last executing test programs: 3m22.26613591s ago: executing program 3 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff7010203010902240001000010000904020202f3bff50009050602000202"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='\\x01 00000 ', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes128, 0x8, '\x00', @a}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYRES16=r1, @ANYBLOB="d8eb490e0c143c1d585030cfa48d43b39103e0d7ab7fbcf422e63a9e60888a0ce188e9ed4bc12d14615da866dd21ee7bbfdf016d3541eabb015278243d600a50be465e8d976c89355f503387f5132521d9f652d5260057b82536bc6d31cd605add907e05f5d88bd37980159545ea8a0904007a7a4b2a5dbbdea09fcdee9aa1b46a83270ed0b86dfd1b1fcdce98"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/snmp\x00') read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0xffffffc9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x48801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) 3m21.017053781s ago: executing program 3 (id=150): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x20a00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xd0, 0xb, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x3, 0x6}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x6, 0xfa, 0x4, 0xff, 0x10}, 0x30, &(0x7f00000000c0)={0x5, 0xf, 0x30, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "aec2038fdf8d894da096a279e790c6fc"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x3, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x6, 0x3}]}, 0xa, [{0xdb, &(0x7f0000000100)=@string={0xdb, 0x3, "fd906036c1f842150a715d2b3f26f9e87b57cdd9ddf1f3f03966b417f1ff4e3782123d4c5f4e366283b153d6e74109f258d9738461b5f810be73fc93e58c37d33ec3143340debf336799678a066ddc624cf4a3911151afd62a78efba3e91de13950c0d2ebb4abd9538b3ecfad30c774e78e31667ce43fb414b589e4e0d6d22c3964bc8480588eaa723507c1dd7fb2d3c927c0a8c7b37fde89d530539b512c18f2c74eb7226d0e5e492de94da33d0cb6a24086f8d853d000bcd93e35a50b86b4f9491948dcc3e2a2d7b72400aa9c2e990baefb864d49daac038"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c2a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x801}}, {0x41, &(0x7f0000000300)=@string={0x41, 0x3, "258064fc6da8204d7ddf065672fbb778bd8f5928c049df97c3e412f0f9833968cd3a4814c78ecaa09cea78e12e63748865eb479321c3015ce056bcdf8ba3f2"}}, {0xde, &(0x7f00000004c0)=@string={0xde, 0x3, "6720c6bafac4a9b5a255b1eb58b66380e5052288e87810222ff5e075e20ac4133cccffbad729835650cc1b191364fdd16a7714ac4787db5d525b4274a80f3ab3632a469992ea31003bc75f4ab96f57ff18309558a7360de76c019f64a39ba8c7d890053566cb7c6161141feb97f5a3ad3057c94cc204ecbb4ea5d77bede50ea9d540bb5ecdc1d77d516cb27156f271fcb23ddb19c97998afbd92d743e1dd82a79efa8bd9f8344f8a15804e3eb9025ce0e100d94b726fb6a390eb404a19690efa532121a7ea189f7d54036b339dd343688b4c35aa9b1d76a8d05a8b7d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x2a, &(0x7f0000000600)=@string={0x2a, 0x3, "c5bd40bb1c17e3d6f45a3a9865f8242e05987e2f8ddf5b65fc29c8fcd36106d64495c014348c3eb9"}}, {0xf8, &(0x7f00000006c0)=@string={0xf8, 0x3, "7bf206bec013b2dd2a7eaf4bfc3dd2fc66d96c015c95aaf767e158fc964f094b1a265fe6da021ff201546def2944ea990dfc7feb1cc657d55934460ef2263e79d970aa6468d52ee950274cba4c0dd32669f9e5e312e5f15aa3347abb5ce59e34f0b189129a14001abfa46cf125146d311b05ff2e07a64325885a08d23f2109036456ab7fa1a1e9cf49521fad8f2e4867950077814d119811f9f39f12d312e5fd00c91a341cf31428718acdc604e97066d1af70c27024cf9b9ad2d45e8fe4b6ae742943ccf9c64476dc60bdd3227a059a7f38c836e10ddfb72b99be205308209b1d629dba61654f4a5ba1804029c0975917fc713363f5"}}]}) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000000)="9001000000000000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3m17.993250285s ago: executing program 3 (id=158): r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x88, 0x0, 0x0) r1 = syz_usb_connect$uac3(0x6, 0x17b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x47f, 0xc010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x169, 0x3, 0x1, 0x8, 0xa0, 0x6, {0x8, 0xb, 0x1, 0x1, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5a, 0x101}, [@extension_unit={0x1d, 0x24, 0xa, 0x3, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3, 0x0]}, @multiply_unit={0xb, 0x24, 0xd, 0x40, 0x0, 0x6b9, 0x6}, @input_terminal={0x14, 0x24, 0x2, 0x6, 0x205, 0x4, 0x7, 0x3, 0xe5, 0xbd, 0x2, 0xed9e}, @input_terminal={0x14, 0x24, 0x2, 0x6, 0x205, 0x1, 0x2, 0x7, 0xfffe, 0x5, 0x64e7, 0x8a7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x8, 0x6, "109e", "08c186"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x1, 0x92, "6490b79a76ee1196"}, @as_header={0x17, 0x24, 0x1, 0x4, 0x9224, 0x0, 0x1001, 0x8, 0x7f, 0x4, 0x57}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x10, 0x9, {0xa, 0x25, 0x25, 0x2, 0x6, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x80, 0x774a, 0x5, 0x7, 0x7, 0x1, 0x8}, @as_header={0x17, 0x24, 0x1, 0x5, 0x6, 0xa8, 0x4, 0x1, 0xfe, 0x200, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x90e, 0x0, 0xde, 0x5}, @as_header={0x17, 0x24, 0x1, 0xc9, 0x9, 0x3, 0x2, 0x7, 0x1, 0xe1f, 0x5}, @as_header={0x17, 0x24, 0x1, 0x3, 0xfd2a, 0xfffe, 0x5, 0xb, 0x81, 0x5c, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2ad7, 0x4, 0x86, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x1, 0x6, {0xa, 0x25, 0x25, 0xcc2d, 0xbc, 0x1}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x4, 0x1, 0x4, 0x20, 0x8}, 0x3a, &(0x7f0000000240)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x5b, 0x9, 0x4}, @generic={0x17, 0x10, 0x2, "6b2aad2409b6dee87e699a5556bd417b97b1c6d4"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x2, 0xf0f, 0x2, [0xff3f00]}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x820}}, {0x1a, &(0x7f0000000300)=@string={0x1a, 0x3, "e827db4deb902c6f91f6004f60552d39a909c7ab0ed21eb5"}}, {0x82, &(0x7f0000000340)=@string={0x82, 0x3, "e8f4131831506bce7c53c652443e8c3bbd04b922a33042d81425caa0c32b3a93cc9b616b30107bbe98843b197e5819dfea8e4d7eb8dae8aeef7232d5e05f8c08980f554ded7409274867d87d8aba98db9d2a3f903ae434159df84b709df6334ef757dd8347d2eabfac250d3170a22e76a6ef20a1f60dc90fd5e34714de31c73d"}}, {0x4b, &(0x7f0000000400)=@string={0x4b, 0x3, "43024faf8f04f27e624e20fcfc0bc0989ba9862f8d4bac018e21fa78ef03d28b2e20ab2c5ac878c56075ffd8c790b3531c53fcd4d9214b9261e76f19e1a5f9c24060162640378bb990"}}, {0xe5, &(0x7f0000000580)=@string={0xe5, 0x3, "7eadc8166f28563482cdc4f536332c9f6c5c0cbb2ce7f21d4a4b27a3896ea8db63a83e8336699a2f9c1f4e7105d75a42026a40ba5252c607851ffdca14e0a42556f830486b4746c20df00d1e2030b2c9e98a34bd1a3ad2fb852343f125e6daace28cfa6a2af49505e53ba858fd0a2bfe638e4f3009942a93ae9d3cf70474bb069febbbcb5f23e984dd14b79b1b39e66b2bdc5a9e4a9399b58d9e1ef523db1d0e00fd2745db14eb85e1f89fefed692ee1e483f5a890ac364089b5c94300bba9f106b3ab024743f5004096c933af6c7b8a01fdd58563297fc95f1623d04c61b6df84380d"}}]}) syz_usb_control_io(r1, &(0x7f0000000840)={0x2c, &(0x7f0000000700)={0x0, 0x21, 0x1e, {0x1e, 0x1a, "9f7b3689bebbc732c7093b9a3d7f00517903be71637ce1610fb41bcc"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f0000000780)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x2, 0x8, "862a1328", "f30a6acf"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xeb, 0x60, 0x8, 0x8, 0xff, 0xff, 0x10}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x40, 0x17, 0xb6, "92e086755db019b81d0c362ea03d4b3058f52856f7eb254e7f8be123a8be802d61492fb6a8b86f6b2e38c199ad70c1fa76f709cd54bc2f623bcf903f9ca8725f9629cf0854b84753a01f0c6e8c5dd9bd2084cb8b0aa6c99238baba78c67814cfb419049b590dbc087fe0ff2290973514b9258eefd99d5ca0ad94780489cf143d0f4e15bb8c3a9a8525443ff20a284e12a636c2b99cd3df0dc57f38cf098236bf4ae92c40f83e6cc8ae20fca55d86ea29dc5660e77cac"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x0, 0xbede2e1d59eb661a}}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x20, 0x1}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "1352"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0xef69}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "2ea7"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x6eb0}, &(0x7f0000000c40)={0x40, 0x1c, 0x1}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x7f}}) 3m16.343045612s ago: executing program 3 (id=162): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0x4, 0xfffffffffffffffe, &(0x7f0000000040)) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) pread64(r0, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 3m16.149812078s ago: executing program 3 (id=164): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='add syz0 ', 0xa) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$vivid(&(0x7f0000000880), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f00000008c0)={0x100, [0x400, 0x6, 0x100, 0x8, 0xffff, 0x4, 0x0, 0x3, 0x400, 0x6, 0x0, 0x5, 0x9, 0x5, 0x1, 0x0, 0x5, 0x2, 0x1, 0x5, 0x7, 0x3, 0x81, 0x4, 0x7, 0x100, 0x6, 0x5, 0x4, 0x3, 0xaef4, 0x3, 0x7fff, 0x1, 0xfff, 0x100, 0x8, 0x3, 0x2, 0x2, 0x8, 0x1, 0x2, 0x4, 0x0, 0x5, 0x3, 0x30], 0x8}) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="240000003900070127bd7000fedb9f25047c000010000002e7ffffff000016"], 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x8010) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) kcmp(r2, r4, 0x1, r1, r1) landlock_restrict_self(r1, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000001) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000a00), 0x402, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000a40), 0x18d002, 0x0) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x154, 0x0, 0x8, 0x2, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x658}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x86f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x909}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70ba0000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40014}, 0x806) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='10', 0x2) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) listen(r8, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) 3m15.153596746s ago: executing program 3 (id=169): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xd0, 0xb, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x3, 0x6}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x6, 0xfa, 0x4, 0xff, 0x10}, 0x30, &(0x7f00000000c0)={0x5, 0xf, 0x30, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "aec2038fdf8d894da096a279e790c6fc"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x3, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x6, 0x3}]}, 0xa, [{0xdb, &(0x7f0000000100)=@string={0xdb, 0x3, "fd906036c1f842150a715d2b3f26f9e87b57cdd9ddf1f3f03966b417f1ff4e3782123d4c5f4e366283b153d6e74109f258d9738461b5f810be73fc93e58c37d33ec3143340debf336799678a066ddc624cf4a3911151afd62a78efba3e91de13950c0d2ebb4abd9538b3ecfad30c774e78e31667ce43fb414b589e4e0d6d22c3964bc8480588eaa723507c1dd7fb2d3c927c0a8c7b37fde89d530539b512c18f2c74eb7226d0e5e492de94da33d0cb6a24086f8d853d000bcd93e35a50b86b4f9491948dcc3e2a2d7b72400aa9c2e990baefb864d49daac038"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c2a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x801}}, {0x41, &(0x7f0000000300)=@string={0x41, 0x3, "258064fc6da8204d7ddf065672fbb778bd8f5928c049df97c3e412f0f9833968cd3a4814c78ecaa09cea78e12e63748865eb479321c3015ce056bcdf8ba3f2"}}, {0xde, &(0x7f00000004c0)=@string={0xde, 0x3, "6720c6bafac4a9b5a255b1eb58b66380e5052288e87810222ff5e075e20ac4133cccffbad729835650cc1b191364fdd16a7714ac4787db5d525b4274a80f3ab3632a469992ea31003bc75f4ab96f57ff18309558a7360de76c019f64a39ba8c7d890053566cb7c6161141feb97f5a3ad3057c94cc204ecbb4ea5d77bede50ea9d540bb5ecdc1d77d516cb27156f271fcb23ddb19c97998afbd92d743e1dd82a79efa8bd9f8344f8a15804e3eb9025ce0e100d94b726fb6a390eb404a19690efa532121a7ea189f7d54036b339dd343688b4c35aa9b1d76a8d05a8b7d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x2a, &(0x7f0000000600)=@string={0x2a, 0x3, "c5bd40bb1c17e3d6f45a3a9865f8242e05987e2f8ddf5b65fc29c8fcd36106d64495c014348c3eb9"}}, {0xf8, &(0x7f00000006c0)=@string={0xf8, 0x3, "7bf206bec013b2dd2a7eaf4bfc3dd2fc66d96c015c95aaf767e158fc964f094b1a265fe6da021ff201546def2944ea990dfc7feb1cc657d55934460ef2263e79d970aa6468d52ee950274cba4c0dd32669f9e5e312e5f15aa3347abb5ce59e34f0b189129a14001abfa46cf125146d311b05ff2e07a64325885a08d23f2109036456ab7fa1a1e9cf49521fad8f2e4867950077814d119811f9f39f12d312e5fd00c91a341cf31428718acdc604e97066d1af70c27024cf9b9ad2d45e8fe4b6ae742943ccf9c64476dc60bdd3227a059a7f38c836e10ddfb72b99be205308209b1d629dba61654f4a5ba1804029c0975917fc713363f5"}}]}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0xffffffffffffffac, &(0x7f0000000000)="9001000000000000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3m0.092497972s ago: executing program 32 (id=169): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xd0, 0xb, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x3, 0x6}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x6, 0xfa, 0x4, 0xff, 0x10}, 0x30, &(0x7f00000000c0)={0x5, 0xf, 0x30, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "aec2038fdf8d894da096a279e790c6fc"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x3, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x6, 0x3}]}, 0xa, [{0xdb, &(0x7f0000000100)=@string={0xdb, 0x3, "fd906036c1f842150a715d2b3f26f9e87b57cdd9ddf1f3f03966b417f1ff4e3782123d4c5f4e366283b153d6e74109f258d9738461b5f810be73fc93e58c37d33ec3143340debf336799678a066ddc624cf4a3911151afd62a78efba3e91de13950c0d2ebb4abd9538b3ecfad30c774e78e31667ce43fb414b589e4e0d6d22c3964bc8480588eaa723507c1dd7fb2d3c927c0a8c7b37fde89d530539b512c18f2c74eb7226d0e5e492de94da33d0cb6a24086f8d853d000bcd93e35a50b86b4f9491948dcc3e2a2d7b72400aa9c2e990baefb864d49daac038"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c2a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x801}}, {0x41, &(0x7f0000000300)=@string={0x41, 0x3, "258064fc6da8204d7ddf065672fbb778bd8f5928c049df97c3e412f0f9833968cd3a4814c78ecaa09cea78e12e63748865eb479321c3015ce056bcdf8ba3f2"}}, {0xde, &(0x7f00000004c0)=@string={0xde, 0x3, "6720c6bafac4a9b5a255b1eb58b66380e5052288e87810222ff5e075e20ac4133cccffbad729835650cc1b191364fdd16a7714ac4787db5d525b4274a80f3ab3632a469992ea31003bc75f4ab96f57ff18309558a7360de76c019f64a39ba8c7d890053566cb7c6161141feb97f5a3ad3057c94cc204ecbb4ea5d77bede50ea9d540bb5ecdc1d77d516cb27156f271fcb23ddb19c97998afbd92d743e1dd82a79efa8bd9f8344f8a15804e3eb9025ce0e100d94b726fb6a390eb404a19690efa532121a7ea189f7d54036b339dd343688b4c35aa9b1d76a8d05a8b7d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x2a, &(0x7f0000000600)=@string={0x2a, 0x3, "c5bd40bb1c17e3d6f45a3a9865f8242e05987e2f8ddf5b65fc29c8fcd36106d64495c014348c3eb9"}}, {0xf8, &(0x7f00000006c0)=@string={0xf8, 0x3, "7bf206bec013b2dd2a7eaf4bfc3dd2fc66d96c015c95aaf767e158fc964f094b1a265fe6da021ff201546def2944ea990dfc7feb1cc657d55934460ef2263e79d970aa6468d52ee950274cba4c0dd32669f9e5e312e5f15aa3347abb5ce59e34f0b189129a14001abfa46cf125146d311b05ff2e07a64325885a08d23f2109036456ab7fa1a1e9cf49521fad8f2e4867950077814d119811f9f39f12d312e5fd00c91a341cf31428718acdc604e97066d1af70c27024cf9b9ad2d45e8fe4b6ae742943ccf9c64476dc60bdd3227a059a7f38c836e10ddfb72b99be205308209b1d629dba61654f4a5ba1804029c0975917fc713363f5"}}]}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0xffffffffffffffac, &(0x7f0000000000)="9001000000000000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m21.490456049s ago: executing program 2 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x7, 0x1}}}}, 0x30}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/irq/default_smp_affinity\x00', 0x1, 0x0) write(r2, 0x0, 0x0) 2m21.281605879s ago: executing program 2 (id=371): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x740, 0x0) (async, rerun: 64) eventfd(0x100) (rerun: 64) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0xa2240, 0x0) mknodat(r0, &(0x7f0000000240)='./file1\x00', 0x8000, 0xffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) (async) socket(0x10, 0x3, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f00000001c0)) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/fillfile\x00', 0x42, 0x1ff) open_by_handle_at(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000010000000b"], 0x80) (async) syz_usb_connect(0x3, 0xa1, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES16], 0x0) 2m20.386343887s ago: executing program 2 (id=373): getpid() (async) setns(0xc9, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x5, &(0x7f0000000100)={0x17, 0xe, 0x3}) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x9, 0x9, 0x5, 0x3, 0x800]}, &(0x7f00000000c0)=0x54) 2m20.105225204s ago: executing program 2 (id=375): setns(0xc9, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, {0x0, @remote, 'pimreg1\x00'}}, 0x1e) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x808, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3c70c245}], 0x1, 0x40002042, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x40000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x11, r4, 0x1, &(0x7f0000000040)) shutdown(r0, 0x1) 2m19.688067051s ago: executing program 2 (id=379): r0 = syz_ublk_setup_io_uring(0x138a, &(0x7f0000000600)={0x0, 0x2008, 0x0, 0x3, 0x2e}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) r1 = syz_ublk_setup_io_uring(0x57f0, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000540)=0x2, 0x4) r7 = dup(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r8, &(0x7f00000003c0)='1', 0x1) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000000440)={0x1ff, 0x4, 0x0, 0xfffff6a8, 0x3, "c1d846f1120224c70b82426319d4c37ee7e4c0", 0x1, 0x6}) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000000500)={0x7, 0xa40, 0xffffff81, 0x7fffffff, 0x6, "662ceb757dcb7495e121fcd1f20e485396a278", 0x2, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9443c000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$poke(0x4, r10, &(0x7f0000000580), 0x1) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x11) 2m18.805217795s ago: executing program 2 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@any, 0xa24}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x20, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x0) 2m2.96900151s ago: executing program 33 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@any, 0xa24}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x20, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x0) 1m46.410387245s ago: executing program 0 (id=476): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r2, 0x0, 0x0) close(r2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) 1m46.089380762s ago: executing program 0 (id=477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16], 0x248}, 0x1, 0x0, 0x1300, 0x44040}, 0x0) 1m46.048991307s ago: executing program 0 (id=478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='0', 0x1) landlock_create_ruleset(&(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0) eventfd(0xd33) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000200)) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = open(0x0, 0x60840, 0x0) r5 = syz_io_uring_setup(0x840, &(0x7f0000000000)={0x0, 0xc794, 0x20, 0x2, 0x1c0, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r8 = mmap$IORING_OFF_SQES(0x0, 0x8, 0x5, 0x8010, r5, 0x10000000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x303}, "b584ddd5d25a6259", "49f8bef15073b296376858c8092cc00f", "46cc71f3", "077f9b5b85cbacba"}, 0x28) syz_io_uring_submit(r6, r3, r8, &(0x7f0000000140)=@IORING_OP_NOP128={0x3f, 0x49, 0x0, r0, 0x591b, 0x4, 0x7, 0x0, 0x1, {0xfff}}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r7, 0x0, &(0x7f0000000600)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000000008, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000006c0)=0x0) syz_ublk_setup_queues(r4, r9, &(0x7f0000000840)={0x0, 0x2, 0x10000, 0xfffffffe, 0x257}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x400001, 0x2b2}}], 0x1, 0x0, 0x0) 1m45.913514438s ago: executing program 0 (id=479): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000380)=0x1, 0x4) syz_usb_connect(0x3, 0x42, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x34, 0x8c, 0x94, 0x10, 0x5a9, 0x518, 0x524d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30, 0x2, 0x8, 0x81, 0xc8, 0x4, "", [{{0x9, 0x4, 0x2, 0x10, 0x2, 0x4a, 0xef, 0x5c, 0x7, [], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x40, 0x7, [@generic={0x3, 0x9, "cf"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x83, 0x6, 0x9}}]}}, {{0x9, 0x4, 0xd6, 0x81, 0x0, 0xff, 0x91, 0x4f, 0x2}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010000000000000000000a0300004e234e2200000100ffff00"/56, @ANYRES32=0x0, @ANYBLOB="05000000034d8d52dd0000000000000008000300110000b5"], 0x54}}, 0x20004010) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) syz_usb_connect$uac2(0x5, 0x92, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x7, 0x10, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0x2, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x0, 0x10, 0x6}, [@multiply_unit={0x7, 0x24, 0xc, 0x2, 0xc, 0x11, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8000, 0x25c, 0x2, "f8"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xff, 0x0, 0x6, {0x8, 0x25, 0x1, 0x0, 0x50, 0xb, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x5, 0x0, {0x8, 0x25, 0x1, 0x80, 0x3f, 0x40, 0x1000}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x2, 0x5, 0x9, 0x10, 0x1}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c01}}]}) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x2083c2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x200}], 0x1, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x880) read$FUSE(r4, &(0x7f0000004dc0)={0x2020}, 0x2020) 1m45.384088396s ago: executing program 0 (id=480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80000) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000340)=0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000380)={0x40000009}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r6 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000100)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r8, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r10 = epoll_create(0xfffffff8) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f00000003c0)={0xa0000019}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m45.196810083s ago: executing program 0 (id=481): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) (async) sendto(r0, &(0x7f0000000840)="340000001a00010001000000000000001c20200000000000000000000800030001000000080002000001010108000100e1010203", 0x34, 0x10, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000580)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700008c0000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000700)={0x1, {{0xa, 0xfffc, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = fcntl$dupfd(r1, 0x406, r1) (async, rerun: 32) gettid() (rerun: 32) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(r3, &(0x7f00000001c0)='./proc\x00', 0x400, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/67, 0x43}], 0x1, &(0x7f0000000440)=""/189, 0xbd}, 0x8}], 0x1, 0x47582318172b8643, &(0x7f0000000540)={0x77359400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) (async) openat(r5, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1cb) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) (rerun: 64) 1m29.972795246s ago: executing program 34 (id=481): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) (async) sendto(r0, &(0x7f0000000840)="340000001a00010001000000000000001c20200000000000000000000800030001000000080002000001010108000100e1010203", 0x34, 0x10, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000580)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700008c0000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000700)={0x1, {{0xa, 0xfffc, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = fcntl$dupfd(r1, 0x406, r1) (async, rerun: 32) gettid() (rerun: 32) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(r3, &(0x7f00000001c0)='./proc\x00', 0x400, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/67, 0x43}], 0x1, &(0x7f0000000440)=""/189, 0xbd}, 0x8}], 0x1, 0x47582318172b8643, &(0x7f0000000540)={0x77359400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) (async) openat(r5, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1cb) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) (rerun: 64) 1m27.111419283s ago: executing program 4 (id=516): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syz_tun\x00', 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)="758490d7799b132db660328fbe347e4efdf411dfc86cd6fb1461d709340a", 0x1e) ioctl$UBLK_U_CMD_GET_PARAMS(r1, 0x80207509, &(0x7f0000000700)={0x0, 0xffff, 0x70, &(0x7f0000000680)={0x70}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000500)={'syz_tun\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000540), 0x12) listen(r3, 0x5) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m26.839258123s ago: executing program 4 (id=518): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002d"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYBLOB="9d0d733e1689c15370a47e83ce7d3adce672306c47cd0c94de8a8fcb859a6e19113537feccbad42468e3f0231dd5eaef3f1df0f1d2367413dcf11b069173b5c2a9a045b8bf41845c780c3f8acc616854380dd302ae9ca09b1ae77ed683a3b48b15228081b00fba22b8f2f67690694b5ebe79c3002689ef"], 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48060}, 0x4860) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 1m23.639580481s ago: executing program 4 (id=523): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x4905, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) pivot_root(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00') fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) munlock(&(0x7f0000280000/0x8000)=nil, 0x8000) 1m23.333659496s ago: executing program 4 (id=525): socket(0x15, 0x5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/usb_gadget/g1\x00', 0xd) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r0 = open(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000300)="485e15a1", 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @loopback}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x3722, 0x10, 0x3, 0x85}, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.058808183s ago: executing program 4 (id=526): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syz_tun\x00', 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)="758490d7799b132db660328fbe347e4efdf411dfc86cd6fb1461d709340a", 0x1e) ioctl$UBLK_U_CMD_GET_PARAMS(r1, 0x80207509, &(0x7f0000000700)={0x0, 0xffff, 0x70, &(0x7f0000000680)={0x70}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000500)={'syz_tun\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000540), 0x12) listen(r3, 0x5) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m21.729291886s ago: executing program 4 (id=531): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000003c0)={0x0, 0x280, 0x1e0, 0x34325241, 0x1, [0x2], [0x80ffff, 0x800, 0x2, 0x4002], [0x8, 0x0, 0x40000000, 0x4], [0x7]}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) r7 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x80080) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0x42cc, 0x2000, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe70b, 0x1000, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2100, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x40, 0x1, 0x230, 0x0, r6}}], 0x1, 0x0, 0x0) 1m21.041881241s ago: executing program 35 (id=531): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000003c0)={0x0, 0x280, 0x1e0, 0x34325241, 0x1, [0x2], [0x80ffff, 0x800, 0x2, 0x4002], [0x8, 0x0, 0x40000000, 0x4], [0x7]}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) r7 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x80080) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0x42cc, 0x2000, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe70b, 0x1000, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2100, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x40, 0x1, 0x230, 0x0, r6}}], 0x1, 0x0, 0x0) 19.004058488s ago: executing program 6 (id=775): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) fchdir(r0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x2], 0x2) ioctl(r0, 0xd, &(0x7f0000000100)="010000000000000001000000000000000100000000000000000000004000000040e600000000000001") 18.866295586s ago: executing program 6 (id=777): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0) setns(0xc9, 0x0) r0 = socket(0x1f, 0x5, 0x8) bind(r0, &(0x7f00000000c0)=@generic={0x1f, "0000000000000100"}, 0xa) setsockopt(r0, 0x112, 0x7, &(0x7f0000000140), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xae}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x840) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8000000000000000, 0x3a, '\x9b\\,$', 0x3a, '/dev/kvm\x00', 0x3a, './file0'}, 0x34) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) 17.558141943s ago: executing program 6 (id=783): lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x3, 0xfffffcb5}, {0x0, 0x1}]}, 0x14, 0x0) socketpair(0x25, 0x80000, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/196, 0xc4}], 0x1, &(0x7f00000002c0)=""/242, 0xf2}, 0x10003) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x53ed, 0x3, 0x80, 0x151}, {0x1, 0x5, 0x6, 0xa}, {0x9, 0x81, 0x5, 0x80}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000004c0)={0x6, &(0x7f0000000480)=[{0x6, 0x3, 0x1}, {0xa79f, 0x4, 0x3, 0x81}, {0x6, 0x0, 0x7, 0x7ff}, {0x9d, 0x4, 0x5, 0x7}, {0x6, 0xe, 0x9, 0x3}, {0x4, 0x6, 0x7, 0x1}]}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) r2 = syz_io_uring_setup(0x7bdf, &(0x7f0000000500)={0x0, 0xf19e, 0x1000, 0x2, 0x151}, &(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xd, 0x100000b, 0x8010, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x3990, &(0x7f0000000640)={0x0, 0x4deb, 0x200, 0x3, 0x1fe}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000007c0)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x200}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap$IORING_OFF_SQES(0x0, 0x5, 0x1000001, 0x10, r2, 0x10000000) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='cgroup.stat\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000900)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x2, 0x6, 0x99, 0x7fff], 0x6, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000a00)={'\x00', 0x10, 0x5, 0x3, 0x8, 0x401, 0xffffffffffffffff}) tkill(r8, 0x26) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000ac0)={0x1, &(0x7f0000000a80)=[{0x0, 0x7, 0xb, 0x4}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000b00)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f0000000b80)={0x10, 0x1, r9}) openat$cgroup_procs(r7, &(0x7f0000000bc0)='cgroup.threads\x00', 0x2, 0x0) faccessat2(r7, &(0x7f0000000c00)='./file0\x00', 0x20, 0x1200) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000c80)={0x1, 0x0, 0x0, 0x39, 0x3, 0x3}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xf8, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xe}, @IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20048010}, 0x20000001) r11 = syz_open_dev$vcsu(&(0x7f0000000e80), 0x3, 0x101003) syz_ublk_setup_io_uring(0x181c, &(0x7f0000000ec0)={0x0, 0xfe7a, 0x1000, 0x2, 0x33b, 0x0, r11}, &(0x7f0000000f40), &(0x7f0000000f80), &(0x7f0000000fc0)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001000)={0x8, 'netdevsim0\x00', {'veth1_virt_wifi\x00'}, 0x72}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000010c0)=@req={0x28, &(0x7f0000001080)={'veth1_virt_wifi\x00', @ifru_settings={0xffff7fff, 0x2, @fr=&(0x7f0000001040)={0x7f80, 0x2, 0x6713, 0x1ff, 0x101, 0x8, 0x81}}}}) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001100), 0x20a000) fcntl$notify(r12, 0x402, 0x80000020) 16.633063343s ago: executing program 6 (id=794): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x19b) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x345080, 0x0, 0x2f}, 0x18) fcntl$setlease(r2, 0x400, 0x2) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1, &(0x7f0000000080)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 15.646786331s ago: executing program 6 (id=805): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xda}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20004800) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x1, 0x6, 0x3, 0x3, 'syz0\x00', 0xffff}, 0x5, 0x400, 0x0, r2, 0x5, 0x4, 'syz1\x00', &(0x7f0000000200)=['[#&)^\x00', 'netdevsim', '/dev/ocfs2_control\x00', '-\x00', '/dev/ocfs2_control\x00'], 0x37}) getpriority(0x0, r2) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ptrace$peek(0xffffffffffffffff, r2, &(0x7f0000000380)) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f00000003c0)=0x4) sched_setattr(0xffffffffffffffff, &(0x7f0000000400)={0x38, 0x6, 0x48, 0x0, 0x2, 0x0, 0x8001, 0x4, 0x8a8a, 0x7ff}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000440)=0x8001) ptrace$poke(0x4, r2, &(0x7f0000000480), 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000004c0)={0xfb7, r3, 'id1\x00'}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000540)={{r4}, "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"}) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x48001) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000001640)={r1, 0xffff, 0x0, 0x0, r2}) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, &(0x7f00000016c0)={r5, 0xffff, 0x0, 0x0, r2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001740)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000001940)=r7) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000001980), &(0x7f00000019c0)='./file0\x00', 0x8, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r6, {0x200}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x24, r8, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb6c, 0x52}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x4000040) read$FUSE(r0, &(0x7f0000001b80)={0x2020}, 0x2020) openat(r0, &(0x7f0000003bc0)='./file0\x00', 0x2200, 0x3) socket$netlink(0x10, 0x3, 0x8) setns(r0, 0x0) 15.293466532s ago: executing program 6 (id=798): mlockall(0x3) brk(0x689d80000000) (async, rerun: 32) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) (async, rerun: 32) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0x200002, 0x200003, 0x803, 0x4, 0x7}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) (rerun: 64) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/dummy0/carrier\x00', 0x103a02, 0x100) write$FUSE_ENTRY(r1, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x5, 0x0, 0x1, 0x100000001, 0x8, 0x0, {0x0, 0x6, 0x3, 0x7, 0xff, 0x100000001, 0xb13, 0x39de, 0x6, 0x6000, 0x3, 0x0, 0x0, 0xfffffffc, 0x9}}}, 0x90) (async) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000140)=@other={'decodes', ' ', 'io+mem'}, 0xf) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, 0x0, &(0x7f0000000440)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000180)={0x3, 0x0, 0x9, 0x8, 0x9}, 0x14) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e0000004d61501d0100ebffffff000010000000f1035560cfadaed6099367"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.132939396s ago: executing program 36 (id=798): mlockall(0x3) brk(0x689d80000000) (async, rerun: 32) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) (async, rerun: 32) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0x200002, 0x200003, 0x803, 0x4, 0x7}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) (rerun: 64) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/dummy0/carrier\x00', 0x103a02, 0x100) write$FUSE_ENTRY(r1, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x5, 0x0, 0x1, 0x100000001, 0x8, 0x0, {0x0, 0x6, 0x3, 0x7, 0xff, 0x100000001, 0xb13, 0x39de, 0x6, 0x6000, 0x3, 0x0, 0x0, 0xfffffffc, 0x9}}}, 0x90) (async) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000140)=@other={'decodes', ' ', 'io+mem'}, 0xf) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, 0x0, &(0x7f0000000440)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000180)={0x3, 0x0, 0x9, 0x8, 0x9}, 0x14) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e0000004d61501d0100ebffffff000010000000f1035560cfadaed6099367"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.632922517s ago: executing program 1 (id=814): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', './file0/file0'}, 0x208e278) preadv(r0, &(0x7f0000002600)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x2, 0x8, 0x0) r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x182) syz_usb_control_io$hid(r1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400ccfcc696048ecf8c7539735b6a1afcce0000080681040000000000000072a81bb029a9675e000700000005000100acfdc55d3707000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) write$cgroup_subtree(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="2d6e65745f636c73202d6e65745f636c73202b72646d61202d6dd2a77290524fa5612b0dc6cac5052d11656d6f7279202d64657669636573202b70000000000000000169636573202d726c696d"], 0x4d) (async) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xf0f022}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x40980, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40002, 0x0) write$rfkill(r3, &(0x7f0000000280)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x4) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000340)=0x800001c) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @win={{0x4, 0x7, 0x2, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14001102000000000000000028001100fa004adf411e47060aefedfa75752a4c0cf9900ce745046950430064532db28aa83c41bd161dc41ca00fb84d9dd81ee86a1e2ad894b74537dbf0f8b4308b6f08adb10bf255d409513ee9c103b0269aa5e2a4c67af06f64dc2dd0435544e5ecf911f7c812a011d1bc640f33c0ee10bc1048ce45301fa6cddde9f2a2fb8bb2e8399d023d4db186c252c83a7b9d988ef1a9cdd85088e70ee5217ac190d0f7239b587b949d3525e7f6fd3032aed892"], 0x28}}, 0x20000000) syz_ublk_setup_io_uring(0x646, &(0x7f0000000640)={0x0, 0xf6e1, 0x8, 0x3, 0x14d}, 0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r6, r7, &(0x7f0000000880)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000800)=@new_dev={0x4, 0xa8a, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x60}}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup\x00', 0x48000, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00220f020000540b4550182195f51584b36a3c5cc9090000007aaa759eb105de464288e4254df594ecc8fa68c6e9590bcc0092a469c69d7a1a6ad69631b808e72c5b177a4d0d0f491f4f9a5c8cfd604aedfc81f001e6d173aef219da474df9b84487827de93abbefdec82d3f0b277a4ac134dae13a5461705e4e2c79576be1ab882656ba6cb348346deb59375d0eadb2b01f91b3319849c37927d89c6c93689fe59a54e155c16a70abca5db87649a69ab90c8fe6b512900e6e7a6cff"], 0x0}, 0x0) (async) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r8, 0xc018480d, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000b80)=ANY=[@ANYBLOB="20c26652e9b58f85c211b6030000400522fdce"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.740042961s ago: executing program 7 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='proc\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n', 0x2) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@private1}}, {{@in=@broadcast}}}, &(0x7f00000004c0)=0xe8) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="000102030405060708090a0b0c0d0e0f", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f", 0x30}], 0x1, &(0x7f0000000340)=[@op={0x0, 0x117, 0x3, 0x1}]}, 0x0) (async) sendmsg$alg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f", 0x30}], 0x1, &(0x7f0000000340)=[@op={0x0, 0x117, 0x3, 0x1}]}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.current\x00', 0x26e1, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000540)={'virt_wifi0\x00', @random="06000000c95d"}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000540)={'virt_wifi0\x00', @random="06000000c95d"}) read$alg(r2, &(0x7f0000000380)=""/48, 0x30) (async) read$alg(r2, &(0x7f0000000380)=""/48, 0x30) syz_usb_connect(0x3, 0xc0, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 7.165895591s ago: executing program 1 (id=820): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x20a00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r2, &(0x7f0000000a40)='3', 0x4e) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f0000000680)={0x40, 0x10, 0x1, "a7"}, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.438618419s ago: executing program 7 (id=825): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}, 0xfffffffd}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write(r2, &(0x7f0000000040)='8', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) sendmmsg$sock(r0, &(0x7f0000000740), 0x0, 0x20000000) 4.877444176s ago: executing program 7 (id=826): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d80000001a0081044e81f782db4cb9041c5d0800fe007c05e8fe", 0x1a}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x0) 3.582641916s ago: executing program 1 (id=829): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x300}, {0xfffffffd, 0x80003}]}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0xa8, "31103f0a859e5db2bccd86606814a134b1d80ab9c2e22d0bed4c0deb2de4bcd3fba5b5015186b09405c70135d60ce3114c050739af286bdea79fda38187b3efb806d108ea26d6d9f3703f2c145edc7cdfb12f0b374f5f9ba771fd9f5520184996a1595c31eb0702ae0fb37c3227b8a1d452563da8bb9dd3f72f811dab794bf27719175018ee8f5216611f043dcf1300c102d585ea8ecbe342873d5ba08e1d77cd2b6d25205faa17d"}, &(0x7f0000000180)=0xb0) 3.417760789s ago: executing program 8 (id=831): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x3e1}, &(0x7f0000000040), &(0x7f0000ff4000), 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000e36000/0x4000)=nil, &(0x7f00004b4000/0x4000)=nil, 0x4000, 0x2}) 3.380476087s ago: executing program 7 (id=832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x28, 0x15, 0x6, 0xfffff00c}]}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9) (async) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0/file0', [{0x20, 'bl\x04\x00\x00\x00bf\x01\x00\x00\xc6\xaa/K\x1c\x88&!\xc5\xa3\x18\x00_wait_Z\x01\x80\x1aD%\xec\x90DRx\x95mB_ru#u\xafsive\x00\xe0\xaf\b\r9\xde\xac\xbe\xda#g\vC\xad$\xadvw\xbc\x9b\xc4\xf6\xe4\x1c\x03\xf5\xc8\xe3\xcb\xd1\xb4\x85\x12\x99\xbe\xa6\xbb\xb4\f\x18\xdb\xa6\xeb\xe1h4a\xcev\xbc:\x95\xbb\xcc\x1e\\\xfa\xf7\xe8Ra\x97\x1a\xfeW\xb0`\x12v\xcdp1^\"\x86\xd8^\xbe}x\xfb\x8f\xd6\xda\xd7\xdabdJ\xf9\xf0\xab\x9fa\x1f2\xc98\xde\x8c\x8e\xfafX\x03\xdf\x8e\xe9\xafy\xe4Hx\x11\n\xbb^\xe9\xcb\x02\xf36\x9f\x95*\tM\x04\xbf\'\xcc\x1f\x1dQ\xce\xe2\x00T?C4\x92\xba\xd5\xbe\xe9\xe7\xef\xde+Q\xe7\xda1A\x18\xb2jOV=\xe5\xae\x86m\xf3NZ\xa7_`\xa9\xf1\a'}, {0x20, '\xbf+!-$'}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}]}, 0x11e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.325695499s ago: executing program 1 (id=833): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x183002, 0x0) write$sequencer(r2, &(0x7f0000000200)=[@v={0x93, 0x20, 0x80, 0x1b, @MIDI_NOTEON=@special, 0x5, 0x1800}], 0x8) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r4, 0xf01, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000814}, 0x50) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) write(r0, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000100700", 0x1c) 3.134679932s ago: executing program 1 (id=837): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x158) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000100)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000180)=0x1) ioctl(r0, 0x0, 0x0) 3.098555282s ago: executing program 7 (id=838): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000280), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000300)={0x3, 0x10980901, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000340)={0x1000000, 0x5bb, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x3, 0x7e, &(0x7f00000016c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0xfe, 0x0, 0x7f, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'm'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x978, 0xfffe, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xa, 0xd, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x81, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xa, 0x6}}}}}}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x110, 0xf2, 0x4, 0x8, 0x40, 0x5}, 0x21, &(0x7f0000000000)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x0, 0x1e00, 0x1ff, [0xf, 0xc000, 0x30, 0x0]}]}, 0x8, [{0xfb, &(0x7f00000017c0)=@string={0xfb, 0x3, "61843dabf1c8e8dc09d341bb6ba44f8fa38b70ea8cfa0ba583e74def66b1f1b9f0fbdc9f96bb8439a0323c8aef9af40ebf1e10180ee7492cd732ed386944b5f06fff3331a2ff859279b661a2878b8d673c18ccc8762b4e7a6fe2a36dbef55e10c53a3d05f2fd77e2d2f29132a3ee87cc974b4a891f62381e554a92d22c58440e5462fc6c8e3d004724fc420e9d43d0789741c42e8849953452e492d1f03cc0b0f23c9541ead26330a4b2ef20f12eff091ec1b9b2644b04ee28565f71eb6a7c38d0f093cb9077847b3d20bae2d0794166dc484c17b0f795692cbc3067e8b0975d1c9fa88684886402477c463137b0e62f663a15e93e0a3ba8a8"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x2409}}, {0x13, &(0x7f0000001980)=@string={0x13, 0x3, "4ca7c13066b7ecfbbc0bf54af87a9dd5a0"}}, {0xb9, &(0x7f0000000740)=ANY=[@ANYBLOB="b9030ff6413e6a9241fae53c8ec0d8fde73e6776945a2697901c40effd73893f26959554c78ab10ea01179506c66c3b4b713aaab1d69fe6b67ffddc20831960ad4174e91cfa9c315a0d5c70c100269e6215406e77fa45941ee5631857e40d96787742422db8da5787ac556c1b6e00913749e8db15e05b6b27aa3fcaca1add80c85387ffc8f4e92a04994ee5f03f33eb9164fb03f23ef1a0e3ab1f41184c25c72b1453e677a4f4d0000000000000000504b30eac589f358e08fa5ee55ee54e6904419b6bbc87518d92686f51be127d4450f4fe82a57142dae"]}, {0xfffffffffffffea0, &(0x7f0000001a80)=@string={0x41, 0x3, "56b92a004b0d020cef6ca4d4c63b77612491ade39eb5610f14c0ee56d4b08d52e47c7076f6be5298cef314d50fce2427dd5e2904031be16ade7d4b74e8b5f1"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x801}}]}) syz_usb_ep_read(r2, 0xd, 0xe9, &(0x7f0000001b80)=""/233) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000001d40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000003d80)='./file0/file0\x00', 0x0) write$FUSE_INIT(r4, &(0x7f0000003dc0)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0xe17e3f20429e9d79, 0xc, 0x0, 0x5, 0xf9, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000003e40)="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", 0x2000, &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005f00)={0x90, 0x0, 0x100000007fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x0, {0x0, 0x6afb, 0x5, 0x0, 0x0, 0x2, 0x10001, 0xa, 0x1, 0x1000, 0x0, r6, r7, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000480)=0x15) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000004c0)=0x7e) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000001640)="4c0000002c00011c02000000000000000000000001000000000000000000ff615406020af6ff110301000c000100046c6f77657200001c0002801800548014000480050001000100000005df", 0x4c) write$bt_hci(r9, &(0x7f0000000500)=ANY=[], 0x7) 2.986577659s ago: executing program 1 (id=840): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x20a00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r2, &(0x7f0000000a40)='3', 0x4e) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f0000000680)={0x40, 0x10, 0x1, "a7"}, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.541296302s ago: executing program 8 (id=842): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x300}, {0xfffffffd, 0x80003}]}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0xa8, "31103f0a859e5db2bccd86606814a134b1d80ab9c2e22d0bed4c0deb2de4bcd3fba5b5015186b09405c70135d60ce3114c050739af286bdea79fda38187b3efb806d108ea26d6d9f3703f2c145edc7cdfb12f0b374f5f9ba771fd9f5520184996a1595c31eb0702ae0fb37c3227b8a1d452563da8bb9dd3f72f811dab794bf27719175018ee8f5216611f043dcf1300c102d585ea8ecbe342873d5ba08e1d77cd2b6d25205faa17d"}, &(0x7f0000000180)=0xb0) 2.311673856s ago: executing program 8 (id=844): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xfffffffffffffffe, 0x240400) r1 = syz_open_dev$mtd(&(0x7f0000000040), 0x260c, 0x8a42) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYBLOB, @ANYRES8=r1], 0xa8}}, 0x8000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}}, 0x15) preadv(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x8a9, 0x100) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x1010, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/161) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000006c0)={'veth0_to_hsr\x00', &(0x7f0000000700)=@ethtool_stats}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000100)=0x0) timer_settime(r9, 0x1, &(0x7f0000000400)={{}, {0x0, 0x3938700}}, &(0x7f0000000440)) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000) r10 = dup(r1) open_by_handle_at(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000ddff040000000600000109000000de0b0000f2ea0464e3403cb6bdf9d081c005bd290d0000"], 0x280) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r10, 0x0, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r11, 0x40044160, 0x3) 2.04115772s ago: executing program 5 (id=846): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000880)={'erspan0\x00', r2, 0x80, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000900)={'tunl0\x00', r2, 0x700, 0x8000, 0x10003, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x168, 0x0, 0x10, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000001600)='./proc\x00', 0x1fd) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0xba000, 0x149) open_tree(r4, &(0x7f0000000740)='./proc\x00', 0x89100) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000003700)=@multiplanar_mmap={0x4, 0x4, 0x4, 0x4, 0xffffffff, {0x77359400}, {0x6, 0x0, 0xd0, 0x5, 0xe, 0x24, "feff60f4"}, 0x8, 0x1, {&(0x7f0000003680)=[{0x2, 0x2395, {0xfff}, 0x8}, {0x1, 0x2, {0x5}, 0xc}]}, 0x10000, 0x0, r4}) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000180)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x3, @mcast2, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000029040000360000003300000004000000"], 0x18}}], 0x2, 0x24014401) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000c80)='nv', 0x2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000cc0)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000d00)="a6", 0x1001, 0x20000045, &(0x7f0000000d40)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000340)={0x8000000, 0xf, &(0x7f0000000380)=[0x138d, 0x1, 0x61b7, 0x1, 0x6, 0x2, 0x455, 0xfa7c, 0x1000, 0x3, 0xe6, 0x2, 0xa, 0xcc4, 0x2], 0x1, 0x4000003}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_ublk_setup_io_uring(0x1f, &(0x7f0000000940)={0x0, 0xf8c8, 0x80, 0x2, 0x35}, &(0x7f00000009c0)=0x0, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000a80)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1}, 0x0, 0x121, 0x1, {0x1}}) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000b80)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c00)=@any_dev={0x1, 0xee5, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x114560f04ac8842e}}}, &(0x7f0000000c40)) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000d80)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r13, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x20008845) write(r5, &(0x7f0000000000)='3', 0x4e) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.754731767s ago: executing program 8 (id=847): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dir\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=ntlmssp,ip=127.0.0.1,port=20000,nodfs,username=root,password=root\x00') r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) prctl$PR_CAPBSET_DROP(0x18, 0x22) 1.560442022s ago: executing program 8 (id=848): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x181200, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x38, 0x107, 0x70bd27, 0x259fdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000051}, 0x40) init_module(&(0x7f00000002c0)=ANY=[@ANYBLOB="bd0144a6c70227b6ff90b8ccf4d576e65376f4356c939b7844d41b0553fd7f7a8a877e5b28f5036eb78db1cf239a2222fe2eff8ebc15c23fcfd313851f3046b2e40e9dfae6a45c2d3456e89bb8e69f72ca0ec8c04b6df6876d26c59e8e5429bded334597d596500a6bd5da1d3ec1b9083355177d1affbedc8d82d189b85ff2e4f6", @ANYRES16=r2, @ANYRESHEX=r3, @ANYRES8=r1, @ANYRES16, @ANYRES8=r2, @ANYRESDEC=r0, @ANYRES8=r1], 0x78, 0x0) 1.415903015s ago: executing program 5 (id=849): mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000000)='./file0\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) 1.39155728s ago: executing program 5 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x24e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x7, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x1, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x70, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x7, 0x10, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d23e"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2, 0x81, 0xc7}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x29, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0xc4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2, 0x5, 0x7f}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x2, 0x1, 0x10}, 0xac, &(0x7f0000000140)={0x5, 0xf, 0xac, 0x5, [@generic={0x5c, 0x10, 0x3, "30eb6f607f5d33576f31dcc75e906402f081d86e50c5b86e6d87f24b0bcd03dea29d9d76c57e431802f2c3989f4653c6309b5236e2297caae6f1a74956d5be8fa48e58509b2ed76486a360801256e5d8da63021b933f9780b5"}, @generic={0x33, 0x10, 0xb, "82d821485b4791fec4914cc30aff5f48fe4a6b855a6eefd45ba2807d114c193056001bd3cde1b863eb3dd013d73f8915"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x3, 0x1, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xfa, 0x7f, 0x101, 0x8}, @ptm_cap={0x3}]}, 0x4, [{0xdc, &(0x7f0000000200)=@string={0xdc, 0x3, "355fca9b2c785a5604213def041b891b5522f717091f43f3b967a0f521a8cb7af0f369dc77cd3334e769bb3b01bfcf94bce4f17ec71974fe958b379d6e87b8492a28533953e826b1348178352c3a3f11980a19b115fbc469c33832112978e6767af67c8f1c79277b902e36d29bd5f32c7668eeed3f529d7ca3205a52d8b1f5bb7e948fbd633b2f011cc9887b30f7dd9a8eeab40834e76880e43aa9d7cdeb5d795802b825851d78b7c168cede2753ac43e6233f077dcebf3971a458f62dbf9c095967325241c78eb3262d8f65a2f137341499df91c53aa3e29fe4"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x419}}, {0x45, &(0x7f0000003000)=ANY=[@ANYBLOB="4503d9b13c3f69fad5648d510ee8d69c1424c2c33413658cbc3cc6f8411092fd4cf603f60fd78f07e7df11f3f782531c1b32d219e88405000000000000008718ae30e1e615d77d92f213471a4d4377868401e3ee118f15e2bf7802690ba58c89e7b0841199ead7adc0e2c429f47d9825f20552e1fac0bb2a8cfe646a2a957885c446f38c79b039"]}, {0x56, &(0x7f00000003c0)=@string={0x56, 0x3, "ad46989a0ee57588feda5a7296d0451a6a3bc1e7d053e09ac393b573d0e597636cce005a5e3710863304098052c08ef597e039e1121fe08b5492e554da26e2beafb3712fca203adf247631e4eb1d216b11c0c3ee"}}]}) futex_waitv(&(0x7f0000002e40)=[{0x3, &(0x7f00000027c0)=0x5, 0x47}, {0xdbb7, &(0x7f0000002800)=0x865b, 0x2}, {0x4d, &(0x7f0000002840)=0xffff, 0x82}, {0x889, &(0x7f0000002880)=0x4, 0x82}, {0x7, &(0x7f00000028c0)=0x7, 0x82}, {0x100, &(0x7f0000002900)=0x1, 0x2}, {0xfffffffffffffffc, &(0x7f0000002940), 0x82}, {0x2, &(0x7f0000002980)=0x5912, 0x2}, {0x5, &(0x7f00000029c0)=0x7, 0x2}, {0x7, &(0x7f0000002cc0)=0x7, 0x2}, {0x2da, &(0x7f0000002d00)=0x5, 0x2}, {0x1, &(0x7f0000002d40)=0x8}, {0x9, &(0x7f0000002d80)=0xbfb2, 0x2}, {0x9c0000000000000, &(0x7f0000002dc0)=0xedc, 0x2}, {0x3ff, &(0x7f0000002e00)=0xc, 0x2}], 0xf, 0x0, &(0x7f0000002fc0), 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000002700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)={0x20ec, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xc7, 0x5b, "a6e2250f9fe9ed6f760990f309a62787a66a55873e97d8e5280ec67c12674006f352c8543160460ba22962bc8f5819677b86af50235456476afeff4a695a1e62d8bd9343448be9806d43b124b2a6ed92c71415dd73b5b0e109c622aece90fc43e08c9e7387b7f36dfc94c534982119dd0ba7a0e2e110f576d793f60f71a8a596a0eae115350b9e3c508a0a19b169001ebb3f6401e7606c380e3210ccbb4a9fddb6035f24f96488e18a092abe42c5a97fb3365bd9292800cf474c4cf5cf478b8a2aa464"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x800}]}, 0x20ec}, 0x1, 0x0, 0x0, 0x1}, 0x8800) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000002740)={0x5, r0}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000002a80)=0x9, 0x8, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet(0x2, 0xa, 0x400) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000002a40)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002ac0)={0x1dc, 0xa, 0x6, 0x101, 0x0, 0x0, {0xf, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="c70d7418fe54"}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x95}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '(\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1c}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0xf, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1a}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x82}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffff7a7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4008080}, 0x4004044) 1.370967629s ago: executing program 8 (id=851): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0x8) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00') inotify_add_watch(r1, &(0x7f0000000140)='./file1\x00', 0x10000200) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000040)="830d000010") 749.726708ms ago: executing program 5 (id=852): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000000)={0x6, 0x2, 0xc000000}) 734.984147ms ago: executing program 5 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000500)={'syz_tun\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000540), 0x12) listen(r2, 0x5) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="000008050010010b"], 0xa) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 13.743128ms ago: executing program 7 (id=854): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="3800000055000102000000000000000007000000010000002000010000000000000000000050000000000000000000000000000000000000fa02e1b618a46412b14d2c1c07b4419235153378085bf7647956b5feff5dcce3618ee40537d91324bc009dad3ab8139cdb15642dfe7fce32d56d44de71054312dd7d3a35c5cf", 0x7e) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, r3, 0x205, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000096c00010029bd7000ffdb8ea64cfae24ab9e669b6a2019b2edf2508000d00f6482940631d68986d7d2b9f705ddaa82fbd6eef5bd62750d29ed046f28592a68267099b6d47d91399054a634973c2cba3fcc3a40100ea963cfc48053d599484a6e570954c08f3e5f5d982157ad9cfecf3d4", @ANYRES32, @ANYBLOB="a1003bb9100016800c0003"], 0x2c}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) 0s ago: executing program 5 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0xed) (async) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x8000, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) write(0xca, &(0x7f0000000200)="02c0", 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40043d14, 0x0) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) (async) write(r4, &(0x7f0000000780)='3', 0x4e) (async) syz_clone3(&(0x7f0000000440)={0x106096980, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) (async) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @private=0xa010100}, 0x10) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000240)={{0x7fff, 0x0, 0x6, 0x1}, 'syz1\x00', 0x39}) kernel console output (not intermixed with test programs): 's value: 66 [ 264.405062][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.407595][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.407619][ T9] usb 7-1: Product: syz [ 264.407632][ T9] usb 7-1: Manufacturer: syz [ 264.507395][ T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 264.629428][ T3112] usb 6-1: USB disconnect, device number 28 [ 264.725668][ T9] usb 7-1: USB disconnect, device number 8 [ 264.888252][ T32] usb 2-1: USB disconnect, device number 113 [ 264.978716][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.230080][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 265.380793][ T9] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 265.382224][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.382253][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.382272][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.382318][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.383866][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.383889][ T9] usb 7-1: Product: syz [ 265.383903][ T9] usb 7-1: Manufacturer: syz [ 265.467353][ T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 265.520196][ T5693] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 265.595991][ T8493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.606413][ T8493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.669980][ T5693] usb 6-1: Using ep0 maxpacket: 32 [ 265.670768][ T5693] usb 6-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 265.673321][ T5693] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.673369][ T5693] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 265.673412][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.679458][ T5693] usb 6-1: config 0 descriptor?? [ 265.705222][ T4930] Bluetooth: hci4: command tx timeout [ 265.749225][ T5693] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 266.572072][ T6621] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.607511][ T8524] jffs2: notice: (8524) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 266.839544][ T6621] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.059046][ T6621] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.094257][ T3112] usb 7-1: USB disconnect, device number 9 [ 267.409086][ T6621] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.898405][ T8529] FAULT_INJECTION: forcing a failure. [ 267.898405][ T8529] name failslab, interval 1, probability 0, space 0, times 0 [ 267.898440][ T8529] CPU: 1 UID: 0 PID: 8529 Comm: syz.1.557 Not tainted syzkaller #0 PREEMPT(full) [ 267.898464][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 267.898476][ T8529] Call Trace: [ 267.898485][ T8529] [ 267.898494][ T8529] dump_stack_lvl+0xe8/0x150 [ 267.898523][ T8529] should_fail_ex+0x3eb/0x540 [ 267.898551][ T8529] should_failslab+0xa8/0x100 [ 267.898573][ T8529] ? do_getname+0x2e/0x250 [ 267.898593][ T8529] kmem_cache_alloc_noprof+0x9c/0x600 [ 267.898615][ T8529] ? do_futex+0x3e7/0x4e0 [ 267.898637][ T8529] ? do_getname+0x2e/0x250 [ 267.898664][ T8529] do_getname+0x2e/0x250 [ 267.898681][ T8529] ? getname_flags+0x11/0x20 [ 267.898702][ T8529] do_sys_openat2+0xce/0x200 [ 267.898723][ T8529] ? __se_sys_futex+0x3a8/0x450 [ 267.898742][ T8529] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.898767][ T8529] ? rcu_is_watching+0x16/0xb0 [ 267.898791][ T8529] __x64_sys_openat+0x138/0x170 [ 267.898816][ T8529] do_syscall_64+0x166/0x520 [ 267.898834][ T8529] ? trace_irq_disable+0x3b/0x140 [ 267.898852][ T8529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.898872][ T8529] ? clear_bhb_loop+0x70/0xc0 [ 267.898899][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.898920][ T8529] RIP: 0033:0x7fb03c75ea0e [ 267.898940][ T8529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.898958][ T8529] RSP: 002b:00007fb03d61db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 267.898982][ T8529] RAX: ffffffffffffffda RBX: 00007fb03d61e6c0 RCX: 00007fb03c75ea0e [ 267.898999][ T8529] RDX: 0000000000000002 RSI: 00007fb03d61dc00 RDI: ffffffffffffff9c [ 267.899012][ T8529] RBP: 00007fb03c835888 R08: 0000000000000000 R09: 0000000000000000 [ 267.899025][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.899037][ T8529] R13: 00007fb03ca26038 R14: 00007fb03ca25fa0 R15: 00007ffc396684d8 [ 267.899071][ T8529] [ 267.967661][ T8540] Device name not specified. [ 267.967661][ T8540] [ 268.147528][ T5715] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 268.242332][ T6621] bridge_slave_1: left allmulticast mode [ 268.242364][ T6621] bridge_slave_1: left promiscuous mode [ 268.242678][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.267044][ T6621] bridge_slave_0: left allmulticast mode [ 268.267075][ T6621] bridge_slave_0: left promiscuous mode [ 268.268486][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.291371][ T5715] usb 8-1: device descriptor read/64, error -71 [ 268.303005][ T32] usb 6-1: USB disconnect, device number 29 [ 268.530056][ T5715] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 268.660356][ T5715] usb 8-1: device descriptor read/64, error -71 [ 268.770507][ T5715] usb usb8-port1: attempt power cycle [ 268.885788][ T6621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.939332][ T6621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.957854][ T6621] bond0 (unregistering): Released all slaves [ 269.118962][ T5715] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 269.132023][ T5715] usb 8-1: device descriptor read/8, error -71 [ 269.282410][ T8570] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 269.303945][ T8570] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 269.313931][ T8570] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 269.314368][ T8570] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 269.335165][ T5701] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 269.390317][ T5715] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 269.410729][ T5715] usb 8-1: device descriptor read/8, error -71 [ 269.441226][ T9] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 269.503856][ T5701] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 269.506196][ T5701] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 269.506229][ T5701] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.506248][ T5701] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 269.506293][ T5701] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.518281][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 269.518310][ T5701] usb 7-1: Product: syz [ 269.518324][ T5701] usb 7-1: Manufacturer: syz [ 269.528211][ T5701] cdc_wdm 7-1:1.0: skipping garbage [ 269.528240][ T5701] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 269.532613][ T5715] usb usb8-port1: unable to enumerate USB device [ 269.606700][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 269.607337][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 269.607369][ T9] usb 2-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 269.614625][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 269.615211][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 269.668025][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.668056][ T9] usb 2-1: Product: 臼; [ 269.668072][ T9] usb 2-1: SerialNumber: syz [ 269.751298][ T5701] usb 7-1: USB disconnect, device number 10 [ 269.895790][ T6621] hsr_slave_0: left promiscuous mode [ 269.900648][ T6621] hsr_slave_1: left promiscuous mode [ 269.903989][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.904012][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.907669][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.907690][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.946778][ T6621] veth1_macvtap: left promiscuous mode [ 269.946821][ T6621] veth0_macvtap: left promiscuous mode [ 269.947357][ T6621] veth1_vlan: left promiscuous mode [ 269.947451][ T6621] veth0_vlan: left promiscuous mode [ 270.154099][ T5693] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 270.290197][ T5701] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 270.320001][ T5693] usb 6-1: Invalid ep0 maxpacket: 16 [ 270.324035][ T6621] team0 (unregistering): Port device team_slave_1 removed [ 270.354101][ T6621] team0 (unregistering): Port device team_slave_0 removed [ 270.450940][ T5701] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 270.452413][ T5701] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 270.452440][ T5701] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.452459][ T5701] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 270.452534][ T5701] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.454919][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 270.454946][ T5701] usb 7-1: Product: syz [ 270.454961][ T5701] usb 7-1: Manufacturer: syz [ 270.460073][ T5693] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 270.484497][ T5701] cdc_wdm 7-1:1.0: skipping garbage [ 270.484528][ T5701] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 270.585323][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 270.671191][ T5693] usb 6-1: Invalid ep0 maxpacket: 16 [ 270.671543][ T5693] usb usb6-port1: attempt power cycle [ 270.688654][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.690699][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.030143][ T5693] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 271.052081][ T5693] usb 6-1: Invalid ep0 maxpacket: 16 [ 271.183542][ T5693] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 271.202459][ T5693] usb 6-1: Invalid ep0 maxpacket: 16 [ 271.202773][ T5693] usb usb6-port1: unable to enumerate USB device [ 271.593415][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 272.040372][ T948] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 272.140674][ T5693] usb 7-1: USB disconnect, device number 11 [ 272.190663][ T948] usb 8-1: Using ep0 maxpacket: 32 [ 272.194886][ T948] usb 8-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 272.207632][ T948] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.207682][ T948] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 272.207722][ T948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.228403][ T948] usb 8-1: config 0 descriptor?? [ 272.231062][ T9] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 272.281839][ T948] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 272.427667][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 272.436364][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 272.473281][ T9] usb 2-1: USB disconnect, device number 114 [ 272.535639][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.740323][ T5715] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 272.890465][ T5715] usb 7-1: Using ep0 maxpacket: 8 [ 272.891825][ T5715] usb 7-1: New USB device found: idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 272.893051][ T5715] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 272.897084][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.897112][ T5715] usb 7-1: Product: syz [ 272.897127][ T5715] usb 7-1: Manufacturer: syz [ 272.897148][ T5715] usb 7-1: SerialNumber: syz [ 272.906331][ T5715] usb 7-1: config 0 descriptor?? [ 272.928645][ T5715] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 273.020019][ T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 273.136409][ T5275] 8021q: adding VLAN 0 to HW filter on device eth12 [ 273.171140][ T9] usb 2-1: New USB device found: idVendor=0ccd, idProduct=0080, bcdDevice=1.00 [ 273.172342][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.174768][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.174796][ T9] usb 2-1: Product: syz [ 273.174810][ T9] usb 2-1: Manufacturer: syz [ 273.174824][ T9] usb 2-1: SerialNumber: syz [ 273.320269][ T3112] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 273.443514][ T9] snd-usb-6fire 2-1:1.0: unable to receive device firmware state. [ 273.443548][ T9] snd-usb-6fire 2-1:1.0: probe with driver snd-usb-6fire failed with error -71 [ 273.447512][ T9] usb 2-1: USB disconnect, device number 115 [ 273.450029][ T3112] usb 6-1: device descriptor read/64, error -71 [ 273.488184][ T5620] udevd[5620]: setting owner of /dev/bus/usb/002/115 to uid=0, gid=0 failed: No such file or directory [ 273.700996][ T3112] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 273.830082][ T3112] usb 6-1: device descriptor read/64, error -71 [ 273.942751][ T3112] usb usb6-port1: attempt power cycle [ 274.261916][ T975] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 274.280039][ T3112] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 274.300840][ T3112] usb 6-1: device descriptor read/8, error -71 [ 274.413034][ T975] usb 2-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 274.416903][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.416935][ T975] usb 2-1: Product: syz [ 274.416950][ T975] usb 2-1: Manufacturer: syz [ 274.416965][ T975] usb 2-1: SerialNumber: syz [ 274.419523][ T975] usb 2-1: config 0 descriptor?? [ 274.460672][ T975] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 274.542780][ T3112] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 274.562476][ T3112] usb 6-1: device descriptor read/8, error -71 [ 274.642279][ T33] audit: type=1400 audit(1791678487.107:4): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=8674 comm="syz.1.578" name="p" offset=79 [ 274.670639][ T3112] usb usb6-port1: unable to enumerate USB device [ 274.859548][ T3112] usb 8-1: USB disconnect, device number 6 [ 274.970223][ T975] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 274.970250][ T975] sq905c 2-1:0.0: Get version command failed [ 274.970331][ T975] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 275.184925][ T3112] usb 2-1: USB disconnect, device number 116 [ 275.565171][ T5715] gspca_zc3xx: i2c_r status error ed [ 275.591215][ T975] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 275.761918][ T975] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 275.762978][ T975] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.763021][ T975] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.763040][ T975] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.763085][ T975] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.764671][ T975] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.764696][ T975] usb 8-1: Product: syz [ 275.764711][ T975] usb 8-1: Manufacturer: syz [ 275.844033][ T975] cdc_wdm 8-1:1.0: skipping garbage [ 275.844070][ T975] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 275.967442][ T5715] gspca_zc3xx: reg_r err -32 [ 275.967536][ T5715] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 276.003977][ T975] usb 8-1: USB disconnect, device number 7 [ 276.459967][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 276.621109][ T9] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 276.633903][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 276.633938][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.633957][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 276.634004][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.637724][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.637751][ T9] usb 8-1: Product: syz [ 276.637767][ T9] usb 8-1: Manufacturer: syz [ 276.709776][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 276.709826][ T9] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 276.910881][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.914275][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.107393][ T3112] usb 7-1: USB disconnect, device number 12 [ 277.309245][ T8751] CIFS: Attempting to mount //127.0.0.1/share [ 278.051508][ T9] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 278.210484][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 278.211377][ T9] usb 2-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 278.212891][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.212941][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 278.213016][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.217662][ T9] usb 2-1: config 0 descriptor?? [ 278.276918][ T948] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 278.289263][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 278.367647][ T975] usb 8-1: USB disconnect, device number 8 [ 278.423493][ T948] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 278.424709][ T948] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.424737][ T948] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.424757][ T948] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.424801][ T948] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.426531][ T948] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.426556][ T948] usb 6-1: Product: syz [ 278.426571][ T948] usb 6-1: Manufacturer: syz [ 278.510727][ T948] cdc_wdm 6-1:1.0: skipping garbage [ 278.510763][ T948] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 278.656521][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.592'. [ 278.658420][ T8780] overlayfs: failed to resolve './bus': -2 [ 278.726169][ T975] usb 6-1: USB disconnect, device number 38 [ 279.093581][ T5715] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 279.160081][ T3112] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 279.250016][ T5715] usb 8-1: Using ep0 maxpacket: 32 [ 279.250935][ T5715] usb 8-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 279.252149][ T5715] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 279.252287][ T5715] usb 8-1: config 0 has no interface number 0 [ 279.252334][ T5715] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 279.255215][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.255241][ T5715] usb 8-1: Product: syz [ 279.255256][ T5715] usb 8-1: Manufacturer: syz [ 279.255271][ T5715] usb 8-1: SerialNumber: syz [ 279.258415][ T5715] usb 8-1: config 0 descriptor?? [ 279.264252][ T8791] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 279.311057][ T3112] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 279.316337][ T3112] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.316366][ T3112] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.316383][ T3112] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.316450][ T3112] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.325416][ T3112] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.325440][ T3112] usb 6-1: Product: syz [ 279.325453][ T3112] usb 6-1: Manufacturer: syz [ 279.353999][ T3112] cdc_wdm 6-1:1.0: skipping garbage [ 279.354030][ T3112] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 279.478385][ T8811] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 280.286795][ T5715] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 280.286957][ T5715] asix 8-1:0.188: probe with driver asix failed with error -32 [ 280.314075][ T8751] CIFS: VFS: cifs_mount failed w/return code = -512 [ 280.445258][ T8834] netlink: 'syz.6.595': attribute type 16 has an invalid length. [ 280.445277][ T8834] netlink: 152 bytes leftover after parsing attributes in process `syz.6.595'. [ 280.816089][ T3112] usb 2-1: USB disconnect, device number 117 [ 281.077040][ T3112] usb 6-1: USB disconnect, device number 39 [ 281.223667][ T8843] FAULT_INJECTION: forcing a failure. [ 281.223667][ T8843] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 281.223692][ T8843] CPU: 1 UID: 0 PID: 8843 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT(full) [ 281.223708][ T8843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 281.223716][ T8843] Call Trace: [ 281.223721][ T8843] [ 281.223727][ T8843] dump_stack_lvl+0xe8/0x150 [ 281.223747][ T8843] should_fail_ex+0x3eb/0x540 [ 281.223763][ T8843] _copy_from_iter+0x1d3/0x1890 [ 281.223784][ T8843] ? __pfx__copy_from_iter+0x10/0x10 [ 281.223806][ T8843] file_tty_write+0x48c/0xa20 [ 281.223825][ T8843] vfs_write+0x612/0xba0 [ 281.223842][ T8843] ? __pfx_vfs_write+0x10/0x10 [ 281.223856][ T8843] ? __fget_files+0x3a2/0x420 [ 281.223867][ T8843] ? __fget_files+0x2a/0x420 [ 281.223881][ T8843] ? fdget+0x1ac/0x250 [ 281.223896][ T8843] ksys_write+0x150/0x270 [ 281.223909][ T8843] ? __pfx_ksys_write+0x10/0x10 [ 281.223930][ T8843] do_syscall_64+0x166/0x520 [ 281.223943][ T8843] ? trace_irq_disable+0x3b/0x140 [ 281.223954][ T8843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.223966][ T8843] ? clear_bhb_loop+0x70/0xc0 [ 281.223979][ T8843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.223992][ T8843] RIP: 0033:0x7fb03c79e1d9 [ 281.224004][ T8843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.224015][ T8843] RSP: 002b:00007fb03d61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.224030][ T8843] RAX: ffffffffffffffda RBX: 00007fb03ca25fa0 RCX: 00007fb03c79e1d9 [ 281.224039][ T8843] RDX: 00000000fffffecc RSI: 00002000000035c0 RDI: 0000000000000005 [ 281.224047][ T8843] RBP: 00007fb03c835888 R08: 0000000000000000 R09: 0000000000000000 [ 281.224055][ T8843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.224062][ T8843] R13: 00007fb03ca26038 R14: 00007fb03ca25fa0 R15: 00007ffc396684d8 [ 281.224082][ T8843] [ 281.503613][ T3112] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 281.551743][ T975] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 281.652266][ T3112] usb 6-1: New USB device found: idVendor=046d, idProduct=c281, bcdDevice=1.00 [ 281.653235][ T3112] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 281.653261][ T3112] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 281.653296][ T3112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.713455][ T975] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 281.715885][ T975] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.715913][ T975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.715934][ T975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.715978][ T975] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.717757][ T975] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.717780][ T975] usb 2-1: Product: syz [ 281.717794][ T975] usb 2-1: Manufacturer: syz [ 281.724948][ T975] cdc_wdm 2-1:1.0: skipping garbage [ 281.724978][ T975] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 281.874534][ T27] usb 8-1: USB disconnect, device number 9 [ 281.938300][ T5715] usb 2-1: USB disconnect, device number 118 [ 282.062033][ T3112] iforce 6-1:1.0: usb_submit_urb failed: -32 [ 282.062091][ T3112] input input59: Device does not respond to id packet M [ 282.064095][ T3112] iforce 6-1:1.0: usb_submit_urb failed: -32 [ 282.064151][ T3112] input input59: Device does not respond to id packet P [ 282.068217][ T3112] iforce 6-1:1.0: usb_submit_urb failed: -32 [ 282.068269][ T3112] input input59: Device does not respond to id packet B [ 282.069744][ T3112] iforce 6-1:1.0: usb_submit_urb failed: -32 [ 282.069792][ T3112] input input59: Device does not respond to id packet N [ 282.119590][ T3112] iforce 6-1:1.0: usb_submit_urb failed: -32 [ 282.134038][ T3112] iforce 6-1:1.0: usb_submit_urb failed: -32 [ 282.134833][ T3112] iforce 6-1:1.0: usb_submit_urb failed: -32 [ 282.136877][ T3112] iforce 6-1:1.0: usb_submit_urb failed: -32 [ 282.137198][ T3112] iforce 6-1:1.0: usb_submit_urb failed -90 [ 282.137356][ T3112] iforce 6-1:1.0: usb_submit_urb failed -90 [ 282.174467][ T3112] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input59 [ 282.346198][ T9] usb 6-1: USB disconnect, device number 40 [ 282.381004][ T27] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 282.420833][ T975] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 282.540536][ T27] usb 8-1: Using ep0 maxpacket: 32 [ 282.541463][ T27] usb 8-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 282.542975][ T27] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 282.543003][ T27] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 282.543023][ T27] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 282.543067][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.543096][ T27] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.543111][ T27] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 282.543137][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.544846][ T27] usb 8-1: config 0 descriptor?? [ 282.583203][ T975] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 282.584336][ T975] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.584359][ T975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.584377][ T975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.584417][ T975] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.585906][ T975] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.585928][ T975] usb 2-1: Product: syz [ 282.585941][ T975] usb 2-1: Manufacturer: syz [ 282.597538][ T975] cdc_wdm 2-1:1.0: skipping garbage [ 282.597568][ T975] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 282.740143][ T948] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 282.749211][ T27] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.797875][ T8849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.798438][ T8849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.900905][ T948] usb 7-1: Using ep0 maxpacket: 32 [ 282.901478][ T948] usb 7-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 282.902372][ T948] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 282.902401][ T948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.904435][ T948] usb 7-1: config 0 descriptor?? [ 282.908523][ T948] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 283.270091][ T5715] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 283.420679][ T5715] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 283.421749][ T5715] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.421774][ T5715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.421794][ T5715] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.421869][ T5715] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.423439][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.423462][ T5715] usb 6-1: Product: syz [ 283.423477][ T5715] usb 6-1: Manufacturer: syz [ 283.429667][ T5715] cdc_wdm 6-1:1.0: skipping garbage [ 283.429731][ T5715] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 283.635282][ T5715] usb 6-1: USB disconnect, device number 41 [ 284.079983][ T5715] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 284.230900][ T5715] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 284.232823][ T5715] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.232843][ T5715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.232854][ T5715] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.232879][ T5715] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.234732][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.234757][ T5715] usb 6-1: Product: syz [ 284.234771][ T5715] usb 6-1: Manufacturer: syz [ 284.270497][ T5715] cdc_wdm 6-1:1.0: skipping garbage [ 284.270530][ T5715] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 284.333368][ T9] usb 2-1: USB disconnect, device number 119 [ 284.389499][ T8874] AppArmor: change_hat: Invalid input '0x000000000000¢Ý1^' [ 284.395501][ T8874] netlink: 'syz.1.607': attribute type 7 has an invalid length. [ 284.873060][ T4930] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 285.102504][ T975] usb 8-1: USB disconnect, device number 10 [ 285.126066][ T975] usblp0: removed [ 285.589482][ T9] usb 7-1: USB disconnect, device number 13 [ 286.125105][ T5715] usb 6-1: USB disconnect, device number 42 [ 286.251579][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 286.413035][ T9] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 286.418250][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.418283][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.418302][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.418351][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.477677][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 286.477709][ T9] usb 7-1: Product: syz [ 286.477725][ T9] usb 7-1: Manufacturer: syz [ 286.542396][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 286.542419][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 286.542432][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 286.542457][ T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 286.580432][ T5715] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 286.620958][ T27] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 286.734466][ T5715] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 286.762832][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.762863][ T5715] usb 6-1: Product: syz [ 286.762877][ T5715] usb 6-1: Manufacturer: syz [ 286.762892][ T5715] usb 6-1: SerialNumber: syz [ 286.764676][ T948] usb 7-1: USB disconnect, device number 14 [ 286.782656][ T27] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 286.784462][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.784509][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 286.784531][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 286.784559][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 286.784597][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.894329][ T8924] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 286.894465][ T8924] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 286.908535][ T27] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 286.921800][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 286.927117][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 286.933671][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 286.938713][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 286.938828][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 286.952269][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 286.996123][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 286.996189][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 286.996211][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 287.053001][ T5715] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 287.312007][ T948] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 287.364509][ T8937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.365021][ T8937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.426209][ T9] usb 2-1: USB disconnect, device number 120 [ 287.455220][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 287.458844][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 287.459810][ T9] keyspan 2-1:1.0: device disconnected [ 287.486437][ T948] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 287.493366][ T27] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 287.509323][ T948] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.509354][ T948] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.509373][ T948] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.509418][ T948] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.553974][ T948] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.554005][ T948] usb 7-1: Product: syz [ 287.554020][ T948] usb 7-1: Manufacturer: syz [ 287.581915][ T948] cdc_wdm 7-1:1.0: skipping garbage [ 287.581939][ T948] cdc_wdm 7-1:1.0: skipping garbage [ 287.581951][ T948] cdc_wdm 7-1:1.0: skipping garbage [ 287.581975][ T948] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 287.641998][ T27] usb 8-1: New USB device found: idVendor=046d, idProduct=c30a, bcdDevice=0.00 [ 287.646208][ T27] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.646243][ T27] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.646270][ T27] usb 8-1: config 0 interface 0 has no altsetting 0 [ 287.646304][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.650976][ T27] usb 8-1: config 0 descriptor?? [ 287.791238][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.796932][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.100327][ T8950] fuse: Unknown parameter '$`aé ' [ 288.233939][ T27] input: HID 046d:c30a as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:046D:C30A.0020/input/input60 [ 288.315556][ T27] logitech 0003:046D:C30A.0020: input,hidraw0: USB HID v36.2c Joystick [HID 046d:c30a] on usb-dummy_hcd.7-1/input0 [ 288.464443][ T3112] usb 8-1: USB disconnect, device number 11 [ 288.594528][ T8955] fido_id[8955]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 288.732633][ T8957] FAULT_INJECTION: forcing a failure. [ 288.732633][ T8957] name failslab, interval 1, probability 0, space 0, times 0 [ 288.732670][ T8957] CPU: 1 UID: 0 PID: 8957 Comm: syz.1.620 Not tainted syzkaller #0 PREEMPT(full) [ 288.732696][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 288.732709][ T8957] Call Trace: [ 288.732717][ T8957] [ 288.732727][ T8957] dump_stack_lvl+0xe8/0x150 [ 288.732758][ T8957] should_fail_ex+0x3eb/0x540 [ 288.732787][ T8957] should_failslab+0xa8/0x100 [ 288.732810][ T8957] ? dst_alloc+0x105/0x170 [ 288.732832][ T8957] kmem_cache_alloc_noprof+0x9c/0x600 [ 288.732858][ T8957] ? dst_alloc+0x105/0x170 [ 288.732885][ T8957] dst_alloc+0x105/0x170 [ 288.732904][ T8957] ? ip_check_mc_rcu+0x68a/0x7c0 [ 288.732930][ T8957] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 288.732965][ T8957] ? ip_route_output_key_hash+0xd8/0x2a0 [ 288.732990][ T8957] ip_route_output_key_hash+0x18d/0x2a0 [ 288.733027][ T8957] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 288.733055][ T8957] ? lock_acquire+0x115/0x350 [ 288.733087][ T8957] ip_route_output_flow+0x2a/0x150 [ 288.733107][ T8957] ? security_sk_classify_flow+0x6d/0x150 [ 288.733134][ T8957] udp_sendmsg+0x144a/0x2140 [ 288.733174][ T8957] ? __pfx_udp_sendmsg+0x10/0x10 [ 288.733202][ T8957] ? trace_hrtimer_start+0x82/0x200 [ 288.733228][ T8957] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 288.733268][ T8957] ? finish_task_switch+0x40e/0xc60 [ 288.733290][ T8957] ? lockdep_hardirqs_on+0x7b/0x110 [ 288.733315][ T8957] ? rcu_is_watching+0x16/0xb0 [ 288.733337][ T8957] ? trace_sched_exit_tp+0x3a/0x130 [ 288.733356][ T8957] ? begin_current_label_crit_section+0x299/0x830 [ 288.733391][ T8957] udpv6_sendmsg+0x915/0x2610 [ 288.733431][ T8957] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 288.733484][ T8957] ? __pfx_current_check_autobind_udp_socket+0x10/0x10 [ 288.733526][ T8957] ? inet_send_prepare+0x5b/0x260 [ 288.733552][ T8957] ? inet6_sendmsg+0xe4/0x120 [ 288.733575][ T8957] ? __pfx_inet6_sendmsg+0x10/0x10 [ 288.733595][ T8957] sock_sendmsg_nosec+0x90/0x190 [ 288.733620][ T8957] sock_write_iter+0x2de/0x3e0 [ 288.733646][ T8957] ? __pfx_sock_write_iter+0x10/0x10 [ 288.733676][ T8957] ? bpf_lsm_file_permission+0x9/0x20 [ 288.733697][ T8957] ? security_file_permission+0x75/0x260 [ 288.733728][ T8957] vfs_write+0x612/0xba0 [ 288.733760][ T8957] ? __pfx_vfs_write+0x10/0x10 [ 288.733786][ T8957] ? __fget_files+0x3a2/0x420 [ 288.733806][ T8957] ? __fget_files+0x2a/0x420 [ 288.733831][ T8957] ? fdget+0x1ac/0x250 [ 288.733859][ T8957] ksys_write+0x150/0x270 [ 288.733884][ T8957] ? __pfx_ksys_write+0x10/0x10 [ 288.733918][ T8957] do_syscall_64+0x166/0x520 [ 288.733938][ T8957] ? trace_irq_disable+0x3b/0x140 [ 288.733957][ T8957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.733979][ T8957] ? clear_bhb_loop+0x70/0xc0 [ 288.734011][ T8957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.734032][ T8957] RIP: 0033:0x7fb03c79e1d9 [ 288.734053][ T8957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.734071][ T8957] RSP: 002b:00007fb03d61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.734096][ T8957] RAX: ffffffffffffffda RBX: 00007fb03ca25fa0 RCX: 00007fb03c79e1d9 [ 288.734112][ T8957] RDX: 0000000000003f80 RSI: 0000200000000480 RDI: 0000000000000008 [ 288.734126][ T8957] RBP: 00007fb03c835888 R08: 0000000000000000 R09: 0000000000000000 [ 288.734140][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.734152][ T8957] R13: 00007fb03ca26038 R14: 00007fb03ca25fa0 R15: 00007ffc396684d8 [ 288.734187][ T8957] [ 289.181732][ T8969] netlink: 'syz.1.623': attribute type 83 has an invalid length. [ 289.362170][ T5701] usb 7-1: USB disconnect, device number 15 [ 289.441666][ T948] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 289.584769][ T5701] usb 6-1: USB disconnect, device number 43 [ 289.591531][ T948] usb 8-1: Using ep0 maxpacket: 32 [ 289.592008][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 289.598697][ T948] usb 8-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 289.602416][ T948] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 289.602464][ T948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.613072][ T948] usb 8-1: config 0 descriptor?? [ 289.629371][ T948] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 289.750195][ T9] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 289.754608][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.754640][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.754660][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.754708][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.767071][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.767098][ T9] usb 2-1: Product: syz [ 289.767111][ T9] usb 2-1: Manufacturer: syz [ 289.788760][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 289.788790][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 289.900426][ T3112] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 290.014374][ T5701] usb 2-1: USB disconnect, device number 121 [ 290.050974][ T3112] usb 7-1: Using ep0 maxpacket: 16 [ 290.062536][ T3112] usb 7-1: unable to get BOS descriptor or descriptor too short [ 290.062590][ T3112] usb 7-1: New USB device found: idVendor=2a39, idProduct=3fb0, bcdDevice=0.40 [ 290.089761][ T3112] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.089808][ T3112] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.118273][ T3112] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.118304][ T3112] usb 7-1: Product: syz [ 290.118321][ T3112] usb 7-1: Manufacturer: syz [ 290.118335][ T3112] usb 7-1: SerialNumber: syz [ 290.258124][ T8990] PKCS8: Unsupported PKCS#8 version [ 290.385727][ T8977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.386552][ T8977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.424280][ T3112] usb 7-1: 0:1 : does not exist [ 290.451001][ T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 290.602918][ T9] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 290.604612][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.604641][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.604659][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.604705][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.607047][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.607072][ T9] usb 2-1: Product: syz [ 290.607086][ T9] usb 2-1: Manufacturer: syz [ 290.616027][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 290.616058][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 290.665294][ T3112] usb 7-1: USB disconnect, device number 16 [ 290.876997][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.790061][ T3112] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 291.942330][ T3112] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 291.943438][ T3112] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.943466][ T3112] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.943484][ T3112] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.943523][ T3112] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.944972][ T3112] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.944995][ T3112] usb 7-1: Product: syz [ 291.945004][ T3112] usb 7-1: Manufacturer: syz [ 291.960611][ T3112] cdc_wdm 7-1:1.0: skipping garbage [ 291.960632][ T3112] cdc_wdm 7-1:1.0: skipping garbage [ 291.960645][ T3112] cdc_wdm 7-1:1.0: skipping garbage [ 291.962579][ T3112] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 292.174787][ T3112] usb 7-1: USB disconnect, device number 17 [ 292.218146][ T5715] usb 8-1: USB disconnect, device number 12 [ 292.342952][ T8272] usb 2-1: USB disconnect, device number 122 [ 292.457457][ T9046] jffs2: notice: (9046) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 292.468851][ T9050] input: syz1 as /devices/virtual/input/input61 [ 292.600210][ T5715] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 292.710285][ T5701] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 292.752090][ T5715] usb 8-1: unable to get BOS descriptor or descriptor too short [ 292.752133][ T5715] usb 8-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 292.753041][ T5715] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.753065][ T5715] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 292.753109][ T5715] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 292.753147][ T5715] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 292.753185][ T5715] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 292.753209][ T5715] usb 8-1: config 1 interface 1 has no altsetting 0 [ 292.756279][ T5715] usb 8-1: string descriptor 0 read error: -22 [ 292.756425][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.901138][ T5701] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 292.905277][ T5701] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.905307][ T5701] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.905325][ T5701] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.905372][ T5701] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.908505][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.908534][ T5701] usb 7-1: Product: syz [ 292.908548][ T5701] usb 7-1: Manufacturer: syz [ 292.952164][ T5701] cdc_wdm 7-1:1.0: skipping garbage [ 292.952186][ T5701] cdc_wdm 7-1:1.0: skipping garbage [ 292.952198][ T5701] cdc_wdm 7-1:1.0: skipping garbage [ 292.952219][ T5701] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 292.959466][ T9047] usb usb7: usbfs: process 9047 (syz.1.637) did not claim interface 0 before use [ 293.155760][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.160309][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.211944][ T9061] kAFS: No cell specified [ 293.509988][ T975] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 293.616700][ T5715] usb 8-1: 2:0: failed to get current value for ch 1 (-71) [ 293.630127][ T5715] usb 8-1: Warning! Unlikely big volume step count (=30292), linear volume or wrong cval->res? [ 293.630157][ T5715] usb 8-1: [2] FU [Speaker Playback Volume] ch = 1, val = -30292/0/1 [ 293.674503][ T975] usb 2-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 293.675961][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.728126][ T5715] usb 8-1: USB disconnect, device number 13 [ 294.096406][ T975] pn533_usb 2-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 294.096561][ T975] pn533_usb 2-1:1.0: probe with driver pn533_usb failed with error -71 [ 294.108339][ T975] usb 2-1: USB disconnect, device number 123 [ 294.203167][ T9068] netlink: 88 bytes leftover after parsing attributes in process `syz.7.643'. [ 294.530016][ T8272] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 294.560769][ T5715] usb 7-1: USB disconnect, device number 18 [ 294.644577][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.644926][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.679981][ T8272] usb 8-1: Using ep0 maxpacket: 32 [ 294.680617][ T8272] usb 8-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 294.682393][ T8272] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 294.682450][ T8272] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.685933][ T8272] usb 8-1: config 0 descriptor?? [ 294.733528][ T8272] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 294.879998][ T27] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 294.920069][ T5715] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 295.040018][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 295.042431][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.042499][ T27] usb 2-1: New USB device found: idVendor=1a0a, idProduct=0108, bcdDevice=4e.fe [ 295.043458][ T27] usb 2-1: config 8 has an invalid interface number: 64 but max is 0 [ 295.043492][ T27] usb 2-1: config 8 has no interface number 0 [ 295.043521][ T27] usb 2-1: config 8 interface 64 has no altsetting 0 [ 295.045947][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.045971][ T27] usb 2-1: Product: syz [ 295.045986][ T27] usb 2-1: Manufacturer: syz [ 295.046000][ T27] usb 2-1: SerialNumber: syz [ 295.114404][ T5715] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 295.129236][ T5715] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 295.129267][ T5715] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.129286][ T5715] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 295.129770][ T5715] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.173933][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 295.173957][ T5715] usb 7-1: Product: syz [ 295.173989][ T5715] usb 7-1: Manufacturer: syz [ 295.197624][ T5715] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 295.261468][ T27] usb_ehset_test 2-1:8.64: probe with driver usb_ehset_test failed with error -32 [ 295.263697][ T27] usb 2-1: USB disconnect, device number 124 [ 295.383498][ T975] usb 7-1: USB disconnect, device number 19 [ 295.819990][ T975] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 295.990650][ T975] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 295.991914][ T975] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 295.991941][ T975] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.991961][ T975] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 295.992001][ T975] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.994550][ T975] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 295.994575][ T975] usb 7-1: Product: syz [ 295.994584][ T975] usb 7-1: Manufacturer: syz [ 296.019436][ T975] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 296.926457][ T9097] trusted_key: encrypted_key: insufficient parameters specified [ 296.985398][ T9099] netlink: 88 bytes leftover after parsing attributes in process `syz.1.653'. [ 297.270298][ T5715] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 297.312279][ T27] usb 8-1: USB disconnect, device number 14 [ 297.422231][ T5715] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 297.423401][ T5715] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.423429][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.423449][ T5715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.423494][ T5715] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.425775][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.425800][ T5715] usb 2-1: Product: syz [ 297.425816][ T5715] usb 2-1: Manufacturer: syz [ 297.503830][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 297.503853][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 297.503866][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 297.503890][ T5715] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 297.621395][ T5701] usb 7-1: USB disconnect, device number 20 [ 297.674144][ T9116] FAULT_INJECTION: forcing a failure. [ 297.674144][ T9116] name failslab, interval 1, probability 0, space 0, times 0 [ 297.674168][ T9116] CPU: 0 UID: 0 PID: 9116 Comm: syz.6.658 Not tainted syzkaller #0 PREEMPT(full) [ 297.674184][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 297.674192][ T9116] Call Trace: [ 297.674197][ T9116] [ 297.674202][ T9116] dump_stack_lvl+0xe8/0x150 [ 297.674246][ T9116] should_fail_ex+0x3eb/0x540 [ 297.674263][ T9116] should_failslab+0xa8/0x100 [ 297.674275][ T9116] ? __proc_create+0x55d/0xad0 [ 297.674287][ T9116] kmem_cache_alloc_noprof+0x9c/0x600 [ 297.674302][ T9116] ? __proc_create+0x55d/0xad0 [ 297.674317][ T9116] __proc_create+0x55d/0xad0 [ 297.674331][ T9116] ? proc_create_net_single+0x123/0x190 [ 297.674344][ T9116] ? __pfx___proc_create+0x10/0x10 [ 297.674355][ T9116] ? __pfx_snmp6_seq_show+0x10/0x10 [ 297.674367][ T9116] ? __pfx_proc_create_net_single+0x10/0x10 [ 297.674380][ T9116] ? __pfx_proc_create_net_data+0x10/0x10 [ 297.674391][ T9116] ? ndisc_net_init+0x2b7/0x3f0 [ 297.674405][ T9116] proc_mkdir+0x3e/0x110 [ 297.674418][ T9116] ipv6_proc_init_net+0xba/0x160 [ 297.674431][ T9116] ops_init+0x35d/0x5d0 [ 297.674450][ T9116] setup_net+0x118/0x350 [ 297.674462][ T9116] ? __pfx_setup_net+0x10/0x10 [ 297.674475][ T9116] ? down_read_killable+0x1b6/0x3b0 [ 297.674487][ T9116] ? __ns_common_init+0x38a/0x590 [ 297.674502][ T9116] copy_net_ns+0x536/0x770 [ 297.674516][ T9116] create_new_namespaces+0x3f0/0x6b0 [ 297.674530][ T9116] ? security_capable+0x7e/0x2c0 [ 297.674547][ T9116] unshare_nsproxy_namespaces+0x144/0x190 [ 297.674561][ T9116] ksys_unshare+0x532/0x890 [ 297.674575][ T9116] ? __pfx_ksys_unshare+0x10/0x10 [ 297.674588][ T9116] ? rcu_is_watching+0x16/0xb0 [ 297.674607][ T9116] __x64_sys_unshare+0x38/0x50 [ 297.674618][ T9116] do_syscall_64+0x166/0x520 [ 297.674629][ T9116] ? trace_irq_disable+0x3b/0x140 [ 297.674640][ T9116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.674653][ T9116] ? clear_bhb_loop+0x70/0xc0 [ 297.674667][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.674679][ T9116] RIP: 0033:0x7f993099e1d9 [ 297.674692][ T9116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.674702][ T9116] RSP: 002b:00007f9931829028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 297.674718][ T9116] RAX: ffffffffffffffda RBX: 00007f9930c25fa0 RCX: 00007f993099e1d9 [ 297.674727][ T9116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 297.674742][ T9116] RBP: 00007f9930a35888 R08: 0000000000000000 R09: 0000000000000000 [ 297.674750][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.674760][ T9116] R13: 00007f9930c26038 R14: 00007f9930c25fa0 R15: 00007ffd114d3a98 [ 297.674792][ T9116] [ 297.743572][ T27] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 297.747637][ T9] usb 2-1: USB disconnect, device number 125 [ 297.924843][ T27] usb 8-1: device descriptor read/64, error -71 [ 298.062718][ T9125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.160004][ T27] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 298.240377][ T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 298.290014][ T27] usb 8-1: device descriptor read/64, error -71 [ 298.308585][ T9138] netlink: 88 bytes leftover after parsing attributes in process `syz.5.663'. [ 298.328750][ T9140] random: crng reseeded on system resumption [ 298.363423][ T9140] netlink: 20 bytes leftover after parsing attributes in process `syz.6.664'. [ 298.400263][ T27] usb usb8-port1: attempt power cycle [ 298.416886][ T9] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 298.418120][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 298.418150][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.418169][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 298.418214][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.421006][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 298.421034][ T9] usb 2-1: Product: syz [ 298.421048][ T9] usb 2-1: Manufacturer: syz [ 298.427993][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 298.428031][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 298.428044][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 298.428064][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 298.628871][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.629344][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.730112][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 298.790059][ T27] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 298.810567][ T27] usb 8-1: device descriptor read/8, error -71 [ 298.890912][ T9] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 298.892475][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 298.892506][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.892525][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 298.892571][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.894439][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 298.894467][ T9] usb 7-1: Product: syz [ 298.894481][ T9] usb 7-1: Manufacturer: syz [ 298.974155][ T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 299.050061][ T27] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 299.071395][ T27] usb 8-1: device descriptor read/8, error -71 [ 299.104329][ T5715] usb 7-1: USB disconnect, device number 21 [ 299.180622][ T27] usb usb8-port1: unable to enumerate USB device [ 299.550012][ T5715] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 299.701153][ T5715] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 299.702340][ T5715] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 299.702359][ T5715] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.702370][ T5715] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 299.702405][ T5715] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.704334][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 299.704362][ T5715] usb 7-1: Product: syz [ 299.704466][ T5715] usb 7-1: Manufacturer: syz [ 299.710167][ T5715] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 300.055168][ T27] usb 2-1: USB disconnect, device number 126 [ 300.418354][ T9166] netlink: 88 bytes leftover after parsing attributes in process `syz.7.673'. [ 300.470136][ T27] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 300.620066][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 300.620632][ T27] usb 2-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 300.621839][ T27] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 300.621859][ T27] usb 2-1: config 0 has no interface number 0 [ 300.623904][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.623922][ T27] usb 2-1: Product: syz [ 300.623932][ T27] usb 2-1: Manufacturer: syz [ 300.623940][ T27] usb 2-1: SerialNumber: syz [ 300.626999][ T27] usb 2-1: config 0 descriptor?? [ 300.635646][ T27] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 300.834307][ T27] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 300.840090][ T27] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 300.860605][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 301.010785][ T9] usb 8-1: New USB device found: idVendor=0694, idProduct=0000, bcdDevice=a2.00 [ 301.012325][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.012377][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.014588][ T9] usb 8-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 301.014613][ T9] usb 8-1: Product: syz [ 301.014627][ T9] usb 8-1: Manufacturer: syz [ 301.014641][ T9] usb 8-1: SerialNumber: syz [ 301.017703][ T9] usb 8-1: config 0 descriptor?? [ 301.239167][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 301.240103][ T948] usb 2-1: USB disconnect, device number 127 [ 301.271995][ T948] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 301.296102][ T948] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 301.318221][ T948] quatech2 2-1:0.51: device disconnected [ 301.503375][ T3112] usb 7-1: USB disconnect, device number 22 [ 301.911277][ T9189] netlink: 88 bytes leftover after parsing attributes in process `syz.1.682'. [ 302.299982][ T3112] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 302.450036][ T3112] usb 2-1: Using ep0 maxpacket: 16 [ 302.452187][ T3112] usb 2-1: New USB device found: idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 302.454624][ T3112] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.457286][ T3112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.457315][ T3112] usb 2-1: Product: syz [ 302.457329][ T3112] usb 2-1: Manufacturer: syz [ 302.457343][ T3112] usb 2-1: SerialNumber: syz [ 302.461641][ T3112] usb 2-1: config 0 descriptor?? [ 302.467842][ T3112] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 302.666986][ T948] usb 2-1: USB disconnect, device number 2 [ 302.880037][ T5701] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 303.032407][ T5701] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 303.033825][ T5701] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.033853][ T5701] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.033872][ T5701] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 303.033948][ T5701] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.036084][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 303.036111][ T5701] usb 7-1: Product: syz [ 303.036125][ T5701] usb 7-1: Manufacturer: syz [ 303.121833][ T5701] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 303.315706][ T9210] netlink: 88 bytes leftover after parsing attributes in process `syz.5.691'. [ 303.337163][ T5701] usb 7-1: USB disconnect, device number 23 [ 303.698633][ T9] usb 8-1: USB disconnect, device number 19 [ 303.790014][ T27] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 303.804018][ T9221] syzkaller1: entered promiscuous mode [ 303.804042][ T9221] syzkaller1: entered allmulticast mode [ 303.820185][ T3112] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 303.942999][ T27] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 303.944152][ T27] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.944179][ T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.944197][ T27] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 303.944239][ T27] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.946083][ T27] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 303.946111][ T27] usb 7-1: Product: syz [ 303.946126][ T27] usb 7-1: Manufacturer: syz [ 303.951766][ T27] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 303.969951][ T3112] usb 2-1: Using ep0 maxpacket: 32 [ 303.972034][ T3112] usb 2-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 303.974516][ T3112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.974549][ T3112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.974570][ T3112] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 303.974609][ T3112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.991307][ T3112] usb 2-1: config 0 descriptor?? [ 304.026629][ T4930] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 304.026778][ T4930] Bluetooth: hci1: Injecting HCI hardware error event [ 304.042902][ T54] Bluetooth: hci1: hardware error 0x00 [ 304.400746][ T3112] usbhid 2-1:0.0: can't add hid device: -71 [ 304.400858][ T3112] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 304.403662][ T3112] usb 2-1: USB disconnect, device number 3 [ 305.048607][ T9247] netlink: 88 bytes leftover after parsing attributes in process `syz.1.702'. [ 305.297903][ T9258] netlink: 'syz.7.704': attribute type 4 has an invalid length. [ 305.573200][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.703'. [ 305.690720][ T3112] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 305.691121][ T9] usb 7-1: USB disconnect, device number 24 [ 305.841726][ T3112] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 305.842944][ T3112] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.842973][ T3112] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.842991][ T3112] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.843038][ T3112] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.847128][ T3112] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.847156][ T3112] usb 8-1: Product: syz [ 305.847171][ T3112] usb 8-1: Manufacturer: syz [ 305.890091][ T5701] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 305.938905][ T3112] cdc_wdm 8-1:1.0: skipping garbage [ 305.938930][ T3112] cdc_wdm 8-1:1.0: skipping garbage [ 305.939022][ T3112] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 306.040679][ T5701] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 306.042006][ T5701] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.042056][ T5701] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.046588][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.046617][ T5701] usb 2-1: Product: syz [ 306.046633][ T5701] usb 2-1: Manufacturer: syz [ 306.046647][ T5701] usb 2-1: SerialNumber: syz [ 306.075626][ T5701] cdc_ncm 2-1:1.0: skipping garbage [ 306.075650][ T5701] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 306.075690][ T5701] cdc_ncm 2-1:1.0: bind() failure [ 306.103315][ T5701] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 306.103363][ T5701] cdc_ncm 2-1:1.1: bind() failure [ 306.146443][ T3112] usb 8-1: USB disconnect, device number 20 [ 306.180403][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 306.290393][ T948] usb 2-1: USB disconnect, device number 4 [ 306.589987][ T3112] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 306.741227][ T3112] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 306.744108][ T3112] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 306.744147][ T3112] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.744167][ T3112] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 306.744214][ T3112] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.746386][ T3112] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 306.746411][ T3112] usb 8-1: Product: syz [ 306.746427][ T3112] usb 8-1: Manufacturer: syz [ 306.790494][ T8272] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 306.818164][ T9290] netlink: 'syz.5.710': attribute type 21 has an invalid length. [ 306.838474][ T3112] cdc_wdm 8-1:1.0: skipping garbage [ 306.838497][ T3112] cdc_wdm 8-1:1.0: skipping garbage [ 306.838588][ T3112] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 306.960009][ T8272] usb 7-1: Using ep0 maxpacket: 32 [ 307.025313][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.025900][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.492215][ T9286] ftl_cs: FTL header not found. [ 307.612211][ T9303] netlink: 88 bytes leftover after parsing attributes in process `syz.5.712'. [ 307.647822][ T9286] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 307.721122][ T5715] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 307.870089][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 307.878291][ T5715] usb 2-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 307.893363][ T9305] xt_nfacct: accounting object `' does not exist [ 307.907625][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.907660][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.907686][ T5715] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 307.907776][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.970617][ T5715] usb 2-1: config 0 descriptor?? [ 308.387191][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 308.387723][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 308.388256][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 308.388556][ T5715] usbhid 2-1:0.0: can't add hid device: -32 [ 308.388715][ T5715] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 308.439670][ T5715] usb 2-1: USB disconnect, device number 5 [ 308.537584][ T9] usb 8-1: USB disconnect, device number 21 [ 308.728390][ T9313] CIFS: Attempting to mount //::1/share [ 309.200769][ T9317] FAULT_INJECTION: forcing a failure. [ 309.200769][ T9317] name failslab, interval 1, probability 0, space 0, times 0 [ 309.200813][ T9317] CPU: 0 UID: 0 PID: 9317 Comm: syz.1.717 Not tainted syzkaller #0 PREEMPT(full) [ 309.200834][ T9317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 309.200845][ T9317] Call Trace: [ 309.200853][ T9317] [ 309.200863][ T9317] dump_stack_lvl+0xe8/0x150 [ 309.200892][ T9317] should_fail_ex+0x3eb/0x540 [ 309.200915][ T9317] should_failslab+0xa8/0x100 [ 309.200934][ T9317] __kmalloc_cache_node_noprof+0xa5/0x620 [ 309.200953][ T9317] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 309.200970][ T9317] ? __alloc_workqueue+0x7dc/0x21d0 [ 309.200986][ T9317] ? __alloc_workqueue+0x7dc/0x21d0 [ 309.201013][ T9317] __alloc_workqueue+0x7dc/0x21d0 [ 309.201054][ T9317] alloc_workqueue_noprof+0xe3/0x210 [ 309.201076][ T9317] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 309.201099][ T9317] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 309.201122][ T9317] nci_register_device+0x22c/0xa00 [ 309.201168][ T9317] ? __pfx_nci_register_device+0x10/0x10 [ 309.201184][ T9317] ? __raw_spin_lock_init+0x45/0x100 [ 309.201204][ T9317] ? __raw_spin_lock_init+0x45/0x100 [ 309.201223][ T9317] ? __init_waitqueue_head+0xa8/0x150 [ 309.201243][ T9317] virtual_ncidev_open+0x129/0x1a0 [ 309.201264][ T9317] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 309.201280][ T9317] misc_open+0x2d5/0x350 [ 309.201305][ T9317] chrdev_open+0x4d9/0x600 [ 309.201326][ T9317] ? __pfx_chrdev_open+0x10/0x10 [ 309.201344][ T9317] ? devcgroup_check_permission+0x31/0x8f0 [ 309.201366][ T9317] ? __pfx_chrdev_open+0x10/0x10 [ 309.201381][ T9317] do_dentry_open+0x80e/0x1360 [ 309.201407][ T9317] vfs_open_consume+0x4a/0x350 [ 309.201421][ T9317] ? path_openat+0x148a/0x1da0 [ 309.201443][ T9317] path_openat+0x14a6/0x1da0 [ 309.201479][ T9317] do_file_open+0x23e/0x4a0 [ 309.201500][ T9317] ? __pfx_do_file_open+0x10/0x10 [ 309.201535][ T9317] ? _raw_spin_unlock+0x28/0x50 [ 309.201549][ T9317] ? alloc_fd+0x6af/0x760 [ 309.201576][ T9317] do_sys_openat2+0x115/0x200 [ 309.201597][ T9317] ? __se_sys_futex+0x3a8/0x450 [ 309.201614][ T9317] ? __pfx_do_sys_openat2+0x10/0x10 [ 309.201635][ T9317] ? rcu_is_watching+0x16/0xb0 [ 309.201656][ T9317] __x64_sys_openat+0x138/0x170 [ 309.201677][ T9317] do_syscall_64+0x166/0x520 [ 309.201693][ T9317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.201710][ T9317] ? clear_bhb_loop+0x70/0xc0 [ 309.201732][ T9317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.201751][ T9317] RIP: 0033:0x7fb03c79e1d9 [ 309.201768][ T9317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.201789][ T9317] RSP: 002b:00007fb03d5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 309.201810][ T9317] RAX: ffffffffffffffda RBX: 00007fb03ca26090 RCX: 00007fb03c79e1d9 [ 309.201823][ T9317] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 309.201834][ T9317] RBP: 00007fb03c835888 R08: 0000000000000000 R09: 0000000000000000 [ 309.201845][ T9317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.201856][ T9317] R13: 00007fb03ca26128 R14: 00007fb03ca26090 R15: 00007ffc396684d8 [ 309.201888][ T9317] [ 309.654878][ T8272] usb 7-1: unable to get BOS descriptor or descriptor too short [ 309.654927][ T8272] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 309.656110][ T8272] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 309.656145][ T8272] usb 7-1: can't read configurations, error -71 [ 309.727632][ T9327] netlink: 88 bytes leftover after parsing attributes in process `syz.6.721'. [ 310.091016][ T9313] CIFS: VFS: Error connecting to socket. Aborting operation. [ 310.091069][ T9313] CIFS: VFS: cifs_mount failed w/return code = -4 [ 310.220647][ T948] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 310.280225][ T8272] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 310.371454][ T948] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 310.374089][ T948] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 310.374120][ T948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.374141][ T948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 310.374224][ T948] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.374328][ T948] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.377479][ T948] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 310.377501][ T948] usb 2-1: Product: syz [ 310.377516][ T948] usb 2-1: Manufacturer: syz [ 310.422615][ T948] cdc_wdm 2-1:1.0: skipping garbage [ 310.422629][ T948] cdc_wdm 2-1:1.0: skipping garbage [ 310.435705][ T948] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 310.435721][ T948] cdc_wdm 2-1:1.0: Unknown control protocol [ 310.503152][ T8272] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 310.504566][ T8272] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.504607][ T8272] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 310.507133][ T8272] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.507154][ T8272] usb 7-1: Product: syz [ 310.507168][ T8272] usb 7-1: Manufacturer: syz [ 310.507182][ T8272] usb 7-1: SerialNumber: syz [ 310.564168][ T8272] cdc_mbim 7-1:1.0: skipping garbage [ 310.625008][ T948] usb 2-1: USB disconnect, device number 6 [ 310.761495][ T9331] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 310.920087][ T5715] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 311.081636][ T5715] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 311.083172][ T5715] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 311.083189][ T5715] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.083200][ T5715] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 311.083248][ T5715] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.085118][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 311.085131][ T5715] usb 8-1: Product: syz [ 311.085140][ T5715] usb 8-1: Manufacturer: syz [ 311.122687][ T948] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 311.170291][ T5715] cdc_wdm 8-1:1.0: skipping garbage [ 311.170317][ T5715] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 311.179665][ T9331] overlay: ./file1 is not a directory [ 311.203911][ T8272] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 311.203984][ T8272] cdc_mbim 7-1:1.0: bind() failure [ 311.231540][ T8272] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 311.231593][ T8272] cdc_ncm 7-1:1.1: bind() failure [ 311.281844][ T948] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 311.283632][ T948] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 311.283659][ T948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.283680][ T948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 311.283741][ T948] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.283764][ T948] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.286915][ T948] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 311.286936][ T948] usb 2-1: Product: syz [ 311.286952][ T948] usb 2-1: Manufacturer: syz [ 311.306806][ T948] cdc_wdm 2-1:1.0: skipping garbage [ 311.306819][ T948] cdc_wdm 2-1:1.0: skipping garbage [ 311.317172][ T948] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 311.317188][ T948] cdc_wdm 2-1:1.0: Unknown control protocol [ 311.352553][ T948] usb 8-1: USB disconnect, device number 22 [ 311.500419][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.501647][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.854106][ T9353] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 311.869008][ T948] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 312.022245][ T948] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 312.024165][ T948] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 312.024189][ T948] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.024210][ T948] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 312.024277][ T948] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.027243][ T948] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 312.027264][ T948] usb 8-1: Product: syz [ 312.027279][ T948] usb 8-1: Manufacturer: syz [ 312.111889][ T948] cdc_wdm 8-1:1.0: skipping garbage [ 312.111910][ T948] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 312.672391][ T9364] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 312.826921][ T5715] usb 7-1: USB disconnect, device number 26 [ 312.967611][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.734'. [ 312.980284][ C1] net_ratelimit: 786 callbacks suppressed [ 313.038662][ T948] usb 2-1: USB disconnect, device number 7 [ 313.085936][ T9368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.085958][ T9368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.107752][ T9368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.107772][ T9368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.385122][ T9379] netlink: 88 bytes leftover after parsing attributes in process `syz.5.739'. [ 313.436137][ T9381] netlink: 'syz.5.740': attribute type 1 has an invalid length. [ 313.478775][ T9383] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.741'. [ 313.530069][ T948] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 313.580266][ T5701] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 313.691789][ T948] usb 2-1: Using ep0 maxpacket: 32 [ 313.692777][ T948] usb 2-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 313.694379][ T948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.694407][ T948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.694429][ T948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 313.694491][ T948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.695452][ T5715] usb 8-1: USB disconnect, device number 23 [ 313.740124][ T5701] usb 7-1: device descriptor read/64, error -71 [ 313.781378][ T948] usb 2-1: config 0 descriptor?? [ 313.845177][ T9396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.980036][ T5701] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 314.110127][ T5701] usb 7-1: device descriptor read/64, error -71 [ 314.193004][ T948] usbhid 2-1:0.0: can't add hid device: -71 [ 314.193147][ T948] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 314.201229][ T948] usb 2-1: USB disconnect, device number 8 [ 314.222041][ T5701] usb usb7-port1: attempt power cycle [ 314.489081][ T9403] netlink: 88 bytes leftover after parsing attributes in process `syz.5.748'. [ 314.571295][ T5701] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 314.586569][ T9407] overlayfs: failed to clone upperpath [ 314.602599][ T5701] usb 7-1: device descriptor read/8, error -71 [ 314.830557][ T9423] CIFS: Attempting to mount //127.0.0.1/share [ 314.852290][ T5701] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 314.882931][ T5701] usb 7-1: device descriptor read/8, error -71 [ 314.980070][ T27] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 315.006710][ T5701] usb usb7-port1: unable to enumerate USB device [ 315.130809][ T27] usb 8-1: New USB device found: idVendor=056a, idProduct=5012, bcdDevice=0.00 [ 315.132116][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.132144][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.132203][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.198369][ T27] usb 8-1: config 0 descriptor?? [ 315.533121][ T9419] fuse: root generation should be zero [ 315.655755][ T9423] CIFS: VFS: cifs_mount failed w/return code = -112 [ 315.745880][ T27] wacom 0003:056A:5012.0021: unknown main item tag 0x0 [ 315.745905][ T27] wacom 0003:056A:5012.0021: unknown main item tag 0x0 [ 315.745921][ T27] wacom 0003:056A:5012.0021: unknown main item tag 0x0 [ 315.745937][ T27] wacom 0003:056A:5012.0021: unknown main item tag 0x0 [ 315.745952][ T27] wacom 0003:056A:5012.0021: unknown main item tag 0x0 [ 315.745966][ T27] wacom 0003:056A:5012.0021: unknown main item tag 0x0 [ 315.745981][ T27] wacom 0003:056A:5012.0021: unknown main item tag 0x0 [ 315.745996][ T27] wacom 0003:056A:5012.0021: unknown main item tag 0x0 [ 315.746011][ T27] wacom 0003:056A:5012.0021: unknown main item tag 0x0 [ 315.746026][ T27] wacom 0003:056A:5012.0021: unknown main item tag 0x0 [ 315.746336][ T27] wacom 0003:056A:5012.0021: ignoring exceeding usage max [ 315.754895][ T27] wacom 0003:056A:5012.0021: item fetching failed at offset 367/483 [ 315.755878][ T27] wacom 0003:056A:5012.0021: parse failed [ 315.755994][ T27] wacom 0003:056A:5012.0021: probe with driver wacom failed with error -22 [ 315.939341][ T27] usb 8-1: USB disconnect, device number 24 [ 315.951362][ T8272] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 316.101628][ T8272] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 316.102946][ T8272] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.102964][ T8272] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.102975][ T8272] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 316.103016][ T8272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.103031][ T8272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.104783][ T8272] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 316.104804][ T8272] usb 2-1: Product: syz [ 316.104818][ T8272] usb 2-1: Manufacturer: syz [ 316.111936][ T8272] cdc_wdm 2-1:1.0: skipping garbage [ 316.111949][ T8272] cdc_wdm 2-1:1.0: skipping garbage [ 316.128640][ T8272] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 316.128658][ T8272] cdc_wdm 2-1:1.0: Unknown control protocol [ 316.316399][ T8272] usb 2-1: USB disconnect, device number 9 [ 316.413416][ T9459] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 316.541845][ T9461] netlink: 88 bytes leftover after parsing attributes in process `syz.7.757'. [ 316.783111][ T8272] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 316.805403][ T9473] usb usb5: usbfs: process 9473 (syz.7.762) did not claim interface 0 before use [ 316.945293][ T8272] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 316.946551][ T8272] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.946576][ T8272] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.946596][ T8272] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 316.946664][ T8272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.946701][ T8272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.948610][ T8272] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 316.948632][ T8272] usb 2-1: Product: syz [ 316.948647][ T8272] usb 2-1: Manufacturer: syz [ 317.035981][ T8272] cdc_wdm 2-1:1.0: skipping garbage [ 317.035995][ T8272] cdc_wdm 2-1:1.0: skipping garbage [ 317.051473][ T8272] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 317.051492][ T8272] cdc_wdm 2-1:1.0: Unknown control protocol [ 317.160019][ T3112] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 317.239374][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.250371][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.310722][ T3112] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 317.311796][ T3112] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 317.311812][ T3112] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.311824][ T3112] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.311861][ T3112] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.314204][ T3112] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.314227][ T3112] usb 8-1: Product: syz [ 317.314242][ T3112] usb 8-1: Manufacturer: syz [ 317.322100][ T3112] cdc_wdm 8-1:1.0: skipping garbage [ 317.322113][ T3112] cdc_wdm 8-1:1.0: skipping garbage [ 317.322124][ T3112] cdc_wdm 8-1:1.0: skipping garbage [ 317.322145][ T3112] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 317.340595][ T975] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 317.437026][ T9488] netlink: 88 bytes leftover after parsing attributes in process `syz.5.768'. [ 317.472544][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.537000][ T5701] usb 8-1: USB disconnect, device number 25 [ 317.543273][ T975] usb 7-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.01 [ 317.554941][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.554965][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.555020][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.561619][ T975] usb 7-1: config 0 descriptor?? [ 317.610965][ T9491] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 317.976031][ T975] arvo 0003:1E7D:30D4.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0 [ 318.010051][ T5701] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 318.175618][ T975] arvo 0003:1E7D:30D4.0022: couldn't init struct arvo_device [ 318.175672][ T975] arvo 0003:1E7D:30D4.0022: couldn't install keyboard [ 318.182548][ T975] arvo 0003:1E7D:30D4.0022: probe with driver arvo failed with error -71 [ 318.187295][ C1] net_ratelimit: 108 callbacks suppressed [ 318.193516][ T5701] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 318.198081][ T5701] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.198106][ T5701] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.198123][ T5701] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.198195][ T5701] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.201210][ T5701] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.201229][ T5701] usb 8-1: Product: syz [ 318.201242][ T5701] usb 8-1: Manufacturer: syz [ 318.203859][ T975] usb 7-1: USB disconnect, device number 31 [ 318.268063][ T5701] cdc_wdm 8-1:1.0: skipping garbage [ 318.268076][ T5701] cdc_wdm 8-1:1.0: skipping garbage [ 318.268088][ T5701] cdc_wdm 8-1:1.0: skipping garbage [ 318.268111][ T5701] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 318.742729][ T975] usb 2-1: USB disconnect, device number 10 [ 319.171101][ T975] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 319.212869][ T9522] netlink: 76 bytes leftover after parsing attributes in process `syz.5.779'. [ 319.215724][ T9523] netlink: 76 bytes leftover after parsing attributes in process `syz.5.779'. [ 319.300265][ T948] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 319.320073][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 319.321378][ T975] usb 2-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 319.322850][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.322877][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.322900][ T975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 319.322965][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.326330][ T975] usb 2-1: config 0 descriptor?? [ 319.499939][ T948] usb 7-1: Using ep0 maxpacket: 32 [ 319.500761][ T948] usb 7-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 319.504279][ T948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.504292][ T948] usb 7-1: Product: syz [ 319.504300][ T948] usb 7-1: Manufacturer: syz [ 319.504309][ T948] usb 7-1: SerialNumber: syz [ 319.506930][ T948] usb 7-1: config 0 descriptor?? [ 319.711782][ T948] airspy 7-1:0.0: usb_control_msg() failed -71 request 09 [ 319.711801][ T948] airspy 7-1:0.0: Could not detect board [ 319.711938][ T948] airspy 7-1:0.0: probe with driver airspy failed with error -71 [ 319.746278][ T948] usb 7-1: USB disconnect, device number 32 [ 319.760523][ T975] usbhid 2-1:0.0: can't add hid device: -71 [ 319.760669][ T975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 319.802462][ T975] usb 2-1: USB disconnect, device number 11 [ 319.886115][ T9] usb 8-1: USB disconnect, device number 26 [ 319.977880][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.780'. [ 319.977959][ T9531] bridge_slave_1: left allmulticast mode [ 319.977982][ T9531] bridge_slave_1: left promiscuous mode [ 319.982032][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.004788][ T9531] bridge_slave_0: left allmulticast mode [ 320.004807][ T9531] bridge_slave_0: left promiscuous mode [ 320.006498][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.009316][ T9532] input: syz1 as /devices/virtual/input/input62 [ 320.357907][ T33] audit: type=1326 audit(1791678532.817:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz.6.783" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f993099e1d9 code=0x0 [ 320.652233][ T9552] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 320.659435][ T4943] __blk_add_trace: 5 callbacks suppressed [ 321.040336][ T948] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 321.081686][ T33] audit: type=1326 audit(1791678533.547:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.5.792" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f194639e1d9 code=0x0 [ 321.136349][ T9571] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 321.136349][ T9571] The task syz.7.790 (9571) triggered the difference, watch for misbehavior. [ 321.195375][ T948] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 321.198102][ T948] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.198130][ T948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.198151][ T948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.198249][ T948] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.259259][ T948] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.259281][ T948] usb 2-1: Product: syz [ 321.259296][ T948] usb 2-1: Manufacturer: syz [ 321.296661][ T948] cdc_wdm 2-1:1.0: skipping garbage [ 321.296676][ T948] cdc_wdm 2-1:1.0: skipping garbage [ 321.296689][ T948] cdc_wdm 2-1:1.0: skipping garbage [ 321.296714][ T948] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 321.518051][ T8272] usb 2-1: USB disconnect, device number 12 [ 321.740806][ T9575] PID 9575 killed due to inadequate hugepage pool [ 322.040098][ T8272] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 322.234374][ T3112] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 322.238794][ T8272] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 322.240374][ T8272] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 322.240398][ T8272] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.240416][ T8272] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 322.240476][ T8272] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.242317][ T8272] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 322.242335][ T8272] usb 2-1: Product: syz [ 322.242349][ T8272] usb 2-1: Manufacturer: syz [ 322.274135][ T8272] cdc_wdm 2-1:1.0: skipping garbage [ 322.274148][ T8272] cdc_wdm 2-1:1.0: skipping garbage [ 322.274159][ T8272] cdc_wdm 2-1:1.0: skipping garbage [ 322.274181][ T8272] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 322.400586][ T3112] usb 8-1: Using ep0 maxpacket: 32 [ 322.403364][ T3112] usb 8-1: New USB device found: idVendor=2c7c, idProduct=0620, bcdDevice=57.ae [ 322.407745][ T3112] usb 8-1: config 0 has an invalid interface number: 158 but max is 0 [ 322.407773][ T3112] usb 8-1: config 0 has no interface number 0 [ 322.407826][ T3112] usb 8-1: config 0 interface 158 has no altsetting 0 [ 322.411848][ T3112] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.411867][ T3112] usb 8-1: Product: syz [ 322.411881][ T3112] usb 8-1: Manufacturer: syz [ 322.411895][ T3112] usb 8-1: SerialNumber: syz [ 322.426597][ T3112] usb 8-1: config 0 descriptor?? [ 322.898152][ T3112] qmi_wwan 8-1:0.158: bogus CDC Union: master=0, slave=1 [ 323.054130][ T6625] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.222657][ T4930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.231086][ T4930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.237349][ T4930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.242450][ T4930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.243514][ T4930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.299984][ C0] net_ratelimit: 104 callbacks suppressed [ 323.365238][ T3112] qmi_wwan 8-1:0.158: probe with driver qmi_wwan failed with error -22 [ 323.393704][ T3112] usb 8-1: USB disconnect, device number 27 [ 323.610087][ T6625] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.893090][ T6625] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.028512][ T948] usb 2-1: USB disconnect, device number 13 [ 324.297016][ T6625] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.900410][ T3112] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 325.072623][ T3112] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 325.091647][ T3112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.091668][ T3112] usb 2-1: Product: syz [ 325.091683][ T3112] usb 2-1: Manufacturer: syz [ 325.091698][ T3112] usb 2-1: SerialNumber: syz [ 325.107131][ T3112] usb 2-1: config 0 descriptor?? [ 325.282288][ T6625] bridge_slave_1: left allmulticast mode [ 325.282311][ T6625] bridge_slave_1: left promiscuous mode [ 325.282567][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.315074][ T6625] bridge_slave_0: left allmulticast mode [ 325.315095][ T6625] bridge_slave_0: left promiscuous mode [ 325.322376][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.357982][ T3112] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 325.380210][ T54] Bluetooth: hci3: command tx timeout [ 325.518518][ T9626] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 325.569129][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.585677][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.637193][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.804'. [ 326.093616][ T6625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.113387][ T6625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.130341][ T6625] bond0 (unregistering): Released all slaves [ 326.369822][ T5701] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 326.503668][ T5701] usb 8-1: device descriptor read/64, error -71 [ 326.740291][ T5701] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 326.766465][ T5275] 8021q: adding VLAN 0 to HW filter on device eth13 [ 326.868528][ T6625] hsr_slave_0: left promiscuous mode [ 326.875679][ T6625] hsr_slave_1: left promiscuous mode [ 326.884197][ T5701] usb 8-1: device descriptor read/64, error -71 [ 326.921529][ T6625] veth1_macvtap: left promiscuous mode [ 326.921559][ T6625] veth0_macvtap: left promiscuous mode [ 326.921622][ T6625] veth1_vlan: left promiscuous mode [ 326.921689][ T6625] veth0_vlan: left promiscuous mode [ 326.990451][ T5701] usb usb8-port1: attempt power cycle [ 327.221633][ T3112] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 327.340758][ T5701] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 327.363439][ T5701] usb 8-1: device descriptor read/8, error -71 [ 327.460142][ T54] Bluetooth: hci3: command tx timeout [ 327.484819][ T6625] team0 (unregistering): Port device team_slave_1 removed [ 327.529299][ T6625] team0 (unregistering): Port device team_slave_0 removed [ 327.610471][ T5701] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 327.633846][ T5701] usb 8-1: device descriptor read/8, error -71 [ 327.743244][ T5701] usb usb8-port1: unable to enumerate USB device [ 327.795780][ T8272] usb 2-1: USB disconnect, device number 14 [ 328.130105][ T6636] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.347013][ T6621] net_ratelimit: 115 callbacks suppressed [ 328.469761][ T9666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.586312][ T9664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 328.586341][ T9664] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 328.588269][ T9670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.791578][ T9672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.794518][ T9664] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 328.794533][ T9664] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 328.969410][ T9589] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.972132][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.972336][ T9589] bridge_slave_0: entered allmulticast mode [ 328.983583][ T9589] bridge_slave_0: entered promiscuous mode [ 329.000403][ T9589] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.000524][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.000716][ T9589] bridge_slave_1: entered allmulticast mode [ 329.010335][ T9589] bridge_slave_1: entered promiscuous mode [ 329.108875][ T9664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.108976][ T9664] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 329.155290][ T9589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.173093][ T9589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.317317][ T9589] team0: Port device team_slave_0 added [ 329.335560][ T9589] team0: Port device team_slave_1 added [ 329.527796][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.527804][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.527819][ T9589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.533798][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.533810][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.533834][ T9589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.634834][ T948] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 329.770088][ T948] usb 8-1: device descriptor read/64, error -71 [ 329.833020][ T9589] hsr_slave_0: entered promiscuous mode [ 329.840788][ T9589] hsr_slave_1: entered promiscuous mode [ 329.844719][ T9589] debugfs: 'hsr0' already exists in 'hsr' [ 329.844735][ T9589] Cannot create hsr debugfs directory [ 330.010672][ T948] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 330.099087][ T5275] 8021q: adding VLAN 0 to HW filter on device eth14 [ 330.141469][ T948] usb 8-1: device descriptor read/64, error -71 [ 330.250966][ T948] usb usb8-port1: attempt power cycle [ 330.592163][ T948] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 330.621208][ T948] usb 8-1: device descriptor read/8, error -71 [ 330.820592][ T4943] __blk_add_trace: 8 callbacks suppressed [ 330.860468][ T948] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 330.884935][ T948] usb 8-1: device descriptor read/8, error -71 [ 330.992500][ T948] usb usb8-port1: unable to enumerate USB device [ 331.034111][ T5275] 8021q: adding VLAN 0 to HW filter on device eth15 [ 331.089357][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz.5.821'. [ 331.303299][ T9589] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 331.327630][ T9589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.331909][ T9589] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 331.359448][ T9589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.361862][ T9589] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 331.411933][ T9589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.429401][ T9589] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 331.430219][ T948] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 331.474650][ T9589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.622081][ T948] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 331.628374][ T948] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 331.628411][ T948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.628430][ T948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 331.628497][ T948] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.689291][ T948] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.689312][ T948] usb 2-1: Product: syz [ 331.689326][ T948] usb 2-1: Manufacturer: syz [ 331.734573][ T948] cdc_wdm 2-1:1.0: skipping garbage [ 331.734586][ T948] cdc_wdm 2-1:1.0: skipping garbage [ 331.734672][ T948] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 331.788287][ T33] audit: type=1326 audit(1791678544.247:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.5.823" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194639e1d9 code=0x7ffc0000 [ 331.788441][ T33] audit: type=1326 audit(1791678544.247:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.5.823" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194639e1d9 code=0x7ffc0000 [ 331.815810][ T33] audit: type=1326 audit(1791678544.267:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.5.823" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194639e1d9 code=0x7ffc0000 [ 331.815865][ T33] audit: type=1326 audit(1791678544.267:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.5.823" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194639e1d9 code=0x7ffc0000 [ 331.820534][ T33] audit: type=1326 audit(1791678544.277:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.5.823" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f194639e1d9 code=0x7ffc0000 [ 331.820582][ T33] audit: type=1326 audit(1791678544.277:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.5.823" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194639e1d9 code=0x7ffc0000 [ 331.832968][ T33] audit: type=1326 audit(1791678544.297:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.5.823" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f194639e1d9 code=0x7ffc0000 [ 331.833021][ T33] audit: type=1326 audit(1791678544.297:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.5.823" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f194639e1d9 code=0x7ffc0000 [ 331.849449][ T33] audit: type=1326 audit(1791678544.277:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.5.823" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194639e1d9 code=0x7ffc0000 [ 331.952471][ T9589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.960493][ T27] usb 2-1: USB disconnect, device number 15 [ 332.075132][ T9589] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.099479][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.099592][ T6625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.124190][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.124318][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.259790][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.824'. [ 332.450103][ T3112] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 332.452834][ T5275] 8021q: adding VLAN 0 to HW filter on device eth16 [ 332.603366][ T3112] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 332.604836][ T3112] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.604861][ T3112] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.604880][ T3112] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 332.604945][ T3112] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.614336][ T3112] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.614356][ T3112] usb 2-1: Product: syz [ 332.614369][ T3112] usb 2-1: Manufacturer: syz [ 332.655922][ T3112] cdc_wdm 2-1:1.0: skipping garbage [ 332.655935][ T3112] cdc_wdm 2-1:1.0: skipping garbage [ 332.656031][ T3112] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 333.257654][ T9589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.271075][ T3112] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 333.421220][ T3112] usb 8-1: Using ep0 maxpacket: 32 [ 333.422098][ T3112] usb 8-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 333.423516][ T3112] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.423542][ T3112] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.423564][ T3112] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 333.423626][ T3112] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.428230][ T3112] usb 8-1: config 0 descriptor?? [ 333.460041][ C1] net_ratelimit: 68 callbacks suppressed [ 333.579360][ T9589] veth0_vlan: entered promiscuous mode [ 333.594462][ T9589] veth1_vlan: entered promiscuous mode [ 333.636436][ T9589] veth0_macvtap: entered promiscuous mode [ 333.643386][ T9589] veth1_macvtap: entered promiscuous mode [ 333.666269][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.688618][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.781186][ T71] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.803394][ T71] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.803439][ T71] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.803494][ T71] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.878667][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 333.881100][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 333.901030][ T3112] usbhid 8-1:0.0: can't add hid device: -71 [ 333.901178][ T3112] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 333.906197][ T3112] usb 8-1: USB disconnect, device number 36 [ 334.014260][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.014276][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.081759][ T6636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.081770][ T6636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.254656][ T5693] usb 2-1: USB disconnect, device number 16 [ 334.420769][ T6625] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.040132][ T5701] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 335.169990][ T975] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 335.192134][ T5701] usb 8-1: New USB device found: idVendor=04e8, idProduct=6889, bcdDevice=1.00 [ 335.195896][ T5701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.195909][ T5701] usb 8-1: Product: syz [ 335.195918][ T5701] usb 8-1: Manufacturer: syz [ 335.195927][ T5701] usb 8-1: SerialNumber: syz [ 335.326594][ T975] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 335.328198][ T975] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.328226][ T975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.328247][ T975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.328359][ T975] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.335701][ T975] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.335720][ T975] usb 2-1: Product: syz [ 335.335761][ T975] usb 2-1: Manufacturer: syz [ 335.394695][ T975] cdc_wdm 2-1:1.0: skipping garbage [ 335.394708][ T975] cdc_wdm 2-1:1.0: skipping garbage [ 335.394787][ T975] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 335.440457][ T5701] kalmia 8-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 335.458594][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.469056][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.474226][ T6636] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.596078][ T5708] usb 2-1: USB disconnect, device number 17 [ 335.625351][ T9841] netlink: 40 bytes leftover after parsing attributes in process `syz.7.838'. [ 335.912826][ T9843] netlink: 20 bytes leftover after parsing attributes in process `syz.8.844'. [ 336.069991][ T27] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 336.151709][ T9859] CIFS mount error: No usable UNC path provided in device string! [ 336.151709][ T9859] [ 336.151887][ T9859] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 336.220889][ T27] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 336.223579][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.223604][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.223624][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.223692][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.225685][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.225705][ T27] usb 2-1: Product: syz [ 336.225720][ T27] usb 2-1: Manufacturer: syz [ 336.307917][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 336.307930][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 336.308024][ T27] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 336.407416][ T9862] Invalid ELF header magic: != ELF [ 336.495876][ T33] audit: type=1800 audit(1791678548.957:16): pid=9866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.850" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=-22 [ 336.769957][ T3112] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 336.925910][ T3112] usb 9-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 336.928195][ T3112] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.832625][ T5701] kalmia 8-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 337.832890][ T5701] kalmia 8-1:1.0: probe with driver kalmia failed with error -71 [ 337.849674][ T5701] usb 8-1: USB disconnect, device number 37 [ 337.933077][ C1] kcov: kcov_remote_start: handle = 100000000000009, context: softirq [ 337.933107][ C1] kcov: kcov_start: t = ffff8880630c3e80, size = 262144, area = ffffc90002121000 [ 337.933259][ C1] PN533 RX: 83 0d 00 00 10 00 00 00 00 00 00 00 00 00 00 00 [ 337.933276][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933288][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933299][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933311][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933324][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933338][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933356][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933370][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933384][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933398][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933413][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933427][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933451][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933464][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933476][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933490][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933504][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933518][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933531][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933544][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933557][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933570][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933584][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933598][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933612][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933626][ C1] PN533 RX: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933641][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933655][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933670][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933683][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933697][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933711][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933724][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933738][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933773][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933787][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933801][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933812][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933822][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933834][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933845][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933858][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933871][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.933883][ C1] ================================================================== [ 337.933895][ C1] BUG: KASAN: slab-out-of-bounds in hex_dump_to_buffer+0x36c/0xd70 [ 337.933926][ C1] Read of size 1 at addr ffff88804ef70600 by task syz.8.851/9868 [ 337.933944][ C1] [ 337.933956][ C1] CPU: 1 UID: 0 PID: 9868 Comm: syz.8.851 Not tainted syzkaller #0 PREEMPT(full) [ 337.933984][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.934000][ C1] Call Trace: [ 337.934011][ C1] [ 337.934021][ C1] dump_stack_lvl+0xe8/0x150 [ 337.934049][ C1] print_address_description+0x55/0x1e0 [ 337.934075][ C1] ? hex_dump_to_buffer+0x36c/0xd70 [ 337.934098][ C1] print_report+0x58/0x70 [ 337.934120][ C1] kasan_report+0x117/0x150 [ 337.934145][ C1] ? hex_dump_to_buffer+0x36c/0xd70 [ 337.934172][ C1] hex_dump_to_buffer+0x36c/0xd70 [ 337.934200][ C1] print_hex_dump+0x16b/0x2b0 [ 337.934226][ C1] ? __pfx_print_hex_dump+0x10/0x10 [ 337.934256][ C1] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 337.934279][ C1] ? __alloc_skb+0x27a/0x7a0 [ 337.934297][ C1] ? __alloc_skb+0x27a/0x7a0 [ 337.934324][ C1] pn533_recv_frame+0x5f6/0x6d0 [ 337.934352][ C1] __usb_hcd_giveback_urb+0x378/0x540 [ 337.934380][ C1] dummy_timer+0xa91/0x4cc0 [ 337.934431][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 337.934467][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 337.934492][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 337.934513][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 337.934542][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 337.934565][ C1] handle_softirqs+0x223/0x840 [ 337.934590][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 337.934615][ C1] __irq_exit_rcu+0xcb/0x220 [ 337.934636][ C1] irq_exit_rcu+0x9/0x30 [ 337.934657][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 337.934679][ C1] [ 337.934688][ C1] [ 337.934698][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.934721][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 337.934745][ C1] Code: f7 e8 8d e5 9e f5 f7 c3 00 02 00 00 74 05 e8 50 7a cb f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 d8 8f f5 65 48 8b 05 ac 70 da 08 48 85 c0 74 18 5b 41 5e c3 [ 337.934763][ C1] RSP: 0018:ffffc90002e57948 EFLAGS: 00000206 [ 337.934785][ C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001 [ 337.934802][ C1] RDX: 0000000000000000 RSI: ffffffff8e7cc01a RDI: 0000000000000001 [ 337.934817][ C1] RBP: 0000000000000005 R08: ffffffff91bc4abf R09: 1ffffffff2378957 [ 337.934835][ C1] R10: dffffc0000000000 R11: fffffbfff2378958 R12: dffffc0000000000 [ 337.934854][ C1] R13: ffff88802af540b8 R14: ffff88802af54000 R15: ffff88802af54bfc [ 337.934884][ C1] dummy_queue+0x47f/0x990 [ 337.934914][ C1] usb_ep_queue+0xf1/0x3c0 [ 337.934939][ C1] raw_process_ep_io+0x5e4/0xd80 [ 337.934967][ C1] ? __pfx_raw_process_ep_io+0x10/0x10 [ 337.934998][ C1] ? _copy_from_user+0x94/0xb0 [ 337.935023][ C1] raw_ioctl+0x251c/0x41c0 [ 337.935047][ C1] ? tomoyo_path_number_perm+0x219/0x5f0 [ 337.935070][ C1] ? tomoyo_path_number_perm+0x219/0x5f0 [ 337.935093][ C1] ? do_vfs_ioctl+0x116f/0x1530 [ 337.935116][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 337.935139][ C1] ? do_futex+0x3e7/0x4e0 [ 337.935170][ C1] ? __fget_files+0x2a/0x420 [ 337.935194][ C1] ? __fget_files+0x2a/0x420 [ 337.935215][ C1] ? __fget_files+0x2a/0x420 [ 337.935240][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 337.935263][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 337.935285][ C1] __se_sys_ioctl+0xfc/0x170 [ 337.935310][ C1] do_syscall_64+0x166/0x520 [ 337.935331][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.935356][ C1] ? clear_bhb_loop+0x70/0xc0 [ 337.935378][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.935398][ C1] RIP: 0033:0x7f043219de6b [ 337.935420][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 337.935453][ C1] RSP: 002b:00007f0432ffff60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.935479][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f043219de6b [ 337.935498][ C1] RDX: 00007f0432ffffe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 337.935515][ C1] RBP: 0000000000000003 R08: 00007f0432550320 R09: 0000000000000000 [ 337.935532][ C1] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000000040 [ 337.935549][ C1] R13: 0000000000000000 R14: 00007f0432425fa0 R15: 00007fffb96ef2a8 [ 337.935574][ C1] [ 337.935584][ C1] [ 337.935591][ C1] Allocated by task 9868: [ 337.935603][ C1] kasan_save_track+0x3e/0x80 [ 337.935625][ C1] __kasan_slab_alloc+0x6c/0x80 [ 337.935646][ C1] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 337.935669][ C1] __alloc_skb+0x27a/0x7a0 [ 337.935688][ C1] pn533_recv_response+0xc4/0x230 [ 337.935709][ C1] __usb_hcd_giveback_urb+0x378/0x540 [ 337.935732][ C1] dummy_timer+0xa91/0x4cc0 [ 337.935754][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 337.935776][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 337.935797][ C1] handle_softirqs+0x223/0x840 [ 337.935819][ C1] __irq_exit_rcu+0xcb/0x220 [ 337.935840][ C1] irq_exit_rcu+0x9/0x30 [ 337.935860][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 337.935880][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.935903][ C1] [ 337.935910][ C1] The buggy address belongs to the object at ffff88804ef70340 [ 337.935910][ C1] which belongs to the cache skbuff_small_head of size 704 [ 337.935932][ C1] The buggy address is located 0 bytes to the right of [ 337.935932][ C1] allocated 704-byte region [ffff88804ef70340, ffff88804ef70600) [ 337.935955][ C1] [ 337.935961][ C1] The buggy address belongs to the physical page: [ 337.935975][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ef70 [ 337.935997][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 337.936015][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 337.936037][ C1] page_type: f5(slab) [ 337.936059][ C1] raw: 00fff00000000040 ffff888020a9fb40 dead000000000100 dead000000000122 [ 337.936081][ C1] raw: 0000000000000000 0000000200130013 00000000f5000000 0000000000000000 [ 337.936104][ C1] head: 00fff00000000040 ffff888020a9fb40 dead000000000100 dead000000000122 [ 337.936124][ C1] head: 0000000000000000 0000000200130013 00000000f5000000 0000000000000000 [ 337.936147][ C1] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 337.936169][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 337.936182][ C1] page dumped because: kasan: bad access detected [ 337.936194][ C1] page_owner tracks the page as allocated [ 337.936204][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1304, tgid 1304 (kworker/u8:11), ts 220592110174 [ 337.936243][ C1] post_alloc_hook+0x1f9/0x250 [ 337.936265][ C1] get_page_from_freelist+0x220f/0x2280 [ 337.936288][ C1] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 337.936310][ C1] allocate_slab+0x7d/0x5e0 [ 337.936329][ C1] refill_objects+0x2d5/0x350 [ 337.936348][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 337.936370][ C1] kmem_cache_alloc_node_noprof+0x432/0x600 [ 337.936393][ C1] __alloc_skb+0x27a/0x7a0 [ 337.936412][ C1] ndisc_alloc_skb+0xa0/0x480 [ 337.936433][ C1] ndisc_send_rs+0x288/0x6b0 [ 337.936461][ C1] addrconf_dad_completed+0x911/0xe60 [ 337.936484][ C1] addrconf_dad_work+0xcf8/0x15c0 [ 337.936503][ C1] process_scheduled_works+0xc3d/0x1630 [ 337.936524][ C1] worker_thread+0xa47/0xfb0 [ 337.936541][ C1] kthread+0x38b/0x480 [ 337.936559][ C1] ret_from_fork+0x514/0xb70 [ 337.936579][ C1] page last free pid 5618 tgid 5618 ts 203344491361 stack trace: [ 337.936592][ C1] __free_frozen_pages+0xc97/0xd90 [ 337.936610][ C1] __slab_free+0x269/0x2c0 [ 337.936626][ C1] qlist_free_all+0x99/0x100 [ 337.936644][ C1] kasan_quarantine_reduce+0x148/0x160 [ 337.936666][ C1] __kasan_slab_alloc+0x22/0x80 [ 337.936684][ C1] kmem_cache_alloc_noprof+0x2b4/0x600 [ 337.936703][ C1] do_getname+0x2e/0x250 [ 337.936722][ C1] do_sys_openat2+0xce/0x200 [ 337.936741][ C1] __x64_sys_openat+0x138/0x170 [ 337.936759][ C1] do_syscall_64+0x166/0x520 [ 337.936775][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.936798][ C1] [ 337.936803][ C1] Memory state around the buggy address: [ 337.936817][ C1] ffff88804ef70500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.936834][ C1] ffff88804ef70580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.936849][ C1] >ffff88804ef70600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 337.936861][ C1] ^ [ 337.936873][ C1] ffff88804ef70680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.936887][ C1] ffff88804ef70700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.936898][ C1] ================================================================== [ 337.936911][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 339.196905][ C1] CPU: 1 UID: 0 PID: 9868 Comm: syz.8.851 Not tainted syzkaller #0 PREEMPT(full) [ 339.206878][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 339.218204][ C1] Call Trace: [ 339.221612][ C1] [ 339.224465][ C1] vpanic+0x26f/0x710 [ 339.228546][ C1] panic+0xc5/0xd0 [ 339.232362][ C1] ? __pfx_panic+0x10/0x10 [ 339.236788][ C1] ? hex_dump_to_buffer+0x36c/0xd70 [ 339.242084][ C1] ? rcu_is_watching+0x16/0xb0 [ 339.247480][ C1] ? hex_dump_to_buffer+0x36c/0xd70 [ 339.253123][ C1] ? hex_dump_to_buffer+0x36c/0xd70 [ 339.258343][ C1] check_panic_on_warn+0x89/0xb0 [ 339.263340][ C1] ? hex_dump_to_buffer+0x36c/0xd70 [ 339.268683][ C1] end_report+0x73/0x170 [ 339.273046][ C1] ? hex_dump_to_buffer+0x36c/0xd70 [ 339.278436][ C1] kasan_report+0x128/0x150 [ 339.283068][ C1] ? hex_dump_to_buffer+0x36c/0xd70 [ 339.288312][ C1] hex_dump_to_buffer+0x36c/0xd70 [ 339.293398][ C1] print_hex_dump+0x16b/0x2b0 [ 339.298156][ C1] ? __pfx_print_hex_dump+0x10/0x10 [ 339.303574][ C1] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 339.309703][ C1] ? __alloc_skb+0x27a/0x7a0 [ 339.314304][ C1] ? __alloc_skb+0x27a/0x7a0 [ 339.319274][ C1] pn533_recv_frame+0x5f6/0x6d0 [ 339.324329][ C1] __usb_hcd_giveback_urb+0x378/0x540 [ 339.330776][ C1] dummy_timer+0xa91/0x4cc0 [ 339.335419][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 339.340743][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 339.347372][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 339.352343][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 339.357591][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 339.362736][ C1] handle_softirqs+0x223/0x840 [ 339.367514][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 339.372302][ C1] __irq_exit_rcu+0xcb/0x220 [ 339.377798][ C1] irq_exit_rcu+0x9/0x30 [ 339.382586][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 339.388352][ C1] [ 339.391397][ C1] [ 339.394344][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.400513][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 339.407286][ C1] Code: f7 e8 8d e5 9e f5 f7 c3 00 02 00 00 74 05 e8 50 7a cb f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 d8 8f f5 65 48 8b 05 ac 70 da 08 48 85 c0 74 18 5b 41 5e c3 [ 339.427480][ C1] RSP: 0018:ffffc90002e57948 EFLAGS: 00000206 [ 339.433674][ C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001 [ 339.442687][ C1] RDX: 0000000000000000 RSI: ffffffff8e7cc01a RDI: 0000000000000001 [ 339.450774][ C1] RBP: 0000000000000005 R08: ffffffff91bc4abf R09: 1ffffffff2378957 [ 339.458862][ C1] R10: dffffc0000000000 R11: fffffbfff2378958 R12: dffffc0000000000 [ 339.467204][ C1] R13: ffff88802af540b8 R14: ffff88802af54000 R15: ffff88802af54bfc [ 339.476074][ C1] dummy_queue+0x47f/0x990 [ 339.480524][ C1] usb_ep_queue+0xf1/0x3c0 [ 339.485069][ C1] raw_process_ep_io+0x5e4/0xd80 [ 339.490288][ C1] ? __pfx_raw_process_ep_io+0x10/0x10 [ 339.495808][ C1] ? _copy_from_user+0x94/0xb0 [ 339.500699][ C1] raw_ioctl+0x251c/0x41c0 [ 339.505242][ C1] ? tomoyo_path_number_perm+0x219/0x5f0 [ 339.511180][ C1] ? tomoyo_path_number_perm+0x219/0x5f0 [ 339.516849][ C1] ? do_vfs_ioctl+0x116f/0x1530 [ 339.521740][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 339.526710][ C1] ? do_futex+0x3e7/0x4e0 [ 339.531526][ C1] ? __fget_files+0x2a/0x420 [ 339.536322][ C1] ? __fget_files+0x2a/0x420 [ 339.541100][ C1] ? __fget_files+0x2a/0x420 [ 339.545701][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 339.550654][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 339.555604][ C1] __se_sys_ioctl+0xfc/0x170 [ 339.560293][ C1] do_syscall_64+0x166/0x520 [ 339.565083][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.571197][ C1] ? clear_bhb_loop+0x70/0xc0 [ 339.575894][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.581973][ C1] RIP: 0033:0x7f043219de6b [ 339.586488][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 339.606372][ C1] RSP: 002b:00007f0432ffff60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.615249][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f043219de6b [ 339.623502][ C1] RDX: 00007f0432ffffe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 339.631593][ C1] RBP: 0000000000000003 R08: 00007f0432550320 R09: 0000000000000000 [ 339.639615][ C1] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000000040 [ 339.647597][ C1] R13: 0000000000000000 R14: 00007f0432425fa0 R15: 00007fffb96ef2a8 [ 339.655758][ C1] [ 339.658789][ C1] Kernel Offset: disabled [ 339.663119][ C1] Rebooting in 86400 seconds..