0 disconnected [ 102.008111][ T5712] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 102.032949][ T5712] quatech2 1-1:0.51: device disconnected [ 102.483931][ T6164] tmpfs: Bad value for 'mpol' [ 102.696864][ T5617] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 102.848685][ T5617] usb 2-1: New USB device found: idVendor=056a, idProduct=0021, bcdDevice=0.00 [ 102.850167][ T5617] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.850201][ T5617] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.850228][ T5617] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.850264][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.854489][ T5617] usb 2-1: config 0 descriptor?? [ 103.009403][ T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.156776][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 103.157711][ T32] usb 4-1: New USB device found: idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 103.159288][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.159337][ T32] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.159395][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.159422][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.166027][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.166053][ T32] usb 4-1: Product: syz [ 103.166068][ T32] usb 4-1: Manufacturer: syz [ 103.166114][ T32] usb 4-1: SerialNumber: syz [ 103.259788][ T32] usb 4-1: config 0 descriptor?? [ 103.264803][ T32] usb 4-1: no audio or video endpoints found [ 103.288484][ T5705] usb 3-1: USB disconnect, device number 9 [ 103.324791][ T5705] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 103.365887][ T5705] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 103.374825][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.390676][ T5705] keyspan 3-1:1.0: device disconnected [ 103.395417][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.662651][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.663247][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.709331][ T5617] usbhid 2-1:0.0: can't add hid device: -71 [ 103.709468][ T5617] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 103.720610][ T5617] usb 2-1: USB disconnect, device number 12 [ 103.825835][ T10] usb 4-1: USB disconnect, device number 8 [ 104.187088][ T5705] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 104.274504][ T6228] syzkaller1: entered promiscuous mode [ 104.274527][ T6228] syzkaller1: entered allmulticast mode [ 104.326738][ T5705] usb 3-1: device descriptor read/64, error -71 [ 104.566771][ T5705] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 104.708247][ T5705] usb 3-1: device descriptor read/64, error -71 [ 104.718961][ T5619] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 104.818088][ T5705] usb usb3-port1: attempt power cycle [ 104.867656][ T5619] usb 2-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00 [ 104.872253][ T5619] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.879150][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 104.879175][ T5619] usb 2-1: Product: syz [ 104.879188][ T5619] usb 2-1: Manufacturer: syz [ 104.904027][ T5712] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.066721][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 105.067518][ T5712] usb 4-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.069867][ T5712] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.069885][ T5712] usb 4-1: config 0 has no interface number 0 [ 105.072249][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.072274][ T5712] usb 4-1: Product: syz [ 105.072288][ T5712] usb 4-1: Manufacturer: syz [ 105.072302][ T5712] usb 4-1: SerialNumber: syz [ 105.075752][ T5712] usb 4-1: config 0 descriptor?? [ 105.150464][ T5712] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 105.196781][ T5705] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 105.229004][ T5619] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 105.229159][ T5705] usb 3-1: device descriptor read/8, error -71 [ 105.344645][ C0] usb-serial (null): qt2_process_read_urb - unsupported command 132 [ 105.360557][ T5712] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 105.376789][ T5712] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 105.401198][ T5619] usb 1-1: New USB device found: idVendor=1286, idProduct=2046, bcdDevice=1.00 [ 105.406077][ T5619] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.406106][ T5619] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.406255][ T5619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.448659][ T5619] usb 1-1: NFC: intf ffff888029b99000 id ffffffff8fc79420 [ 105.498093][ T5705] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 105.503141][ T5619] nfcmrvl 1-1:1.0: NFC: registered with nci successfully [ 105.522850][ T5705] usb 3-1: device descriptor read/8, error -71 [ 105.547534][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 105.551782][ T5619] usb 4-1: USB disconnect, device number 9 [ 105.577854][ T5619] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 105.583283][ T5619] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 105.584669][ T5619] quatech2 4-1:0.51: device disconnected [ 105.627160][ T5705] usb usb3-port1: unable to enumerate USB device [ 105.638928][ T6259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.144'. [ 105.649702][ T6259] jffs2: notice: (6259) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 105.690256][ T5617] usb 1-1: USB disconnect, device number 14 [ 105.716768][ T5617] usb 1-1: NFC: intf ffff888029b99000 [ 106.526709][ T5705] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 106.546706][ T191] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.677378][ T5705] usb 1-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 106.678563][ T5705] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.678615][ T5705] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.678657][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.727897][ T191] usb 4-1: New USB device found: idVendor=0d8c, idProduct=0014, bcdDevice=0.00 [ 106.739521][ T191] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 106.739560][ T191] usb 4-1: can't read configurations, error -61 [ 106.866753][ T191] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 107.038619][ T191] usb 4-1: New USB device found: idVendor=0d8c, idProduct=0014, bcdDevice=0.00 [ 107.040346][ T6298] fuse: Bad value for 'fd' [ 107.041286][ T191] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 107.041336][ T191] usb 4-1: can't read configurations, error -61 [ 107.041690][ T191] usb usb4-port1: attempt power cycle [ 107.360586][ T32] usb 2-1: USB disconnect, device number 13 [ 107.387720][ T191] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 107.411641][ T191] usb 4-1: New USB device found: idVendor=0d8c, idProduct=0014, bcdDevice=0.00 [ 107.427191][ T191] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 107.427232][ T191] usb 4-1: can't read configurations, error -61 [ 107.557194][ T191] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 107.579197][ T191] usb 4-1: New USB device found: idVendor=0d8c, idProduct=0014, bcdDevice=0.00 [ 107.582763][ T191] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 107.582799][ T191] usb 4-1: can't read configurations, error -61 [ 107.583421][ T191] usb usb4-port1: unable to enumerate USB device [ 107.936770][ T5712] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 108.087984][ T5712] usb 2-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 108.091484][ T5712] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.091576][ T5712] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.094473][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.094497][ T5712] usb 2-1: Product: syz [ 108.094518][ T5712] usb 2-1: Manufacturer: syz [ 108.094531][ T5712] usb 2-1: SerialNumber: syz [ 108.121947][ T5712] usb 2-1: unsupported MDLM descriptors [ 108.165657][ T6313] input: syz1 as /devices/virtual/input/input17 [ 108.173293][ T6313] ========= ** replaying previous printk message ** [ 108.173293][ T6313] ================================================================== [ 108.173310][ T6313] BUG: KASAN: slab-out-of-bounds in md5_blocks+0x120/0xbd0 [ 108.173336][ T6313] Read of size 64 at addr ffff88807f06c2e0 by task syz.2.154/6313 [ 108.173354][ T6313] [ 108.173367][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.2.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.173393][ T6313] Tainted: [L]=SOFTLOCKUP [ 108.173405][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.173417][ T6313] Call Trace: [ 108.173425][ T6313] [ 108.173433][ T6313] dump_stack_lvl+0xe8/0x150 [ 108.173455][ T6313] print_address_description+0x55/0x1e0 [ 108.173477][ T6313] ? md5_blocks+0x120/0xbd0 [ 108.173495][ T6313] print_report+0x58/0x70 [ 108.173524][ T6313] kasan_report+0x117/0x150 [ 108.173543][ T6313] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.173564][ T6313] ? md5_blocks+0x120/0xbd0 [ 108.173585][ T6313] kasan_check_range+0x264/0x2c0 [ 108.173604][ T6313] ? md5_blocks+0x120/0xbd0 [ 108.173622][ T6313] __asan_memcpy+0x29/0x70 [ 108.173640][ T6313] md5_blocks+0x120/0xbd0 [ 108.173666][ T6313] ? __pfx_md5_blocks+0x10/0x10 [ 108.173690][ T6313] ? simple_strntoull+0x134/0x190 [ 108.173712][ T6313] md5_update+0xef/0x150 [ 108.173731][ T6313] md5+0xed/0x180 [ 108.173749][ T6313] ? __pfx_md5+0x10/0x10 [ 108.173769][ T6313] ? bpf_core_calc_relo_insn+0xfe0/0x1e90 [ 108.173788][ T6313] ? ecryptfs_write_tag_70_packet+0x4bf/0x12e0 [ 108.173808][ T6313] ? ecryptfs_write_tag_70_packet+0x4bf/0x12e0 [ 108.173829][ T6313] ecryptfs_write_tag_70_packet+0x820/0x12e0 [ 108.173857][ T6313] ecryptfs_encrypt_and_encode_filename+0x576/0x1580 [ 108.173883][ T6313] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10 [ 108.173903][ T6313] ? __d_alloc_parallel+0x156f/0x1700 [ 108.173920][ T6313] ? __d_alloc_parallel+0x39e/0x1700 [ 108.173941][ T6313] ecryptfs_lookup+0x20e/0x780 [ 108.173961][ T6313] ? __pfx_ecryptfs_lookup+0x10/0x10 [ 108.173981][ T6313] ? lock_acquire+0x232/0x350 [ 108.174001][ T6313] __lookup_slow+0x1fb/0x2f0 [ 108.174020][ T6313] lookup_slow+0x59/0x80 [ 108.174038][ T6313] link_path_walk+0xd22/0x1910 [ 108.174063][ T6313] __filename_parentat+0x287/0x6f0 [ 108.174083][ T6313] ? __pfx___filename_parentat+0x10/0x10 [ 108.174100][ T6313] ? kmem_cache_alloc_noprof+0x151/0x600 [ 108.174132][ T6313] filename_create+0xd9/0x370 [ 108.174150][ T6313] ? lock_acquire+0x115/0x350 [ 108.174167][ T6313] ? __pfx_filename_create+0x10/0x10 [ 108.174188][ T6313] filename_mkdirat+0xd2/0x510 [ 108.174204][ T6313] ? __might_fault+0xaf/0x130 [ 108.174223][ T6313] ? __pfx_filename_mkdirat+0x10/0x10 [ 108.174242][ T6313] ? do_getname+0x151/0x250 [ 108.174260][ T6313] __se_sys_mkdirat+0x35/0x150 [ 108.174278][ T6313] do_syscall_64+0x166/0x520 [ 108.174295][ T6313] ? trace_irq_disable+0x3b/0x140 [ 108.174311][ T6313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.174329][ T6313] ? clear_bhb_loop+0x70/0xc0 [ 108.174348][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.174366][ T6313] RIP: 0033:0x7fde3ef9e159 [ 108.174384][ T6313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.174399][ T6313] RSP: 002b:00007fde3fdb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 108.174420][ T6313] RAX: ffffffffffffffda RBX: 00007fde3f225fa0 RCX: 00007fde3ef9e159 [ 108.174435][ T6313] RDX: 0000000000000141 RSI: 0000200000000140 RDI: 0000000000000005 [ 108.174447][ T6313] RBP: 00007fde3f03506b R08: 0000000000000000 R09: 0000000000000000 [ 108.174458][ T6313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.174470][ T6313] R13: 00007fde3f226038 R14: 00007fde3f225fa0 R15: 00007fff4b5937e8 [ 108.174490][ T6313] [ 108.174497][ T6313] [ 108.174501][ T6313] Allocated by task 5712: [ 108.174518][ T6313] kasan_save_track+0x3e/0x80 [ 108.174535][ T6313] __kasan_kmalloc+0x93/0xb0 [ 108.174549][ T6313] __kmalloc_cache_noprof+0x31c/0x600 [ 108.174564][ T6313] snd_info_create_entry+0x5c/0x340 [ 108.174580][ T6313] snd_card_rw_proc_new+0x79/0x140 [ 108.174596][ T6313] snd_usb_audio_create+0x1873/0x2000 [ 108.174613][ T6313] usb_audio_probe+0x1b7c/0x2240 [ 108.174627][ T6313] usb_probe_interface+0x788/0xe50 [ 108.174643][ T6313] really_probe+0x254/0xae0 [ 108.174659][ T6313] __driver_probe_device+0x1e8/0x360 [ 108.174675][ T6313] driver_probe_device+0x4f/0x240 [ 108.174690][ T6313] __device_attach_driver+0x270/0x410 [ 108.174706][ T6313] bus_for_each_drv+0x258/0x2f0 [ 108.174722][ T6313] __device_attach+0x2c4/0x450 [ 108.174737][ T6313] device_initial_probe+0xa1/0xd0 [ 108.174752][ T6313] bus_probe_device+0x12a/0x220 [ 108.174767][ T6313] device_add+0x7d7/0xb80 [ 108.174781][ T6313] usb_set_configuration+0x1bb5/0x2260 [ 108.174797][ T6313] usb_generic_driver_probe+0x8d/0x150 [ 108.174813][ T6313] usb_probe_device+0x1c3/0x3b0 [ 108.174828][ T6313] really_probe+0x254/0xae0 [ 108.174842][ T6313] __driver_probe_device+0x1e8/0x360 [ 108.174857][ T6313] driver_probe_device+0x4f/0x240 [ 108.174872][ T6313] __device_attach_driver+0x270/0x410 [ 108.174887][ T6313] bus_for_each_drv+0x258/0x2f0 [ 108.174902][ T6313] __device_attach+0x2c4/0x450 [ 108.174922][ T6313] device_initial_probe+0xa1/0xd0 [ 108.174937][ T6313] bus_probe_device+0x12a/0x220 [ 108.174952][ T6313] device_add+0x7d7/0xb80 [ 108.174966][ T6313] usb_new_device+0x9aa/0x1690 [ 108.174981][ T6313] hub_event+0x28e8/0x4d30 [ 108.174995][ T6313] process_scheduled_works+0xc3d/0x1630 [ 108.175012][ T6313] worker_thread+0xa47/0xfb0 [ 108.175027][ T6313] kthread+0x38b/0x480 [ 108.175041][ T6313] ret_from_fork+0x514/0xb70 [ 108.175055][ T6313] ret_from_fork_asm+0x1a/0x30 [ 108.175070][ T6313] [ 108.175075][ T6313] The buggy address belongs to the object at ffff88807f06c200 [ 108.175075][ T6313] which belongs to the cache kmalloc-256 of size 256 [ 108.175089][ T6313] The buggy address is located 224 bytes inside of [ 108.175089][ T6313] allocated 256-byte region [ffff88807f06c200, ffff88807f06c300) [ 108.175108][ T6313] [ 108.175112][ T6313] The buggy address belongs to the physical page: [ 108.175122][ T6313] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f06c [ 108.175138][ T6313] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.175152][ T6313] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 108.175169][ T6313] page_type: f5(slab) [ 108.175187][ T6313] raw: 00fff00000000040 ffff88813ff24b40 dead000000000100 dead000000000122 [ 108.175203][ T6313] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 108.175219][ T6313] head: 00fff00000000040 ffff88813ff24b40 dead000000000100 dead000000000122 [ 108.175235][ T6313] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 108.175251][ T6313] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 108.175266][ T6313] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 108.175275][ T6313] page dumped because: kasan: bad access detected [ 108.175284][ T6313] page_owner tracks the page as allocated [ 108.175290][ T6313] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4980, tgid 4980 (udevd), ts 93291616161 [ 108.175319][ T6313] post_alloc_hook+0x1f9/0x250 [ 108.175335][ T6313] get_page_from_freelist+0x220f/0x2280 [ 108.175351][ T6313] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 108.175367][ T6313] allocate_slab+0x7d/0x5e0 [ 108.175381][ T6313] refill_objects+0x2d5/0x350 [ 108.175396][ T6313] __pcs_replace_empty_main+0x2c8/0x6c0 [ 108.175412][ T6313] __kmalloc_noprof+0x476/0x710 [ 108.175428][ T6313] security_inode_init_security+0x102/0x3e0 [ 108.175444][ T6313] shmem_mknod+0x1ea/0x340 [ 108.175459][ T6313] lookup_open+0xedc/0x1970 [ 108.175473][ T6313] path_openat+0x673/0x1da0 [ 108.175487][ T6313] do_file_open+0x23e/0x4a0 [ 108.175500][ T6313] do_sys_openat2+0x115/0x200 [ 108.175523][ T6313] __x64_sys_openat+0x138/0x170 [ 108.175538][ T6313] do_syscall_64+0x166/0x520 [ 108.175552][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.175569][ T6313] page last free pid 5601 tgid 5601 ts 93184981475 stack trace: [ 108.175582][ T6313] __free_frozen_pages+0xc97/0xd90 [ 108.175597][ T6313] __mmdrop+0xbc/0x4d0 [ 108.175612][ T6313] finish_task_switch+0x69a/0xc60 [ 108.175627][ T6313] __schedule+0x1b4f/0x5b40 [ 108.175642][ T6313] schedule+0x164/0x2b0 [ 108.175656][ T6313] schedule_hrtimeout_range_clock+0x15b/0x330 [ 108.175673][ T6313] poll_schedule_timeout+0xd0/0x1a0 [ 108.175688][ T6313] do_select+0xc95/0x1880 [ 108.175702][ T6313] core_sys_select+0x86d/0xb40 [ 108.175717][ T6313] __se_sys_pselect6+0x267/0x320 [ 108.175732][ T6313] do_syscall_64+0x166/0x520 [ 108.175746][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.175763][ T6313] [ 108.175768][ T6313] Memory state around the buggy address: [ 108.175777][ T6313] ffff88807f06c200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 108.175790][ T6313] ffff88807f06c280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 108.175802][ T6313] >ffff88807f06c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 108.175811][ T6313] ^ [ 108.175820][ T6313] ffff88807f06c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 108.175831][ T6313] ffff88807f06c400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 108.175840][ T6313] ================================================================== [ 108.175966][ T6313] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.089823][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.2.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.100685][ T6313] Tainted: [L]=SOFTLOCKUP [ 109.105011][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.115077][ T6313] Call Trace: [ 109.118369][ T6313] [ 109.121312][ T6313] vpanic+0x26f/0x710 [ 109.125311][ T6313] panic+0xc5/0xd0 [ 109.129041][ T6313] ? __pfx_panic+0x10/0x10 [ 109.133467][ T6313] ? preempt_schedule_thunk+0x16/0x40 [ 109.138851][ T6313] ? md5_blocks+0x120/0xbd0 [ 109.143370][ T6313] ? preempt_schedule_thunk+0x16/0x40 [ 109.148748][ T6313] ? md5_blocks+0x120/0xbd0 [ 109.153255][ T6313] check_panic_on_warn+0x89/0xb0 [ 109.158201][ T6313] ? md5_blocks+0x120/0xbd0 [ 109.162740][ T6313] end_report+0x73/0x170 [ 109.166993][ T6313] ? md5_blocks+0x120/0xbd0 [ 109.171500][ T6313] kasan_report+0x128/0x150 [ 109.176011][ T6313] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.181054][ T6313] ? md5_blocks+0x120/0xbd0 [ 109.185565][ T6313] kasan_check_range+0x264/0x2c0 [ 109.190522][ T6313] ? md5_blocks+0x120/0xbd0 [ 109.195047][ T6313] __asan_memcpy+0x29/0x70 [ 109.199473][ T6313] md5_blocks+0x120/0xbd0 [ 109.203813][ T6313] ? __pfx_md5_blocks+0x10/0x10 [ 109.208672][ T6313] ? simple_strntoull+0x134/0x190 [ 109.213705][ T6313] md5_update+0xef/0x150 [ 109.217956][ T6313] md5+0xed/0x180 [ 109.221605][ T6313] ? __pfx_md5+0x10/0x10 [ 109.225857][ T6313] ? bpf_core_calc_relo_insn+0xfe0/0x1e90 [ 109.231582][ T6313] ? ecryptfs_write_tag_70_packet+0x4bf/0x12e0 [ 109.237742][ T6313] ? ecryptfs_write_tag_70_packet+0x4bf/0x12e0 [ 109.243906][ T6313] ecryptfs_write_tag_70_packet+0x820/0x12e0 [ 109.249904][ T6313] ecryptfs_encrypt_and_encode_filename+0x576/0x1580 [ 109.256592][ T6313] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10 [ 109.263722][ T6313] ? __d_alloc_parallel+0x156f/0x1700 [ 109.269099][ T6313] ? __d_alloc_parallel+0x39e/0x1700 [ 109.274407][ T6313] ecryptfs_lookup+0x20e/0x780 [ 109.279199][ T6313] ? __pfx_ecryptfs_lookup+0x10/0x10 [ 109.284530][ T6313] ? lock_acquire+0x232/0x350 [ 109.289223][ T6313] __lookup_slow+0x1fb/0x2f0 [ 109.293822][ T6313] lookup_slow+0x59/0x80 [ 109.298075][ T6313] link_path_walk+0xd22/0x1910 [ 109.302858][ T6313] __filename_parentat+0x287/0x6f0 [ 109.307985][ T6313] ? __pfx___filename_parentat+0x10/0x10 [ 109.313623][ T6313] ? kmem_cache_alloc_noprof+0x151/0x600 [ 109.319276][ T6313] filename_create+0xd9/0x370 [ 109.323958][ T6313] ? lock_acquire+0x115/0x350 [ 109.328644][ T6313] ? __pfx_filename_create+0x10/0x10 [ 109.334459][ T6313] filename_mkdirat+0xd2/0x510 [ 109.339232][ T6313] ? __might_fault+0xaf/0x130 [ 109.343918][ T6313] ? __pfx_filename_mkdirat+0x10/0x10 [ 109.349296][ T6313] ? do_getname+0x151/0x250 [ 109.353810][ T6313] __se_sys_mkdirat+0x35/0x150 [ 109.358584][ T6313] do_syscall_64+0x166/0x520 [ 109.363179][ T6313] ? trace_irq_disable+0x3b/0x140 [ 109.368207][ T6313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.374281][ T6313] ? clear_bhb_loop+0x70/0xc0 [ 109.378961][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.384860][ T6313] RIP: 0033:0x7fde3ef9e159 [ 109.389283][ T6313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.408898][ T6313] RSP: 002b:00007fde3fdb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 109.417324][ T6313] RAX: ffffffffffffffda RBX: 00007fde3f225fa0 RCX: 00007fde3ef9e159 [ 109.425309][ T6313] RDX: 0000000000000141 RSI: 0000200000000140 RDI: 0000000000000005 [ 109.433289][ T6313] RBP: 00007fde3f03506b R08: 0000000000000000 R09: 0000000000000000 [ 109.441264][ T6313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.449247][ T6313] R13: 00007fde3f226038 R14: 00007fde3f225fa0 R15: 00007fff4b5937e8 [ 109.457276][ T6313] [ 109.460469][ T6313] Kernel Offset: disabled [ 109.464812][ T6313] Rebooting in 86400 seconds..